{"type": "bundle", "id": "bundle--c42b98d5-71c9-45a7-a254-38854fb0d2f0", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--3f87335f-6628-40a1-97f7-e360d3901c0e", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--4fec4c03-9cf8-4861-8623-1ac7b590bb37", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--a17db459-e84d-48fa-8024-cce93704b7e2", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--7d88641d-5cd0-4b1e-b3e1-54fa45dac06d", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5863581d-2617-4f67-a93c-ac9271f2da0d", "relationship_type": "located-at", "source_ref": "infrastructure--7d88641d-5cd0-4b1e-b3e1-54fa45dac06d", "target_ref": "location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--e6e00555-10a1-4acc-80f2-67cb3414a919", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--300b767d-ec7d-4fac-b03d-f319d7cf37d9", "relationship_type": "located-at", "source_ref": "infrastructure--e6e00555-10a1-4acc-80f2-67cb3414a919", "target_ref": "location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--1ae5bd3d-d673-4849-be73-7de46738e811", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--6af65b62-9289-4cf7-8aa5-d1a85a288ac7", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c519d28f-b397-4658-8551-06718801dfc2", "relationship_type": "located-at", "source_ref": "infrastructure--6af65b62-9289-4cf7-8aa5-d1a85a288ac7", "target_ref": "location--3f87335f-6628-40a1-97f7-e360d3901c0e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--89bf7814-232a-4c36-b962-c5aa628890b6", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deaa3a91-5e41-4683-9229-b0a33cb9726c", "relationship_type": "located-at", "source_ref": "infrastructure--89bf7814-232a-4c36-b962-c5aa628890b6", "target_ref": "location--4fec4c03-9cf8-4861-8623-1ac7b590bb37", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--e8892fb0-879b-4a43-b40c-bb10e4f92b58", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--2181e159-f0ed-43d4-bd0f-ead54d1d86d3", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--00a5a929-22a9-4aad-b669-7baaedb2cbcd", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--c5918a23-1975-4d59-b93d-1b94c4496aef", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--57d0f18f-ca0e-461e-b051-791e381b7036", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd11f3b-c21c-470c-96d8-99639dda23e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.86.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20a130c-a7d8-4b1e-b3db-2cf00b41de1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.193.63.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5828a429-8d67-4f82-8dcc-c3b7d4df076d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.238.106.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcd9309-939b-42ee-9716-30b5baf77aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99523e7-13df-4508-84dd-36bed7d67747", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.245.74.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e216b8f-7285-4df4-9525-c7c68518d840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.55.132.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786e51fe-ff5e-4171-bcf5-7a249c8e2fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.63.10.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a01413c-9c32-48f3-a312-d0bab9ef1d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.64.106.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ed7c8f-ae53-4fd7-852c-729a6fcf3b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.65.171.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58afe59b-7741-44d9-a726-5f1e3a5c862c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.71.91.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3e2864-4506-49f1-8978-7ff61bf48bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.85.218.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea50490d-d4a5-439d-9bc5-08e599609c81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.95.155.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e8c80a-2862-4211-8272-b101291cbfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.123.159.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f4ab8c-f9da-41ff-8770-ca91b5306d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.24.58.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bbfdf0-690d-47ff-947f-7b5b1a913591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa132871-49f8-418f-b1c9-44232a81d9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ba853d-a738-44b2-9bce-b931d4cd1602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04133900-5263-4542-b24f-9fdc589e62d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67221980-17c0-455c-b684-b9878a0637e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a420cd3e-9a95-471e-94d0-a423205023b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5f1295-5533-42d4-abe4-86450bd6afcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9bf3ff-ea50-432c-ac3a-6f73a2279de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f61c458-1143-485d-918e-0b60ca3a4ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac052dc-f806-46b5-a97e-d76cd08dcb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522c53f5-eea3-42c6-b5dd-2289e37ecb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd672d4c-ad20-4728-a3e2-ac6f2feb4585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec20879-25ee-48ad-8223-72c632faac56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4390ed-f4cc-4f9f-b7c5-7f507048dd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c31283b-bd3c-48d5-a0c4-fc4254ead2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77dad3b0-dd87-43b3-bde0-bbeda9827ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c00b38-9dc0-4eb9-b090-6955f515c835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252839ba-1304-49d6-b909-c869ec353525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384ca01f-1acb-4a2d-9b21-aa928a3859ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc55372f-86cc-4bab-9fa6-ee3c76a1ced0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11389f05-d48c-4faf-9ab0-eab10fb875d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e7c72c-c523-4b01-9f16-ba6a7eb6b9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491b2094-6839-461a-8990-7a96bee4bb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93c5d41-8b65-4f27-bd22-9d1ef6403559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e529a59b-62f3-41a4-99f7-912e2f5f188b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbe7d8f-add3-4d31-b6d6-c1f66006a857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efcfb22-d4cb-4e3f-9414-5deb19872fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09789741-9bc8-4e0a-8855-5189cad0e987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b690850-0eb9-47a4-8a8f-8b1757eacf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8152017-9ac9-4629-b610-a993e7161f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38028dc-1899-4d83-a8c2-a92bf10b51ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ce5c69-ac20-4918-abcf-7d4030dc77d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb0add7-652d-4828-be88-f67b6cb79746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4053ab2c-7c98-4957-80ba-0ac36d99072e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fefdd3-5f03-461f-b608-154a424209c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f00cef-6773-4150-b5a1-87074e9dc418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c4dcc9-9a97-4258-a5e5-b16bd3993e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78602eac-79ad-4d89-87c4-01fb2dbfbe73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bdfda9-02cb-4a31-a321-25a84033ab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54320ddc-d3ec-4d75-bbef-4fffdadc8c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739ec6a8-7bb0-4e2f-950e-427687201a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d199ca87-71bf-4ce2-a76d-514a2229c8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48c7f0c-cb1b-4ced-8d74-563e183f406e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe59315f-facc-4732-8a36-fc333b2896e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f131f5-0092-4934-a709-c102778c8283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.161.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44016c5-847b-48b1-bcd0-ce13c7009a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee342f7e-8da0-443c-9c38-5490d97526c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a0b60f-3a4b-4510-a2fe-c8493dff404e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.50.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98cad49-91f9-4ead-bd6c-d07c75f78a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.109.165.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284d589e-aa15-41f7-ba16-05bd1e88b756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.35.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d66fce-5fe7-4ecf-bc80-3e130fe53507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e39d26f-8b73-450d-bd56-7cac02ae9aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.206.108.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8781bb5d-795a-49fd-a81c-fe2511bb8aa6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.55.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d39f305-ac7c-4305-9155-dec2892fc12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270c9c21-9010-42ce-a275-8bd451fefc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef02e04-367e-42ed-bfaf-a287954bde6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a53fdd-fb5f-43b0-931c-55bf854bc552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cfde88-be08-42d3-826c-28330ba7d1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22c831e-18e2-40b2-aa4c-9ed7d5051730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28264ad-8306-4a89-8d54-c102d873219a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f3817a-721e-4e8e-ba31-40e6d13f1cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fadca8-6376-481a-a332-8fc5ddac3b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76f153f-ec37-480c-8b8f-d01f1e2bb9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a64f6b-4404-45b3-82b9-535f82670c50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.111.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e093a4-6323-48b4-a81c-84d1bfd4501c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33ed29b-fc2c-426f-ac1c-76b0c1e62767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cac632-24c2-40d6-a789-4120fa3c8def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a6bc2b-1167-4b88-a2df-498963f43723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f2da93-f5ad-44dc-93f8-f01dddd9593c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9999a56-5231-4c20-b1cd-a9ae78cd6969", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456f4247-de26-4522-9159-be911c8c0309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb795481-7076-468b-894e-c0f4113ce1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26db6e59-18fc-4467-81f7-c91d62b9260a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e684c55-bad7-43bf-8271-c48db65cd998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7363de-5496-4b88-a898-c687ee37c84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b8fc4f-5423-41d0-b609-37465842a2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa8cc06-0c34-4116-9a21-255077941371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.35.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b243128-4bb8-493e-b782-9dc583827c87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86532bac-8864-4724-aba0-c2b4c9d68c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.53.69.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9791fc05-d397-4c00-ab2c-dc38eedcbabc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.76.205.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499fe558-64e4-45e1-9170-ae0e89feadbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.198.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751b4724-7b30-45ce-99d2-f6160ada1cff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.199.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8372ea-4778-47d0-b41e-ddb134b96474", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.214.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17186fb-c61e-4b5f-b36b-f4be32e970c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.138.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901f6b11-d4aa-4208-864e-04ea7bfd027b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.156.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477bcf33-78fb-4085-931d-13443e5f8de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf5f045-6206-4159-ba1d-630bb6995560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822af9d7-fd56-48f2-b119-ebdda3a97d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a3eb4d-0c31-4e0d-bafa-2ac600f75d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.229.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb7cda2-7da9-4149-b2b2-6a26e862b43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa72608-8bea-474d-8e68-a3ddf79bb1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.211.234.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a064817a-411d-48f2-b89d-29daac4951cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.213.34.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7a4f55-1f44-4911-8fda-c27595803ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.33.31.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3348404c-c763-4346-ab8d-67ba55656977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.54.248.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b86814-5fe6-4602-b01f-833f4f79bb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.56.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b993fe5-ef02-4761-95ea-c4a0e5be3f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.70.86.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e0f5df-dd77-4838-a1c3-ab6fce860bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4338541-035a-40b1-8cbd-0470d113a496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.92.23.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67627509-3f45-4b0c-a14c-b0c5594de8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dafa7ea-bf30-42aa-b258-174ef973df4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ed896e-3676-45be-8232-f15495ce3707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.104.73.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d76dfc-14d9-44ea-afcb-005c0aaf3fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.62.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5356dc-a976-4167-9658-9e338777edb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.113.39.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1328bc8f-10e7-4ea8-81b6-a0ea0dd6b3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bc6330-27a8-4d0a-89ed-c0683bb6cf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.119.17.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd5d910-2d5e-4a7b-9a99-1a256dc37b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a842e18b-4dff-4b30-bb89-586d26aa50d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3832d667-abcd-41cb-bfdc-2afef51e016b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6da9c4c-b088-4692-b5fc-9e750363a8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.200.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e57882-8697-4f55-947f-601f9fb06495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.0.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694648db-334a-44a3-8128-fed8b170f395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.26.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb4ed66-503f-464c-b66d-e6577473faac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4ba246-abf0-4a54-b1a1-e69dbd252796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bc0e72-f196-456a-a54e-6ee7186f550c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.238.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f3c018-f609-46cc-abfa-8da6e40de8f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.239.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348a6180-a060-468f-82c3-b5eee930b38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.144.227.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab9e9fd-5d75-479c-be77-df5b81ab2f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.145.252.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca600aa7-5679-4ca9-a10d-d122f48de6a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b17978-6b35-4458-b3ed-624fd4bea29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fce1e8-aa37-4b46-a421-5293e64e897a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ca2cce-83f8-405f-ac28-530cd002ea97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a1ab3b-2bec-4a99-b3c6-193e878ac955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9f6ae5-64ff-4492-91fb-7a106da85770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cddb0da-bf1f-4545-84ee-b8a5171a433a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.13.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1913aad4-9809-472e-ab43-de4156936737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.212.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02adcbeb-d8d0-4b7c-b4a4-553b94036ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209bed91-6b0c-4193-8c4a-3e118f4e07d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.117.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7427e039-d42a-4501-8467-57f3aef6db53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fc895c-ec08-480f-ac71-f1731653cf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b220222-fbcf-45f7-97a8-75eba9f1ebf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95c8199-3b12-47c8-a4ef-ce5a8930d395", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49391004-3018-480f-9b8a-c652404ff585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8210f2-3b36-407a-b3d4-e1b212e83167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9becdfe7-7dc1-4baf-9360-6c81e1532646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53768978-7d33-4b2b-b02f-a1df423abccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07547a5f-4f8e-4f18-83c1-661230bcdf89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c2942e-6260-45aa-81d3-3035cb04088f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d3d5d7-0949-4275-8b5a-b36b8a6760c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b83840a-461e-4522-8927-7af7ff1fa8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03be26a-b4c2-44e1-b99d-b806bcde5bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.185.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163975c7-0ad9-4666-9d08-1796f97544d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.146.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81449d01-25e4-45d2-ab91-fc2ef6dcce7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e7296f-cb74-40db-912d-92c86d798d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.194.106.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7a3bc1-9e39-423f-9f1f-5cd923dd2055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.199.16.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea3adbd-9de1-446b-8d58-c1239a24721e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.194.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df955cd-7e65-4528-88b0-57e6f2d0515f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb37b9df-01d0-44ca-ade9-eb12414a9d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25acbda-edc1-4243-9ee9-8b95fb2cae19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7140d1-5e88-4faf-8327-6d3368c2fb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0202fb1-5d1d-4fb8-be28-23041c6068da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bd581b-0839-4e13-8d0e-7daab0a04333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d3cb61-ce4e-4f8d-a63d-8334a5f8958d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0b05a7-0874-4248-bd33-5c2040667adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6b9e76-e5e4-4196-a895-f8015f77945b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.206.29.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b24245-4d94-4d6e-a037-2dfceb4db9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c033aa0c-8d66-4b20-92ca-d1bd73f915f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.2.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff36e09-6ae2-4a4a-a343-823f6ec8aebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f032d66-9553-406e-9594-dfaf572559e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.153.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a98025-f857-438f-b17f-29439d3d79c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.170.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac128ddc-93dc-450b-bb2a-56e665e2d68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.221.246.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122c33e2-027a-4591-99de-ecb5bd44e10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.87.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0fead6-fed9-4866-a34e-8aadf177399f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.230.150.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5d7e39-cc03-4798-a54a-e1e723c9c8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3263da7f-b70a-4b5f-82e7-b47bd8872075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520c563e-0823-43ea-8761-283e248a7287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6efd21-ca1b-4c72-96e1-4c34d58ce0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c256fe66-23e2-4ca0-9998-39e0ff281cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59362ce7-1009-492d-8a3d-5d5d9a0756d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504ee191-9c2f-4a2a-8c1f-afedd5c7d86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3713a35c-9fbb-4f6e-9928-bcba0f013317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228b9890-367a-4eca-b582-6d657dca03fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4213b062-7c60-40b4-ae30-51613a2cdb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1526c7-2001-49a6-9d2a-8e2a23a340ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927aaf6b-e2a6-43c0-9517-f022b94edc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3237d42e-bc38-45e4-9aea-b9e575218bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64035667-e5a8-49af-a5f6-7b6fd1bca317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66beb28-40ae-47d5-afc2-b4ecfe178ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e995479b-82c0-4e98-a692-b6d75cb0fe3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e3f479-0126-4eb1-9a34-29d0fd537a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb6e6cc-decd-4cfe-bbcf-0f13c958d834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a6e023-c712-4ae1-a926-973001952567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54daf64f-8012-463a-ad72-b40e6186cc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7a6637-a470-49c4-a33e-97018c4d1b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a88b2e-413c-4fe1-ba37-0deedcf80fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9151a07-76eb-4cd6-92ed-6c56fa097810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1feb961b-4f8a-4967-b0d8-6f5b16340428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3487a66-a129-4213-a178-6a5eccfc0fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.243.26.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ac3cab-9e7d-4e11-9315-1dc0b1696300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.227.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7f3866-6a45-4565-aec7-68c0272760a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.245.27.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62aca557-4b20-4993-8cf5-9468075153cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.245.34.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb596563-6dd8-40d2-bb56-bf7624e5afea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c4f028-560f-4b1d-8b63-0f8019364a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.86.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043f5cdf-04e0-4c02-aad2-e1f7ef614ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dca7e7-e29d-4d32-adc9-49e456ec92e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b5a9eb-647f-464b-acd3-7089d5acd0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb70f34-98b3-4946-97c9-7bcefc80f589", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.4.145.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83804e43-9c70-4e1b-8865-99aea0832129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d1dccc-f0d1-4f5e-848d-8b82171c9907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c71645-9d55-439d-a3c5-36e64fa1cc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.60.12.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db78cfcb-90ac-4428-a6d7-1e9ff2b5bd75", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.108.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa03e76c-0288-476e-a02d-7d5bf187440d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.67.198.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383a7a93-b9c1-4791-8b65-21b1d782367a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1a8716-1606-47a7-9f5f-1426f1b8018f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.70.207.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f6db1b-879b-4c13-bc5d-ddb1d0c0d11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a78ad8-1ef1-4cc9-bae5-3947a0feaae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165f7acb-6606-4fab-8c6b-fff5fabb8e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cf1750-ff6c-4273-bd16-b4ff0911630b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.203.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490dae04-f4c0-4357-a3f4-ae70f1acf538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.88.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06239025-49a6-49cd-8813-1616c892d605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2612bf1-e2dd-4e28-9af6-dcc13cf617be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dec13d-f51e-4565-8996-88d32e38c81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49f3d60-797d-44d4-b367-7067f5dd92bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3045bd-dccd-4cb7-a811-9c553ce3479a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2292f8db-531e-4585-92eb-ad70c5fff411", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.85.188.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b6e6c5-1591-4567-873f-2eff817404d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.198.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f81620-643b-4820-b89a-c4fdf62ab5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.198.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cf434a-3284-447d-b227-996fba385b69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.76.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed389a98-8a14-4241-987e-30db55e0db3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b464d542-97ca-4ad4-80a0-78625b3243b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf36260e-d239-46d8-b8d0-8f69be035ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369375b7-285a-42e6-8509-92aad73e4035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbda61e3-7451-492e-a796-79341651607a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cf8e27-1cc0-488f-9d92-ad73b220cd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e46e40-7c14-4b97-a3a4-f3eefca98c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b4b3f8-f59c-4875-83ec-1acd82dcf31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acccae1-70ff-4745-9d59-12ad5f5ce16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e095b103-c42b-4eaa-9949-fbb3da21305e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.206.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49115ba5-a04f-48b6-b01a-089ee8b9cb2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ba8fe9-1174-44fb-bbbf-59a44529340e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.91.246.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa175982-1bff-45ab-8eca-b5e28cdf4816", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.103.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481f42c8-cd1e-4c1f-99dd-d9eef90a2533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.163.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7807e5-e318-43d2-ad8c-4e607536749e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.33.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021545b2-68ef-4fbd-9788-ccaa9aecb373", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.49.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dbb77e-a532-4373-b7e9-b7bcd4d11135", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6269aa8-2498-4778-bcdb-66b24f131951", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b97b1f7-d849-412c-a858-86ec854d9d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417f9a39-83ac-4e6f-b846-32118856a74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25953ff5-7df6-40c1-97c3-7f77bb7d9adc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331b694f-80e2-4cec-a304-ea4630fbd80f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd146865-e695-4c9d-afcf-7e6172f59243", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da32e032-63de-4d36-b589-e6ad034b184b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6b84f4-0d98-4449-a364-bcff9e8a8fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6c4999-88d8-4961-a9f3-0e44db8ac9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04100a43-d7c0-4f69-8f91-f040484708ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa88dd7-2ba6-496d-953a-515ae1e45e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54182a58-2ae2-4e8b-86f3-072a9ad3527b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b51b56c-86c9-450c-ac2f-45622ed64c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c982788a-564d-4913-9023-f1629052d4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c36fbf0-3190-4f3e-9908-10189a6852a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14366c13-95de-43ea-8fb9-15c4ba15192e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9124efc6-4eb3-419e-9992-702e0d093ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2a05ab-036a-4cff-9954-e5818ef41d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82deac81-1b7a-498e-afb7-beb380159d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b0a997-51d8-40a7-b922-68a9c2a22cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fda2ef-b1e2-460d-bb6c-5ba96a441db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37910608-0a0a-4605-9077-33150599a24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8f4324-2692-401d-ada0-6569b11993eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e562a5-4bc6-4669-ad12-7cf7aa482c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ae75a4-de47-43f4-857b-a08e74f991ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583caac6-1b9a-44ba-9718-35959b7b6f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c79b9f-abe2-4ac4-b247-8718570ecad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d3d84e-ea28-463e-95dd-3fa6932937c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.154.247.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e859d386-2de4-4367-ab91-f382c2be839e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.154.87.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08437c3e-7527-40c0-96f4-a3ff07735a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dca7ac-89aa-4b26-b317-53fe57714626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.39.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cf2ae4-0100-4bfc-bf97-f68ebbc75004", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.61.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e082214-7dc8-4d67-ba8e-808864ea852c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.8.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add86fa5-6e32-4caf-bd77-2f634563f7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.156.226.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f3d44c-4f26-4e82-bd91-920b5e5382e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.138.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b3baaa-62ab-42ed-8332-b715aa19e1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052f44c3-b686-4292-8252-e15b3322ae1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.147.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df7d82d-0d04-4c21-8f93-416b6cc2fb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.148.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d070349-f8b8-42ec-a778-15abc3381ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.149.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc35676e-2e09-4c57-a7a1-db388a7dfd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.154.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77469921-cd28-4ee7-b1f2-7987cddfa2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.8.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a935c-839f-4770-9f5e-042658774e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5021db52-5fa2-40ca-a94b-7c4212856632", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.176.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e163e0-f225-4fcc-b60d-f0fb85306793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.19.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553da46a-c91f-4276-95bb-af4584a5c6a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.42.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a923f7ca-24a5-4606-84ff-dea91608a8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793e6eb3-43eb-4ad7-8014-292cc83a19a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8e45d3-cc6a-4062-9399-f41fca680181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03236b46-9108-47cb-9cc5-59c8b51b80a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8010f448-da3d-4ef3-9da9-f264dcda9a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f87b88c-d80d-458e-a027-afa4ced07bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61d151c-5692-4ac5-9f9e-b05cdb4d6b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.200.30.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff778afe-580d-4daa-86b1-3f180993b965", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8800453-3a8b-4905-b4be-72031ce01891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.22.243.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eeeaf7-d80a-495a-b016-da7c36e7f73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.224.31.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f6595b-53f4-47df-82a1-cba4e21d4029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.225.151.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0bc1dbc-4f79-4df3-9f40-225f404bca83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f20bdd-4b78-4e61-b0b2-22dc11c90fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db4182d-cfaa-465e-b396-6961e3cbacb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb9db27-7355-443c-bdd7-8d964235e32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b601ca-f6d9-4cee-bad7-61150274a5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.139.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f8bd28-3c46-44a4-98bc-2636d7c3a6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625613f3-f58d-4a43-a05a-59507440ac25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec95833-cecb-4465-bca0-402b8ac0721e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ebe37b-acd3-4092-9a0e-e9e5919a4ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda69409-0ef8-407d-8450-a8856d916dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a53c455-9010-41dd-8a41-e8419e9a9361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7841e2-bcd6-43ba-a7b1-d96192876575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d85f4c4-cb7f-4ac8-a355-ed34ec3e318f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4716ea-2bb3-4763-a83d-0a0a53ccdeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ef1dc3-5466-49ac-8331-e05483ac3494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9768c00-46c0-49da-8050-9bdd09742542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d010762-429c-44bf-8777-f6a83708c3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21ca754-d35a-41d6-8010-0c1af1295b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b00d2b-631e-46b0-a396-6d244d9c007e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bbb99b-4f54-4b10-a98c-86afa5d99e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4418a075-99d8-468c-9ebd-f4ff22b8f44e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6342c94-0689-4102-b174-9dd5d6ce7548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437c0d2e-ae97-4b2e-baca-35c5db98c5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a554c14b-e5dc-4724-8f44-6d4452de99c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.74.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea2217d-478e-4910-806d-600dc3abc969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431406e1-cf4a-4de2-a895-c38e68b1ab2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.206.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419ef0e2-0219-470f-ad54-a528d78a0972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.213.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9401d2-87e2-4b2b-b5e9-8de714d0df36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.228.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8d2fb4-7104-48d4-9f1b-d35a1d5ecf22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.239.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b36b6ab-6533-4935-8e7b-41c7c4a05801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.38.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e803820-74bb-40f0-9bf7-4817d2cb2733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.86.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a32d41-54cf-4918-b25c-b2ae44de0b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c194e3db-01ee-4c63-bc06-a58d27a409b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de64a89-e2e5-4da8-ba48-391340e91952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.52.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1561c602-f0c2-4a29-8694-9109bf155ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.53.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf6df95-3213-43e0-aea6-a71248441439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8f7d9a-c1ca-4c35-8c8d-fd1eeaad6e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719b94ed-10e7-4908-8361-7a5430d18b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.165.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d53edc-c7f2-4297-9d45-5ab8db0e217b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.159.175.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370ea772-ffd0-4ef1-8fd4-6ec951d7d010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.23.233.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85db31f-6334-4623-b507-94639f35bd41", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.1.94.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b280ca2-a030-4ce8-b9b1-2333addbbe9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.110.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d22b4b-770f-4919-beb5-cf95071d71fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.111.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785a2248-a141-49e3-8fdd-ad7d2287aaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.124.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcd7269-df93-4d1d-9909-99206e4f5647", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.45.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08045bba-bf73-412f-94a5-b5dd6a6d0296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.141.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194d91c1-449a-4ede-acc6-15c486683880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0175e00d-10b9-446b-9696-c7198ed00f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee13a3c5-9dff-4601-9f6f-9dd11e13892c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6926d07f-38cb-48f1-b0ad-5454e1acc061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0b7e9e-f73f-4e22-963a-2e49a135bb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5c5a22-d930-4b9f-88c9-1a02cafa41fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c24140d-bbe2-44c9-8b2e-7a3143f88e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600f06a1-d629-4c87-a0a7-1c3e80d9cc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153192e5-6971-4c96-a49e-466a35b1686d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cebbaf8-ee5d-4d21-a9df-e3d3ec01c68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4853a42-9e4e-43ac-8775-b39de6afca65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b465dc-903e-4fd0-a6ba-efec1895e772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.185.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb90955-182e-40d0-9c42-34020025cf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f92045-9810-4912-ad7a-af583508547e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92663d9-be43-4210-8869-085b849bfe9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e49ec69-520d-4710-97a3-babb93201fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277291c3-a2ee-4344-877a-731082f73eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05271b1-6a4d-4733-ad2f-a1f13ef88f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e593ee-6084-4ccb-9163-bb0e75d19aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d23703-7960-4650-9ccd-695879dea77b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.222.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f8d6b7-ce4f-4d1b-a187-5c8237a62192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09452309-8160-472a-bd74-a9d352da97e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08343b44-ec9f-4d4e-bad3-eb047cc0b9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98927b-6518-4a7f-9fca-fbc82de871da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce98de48-a1ba-4a93-ac58-f47d56b73385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c0f86a-b40a-4853-8522-b52be544d46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ff480d-d4f4-447b-ad42-10b3e3e4695c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0716351-13b1-4888-a480-02d28190b6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72057cd1-d635-4f24-beb4-39eb466c063e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e2e016-f875-4731-a502-503260ea81d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7611494-4dc8-4a1b-bd1e-363446d93804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e57029d-8cc8-4530-8efb-cbe39b1997bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dee922-b506-45e3-b61c-ec454bcd5075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502d422d-588a-40ab-b511-ee5aea435dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11ffbed-35f2-4033-96d3-99574c8355fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7403e34d-4b25-4de0-b45b-fd63e06b4a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63d22b9-8729-4279-97cc-d5794efe3321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb051a3-0b20-4ffc-9902-7ade196a4937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0977649d-d785-4958-ab87-535914ba2e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8800977a-2e12-4d5f-b132-be34231de9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7676b954-0a2b-4390-b574-dddc41096745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61488ca1-5799-4d66-a286-e3800d7f2d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688251a1-52d4-49b5-897e-993a5fb8cf27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f03683-04d2-4e5a-b81a-76196cb16995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbe1f03-342a-4bc0-bf64-cbdea78f18db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c446362e-9688-4c2d-9146-f6c4adaaf3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311c328c-7dfc-4e2d-b64a-9e727ee86093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e279f7c-991d-4ac9-ac7b-d085da2f0890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fd496a-199b-4307-b890-161eae51c622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180435fd-8064-43a2-88a9-16e7405504fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64749ad1-5a8b-44f8-a204-59d124909538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0818b5-a932-433f-8cdc-88a8aa4f4230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47e642c-80c2-46b7-aa7c-5ec0082658cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bad8e1d-b032-49f0-adca-8d0265eda744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd377142-230c-4682-8776-4e965a0212b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677e2461-04f7-447d-8bf4-62f4b44778f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddaa732-7b78-40e2-8e00-0d256de6612c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a049cb-d88d-44b0-9978-98e15695f65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505011b9-5bae-4e4c-98ad-fa9116e59bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44ebf9a-a43c-4d34-835f-410bf7b41db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd17a52-1738-4cae-a4f9-5da9d5183c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cac907-24b8-4213-9cd5-a6dc30998556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcce028-e0ea-4047-8498-d534423fa6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae17334d-2808-4a85-a2b1-0b3d032823b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd35bd2-0247-4c3a-958b-f1a01144c335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.157.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc5a311-417c-4e85-a80e-7a7ec98eacc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.80.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31b96d3-bef2-4506-94eb-a045e670b5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51308e8e-4fe9-4820-8c13-4a4ccb1aec28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ea8c94-8b40-4a61-9432-84e9611e6b07", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.137.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4e90d4-201b-4c55-96ab-319e612e7015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.189.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428f0cb6-8dfc-4493-bced-8544c2110b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.244.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1558c38-1f2a-4576-9a57-73c67badec68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.181.228.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bdbf1c-6cba-4aec-9629-3af99972a00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.19.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7967af6-ef78-45eb-95bf-631974a0bf6b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.26.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be2d112-7107-479d-8af1-e65916f5b6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.27.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cb3b6d-eff5-4488-8fbd-7ca9400ea09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.47.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ff8c5f-787a-4a7f-a440-e9561620842c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.27.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1075fd29-b2ef-45c0-a899-811c15a6fe3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26bbc38-3f57-44c4-8bb9-a361114faa63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8f697c-5505-4d50-9289-e98e42f9cdff", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98a08ef-5765-41ae-809b-8e0cb41a7f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38001131-b379-4fdb-936d-7979db31bec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdeb67e-c1cd-4ce9-8c66-b66a7d61043a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0888cc54-a74e-4dbe-a328-b4d13a214747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e4f536-1988-45e6-bf9e-15270adba45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315dfd03-bcea-4f06-ae17-b10e9fc4ddcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80841795-4590-41e6-b023-378253a4ee1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6786e79-699b-4416-90f8-caaaf5e61db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.21.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e6fa55-b065-4b68-8180-28889b1b2f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2387a3ed-9fc5-44e9-a6d6-03ddc11c8cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df135f34-c507-4b06-8e79-1c8d891f3b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d5a330-b9a4-4c84-a09b-e562cd604b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0e6f88-965c-477b-8db8-9ab85c79682d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357266cf-e79c-4903-bb9f-42f8aae61986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b1c568-0f18-4713-b61f-91be64abedff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ec88e4-ee12-404b-819c-fc4548568ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88986c3c-c68c-46f8-907e-70c25cb67ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.253.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe740dc-b2f6-43f7-a5d3-8d908329a1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.126.175.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04048124-4179-4ea9-85d1-ff18a874ae77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.172.54.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f65494-b683-4caa-81e6-efc218930c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.175.215.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9206a2-3019-443e-b133-7802bba68638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.176.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6b6f02-ef19-40d2-82cd-0f1f8ed40797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.176.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbb7d88-aa83-4d02-9eb3-5ae3013fd4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd97c678-2f38-4de8-989a-d5bd25a59436", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.241.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe43ee8f-6dbb-4db8-8828-7d9c39466687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f62e66d-bf35-4db8-a6d2-fbd5a545572d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.57.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b843d4e7-e2ce-483e-bea4-152b85c5d951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3294b0-f17a-4759-973d-fa4efa60f458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc337ad8-47ad-41ed-9b31-aac7311e5c1b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c792af-41fc-4af6-b1c6-d662d136951b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.232.84.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508b5821-eb9f-4b5b-96b5-da0f5a03f27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.35.80.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67cd2296-c789-4436-9d89-cf28145896e0", "relationship_type": "indicates", "source_ref": "indicator--508b5821-eb9f-4b5b-96b5-da0f5a03f27d", "target_ref": "vulnerability--e8892fb0-879b-4a43-b40c-bb10e4f92b58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3cc33b0-a24c-4755-849d-0dbeb13da596", "relationship_type": "indicates", "source_ref": "indicator--508b5821-eb9f-4b5b-96b5-da0f5a03f27d", "target_ref": "vulnerability--00a5a929-22a9-4aad-b669-7baaedb2cbcd", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc8957b1-4f8c-4307-b5ca-2821138c82b6", "relationship_type": "indicates", "source_ref": "indicator--508b5821-eb9f-4b5b-96b5-da0f5a03f27d", "target_ref": "vulnerability--c5918a23-1975-4d59-b93d-1b94c4496aef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32134ac-009c-4677-a799-c6c7bd3fa0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.41.77.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327a57eb-553e-4740-a86a-6bc4ef52e830", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.224.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bed8215-3441-4301-8598-90d937eef615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.11.95.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a2d97e-cfd5-4d90-8eb7-60348815db03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779b76c5-0f5d-41e6-a25b-46fceddcc1cb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.18.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa727eb-9731-40a0-b58f-0d29bb27b4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.255.158.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392d0ba8-867d-4576-b5b4-575530e51f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.50.114.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c54a0a5-238d-4ce0-9e4f-08bdb76cf792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.55.74.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69b9770-2edc-464f-8992-1f385e9bf3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.88.243.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee52efd-bc9d-4f54-a1a2-d5d82e2cc2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.90.143.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc552ad-28ff-4e87-b8d2-5d8fe796e833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.121.24.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2167157-673f-4d6a-b00b-cf9d6bb6ea5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.122.236.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85cbbee-0dbd-42aa-9fea-7d6fbc4ab06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.57.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f966c742-c5ae-4595-a285-c5f780ea8209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.58.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab80f9ef-bd8d-476c-9e89-65ed39e2b66a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.138.212.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0385b93-52cb-4a71-992c-96cdf2317cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.161.83.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a96d1b-be89-4678-80e5-0e2c47be3f02", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.184.169.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d487d354-9808-4bfe-acba-2a62964e19ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.213.120.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d703c28-cf1f-4f0e-92fe-f7268ab783fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.228.97.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90afd50e-db15-48d3-bacb-c835b25bb2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.27.5.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780e1390-fac3-42a9-b90f-d663c17f23ba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.35.99.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575d87eb-9e93-479a-b153-227eb50d4e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.4.79.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d0a231-e23c-4584-9ce0-94bd8e5b7141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.6.212.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b737fde5-0ebe-435a-9190-df9bd6240cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.81.86.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467d5da8-c76d-4f5c-8d59-863b68928a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.156.7.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21d49a0-0a23-4f48-8c62-27c7a0084f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.16.154.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9698c5-7556-4bdf-b854-f3707d850681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.130.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91541f85-f6ad-453b-b4fc-337f26cbeb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.173.133.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c381c73a-fd74-4058-8146-f583b6891b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.173.203.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0692b7e9-f3b8-4b58-a3d2-b48bdd0224b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.181.149.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f871f1-97e9-4c74-b692-490d9ca97bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.184.16.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9d8881-9110-4888-8b51-9b234aa73db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a692f0-3457-4f72-b630-7f60cd48f6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.87.44.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7a5196-4706-4ab8-aa61-c691816d2bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.88.133.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7045ea-b757-4980-92e8-e243e3d8bd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.104.77.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25eee15-682d-4843-aab2-f563d7ed9be2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3250c22e-2b7d-46ec-b351-7cdcd7565cc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e33243-411a-4067-8566-b69389b1dbcc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563bc90c-44d3-4f8a-965f-1d4ccca47564", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e6479a-fb63-4b4e-9107-80e5abccf4c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8665837-1e10-4b5c-ba30-acb807ba2fd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f38831-ba77-4914-90eb-90d97e861a37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9878ec1-1213-4734-baad-dcda15f74be2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2b466f-80be-4c89-814c-a97ccec647bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff84eed6-b16a-44ba-9425-f7651563d0cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578b8476-7f6d-46b9-8ae6-d3b881bfa137", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b5cdb4-8ed1-4bcf-8ebc-f69fc2b8dcee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2105fd23-33fd-4f44-a7ae-cc747d0ac822", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4328f4c-6f3a-449f-98ca-7707b9872dcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.148.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f022eb02-8013-45a1-a645-4c48cbbad0c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f680aaf-5cb5-420c-a702-9401e5be2c16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e624203-9410-452d-a032-dafe492eacaa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53200f5-18e8-4d71-babf-c2c7981fc264", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.154.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b981dc-370d-4314-ae42-7cf678d355b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b88261f-7c94-486d-9271-84e933d51ac1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dbcdb9-ea98-4589-9138-6c2fe2bed3cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53489ff6-7ef9-43a4-ae3c-93fa6e3e0c83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7356593b-de05-4e7f-882e-b20f86ee1e9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.166.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbd6537-56fd-4d5e-a172-5a298b97ce0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.199.107.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f169e1e-015a-4e77-8d51-050ef2850950", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.234.101.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a431ab-2a55-47b3-87c2-b08485d356fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.211.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49951f66-fa14-4800-8640-0b6549cc7c59", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.73.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eee7a25-d684-4b7b-817e-fcd79a2d84e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.34.91.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc45e083-28f7-47e0-a4e8-ca46840487d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.229.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb82495-09dd-4d1b-80d0-0092c751ab68", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a220b092-3cfa-44c1-9cce-193d258a0c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.67.252.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a88e5a3-548d-40af-9929-5ebe3db2b4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.98.177.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53deadd7-dac1-481c-9d3e-42bcd6d3a213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.124.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e034515-5953-4f65-a8b2-1448b940c719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.73.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b693cf0-4a40-4c12-856a-e21b9e0e92b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.75.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cf3bbf-6cdd-496e-822b-9c3b5f98875a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beceff6c-d3a1-46a7-83ad-1bdaaa0bb587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.128.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcbee5f-3c8d-4530-9860-e442ecf4df45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.139.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1beb70d-71e1-43aa-a3f2-8f257cf2ae3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.143.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b156cc9-05a4-4c14-a243-45a58d5dd4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.155.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69a4ccb-b4b4-4d65-8d76-d8c590fbdd14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.161.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353c3503-5c86-4bd1-a934-6a153e9fcad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.173.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199dae63-0de8-4064-b225-b811f6cc422b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.202.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8733adb5-ffcc-4098-9e8c-7fc1a95d0e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8587afa3-d826-4975-b017-f6126f4149c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.36.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1c9028-84e6-485d-b4e5-29aee5535501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.69.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79df583d-1e8e-4af3-909d-917315df44d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.97.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84699848-5e27-4bcb-b128-4de93c268f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.73.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c062101-caac-43a2-acb2-6bf4a8520628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.205.37.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7e99e4-fcc5-43eb-9474-c9c17ba75834", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a5f507-b696-4ca6-aa05-8ddd4df4b00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.23.0.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2616d65e-856b-490b-ae8c-2baa43bd4639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82beca9e-dff1-4856-a459-9ba0d4b442ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.241.238.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9228567-83ed-4dfa-b2f2-353c7ef587f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.157.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8030e08b-3b0f-4886-8602-7229c70d0585", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.91.48.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9da8bf-9b93-4cc8-a33c-37516fcd42fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.4.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f137a991-1499-4c33-8fa7-0a4f820eecfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.129.255.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9928d05d-7f11-458b-9058-eb7e82dd6474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.142.99.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e89686-6501-49c7-b2e4-f0d80b621ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.33.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb96249-f380-490e-b5cf-74c5c86b3317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.130.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286e659c-f495-4233-8728-a1b7d5b950f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5981190d-c81f-40aa-b77f-a7e3257b8d58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c064cb-d918-491a-a043-5cb342bac409", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655ac1e2-2d95-4fb7-aa2d-d3d7886feef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ec82a4-b989-4466-b226-f0064560c20c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.55.173.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36c4154-0897-4c84-81a8-1062816e5b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c3c25f-eb61-464a-b37f-a1f1aa42b913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.49.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e6c3c1-664c-44e0-bc62-4fee42605c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.13.169.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9f265a-cd44-4472-be6c-30162b9ab338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.154.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57799948-ebd8-4588-9a21-a88495194cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.242.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385d0713-bfe4-4c0d-9499-32f6c8d3e3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.146.110.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a116083-4d5c-4f91-a10a-b4c7926e2209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.177.102.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a092dfd2-dbf8-4821-9a16-f8b4d549fe89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.213.252.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fcd6c3-8bee-4129-b808-b981ecc6dfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.245.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f35411-5a17-4a13-bbd7-26899f85bc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.67.69.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321698b4-10a0-435e-ae8a-20e074f92377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.215.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5bd1f9-81dc-4097-ae9e-3e0ea717d165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.40.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596469b7-5c80-4f18-965f-44d0723b1520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.98.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc35f2b8-32fa-43ff-8828-11239aa45346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.79.154.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aff04f0-60a6-42c9-ac93-e5c81d4faaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.123.1.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883622f5-2411-4fbd-8d34-24b1e39bfb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.123.80.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a0130a-2fe6-4f5f-82b1-9385a0fae0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.166.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba22223-46fc-4592-8c93-936f6fa99a46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.163.153.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e948e017-319b-491d-952d-c044f0c67178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6fd390-27ef-404e-a57c-32c2e1404cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5f0901-564c-4c4b-b5dc-3fb7f6883ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deca3fb9-c4c1-4661-8351-4053078d9e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1de00a-a3a7-44a4-94fa-738ef1537e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2a9fb5-f3d1-4a56-b68a-c3e89d48abd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757940cf-c275-436f-b561-daafb9f27896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a73d5b-7d22-4a6d-a849-210ba76ff185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bb827e-4b99-429b-8cd3-c284b0c4c05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0512b987-a132-4363-a9ba-22205baee485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd25740-da88-4a47-8d51-1e527bc18b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f6af6a-858c-4fdd-939e-3cb40fadcd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a565d707-5599-419c-a3fc-d59655ee8b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6abc8bd-3104-42b9-95f0-d75ea89027d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d28821-e820-4ffd-a6ab-c4b98aa81c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c25a71-1810-48b6-83fb-4833cba97b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d38473-967c-4d30-b216-011422ee2157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e49e42-7e46-4c4c-b90f-d5ed4441cff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c42f81c-0ee4-4abb-b5fc-4844b91ce155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fea0230-4a11-4c74-88ad-f4db18144b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96b11d1-7c81-4fed-950c-343a4a54460c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e597290-7c3a-40d7-8431-167372ebf0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f41f89-1a8c-47d8-81a1-5a03582d068c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acd1d28-b9ef-47c1-bacf-5928588c0c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d172b87-5763-4180-839c-1cb2de1544d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b346f32-155c-46ce-9f01-220cc6b5c1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be42348c-bf82-4a57-a169-768dc736680e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7311c07d-c609-4d52-9f81-7ef349b77e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc46dd6b-d280-45ae-84e1-5ac7031dd676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527c1d53-260b-42f8-9ebd-f252a0e2e604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e826e31e-627c-4908-9b48-2b78b667f180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627208d6-d1fe-4b19-88f0-28cf4dd01353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f2bf81-b73e-4cf0-b8c6-602efedad9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.229.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae77114-3da6-4fd6-9c95-d0c5d04806fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb06de65-6f5a-4f70-9774-973560800a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34af8d3e-f8ae-451a-96a5-7310ae8fa8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1a3af7-ba24-4c09-a5bf-f5fa1051cfe6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88980481-159c-40db-9b0a-5d66099e63a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be30e5da-22ec-4ec2-a507-c5b27cf67e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a213cec2-40ae-463e-9de6-08f2f3fc24ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7cee2e-8108-462f-9805-56ea674f1113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63f1c4a-6724-4d81-8bff-1fedba476864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d713921a-5ecf-4130-92d3-d83ea1a608b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a284f5-4e1c-4495-888b-7054520b8a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e530e21f-8c39-476d-b579-ccc738cbdcb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0542e7-544a-4b1d-815f-a53c7ef2d759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a44710-8077-4ae1-be7e-0a7f7b8bca1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.252.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec38fe1-3f50-40c9-b8e4-c9f37e05dd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.116.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e427d45-d847-4132-b3ed-13a98934d7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.56.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0bf0f2-8633-4583-89b3-4aa506d148bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac347a35-f43c-4aa4-983a-ffd5ab79bd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.233.220.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247a5f10-7dbf-4db2-b60c-fd8eb5ff879c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c21f65-1731-4a57-807f-aae52cacf6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a23fb78-a890-4b4d-9a51-41f485fe5801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dbf64f-e1ab-4977-971b-5f029bde561d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9480d0-ae3e-4511-9d8c-37d4d28c067a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20603b13-6b7a-49dc-8aa1-775589a9de44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f234fc39-2072-4dcd-95c9-a79fa1230814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e6a332-0145-4ead-ad9f-29dce9669985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392b57a7-cb26-4f01-8e98-323614fc5a03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f717e8-ac89-4c2c-9563-e1118462f46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caec80cc-8063-4b74-ad71-ec2fe9cac700", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a833457b-dabf-4057-a755-0ea5f8059f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.116.32.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a111321-9e9f-48bc-b10a-6c1eb8d45c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.205.179.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e80e4b0-8f14-4dd3-a573-351c3778b656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.253.93.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55e4f2b-c472-4781-b082-2a565639f845", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.122.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2498d361-c7df-41bb-a6a8-0734aef59ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cb2c36-5ef7-44de-abbc-edbdc09c95a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.52.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ec48f4-6132-450a-a7f5-83065cb22a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.8.186.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cf5a28-2980-40c5-a026-e8531c2d5367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.223.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6e80ce-2df4-4ca3-b4da-4551ccd9e42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6334bf-e4b8-42ae-989b-4ac19ed5448f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.192.27.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e1c5bc-f697-4d65-99f7-bb5a540f7787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.211.32.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0e707d-c751-4cdf-ae48-c18c5f4e7e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.224.237.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1223a7f0-b130-4aa2-9161-7b145530584c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.24.230.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bcc211-9836-4533-8956-d60ce4c901d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0bcf6d-e109-42e9-93d6-59cefc4f1b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.147.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405eef13-8287-49fe-bf84-579544893a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.32.92.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41761363-9f97-4813-ad7e-1123e8310d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.14.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efcca9b-ce1a-4956-a851-2472eb621794", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.154.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7005a8b9-151d-4cf5-98a6-ca457c94ff86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.175.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ff9cbe-1cd8-4bc4-aab2-b04edfb1f5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.4.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5432ba-9b12-4cb5-9f4d-fa413a8013e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.55.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261f550f-74f3-482c-98d0-0ce3b3183bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.84.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb587e0-838c-439c-8dc8-a81e627eecb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.98.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d49f32c-cd1e-48d3-97cc-5a6cce7495b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.99.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d94f52-f127-49a2-956d-53378906cf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.131.238.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7c14e8-ead1-4c7d-b19c-82de134efc11", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.147.220.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e62e265-cc2e-439b-b189-2886f67f0c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.151.171.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645c12a0-00fe-4c3e-ab40-a524097701c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.187.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135af04f-c85e-4872-979c-34933ae1527d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.167.137.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c012fdf-1333-4757-b940-0c8a3b497f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74233a70-45aa-4bf2-901a-d1cee83485a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.173.173.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5014a8-3cd3-483f-a408-ba4bb0eb237d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.187.10.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a1cb44-cc1d-4972-bc14-ab8a892515b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.196.234.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f36cbf-3623-43cd-88f0-6e168d634851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.199.160.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5a58d6-39c9-449e-adc0-8a0b496e0929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.147.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96611b06-5917-4173-9b29-15ff9c618720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b43912-ac02-4bb9-aff1-5d5bb2432ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.89.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ea277f-a6f6-483e-ad7b-ce268304a74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.36.224.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1619c228-3061-4e2b-af24-9783767f4236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.43.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c68089a-e529-4875-8ef1-1b5e67836158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.41.166.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aae4fc7-8768-4d89-a37d-9ffbd4e3f5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.118.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fa83ca-197f-4c00-8479-08d29fe5c981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6eec84-fd9d-4f25-86ab-210f5cf6249c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.114.46.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46a0d41-9624-4a4c-8ed0-a1392ec9f8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.116.113.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afa970f-27fc-4093-9950-72115288c0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.87.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141c3ad0-5ccd-4abc-97c4-031d1de1874d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.183.50.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5013fd7-02e9-4b13-806a-fae3e478f379", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9df1f7-825c-43af-8b45-c0aa3ed26959", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.193.243.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d44dcf-16b1-4747-b3fe-db381ce4e40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.109.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14425430-294d-4bc1-97b8-717b96032ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.238.125.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81b338b-425d-4611-bdfc-ba0c55b3f69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.242.11.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bf2aa2-45bb-4b3f-b063-556625ea1e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.45.17.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade2dff8-14b3-4605-84f9-88b010529004", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.236.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d3822f-d7a8-4978-aa88-bd23b4abf1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.214.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e615afff-8e2c-46ae-b168-02dce9428590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.1.194.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ee0a3c-8ac7-4d70-9dfc-63f6e1dec1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.13.112.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630fb1b4-a5e9-47f3-a726-b454fbb8c251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.130.36.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a234e842-508a-4215-ab3f-511d90783b15", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5823b6cc-5d76-448f-b980-a8f9a9c80356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f22e68-30d0-4c2e-a8ef-9665507a161b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.182.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d18a0c-971a-467f-a07c-b1405e86a193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.191.148.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f3a919-06e0-4408-8e9e-594f0fdaf372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.201.19.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20832b83-0865-4e65-857c-5fdb36b6668a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.209.108.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55268e9-b0f8-4304-a606-45af9c6aa2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.232.133.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a4e8b9-9abf-46ef-8e62-98676240cbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.237.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75147e1-d517-4243-bf52-2c1d381eb355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.241.8.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e59884-e55d-4d72-9726-38911fee920e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb98a4b-927a-4d1c-8217-a53a63b2d244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848ca72e-d7eb-4e03-bdaa-929510657b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.28.37.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a01406-dfcd-455b-92b5-e646b55322fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dccefa-17c1-4b43-820d-fbc8b8e7020d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.240.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba514cc-0d31-4181-8d12-67a934665b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ead9cd-2e0d-45ea-a49d-c89539721aee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.203.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e546c9ad-8383-4128-b699-1a2cd0d24c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9cbfe7-85b6-4b54-85b4-7f21ea07658a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a9b8ed-cda9-482c-b61a-fe9c3a14d12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa18693-9c79-4480-9b80-6403e9627856", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.212.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e3b3bf-fb90-47db-832d-12a9817c20cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9579da4-4623-48bc-853a-4286037735f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2985f8c8-f5e0-4aa2-aed7-a238c1a7c7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2783a2-98a4-4210-80a8-0bfb03f48906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fcdc93-0f5c-4886-85ef-eda8f69731e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.219.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c4c82e-e3df-4537-9de2-33e45298f85c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.174.129.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c061c17-5112-4088-9d46-610ad769db5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067e8c5f-ec80-4aa2-9479-ab6b66416610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.132.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6cf7206-4b70-4483-bb5a-8d321741e0c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.140.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2c74d5-42f2-46d3-a651-3b6577cc75f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.230.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae64f9e-c813-435f-b03a-618dfea5233c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.22.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7ca24d-dc7e-4e49-8941-f07b49fd8ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.220.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cd4f8e-a797-4976-b7be-acd42cc5b039", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.118.92.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f2b1ad-d946-4661-9cb3-0bff1eae428c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.16.27.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382fb552-fc05-4fc0-b870-464cd22ceb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.166.71.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3256f750-7c75-40c0-ba47-e20dd19199da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.227.86.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adca030b-38c6-4f83-807f-fdd592b8ad27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.24.73.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2e7d8a-b251-4d4b-9fb9-46f7e1ebf783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.172.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf54707-6e29-4d0d-88ce-8785d146a230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.38.12.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186d9765-9f3b-4bc6-8ea8-a7e61c20b44a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.62.71.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a5f428-f1a7-4eea-9002-c12ed831308c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.75.125.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17312715-1c03-46d9-9f70-616094de6188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4d32b3-7005-4452-a2b2-2bc99e15bd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f63e83-0d61-47c5-97d9-4a72957ee7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.131.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952fc68e-7852-4911-bde0-efe0eb2b61e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.132.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bb5326-fc33-41d9-b8e4-6b0fa19a97a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ca44fd-f8fd-4fc2-bf70-a53008493106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67337d94-afc5-4269-ae52-7f275b13356b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.225.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261d3ff7-c879-4b55-b45a-3c0112731c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5db6d77-cc5f-4568-be01-c6f8d3edd548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73a098c-ec4b-49e7-ad07-f09aa68e0871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cece8f4-1736-41ea-8a70-5c872f2a5b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c002a9-0d77-4a07-aaf8-e2347c0af504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de721f69-169c-4d57-9877-5e4939a84c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ca03d5-d30d-42a5-8c1b-9705c5a0a027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e82cf8e-6058-4d06-bef8-690962976fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801088c9-3988-42d7-aa0c-e24513f8c7ed", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.231.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91c92d3-82f9-4451-8140-d8e316d4cb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaafcbde-2061-42e2-ab1c-e323dae83495", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.9.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e0de72-91b2-466f-b988-cb66c1352900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a939ca-fcf0-4ed5-9e5a-b132af24b22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5627b6-e5bf-4522-acac-e5684e994a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69233f8-2965-4b12-b236-c9bd21354936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce1820c-8b6a-4a87-988c-d65c5fac1fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5cff7d-2005-442a-a0cd-aa71d1e87328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1b5e55-138d-4234-a6c7-b4dee34b1caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b78ac2c-ceb9-4f22-9dc9-26f2a136c0c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.211.229.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fae822-a215-4e6c-bf2a-53dbbfa2cca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.96.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc97ffb8-3c2a-4852-8065-30268d1553a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.151.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28664b6d-0bde-4fb6-8eee-68966502b57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.201.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9108f8-06d1-42f9-b4f3-b80b7dd42373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cace55e-7eb1-49f4-97e0-26c6ea4cd9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.112.41.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77247a3-9292-4d33-a8e0-ac49917d9199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.217.227.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a227cff-d016-420b-a928-c090c5ccff9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.113.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73900b48-31d9-457c-ab0f-120c4096c9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.193.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03cb3d8-d14a-4f84-85f6-51a068a47c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.210.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b276d16f-e396-4408-b31f-4f8fd2dd1e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.251.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bba972-f551-4c09-9f66-f307ab2425b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.1.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bf4e4c-5772-4442-9fef-7841e6484c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.95.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2400425-7dd2-4314-a6cd-0da826627a24", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.57.39.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfb522f-7fbc-453c-afc1-f347179ffe66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.146.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b630079e-897c-4e3d-b5b2-43598a4ebc18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.194.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9278953f-89de-4dc5-b153-c3d16e9a7b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.58.95.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a145a1d-7f38-4eeb-af19-9607bfdefd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96b7989-a221-4385-b308-9bc537ab2151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.112.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a14ed5-1441-4a2f-a395-caf01ca4dd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5857a66-8bba-4d50-b3b0-649af255b51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75795ed-e336-4d14-8ff5-f7251be73042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f9cbe9-47d5-4668-8196-6f7bbbc9f79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124879b5-692c-4c83-b096-554cef551ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776b53c2-bdeb-42f5-ab7d-00c5658b069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fe5f9b-dcab-4e19-a60e-a40601783ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680d5d76-7835-432c-b938-2ec2626ef2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774625bd-02c2-4bb4-be20-c10f56ed0142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525a6a3f-a4b6-4ddf-9756-df26d278cdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1347f6-7b31-417d-b2fa-c6cd0380414d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07470003-3c85-468d-ba93-6d62da5425a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6997c0-f698-433f-a027-f6ebfcc84303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef12c606-8c72-4ce5-8f18-680f27bb9432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728cb246-5f4f-463b-ae8d-6d201bde9d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41825585-d77b-410a-a082-10cf64eed77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c4dd11-5574-4c48-92d5-df488e6a001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6f2117-3724-4f02-8e6b-f82901dc9017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08187ea-ee07-4ce0-8752-13529328c440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1356cda5-8ebf-4ba0-b790-034b10a65833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa93d9e-75aa-48e1-b4ed-f5838e1af7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed3eac8-cb4e-45f2-b372-d4ee6d17e2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c153e7-5303-4361-9fb1-0fd13e72d6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c52c24-f00b-47c5-8d2b-3eeeb5a84d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6b261b-6e31-4ec6-9dcc-0b0d3fea8fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9209fb0c-229f-401c-81a2-2bfbf51a9b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.189.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a13529-ea8c-49a7-a8af-b4cd60f8cff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.159.24.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e538ff-3734-43c9-8b47-1cdbbfff8b22", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.122.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9936d5-173e-47a3-91fa-c5d5923ee4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.42.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392ad431-dffe-4265-858a-854f3ac973e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.80.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92075470-a4d7-48e2-9085-2c26aae97da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.221.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3388098-35d0-4083-bc5c-18e9833485c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0e8330-206d-4637-99b6-0eac8df85b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.215.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b2c841-6b5f-4631-9a1e-13ae4ec84774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.25.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a46f1bd-7546-4ca9-aef0-c37b12db35d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.49.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25963ac-b7a6-4702-9300-1ea81e8b2cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.50.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b51740-d71f-4d01-8fd5-843408c243eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.6.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3888491-efc9-4f37-926b-17996db63bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.62.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7615c6-6ee7-4a57-bffe-17ecb2672878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.76.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32c9e82-922b-4994-982a-00020281fad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58875f4-ed10-4f7c-80c3-3b607956286f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9948eeb2-42aa-40d7-bd5b-4e445ce4d504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729573bc-ddc2-465c-9668-f5f7fdb9a1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce06534-1ee9-4287-8ab2-1d188a7777ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.104.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3169b775-8ce5-48cd-a810-2d8183a5b742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbf2baa-abf3-49a3-8ef2-192d532fac70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164b371b-6362-400d-b596-6f455670e168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9d4fe9-f673-4603-be9e-3930516a9a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d85988-b3ab-4fd4-b9ff-dcbff2c5576f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cf5a0a-89ff-4d14-89fc-8992a3b66175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cebe95-7025-45f4-9703-59154feea4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f279b808-5fa6-4737-a5f7-9bc93e291330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bcee73-64e7-4c8f-adff-b25895b96780", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.28.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b51229-5213-4dfe-91b4-fca4ce625c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.143.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d849f2-d512-4a69-97ea-0ab5cc75fb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b0c911-f6e2-43c7-817e-7a96b5b468e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05649e94-e5a8-45eb-9ab2-b5f0a802a7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc52fb1-f055-47d2-a259-6a94f35489a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f406bbd1-0319-4f23-bc10-ec4adb47d1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.121.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe17059e-7d4b-494e-9066-4e0c841d3869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b3b87a-761a-46d3-83da-639c15ddb650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd04270c-559c-4602-8783-ea11d944e26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0b3b5b-7267-45e8-ae32-2dae26ef1322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9539f37e-9340-45c1-b0d5-94beb408a917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a977e71a-15ba-47f1-a9d4-d339d1cfae29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9f5acc-079e-4c97-a14e-802b8def0eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feed5391-d0e9-4d27-9729-ac8f97590d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e279581b-32d0-44d8-af02-5741faec178d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac2ad11-3128-42c9-b0da-cb03a95cd06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751e4f26-c37e-4ddd-bf82-0b601061d4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da52acf-a766-4b04-be85-ab76e5c41df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a4c569-b285-453d-9100-2d49ed8e7ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec74bf8-8a76-4ffe-930a-524e0b4b0910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35553a12-9d84-4c7d-bf66-027ea424bc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea5e99f-2881-44de-9abf-151f2e889dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd05dda-a258-49f8-be9a-6fb201714f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8d605c-5a09-4f21-9bc2-4fbc9d29d901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087b6d9b-d75b-411a-8b6a-180f7394c220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007955f2-5595-41a8-889c-0aebdc530b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3017eada-12e8-4cb6-88a1-6f0c5e868385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5611f76d-8856-492d-8d9e-2a0909196e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4461bd04-bdbc-40e2-b223-017fbf1d0fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7e9e4b-3da9-48ab-b631-2d2599810fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69391fb8-0da0-4927-956f-a3dc442d1eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b50203-12a1-419a-8623-98cbd330ec3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5cdc44-a86c-4509-9057-2b151813e66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ed874f-fc80-4b6b-9be4-a88548397a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cf8a0b-c668-4445-9aba-6bd8e34bb50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e6a60f-7af9-45ce-a3ab-1be2383ad26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff32b4e-f86f-4e41-94cc-4343739e87b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f14d0b1-bdf5-42dd-b641-1623ef279bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f08ac6-75a0-4c9c-b443-4e2275cf8642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce776d9f-9cb7-4901-b1fe-852c76c28ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2252d127-dacb-457e-9461-5f1fb18dc746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae67fbcf-d82a-4ffc-86a3-8b208b23eedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156ced10-276a-441a-9d02-8f40bb322688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b156cce-67fe-4645-b4f4-909b884777bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bb3b16-666a-4e0f-a8c5-78fe5a4a0cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fef792b-a0bc-40e9-8948-13a2b896a238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658e1df9-c2a8-481f-a190-428423759d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2f34c7-1f0c-4d46-b282-d2c281b1fdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a3fea4-faf8-4c6d-bbda-d1cb903b12c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b2e062-8f60-47df-be22-63aa976655af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79811144-c75e-411c-a7ea-fd9dfc2eb2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d3b65c-60de-450e-8cac-904159e91228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455e061b-63e1-4267-875f-c66e1a1da0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c883531-e91c-4c69-b910-5ab446c19959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f8f8e2-ef79-4be9-827e-1b82432298ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.141.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed1a124-252c-44f1-a410-c6cb62aa1511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.150.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d77e082-7e5b-403a-baed-2c95dbe2bb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4abbfd9-78ba-4400-962c-92b0e6c6239f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139536de-6284-4c3b-99d0-d030f3070750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1d45f8-14bf-44a7-996c-63757015c7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.148.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b02c449-c296-4bb8-833b-0a9397d87357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b86a20-9ef3-4dc6-9fdc-a5944bcda959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdf1e7f-be87-4cf5-b7b3-0700200daa49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269f5bfa-c473-4aea-86d9-cb2207b9b498", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.200.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095bff6e-255c-45ba-b51f-5ba051987e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.200.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64190f27-3c74-4c6a-a5af-7c000dae5166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.24.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5e85cc-5cc2-4d03-aa4a-fb4defa7df05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dd8aba-91de-4514-ba2b-ffd56ae5b5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945e03c3-0afa-415f-bee5-6fd143a0e957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beacea12-8c6e-43ed-9649-17d01490c2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.13.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f91ec3-8173-4ef8-85e3-abe03817c3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.143.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db21ce40-2528-4d77-8a14-29e248ef293f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.225.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9375b26a-1c7d-4b7b-987f-609c2f4d1a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.237.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5d2a30-14bf-4696-a72a-76dd14a39c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.27.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a4ec19-4390-477d-98db-10803258f33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60ba4aa-0399-4f8c-8a45-b448f91843db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab41d7d-a1d3-494f-b6aa-b9e14f25fd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.89.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657f63ef-2fb6-4de9-84b5-3b5e171558fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.93.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a339db-2137-42b5-b702-6de2ff21da90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.105.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7cb0e4-7077-42b4-9908-dfb7423a72cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.109.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c96878-ff1f-4705-a6af-7ba5c19b1d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.97.9.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cc68ab-c5be-4528-b76c-5402352edb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.43.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606bfd6a-a8c4-4864-a20c-55c7b9cec97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e824b103-ec8e-48ab-96dd-71ef487b3685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c02d7c1-5832-4776-bb79-92c3918c8a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4292bb8-44c9-40ae-9e9e-76f0648de75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb417bd-98e1-4f36-a0d5-a7e96f961d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d003290-f3f0-4acc-bf01-31f005c37c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea44aea-e6b9-4593-ac4f-dca794136bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf26ca97-280c-4b40-83cf-6366f47623c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577a4137-f811-4fcf-9f86-cc0cd4d065f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.9.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c48a1e6-9551-4e27-8523-b5be189e30f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.167.216.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8dbe45-ed48-49df-b98c-7f3850197edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.170.72.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62394c8a-9d3e-4138-aab1-ed3bf61c9415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.207.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a66e5d-4d7c-486b-b3b6-41ec671c3403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.213.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b40181-8607-4aac-8fc0-602799514b4a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6c6fde-2344-43a0-aa3e-31bf80191369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.132.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c33b17c-0d40-4727-b88f-16a8aeeb999b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.226.100.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112a6626-777d-491d-9bbc-e30ea2c6f2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.0.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829536f1-5582-4908-83db-be8abdb4fe8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e154c6-b184-4d0a-872c-81d6f4babd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0691e980-01e7-4381-955f-55cdae7fe39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.42.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c78f061-e9f2-4717-a2c1-65c4a8b1c80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.58.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2301f8f0-f393-47e0-b2be-9ce2725ec887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.75.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377520a1-e70d-478c-8c94-f22ac832792c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.77.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f62e71d-b9c8-40b9-bd22-8820d0e5cdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.52.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f61292-b542-40de-a114-9bf6dd8d1e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.106.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3472440-4b9a-4ce0-b279-66526630e167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c166747-e3ff-41e0-8b9a-35f93d33373d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f590568-dc79-4cd7-9525-abc90679bdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b946468a-3597-4583-8c06-4b6fb8ea1a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a533a6-cbb3-496c-996f-10d6360e2bb8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.21.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea205b24-8f07-4bbf-83d4-9aa680dbd7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.54.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717b5da7-0dd7-4437-959a-acf6f7e7943e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.55.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18d1199-d9ce-4297-84bf-494b65c26ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.154.149.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54e7540-723f-4164-b828-fff09d11d7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.163.144.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ede2099-90ca-46ca-af39-a8ce6446a207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.173.19.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644c345b-c564-40e9-80eb-8efcdc80d104", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.41.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c31e13-125a-4004-b84c-915905c103e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.181.21.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8227c1ea-6776-4b05-ad1e-0857ef081f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.183.88.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb8ae8d-b369-4bbc-a6a8-6b4a15ca5dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.187.131.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63b90c5-7deb-4b16-96e2-81d08817fc9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.126.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025331d2-eb95-42bc-a348-ccb948cae681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.50.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddd140b-ccd3-476b-aea2-b2192506bcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.132.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d9dc61-4836-41b8-9c52-3a9df54c49ce", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.212.30.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9e3a95-7b7f-4011-9b40-ff3f63dc0900", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.79.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9e5e73-01af-4fd1-82d3-d6b0fbff1479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a160d4-90aa-4ff3-aa37-b1d1f4759062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.229.227.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a23ea75-c139-4ee2-bba9-ba2f47c09c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.236.186.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e8f5b7-78fe-416f-875f-25c12254161a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.255.192.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191edd86-ed1d-48f8-89ea-a1fbf5d9e2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab6b932-97f6-45cd-a258-4ee1ba427376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.53.69.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e5be50-201b-4b11-b2a8-651eef3c1699", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.55.144.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8338a38-87b1-43e5-882d-d4d4ada53ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.63.198.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7618773a-c4b6-4400-8180-8706c850f631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.143.159.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d16239-07b3-4854-a2dd-2b969b7c70be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b78306f-81bd-4632-88b6-d04013e6dc33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.79.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1d1a24-f2d2-43c0-afd1-e05ee03f3365", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.246.124.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5089852d-8d2c-426c-b89a-ea367bd36a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.99.98.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fb7f14-6e81-42d9-b4f1-fa70379da833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.187.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54c3071-71b0-40fb-9c59-5869885120d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.32.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bae3708-d5b5-4bb0-8dcf-d3bcf0af97aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.45.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84931955-de1d-4357-ba6f-42a68887193b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef50023-b422-4e49-b690-276a9cdb2a0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bfe672-6a3e-43bd-9815-d84c2c70ef5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a6d027-26b1-4da5-86f4-2074cf59dc80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8b9fc8-5d26-4516-9ea6-437b120c5814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.60.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdee7ac-4c39-489d-8fc2-b1bd846aff83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330bf636-ce1f-43b6-a95f-519723297434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.148.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347030eb-f0bf-42d0-a47b-3373b9a8e693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.200.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09d44ae-8b0c-45fc-8118-9695a23ca1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.213.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94e69e9-9e82-49eb-9957-678588645ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f31145-ef1d-4f7a-890d-d77a7bdd8f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.60.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d9feb2-9fd6-47f5-b3f2-70c333900f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.128.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624f3c8f-b2a8-4525-89c7-2493fe6a881e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.165.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e1d98a-119f-4ec8-8975-9b369a9c2e88", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.216.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19e8cdc-d7d2-41ff-8285-d63d39279141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.14.5.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f15fae-3513-4f6c-a1e5-10e01ced41ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.123.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca14ce6-5845-4b0d-bce4-08058cbc138b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.134.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfc55fa-d422-451d-8762-772afa8e05c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.135.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd1da60-e9f3-4794-9395-d0497f4e41a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23c4c56-6ce9-4a22-8a4a-fd851f1be8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.154.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc78536e-dcbb-4ce4-a938-59a57d982f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.171.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a28b95-a591-4d72-8ad8-76ebed190102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.186.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e1b1ad-0d32-4961-a75b-aacc0b567b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.199.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3ac080-3aad-482c-a854-453bef8350b8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.221.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f97a87-7481-43e5-add5-cf059f198057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.32.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972fa05b-c1ed-439c-95f6-19855b017ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.45.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a431e458-8370-40d0-acc7-62ab0ecc16b8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb09bda-97c0-4a86-8559-58e0ae8e5b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.185.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdbf3e4-c211-4137-8a6a-9959200e79c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.208.232.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4c4f51-940d-4ba4-af93-89420d36e293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.164.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea19598e-8c3c-48d4-80fc-23583b57892d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.48.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb5aa3a-9f06-4ce4-88e5-cba101f9fd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f42a55-a696-4bc5-b08b-b381e1203462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2723f420-bd19-46fd-af1c-36388aaa5c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94175f49-dcae-457b-bc74-86be36520b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cf9c93-927b-44c9-a6ff-a24142f786c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc253a9-d8eb-4174-94eb-76356d6143f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44b0392-cdf3-43b8-bf4b-fc249387fb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe771a9-7cbb-492e-9014-2e27ec3e881b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af56d03-f8d7-4e83-9468-4a7622c3d1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0ac574-f7ea-4a8d-8697-812e0ed0cd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b189d0b-a605-4d42-b2d6-296c68ef07f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffc90bb-e560-49ec-b1fb-836a6c9a12d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bd3c48-0600-4996-9a05-1ba3d48a17be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513ded66-f3dd-4096-8d57-b5cf0ff75047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d92fdc-7aa4-45f9-8871-095ed514a6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a7e117-e4c5-4846-b293-b72b34a0730d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ccc3fd-3f89-4fdf-a59d-0a441359c0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94971df-07c7-492b-b06a-63c907a6156e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb013ecf-08c3-431f-aa1c-6cfa5cae319b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfce1a95-0f44-4d81-8992-957b4268ec99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97319baf-07b6-473b-9810-914da89ebe0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc58dee-05f3-4202-a1f8-6664110219b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.188.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12953213-65a2-4ca9-a8f7-b0c64412d500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.203.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5403c5fc-b46d-4f16-99fa-6b2f8943eedb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.205.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8a7cd4-c68b-4b45-8e46-d555bef3ab5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.228.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a073a3-9e94-4eb6-9e4d-8c63034947b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.65.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5040b39c-dc41-4741-90df-23aa558d4485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.99.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08affa73-603d-48d3-a0e8-d0f838abc861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b827db-e79e-4d21-8715-122e2f4cf90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.92.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281f30fc-2ff9-43bc-a895-dfef153ff6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.103.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7418c3d4-d109-4446-9ee2-dada30a4b253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.152.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf87c04-b790-4bd4-8a95-7a3a21a4562e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.90.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6ebfc9-1227-4bc3-8ca9-c7837418296f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b613c6-f1b8-4a2c-addc-70fe8e792551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.19.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9649fd23-ad50-4d10-b874-25d56ba40ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.185.219.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d3bc72-74d0-43ee-8ecf-3fab0525666a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.185.94.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4767f3-abfd-4149-a43a-1d1ae5b0a9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.118.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982e9ea4-d861-4839-bc73-75a249aab8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144c41d9-8564-4f3e-8ed3-e846335e2bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e955d52-38f4-4253-bc40-be3fe7109207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.31.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2ef03e-853c-4136-8e2c-e2298882f4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.41.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a53465-2fb3-430f-a2ea-3e20a43c9c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf3401a-6fcc-4b85-9000-037f2915cdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.79.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3f735d-f289-41de-8599-359bcb5be972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.196.38.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee0df59-fa77-46f3-86ab-2075f847c580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86f799b-d746-4168-9c0b-660ee5ad8872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3af63e-c58c-4b13-bf2a-229064de78d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f257db-2367-4547-9137-3590ac75d8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb2e336-ba7e-4895-91a9-eb36fc980095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df33bf8d-6c21-4afd-a016-f44c70beb443", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f69169-4c91-440b-953a-cf44804ae5a1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4da53a-9bcd-4493-99d9-c0d19c83fc89", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd5d39c-ab80-46eb-88f3-72eb5150acf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.134.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5ce8fd-f15f-402f-bdd1-bc91f531a1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.138.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17c1cc6-08c4-495d-8901-3369847d70b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.150.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53a3843-28bd-4675-82d1-6708fa24d91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cafa87-7592-4334-a471-23f8b2c0682e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.187.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2106f769-9a02-44e2-8a9d-0440fea07242", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.208.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16da140-12d0-428d-9231-3e0382c8912a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e941cbf5-f14f-4d62-b2ea-fec665c2ce5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4bef81-191a-4927-a610-649745971bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f4c951-f230-47ce-848f-c90266e96e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f86110-e295-402c-801e-72df41e41056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c825e9d-7a3a-4559-86b3-88ac24877e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d85a8a0-ea91-4656-950e-437324cc868a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc20a18-8948-4edb-820c-5e3e7a06d5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6593c1aa-1827-40bf-bebf-7ad6c2593e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e6be5c-d13e-46e1-8e4b-1f7f35c7d1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16851c0e-8085-47b2-91d3-65f5c2424de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199ea143-0a08-4bf1-bab3-839f36bbd008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1baae52-4893-48bf-a009-8bc6aa6fee42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12dbecc-8442-4f22-b267-1acc9e5bf6e1", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceanlondon, openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18707a3c-c4fd-4205-964d-8b0adb073988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebf72b2-d275-4b7d-8dbc-613bb8c8d12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f11f68-c380-4923-b15a-1f6b8d84eeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9722dd-be85-465e-a1b8-df329ea4ff7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70a05a9-77d0-4bba-9352-bbb2b49ee682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341946e8-719e-46fa-a14e-0c5c1a7399bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bddbf28-0882-432a-97f4-def6adfb6924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7ac340-e194-4b0b-9eaf-e870baf8809c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e2d3ff-a464-417d-9254-bf6f349496db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f140285-f351-4853-a060-d3cf3ecc8303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6072d509-ec45-4454-ac62-cd632a87185f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6154ed30-2014-4231-93aa-ba7a8332591a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c198344-2f64-45f5-973b-f889efe67166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08e6dc8-d8e8-46ce-80a1-21fe7431d8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d83989-3e24-46bb-a1ef-a046b3098ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6412d0ee-abf0-43df-9bea-28bdfc528a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f284c6a0-6a9c-47b9-b18c-92ca5fbd953a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbce55e-6891-46f6-ab6f-5a219f8165c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba964c03-2c38-4c88-8bfe-b092054f6f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e925fb-4c8b-451c-9a9e-61ba8b0dcb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938aa2ba-feaa-436a-b6dd-08bd1e3d7f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd2e382-552d-46ff-93a5-7f56135b3cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f8117e-2150-47b1-a9dc-34a5a1486f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95c6aa8-816f-484e-9582-d4ccfdaf9523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96586ca0-8719-428c-9d98-0c0606451c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bd9dba-f3f7-4296-8b47-c8477f45f394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e641a0-9745-4994-9cdd-f77583843a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90447711-8a02-4b61-9012-2f1f6b2b95c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2909318-fbc9-4720-a828-9c2ff2da3a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed04ee3-f2ad-45f1-be86-4604024f9c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1fc3cc-e747-4770-b681-d8e79feaa31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c84427-589d-40c7-8340-6837144777ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc617cce-7144-4cba-957a-7af3e2440090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62df1e74-49ca-43ca-9c02-d644f64fe4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84e55ab-fc0d-4d49-ae64-4e0b97117788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ee9ad6-297c-4e6d-838d-ace9a1f117f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1559b4a6-a67d-4488-903c-cb5f156487a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42efe0eb-e685-4fac-a6b8-0b3658162dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd09097-dbd7-4067-a35a-a1467a383d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df13c0c-2745-404b-9885-1dbca7f0645e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba61ffb9-4a10-424d-8701-29616ca2c26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e646301c-cb5a-48fe-9317-e4284a23010a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c6daa1-d2f5-48c4-bf7a-ea3d29778afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c343eec9-c49e-44dc-aa76-611db3d666fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f9500c-91ec-4cd9-b4f9-07a3331baa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64eb2c2b-069f-47ee-b1a1-47bb62e5ab19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb23af3-7bf6-47b5-ab1e-bb1235dd7a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99059c0-e4aa-4377-a761-e00b38d76b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b49df4-6288-4587-b6a6-412728e39ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470c1249-613f-440e-877b-73b154fb694d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89eae51-2eb2-4523-b1db-d35df4ce73a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44eed116-aa0a-4e02-bd2c-6fa8a19634d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928e7be4-274a-4636-bd42-75ad96ec625e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e6489b-197e-4589-b13f-0ece8632ded4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a88a511-2d63-47ab-bf3c-8458f018fe16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cfec77-dfac-4c68-b160-cb559a4bcdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95758bcd-394a-4bf8-9aef-d80b1ec811c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a74e815-ee44-4cfd-b83e-900762ca8f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9ddb64-0cb0-42e0-962f-76d165d5b29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec154adb-d748-4f14-8397-10120f2e837c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e87a685-54bc-49a4-b0bc-0204889c51f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce5bab2-4b69-4618-9a24-21673657e58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b37fe8-cf3a-41fc-a025-bc928b8eb4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6f335a-7547-4b6a-b481-32f21ebb1a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eedadad-3556-4f7a-92c0-8bb655d6a556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15b77d1-80e2-4cd2-89cf-9d588e85e8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1813caf1-ccf8-40a3-9c90-f056acd047eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f1b965-26b0-4163-93e2-03648b41e53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2104f166-714b-4398-83e6-c0ebf931a3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699f390d-4866-4b89-a711-a5a47cb51902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1af8d4-32af-406c-bda1-562cbec31a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378e44a2-aa55-4186-ae28-32a374f50eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6436b6e5-6c8e-42b4-9109-7b475eb0eee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e9916d-8cc6-425f-a414-d0a0187eaed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b319f7b6-dd45-4d1b-bf6f-9140e7520fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3aa93b-cbce-4265-a377-b52825d6b4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad4a91c-b00d-4a1f-a63c-6d503e065255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e3158d-fa5f-4322-bcf1-b8f9d7db7ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141c4a73-f5d2-4701-b18a-3c437dd2c08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b755572f-d14d-45a0-b4dc-a045b2abbb92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ec8a1a-2231-415c-8d1d-608c8d9ebb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f6df6b-9774-4d38-a602-ac98ef6cd1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c98316d-4b3f-4bc5-babe-f54f9902a227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6511ee-1247-4f3c-b9a8-06bf1079f56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ac4176-0beb-4437-aa91-23ac7be0abb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01e9259-aed4-4486-b41d-088dc150725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d60e02-d48a-4e7d-b6e9-9c6c1dd8e2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b052b4-5d71-48ce-b3f9-0fd04ce8b00b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed09f69-4138-4c03-a113-614b40dbab78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68accf04-3bcb-4d62-9353-fd389004f3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49940c00-62c3-4066-a922-fb91da05a98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91482c9-134d-4032-987b-34cf681a0603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fce9c5-bda8-4ffc-b01e-88b6559941e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8e4aa3-49a8-4587-91f0-763f2ad636c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06c8f10-6a18-4da1-91e7-a75e75a7acdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf58ccd-5a70-4a14-a68d-e7b51f559ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb0c9ce-c34b-453f-b8dd-2fb6bf093671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068bfdb3-3715-4b44-885c-9334a70e1595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890c6e2d-74e0-49dd-8cdb-4e4294bc457d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114c7edc-c47b-4c48-94fd-8ed3756b5655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce2d6d2-5b7b-41b5-9f26-68c39f88a422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3d7df4-3f8e-4444-a378-ab5b69c37df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2c12b7-c9e6-4c13-a578-fafc59402626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b9ff78-c6cb-4cfd-b61b-34f67b53f7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b927eae6-ae43-4229-a4d9-bdfe6965f5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67caa1d9-6006-4afb-9c07-6cfb240049fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28147004-66c2-4f50-9f2e-73a98b7aa904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75274561-ed81-40e5-9382-2ee47570925a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac30673-d0bb-41da-a2df-dfb13cd01541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dd6b84-f976-40aa-8416-24e258896901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21822dfc-771c-4d63-941b-7f9ab5d4def0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61359d8e-d5d6-4c06-ba05-6527505d2ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9c4739-fe1a-4db4-a22d-dc2549f53857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dd2c2c-2988-4796-877d-d97e487af7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c69e525-d4eb-4d1d-9ad6-194af8321a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b045f3-7c1a-45d6-ab6b-62bea42ce6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0e441e-144a-4e51-a5a5-6bb572e0e572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac0265e-83f3-4a87-8daa-8a53d50f7baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565f6c28-8196-47da-84e1-36dce93a191c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bf6eec-0c01-4110-aa65-a4915214ee10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d4c4b5-e7c4-4461-8364-921955673056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c421d540-04ff-4ea0-83c1-0c423efb59dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb6742f-2f2b-4c62-a1c7-24f140e51ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30d2f16-bee6-4a65-9aa6-801f7dc99dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deccddf3-c4b1-48c8-b53e-f42dacdfc574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5755767-3aa4-4470-be01-8771e37bb2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659f33c3-8515-43ec-bb17-ee296ce4871a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d563b3-810b-4e9d-9d21-f3af0e0e2539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed2d8d8-1396-42b4-b240-7bbd34add42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0747b6a-5835-40c7-ae9f-113979752a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e43509-8636-4e02-8c7e-e21e83580164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d659447-e9e0-4fe8-a36e-09cee4ff70de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc1aa42-8c2b-43dd-9cb1-73e901c1479a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f8c55f-19e8-4d9c-86eb-dfaeb09b765f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82edbdf3-7703-40a1-95b0-5d3401e8071e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82943b29-4f9c-41ef-a449-7799cffda384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93314cc-7062-4e25-824a-9ee6b1276125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425d3944-d058-4c48-ad22-6fe4d49384fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a68c244-1732-4d8b-9e40-173d9fa516b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ab410f-7388-4821-8cd1-1f8ef190f664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943f4c60-6a35-480c-92ca-7947eadf409b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c6f3c2-04c4-4bb5-b1e7-357a91667ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d78cf2-1191-49f0-a762-e2c071a19cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd42109-88c7-4c3e-8d1d-54e53785a0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9775cd55-7b3a-409c-8cb6-d57682536c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac508a65-e1f1-4435-a7b0-126b087455d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4865906a-348d-4094-afb0-f4b1dee247e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8e8fc2-8a04-41d8-8217-ea63b1f3361c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b5b829-09c6-4254-80bd-b2b7bff0d50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd7fc4c-5696-43f9-b8dc-805b7424545c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1189f9d9-ee38-416c-8de0-9ca24a21dfe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b43f67-6d7f-407f-bb24-0b4802e537e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532b11de-698d-41dc-a30d-292df1531fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036980fc-4d62-4058-baaf-cbea405f97a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77678167-0992-4a50-b33c-ccdd100f9af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54e102d-f4df-4e32-b0e9-2c5e6b452975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d44e12-5b48-47ac-bdb3-772937cad0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b1c29b-01d4-41c2-82b8-a555a3379f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9157e8-1ac9-4923-8061-13aa4add5398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbb4ccf-4605-4481-9f64-296e7bc14080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecfde25-9acd-4ea4-8916-3557b18aad2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34420f41-7f80-4ca0-a0df-389dd0abd290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab19367-53ef-40d4-88da-a00b715dfb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57377b43-8da8-49b3-96b3-d5ca7c89c9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7760ea31-9d04-4037-9005-8f80cdb4fba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe1cbc4-b7a1-482b-95d4-2c2157a9ccc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19ca0bf-7920-4c91-9676-ba63fd354902", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96227f5-da06-428f-94e7-f46c2404c93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c5e535-1bb6-4451-8db4-b8defb8a9b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3ef95b-9edd-439f-99a2-2f87e3df9c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9069a0b-3b67-436b-b87f-0dcf6b85067c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e69fb2-1af5-4874-9e3e-9479f7a6eba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ade6303-ba09-45de-871c-111f3a390b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71c87f5-a41d-42a8-84c7-bda35d206132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a19a5ac-7bb9-491a-9c96-6fd9ee5d460f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136d1102-8d7f-49da-a3bc-5401867f563d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6734de2e-a953-4a24-b6b7-7f376a950dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f5726e-f8ee-46d8-bd94-ad0e14666eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944ef799-21d3-4e91-a2f6-c2eda8c9a31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec6cc05-f7bd-472a-87c6-94e18febf39b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699364aa-99df-4cf6-9058-8c2fccd51654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd315cae-e819-440e-84e6-00d5899f9d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5fac29-2278-4ae7-be02-dba154e52f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9053fe-08d2-4222-b0f2-69e7eb8ae274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbad62c7-54ca-40aa-96e4-022096d0be5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0754df71-ddda-4435-8701-4a6076064c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b061a1-fa60-4fc7-be41-250c7618859d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda1df21-b20f-4374-87eb-427b608c62f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb9a4a8-401b-445d-9fb2-030dc3dfb001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6d26b6-7154-45f9-ab33-b8d427448073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f016a7-ec64-46b9-960c-5e9d3ab34ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b635e9-bef8-4c2e-9f35-4018e64c81d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb02b97-dfb8-43ca-aff4-ab1931856b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c71d8d-80d2-400b-9513-cc4b743917ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5858f00c-ef0b-44f7-877b-f50a92b22a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ef00e6-845a-45a7-abcc-0e80cbc17593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e12acc-f419-4c72-a9f7-f88a3ae7c0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b4528f-5b31-43ed-abf5-19afc408e9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94a18f4-046b-48e5-9a4f-5c9022090fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ca1b57-d597-4876-8753-ecf37e10aca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52b8ec2-1bdf-4c4e-a077-213c48e0e079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d13986-5caf-479c-94d1-19ac55acbcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c36a14b-662f-4d2a-b7f0-be8b952e009c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516e51f8-1a2f-42e2-9e18-e9712b41b3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88834390-707c-4179-bef2-94f230a6a0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e78fd8-1756-4fb2-b281-9f3e313d69b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4674d4-e392-4875-b3aa-f9bd1c49191a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b022c6b-aeb3-4a9d-bd9c-237dc4020bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7832895b-5ced-4102-91bf-9ad010b0fac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e2c025-6ce5-4b39-b47a-2ad635836744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97c6b93-4387-4867-a285-9891e2e66088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ad3358-03c5-49d2-96d4-73b43d5f9e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2e59fb-1d72-4fa7-b5c5-186b81d825dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5e6b95-810f-462f-8c92-06fd62431e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4ac54a-819d-4c10-a9e4-0772284d1c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e29683d-9b95-495a-8a5a-ff84205bc88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e359c80-b75f-4295-b09b-f291cb33ae22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86433154-9c63-4aad-af6b-63326b3f1273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037a392f-2a73-45fc-8822-2eb870b064f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9cbc72-3b87-4aad-8aac-624aae4fbfb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0980e631-b2c8-4a7d-9b67-a1ec41e0ba9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2d3829-4939-492c-9fe3-33ccf900e528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f41753a-0d7d-4fc8-9804-a3ae7156c2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5aac14-0aa0-4f1d-8103-2cfedc112fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a902a16-79f9-4092-99b7-b689dcfdcd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f4243f-1bfc-4472-90ed-76fa898a162d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b48cee-5bee-41a7-8058-48fcefcb822e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b0a43-a109-4d88-a597-b190320ce3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2913d1-0144-4838-8224-a2cce89ed6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5214ee-3f39-4823-94a2-16b678096650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2200420d-7cd9-408d-909e-0a0bd4e324a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007acf7e-4c3b-4476-a07f-7552afd213a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4023317d-0178-4092-b3ba-8ad90269d66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd899c57-6e9d-43fa-a57e-e6e51e7cc359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f9e289-62a9-4dda-81f6-a5b3d807a20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c512e3a-4377-490c-83c0-22900a26f9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc99837d-9bc8-4a65-a561-350fd520c802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f76fab-d371-476a-87b8-0b4f42dc8c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53c85ed-04b1-4960-91ed-85fa0a52c89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5e7d02-8c72-421e-bb91-c6efc15e42b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e466256a-5e2a-4b51-ba4e-8a57d55bc51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43c2ecd-656c-4276-9d6a-a3e699879022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a726922-f275-4ac1-b41a-bc165f03a12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e77bfd3-4040-4d55-9532-72f311371122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461f55da-47e1-46d3-b531-a0e6a14cb649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e24d5e-bbe2-4771-b4f2-c1866d635dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fced62-8319-4ce5-8595-8be6099c106d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8761094f-a8c6-48fd-ac40-1cca6f2fe607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54c4a84-53fc-426f-a2b6-cdea0d00ced0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c756a57-cc9d-45a1-9c07-5d47dde95a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db74778-b53c-490d-97e1-45d4254c784d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fede59-d224-4bc2-8464-12447a42b3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d85680-7212-4a69-a3a9-bc2cf3246420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed50a90a-155e-485f-b9f2-ece6ad19e045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05be7ea0-3768-4e86-9c53-4df595d2eddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8c4736-cbbe-4fae-b7bd-82cbbbc952a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a41094-d01e-49c7-8a8b-3a204f903204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca111585-1f28-41eb-a672-d64a603a7f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec65296-4ffd-44b8-b003-1043bdfa0916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d50f74-037d-4c12-bee9-52e2d4dde0b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ee0b13-be13-49dc-9025-610969475ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ed1868-d6ea-48d4-97de-c17ad3ca9b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75aea51-f1e2-43a6-b803-4070c5dcdb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d1268e-cebf-4913-9fef-b0fa76ef8aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcf309a-9bd2-4f67-bf44-f893bf88431a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf7e603-d476-4672-be72-1eae43926345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9ce2a5-5c9a-4ceb-80c8-396802911256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d80add2-c736-46dd-8c5d-f268e6606665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bea8b6-f8c4-427c-b84d-b1e1c2cce0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3ec5f2-bf8c-4bd8-baeb-6d155b46c5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7253fddc-9597-4402-9b07-c866e47fc943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b6de83-548f-4540-995c-c85e6991564b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b443d24b-6de2-426e-b9bc-b513b2eb644c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74978a9d-ec26-4949-b664-b7f3b2ccaa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a33dff-4b77-4672-b46c-8244566112bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8b4c67-5cb6-410c-8142-c4cbd9d303a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35120a4b-fa69-4cd7-b099-9b6b727fd875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f947f72e-1c37-4231-9d07-2e101c06a579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47576bc3-860e-493b-8a31-11482635fdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a551a15-c612-456f-b67c-11434a9ab0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2026138a-c26c-4ef5-879d-873c315b257f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15479c1-1f9b-4472-a330-64f6e65cab28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21913f03-d39c-42cf-ba64-8d7c682f7ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd41096-e095-4abc-83c5-c9e541c56933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb50e1e4-15bd-4082-b529-abab73ddede4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4690a0eb-4050-4999-9bb4-1d9bd4b04f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c643e56-b3a1-4202-98ad-aae3743010db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3602b426-2e14-456b-8413-584a4968f860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4584329-f78d-4f59-9f59-7f7f2983b757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7b3a7b-e105-43ca-b17f-a0847f08b343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d329ff20-8947-413a-955c-8237a01c769c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0d11a4-eca0-4563-ab02-4d3a2a94923a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f20897-dce5-46f3-a058-5081331b8503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd3afd0-98f7-4e9e-af42-b1b6c11f6ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d461ccdc-bd02-4f4f-a42d-0c618fc0f00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316d713f-aed8-405f-8e19-4d167302f1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37234b5-2e8e-41a6-b9ba-ea30e1984da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847c2ed0-8878-46b0-ba52-4540688f1e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b367f237-f776-4c25-881a-55b776e1a8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566d7126-7088-4520-b6af-874c7cf93b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dca5abf-4eee-4aee-83dd-2d6146ca5235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c360aa0-1306-4bab-9807-13ab019d9969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa9c274-9162-4c73-91a5-859ee37c962f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cb57dc-4076-4f3d-9da9-92e9fbcc74ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028f727d-b023-4a62-8df7-26945a001e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4c8299-78b3-4178-84b2-01ac0b999b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ef9a8f-f278-4939-81c0-4054c54a83ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058af9a4-d6b9-415f-a88c-1f0763ca5f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abebb00-6977-4844-8fd7-c3f1a54403f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983351dc-54e1-465e-b691-7938b0de3b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbf2e25-3162-4d47-a82e-f5edadbc4843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc7cd68-b1d5-41a4-ab1f-66ce26b277d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778cd52e-1c8b-43ff-bf8a-525e5c8d8602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40ced1f-bffc-45a0-828f-1de1d4b71559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928833a2-d740-4be7-94bc-a45ca2154d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f45f002-c955-4cc4-8694-493fb9ccd4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa4f100-db46-49a0-bef6-0c847248b288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3901271a-e71a-4adc-9784-0767f597282f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45a305a-483d-4734-84bf-3fc8eea08c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60233d7-b2f8-4f6b-b0bd-7e2262da2cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5499c6fe-0ff7-4fc4-ac41-ffc4cdc96e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd1f42f-1995-48b9-8dbe-edc3e67c3ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5e3d65-2483-43a8-848c-9b9c14c28cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8b71f5-4375-4a01-8bc0-8a2f5fa70482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24496038-30e7-4dfb-997b-e71db4a332a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f163a16b-e0cb-4978-abb5-e2183aa9bfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f463f52a-41c4-4559-9dcc-f03033404850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a077ae-4bf8-40eb-88f5-ad0e02bbbf30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81428153-2911-4669-8b31-f8b26fe557dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd171add-22fb-479b-9320-f69b1231bed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda60f5c-81d8-4446-a953-ee44a64e3c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f27c3e-fb55-4c0a-b806-1e13062e217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0d7acf-4cde-4b4a-b974-32780160c12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00f8699-72c4-4d3e-853e-2c4baa5b37df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811d2f9f-c2e3-45de-af47-768df5a2408b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3787c70f-1f53-4068-a491-e636f9e185ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19366ada-7361-4d6c-b241-fd01cd63a27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71831263-892a-4ae6-94b8-fd3cf2750e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24544f8f-8c5b-4636-a14d-0f8fc5057fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8da830-9f66-4ca6-b1b6-64348e7dd885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c1f902-2dab-43df-9d2c-3cebe88be725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45fa507-b8b1-4014-b66d-4c4194e9da0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618be438-afd9-4f02-8842-8d4fab30a433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d4f077-6aa3-4d11-b5a3-fbed17251e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feed38eb-06b6-4101-ae74-7dce3b7e4c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bba79f0-f9f7-48aa-92de-2a655051b844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c18cf2b-d292-40c6-9bc8-54c78497e2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9ebffd-d235-4da7-963d-f7cd6822a591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afd319f-e497-4424-abf7-e92bf2043ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4302f885-1abd-49ec-b87f-56cbd0119e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7ee761-8d46-4602-847e-2564f515dba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d982bea-44ea-4540-87d2-89a3a9e74833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee41e9b0-f72c-47db-8bf8-a37020462fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80260f84-ecfe-4320-aa7b-c5e15b57cf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ce62fa-0ab6-4ef9-aa01-2ce4b14f2bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b560c3-de47-45dd-9f0d-ddf868b823a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97303d16-5c7f-46dc-b7df-642269253835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf25a4e0-5a9a-4630-aa89-101749a0d0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6296c7-b6aa-4982-9353-035e96092fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9c00db-ba42-4403-bfd7-893b84b55301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9521f6ac-f510-4604-9f78-a72c5b68e301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edef10e-e608-4659-94e3-cf574571273f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2b49b8-bd7f-48e0-9979-cef708247226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03234325-9b6a-4ab6-b541-9fdced5460b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81de254-8f21-4120-beeb-7873f45586c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211e2f44-26e2-4e0d-bf8c-8cef7262b434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e248bbbf-0327-4893-8c34-8e8e069187ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb221f7-6c09-406b-95a7-7daa88f388af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d370cb-b1a8-4521-a3d3-009fe6f52e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efa87cc-00f1-44fd-bc63-16ab0d8cc10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab66486-a62a-43b1-82a6-3324f2362a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccb4901-2612-443e-91b8-5fb55babdc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ad0d11-e290-4f42-bde5-43d730e4d9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b917e0c1-2cc0-4242-9b5a-14a1a160170a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398b78cd-c4ac-49c1-aab1-9f6711403b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08d2437-af31-4fee-98ed-3507cb54e12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b792ed84-2c1b-42bd-b9c8-2a1469f169e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08a9435-4343-43b2-877e-f9e164743e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef872a14-fae8-45b9-aea2-0307b4c763fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307512c5-113b-4354-b321-1d6c1147de67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebf7667-cbf4-4080-9eb5-0637bd89b6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78791409-a49c-4818-9a29-1103f1d658aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e0a5c5-7be4-450d-88d3-6cd88d43c041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bab059-5166-42b4-8775-63ca32f0f840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07cfe53-00f5-4f5f-a4e4-101e76d8ed34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6d141b-1ead-468e-b95f-1e361b78543d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4fd8ea-ca20-46be-8049-edbe9cfbaa56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826e60d2-c4b4-48cf-a32b-c6cef6f53ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e74a04-0ae6-477b-909f-9687e8706f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e36db6-04a5-4caa-8a59-0d571d684ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3324aef-dafb-4604-842f-988aedead5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a322f5-f3c5-49cb-b712-73e65e6888fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eee82d-98ff-4a86-999e-b84041f52fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ba8618-33dd-4cb9-9242-3d296a7b8286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3643c0-a9a9-4418-96ff-4adc5576ed80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa338f52-3c8d-4419-bd8d-e8ded703eac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.197.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf8c092-ef92-432d-8436-4540533fe47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2e4836-080b-450c-95ee-e07902ce5df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d7dcab-b081-43e0-8cac-4b9733aab14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764e7476-027f-4c55-ab11-28c75d6835eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.5.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677a07a4-e4dc-4997-9955-b8359aaa2fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.160.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c45b198-20f5-4835-a8f1-a438da6ac041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9da54f6-940c-4ac5-90e8-1cce0538cf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a72f6d5-45d9-4d2e-b71e-15caa6c04d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2d144a-a9a1-434d-bcd3-9cc394b17179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad10097-f316-4869-a7cf-0c4b6b25f6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44b193a-023b-4d21-9040-cea5b9d6349f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e38e1b-be65-4974-bcb0-f2557c728e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4202253-12d1-41eb-8c57-6c3e3b795ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e35800-a6e1-4034-b69e-fe92ad47149e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3ebc26-5c1a-4385-bc3b-e9d61cd00e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ff428d-95c3-4d00-94d1-7200dee03607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.216.108.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0713615b-0fc7-42ca-a2de-b9a3f6640759", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.241.40.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28523776-baa7-46d4-b168-cf069741bada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.86.227.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff65b26c-b19a-4a8e-b838-f5007d221464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.80.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef658f4-c9ea-4544-9363-7c08aeb03592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.88.82.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b74991a-73ce-42e1-8828-0c27c25eea0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.129.11.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2ea204-6459-45f0-89a8-59dac1b10b22", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9435ba4-7913-4e6e-b4ed-5ef1c28e0301", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e12f8e-48cb-43a0-80ff-b8aa44165a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.244.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd111abe-4e46-45a2-b8d4-456fc761355b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c66fcdf-ced1-4cad-a102-bbb5e5200025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.5.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db97d2c2-affa-45d3-8223-3c400e22e5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a2eec6-3bd4-49ed-88c9-4c2ea8d0ce32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fc56c2-32b2-4e3f-9f7e-92f327189ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241f1b82-08a8-4260-b1f3-1b6eadabb851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101ab861-e34e-4850-bf18-2f9225a9890f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c68a04-b531-4690-a22d-10afad7f4227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ac5a63-f59b-4509-a0a9-0fc9a309e17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd9fc49-9693-4dba-b3bc-1fabb26b3a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc466642-d616-4b91-a5fe-a50d630b4cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d846c89d-c2fc-443f-a633-e5a87b597c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67ef2fe-d96b-4ee6-bacc-0817e1f83c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01536d8a-3061-4d4f-8f64-0c2d976d729d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf12afbd-46e6-498a-9ca6-462dc1bbf710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979e01c3-60fc-4ba7-99f5-a8be457eea40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a70e13-c704-4155-b220-efe9fa520c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f239bbb8-ba17-496e-92e3-9e1de64db875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceaa62e2-1b9c-406a-a1dd-e453e65360a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274650ed-0e5b-427e-829a-2db7c7e0fa82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e9d1a5-6ce6-4416-a706-d1989760973c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99034ee-b9ee-433c-aee0-d87c052ceb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4414ca4e-0222-4b31-aa41-9069aba46ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5dda92-7be2-4b59-8377-dc82200cf1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd3d81c-871f-43ca-b38f-b68a657bf82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053dfc53-3213-482b-9e6c-d8b85fa12956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b6ecf5-aa55-4e84-becf-cf07861317ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c64193b-4079-4f5b-900a-8c72c8e996e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b17ae1f-c7bc-401e-a648-9ec8c13aae13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92625936-6dcd-4c64-95b9-51563d47db3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad33bd6f-141b-4146-a329-11767c054ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7022ea4e-ea22-48d5-947b-bc713074504a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93c1fee-9067-4c45-81c6-2d338e4e24d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a5af43-8b28-4f8f-8417-7915dd323aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987ff57d-a74e-4324-803b-90b57125e43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e3977c-8e4e-48ea-8808-9e9ec0532455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3160486-c683-47ca-a43c-d3ecfc3cb159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f476979a-9f30-42d1-9bd1-ec760ea6ef98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3620bd11-c2ab-4b44-8d80-3c614ecae500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fca9062-9781-45c3-853e-d988913931e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c68613-b3b5-4c88-9533-991c72a1122c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fe87cb-a326-490b-8f16-257b06ca7bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4254b5fe-c21e-4a95-9309-bec1ca249f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b2d74f-b78a-4ad3-93a7-1fddefbea15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96236c21-25ef-41eb-bd52-daa4c3f47f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab645077-cf05-4a4b-823b-adbe7d823f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f49d23-cda6-4c2e-afa7-7b92e6e57619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29283b28-775b-43d1-be43-5c824bf1b1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cafb8f5-a694-40f0-b974-a5d53921f4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e073dd-87b2-4210-83bf-bafff3ec5417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0d2153-cd7b-4c2c-8ff2-e24ac700cf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22eff701-ce3d-4c20-bb1d-0fe8fca4eea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f21161-a6b2-4187-9e1c-a099bcf65b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed1299c-e906-4f93-b388-ea436bbdd81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d351431-70dd-4485-9f9d-d5d224fd8550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b09d26-a178-430d-89d5-4848200ee9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad160b4a-331b-4554-9b64-43a0d7afd6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e10c6b-28ff-4636-abdc-db74d8d48b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2591d353-db58-467a-aed6-c3aeb5860738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a967854-476e-49b1-9344-356b4d6288c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8212be8a-ec48-4e86-bc8e-84d918f8f38a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f767796-0c2e-4bab-a762-0932201e813b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106b59b8-1505-406f-89c4-aa0579e65da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2143b8d5-a5d7-4543-bae3-661c664a3165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4faae86-c80a-4979-bf8e-bab37c125000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5798856a-3365-44a8-96e1-5b6d9a649dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad5dadf-2548-4bbb-8e87-472e0f9785d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2f8c7e-3911-402a-959b-b7f6997d4f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.214.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1184a7a-7d73-4903-932a-a1602b993f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.89.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037527c3-04df-4008-901f-a47d4bbaa38f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b25c2f-ec1a-4fff-916e-e03deb066219", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c17b7e3-67ef-42e6-bfbb-c675fddb4379", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982da3be-3f21-4ea1-871e-880eae8c048c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.9.67.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646dc0f9-ed36-41f3-a261-9e6b262527c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.185.42.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeda00fb-326c-432d-b184-af6822e32db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.236.7.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44037139-f439-4376-957e-cec4ad630b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.237.79.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52e9f4d-efdb-4462-a9cc-346f654b28ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.45.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec049f3-1804-408d-bb47-2d5eba94d376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.57.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a5b694-21f6-49f7-bef9-8b734d4a539f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.252.84.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016f54c3-31c3-432e-b880-212df332bd8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.228.163.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547f9f5b-4759-48d0-b127-c03f33e0973a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90c9d94-e262-4af7-852c-d8792168fd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22245558-dc4d-41a4-a28f-3476d562d716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514056e1-aed6-4057-9951-0863f1f3df22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fb11db-3cd5-493f-b166-a6b73f756cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d168e8-d57b-4db6-810f-63ce2ad836fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d847af81-fa97-4ab4-bb64-4cccd899e538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58a0c9c-8c4d-43a7-97fd-230230a242ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4ffd46-aa27-4721-86d8-3b56911bdbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45efd1b0-40ca-4fea-b1b5-cef88e4a0d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54123119-6eb0-4af3-b204-b0feb1ab70e3", "relationship_type": "indicates", "source_ref": "indicator--45efd1b0-40ca-4fea-b1b5-cef88e4a0d2a", "target_ref": "vulnerability--e8892fb0-879b-4a43-b40c-bb10e4f92b58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1631be70-4fec-46ba-8db9-2d6865ae8d72", "relationship_type": "indicates", "source_ref": "indicator--45efd1b0-40ca-4fea-b1b5-cef88e4a0d2a", "target_ref": "vulnerability--00a5a929-22a9-4aad-b669-7baaedb2cbcd", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38ef65df-18a6-4a02-b005-bb4091295950", "relationship_type": "indicates", "source_ref": "indicator--45efd1b0-40ca-4fea-b1b5-cef88e4a0d2a", "target_ref": "vulnerability--c5918a23-1975-4d59-b93d-1b94c4496aef", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c822fe30-6658-4827-860e-57f6104bc59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f959527e-4231-48c5-bf39-d82b4158d258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8494a588-d858-4b6c-ad28-bdee23974c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3f1ca9-26e4-4557-a22a-4d61367d878d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0ab0eb-bc15-48d7-9947-822e683960e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bfd1ab-d5c3-4597-a11f-128de455e423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3210f51-ad09-47eb-b006-6ffe32e9d815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67607e7c-a697-4fcd-9599-e05b28eec949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1497ad5-227e-4b77-8a3c-a5e60109826e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd1cf90-b17e-4994-aa88-4946303c69ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a99c34-3fe7-4116-8ee3-277d75a6c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cf074d-e9c6-4ef9-8835-64f83f32e344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8494d7-0241-43d9-8a08-7e6aea4cc36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ca106e-1e61-4653-97b1-6b4c14a464e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade3e181-1d4a-49e3-9d5f-b60618d4faca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be46f75c-4ffc-40fc-b7ab-625ae2a0598d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce1939a-e21c-43ed-bbee-904b52892a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d43afee-608d-4d6d-b397-bd3a100aa3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f27039-a585-4192-a8f8-6d1848286d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1721158-c90f-4326-b335-f1caeab67982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.145.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2b7ece-41cf-4126-9338-e313d6812995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0368933f-fb03-4bad-83ae-1a7201cdaa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6928191-9d7e-4789-a1d0-478ef17d5f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a11149d-0545-4061-8b80-0a7602d56255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee48362e-d3ec-4aed-83c1-1760ef5ab0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012ba562-53fa-4fe3-b3c8-7bd3ecc3c087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981b18cf-c470-4c80-98c7-3d7dd40e1b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f30cb6-22af-48be-b951-8b51a57f7543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6a456c-cb2d-476a-948c-18690b390664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17004346-1020-4908-be7b-f7ec6cd391b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ab6683-fad3-49c0-850b-2ce8107d1745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0e3eb4-f8a4-499a-a834-c24f369a5d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8202757-05b4-4c6c-ab88-3a4a22aa1e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550bbde7-0b37-4dee-a739-14fd08cb53d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19492ae5-637e-4834-9027-bc19b6257830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0e0c0e-4c9d-4262-908f-7a046c121b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1850fad6-8b45-4a5e-831b-b12f0909601f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6dee59-e974-4e17-a44c-8b0307ce35e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528590cc-155c-421b-baa5-09722ae1ec50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a17441-1e74-4379-8ce9-c82b21279d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce78f77-1264-42b8-934b-b7d5930cfa04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b51f12-ab62-4661-9950-d5c91800a3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2761433-c300-40f8-8d1d-36948c671faf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d283e8c-ec7c-4a44-8854-352f8f130c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52124a24-6da7-4d7a-a205-335f4bb47279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891b3047-21bb-420e-ba42-7a39b2004d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10964bf5-cad2-440e-9854-c9e478c56ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968e2b74-521a-441d-bfcd-80bfc99b0a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f1a27d-02aa-454c-99f7-ba0ba2396a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5dcf03-3042-4643-9669-eba80541f775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d817c5-d9b1-4e1b-b60b-ded2c1fc0a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bdb55a-e37e-4488-a884-9d1391acdb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32da3b31-3126-4872-94e1-069bdbe867f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.189.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4baea91b-beff-4090-a22f-4569f482914b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b286625b-7ef7-4036-8e48-d31622647f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb11f7fc-eda3-4f10-b8fa-28949a046b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0255ac-da5a-4150-a4bd-27c48108996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335baab1-293c-4873-ab04-3cde416aa402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d440f8b-19b5-4e88-98fb-c9a6f59221dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9afe1d-6e18-4e71-b662-1185be7ae0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4ebf9c-2413-4ff4-a7ec-fa5b0a010e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d800ec-ea1c-467e-8593-2047ba97bc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560aac48-74ea-42fd-b622-838baf2cc1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95dd6aa-5d39-44c5-b67a-a8ee4c6e2915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a18f64-32ce-419d-868f-2ed7f5457d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a3d4f8-1a69-4df2-9f0f-8c9cbe66252f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0d2532-6b2b-49b1-938d-c3166ed63f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44acbb2e-4fb0-4a0a-ad40-155c28695e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab34b55-9cc0-4cbf-9583-585674383a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ef74a7-b4f8-4cbb-80bb-4479b9fd722a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0693ea22-767b-4b6d-8b35-a94c397a767e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3e93d4-bc04-4938-aa01-ea2ffbe1947d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c08f40-b44d-40bf-a2dc-6f22e80a56ae", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8035ae7f-ead4-4251-8f31-2201a9c3d1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c890d910-a842-4407-ae32-8fe1b496d36b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40824133-9731-4c7a-af8c-5c6916513cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bce4440-80e1-4e34-b0f3-710deac14429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c0a16c-4b1a-4a77-98f9-b37a7a2d1b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5be84f0-eb45-407e-82a0-98a757212dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d5fe97-f462-471d-863b-c5419c15cd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0400ba18-c295-433d-9f5d-f3c2bf9816ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b210e512-7f67-495a-86bb-ff2d9db9049a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcfa2f7-1afb-4ebf-883d-4bb60ee70a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ebca05-042a-4553-af8b-a9e2bfcc3200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d5a0a8-377b-46a1-bd56-1bc461c27ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c7eca0-7513-4902-b5b1-c828e98b719f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e88cc3b-f98f-46ff-b7d7-66dcdee2486d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b414ea4-e9cf-4aff-838f-646514e25a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdb8423-0b73-4b5e-bcb3-bb0ca1514e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2411f0-497e-4d54-9558-0e07a22939db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682d6072-2f8f-4ba6-b071-da119f618427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0a3fcd-e05e-4af1-b2c7-aa4e7abacab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d2cbd9-1e65-4c41-84fe-a34ae9bf9ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bcbc90-f3ae-417e-be9d-73b8d4be239b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd59848a-4e4b-4276-80ea-e786aeb60a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37bda89-3aa3-463d-a6d7-8e08fcdbb2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3818e8-a665-4ba0-ad73-fb3e6a3e98c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27d8e20-6dc6-4d96-b8d0-4ac243e2f5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2036e9-2534-49ef-a53d-6ed58999a4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df22059-d18d-41cd-b546-2973e4262c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44331986-bda6-47cf-9ded-0c9e8a87ab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36d4c73-e5a5-44f8-a8e8-7fd5aec7ff56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902fbb7d-238e-4020-b69e-8279fd27a561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15f1c6f-5fd7-4c89-9bb1-0798b862d694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfb6d69-c237-4208-85bf-34a0b2851820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5bc592-e0a0-4f33-870b-eca8c00b1ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6027d684-8b1a-420d-89df-989519255c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb37c9cd-ff67-41b5-a187-5752b3b23996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42487d47-6bc6-4308-95b3-3fa5ba5b65eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c0130a-8dd8-4948-baa4-56a0365c21d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c3cdba-9789-4e3a-8263-e7810f418f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3677e9f0-0787-4c08-971d-38252663c8c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff044d6-a76e-46f5-bf1a-e1b4235b7dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b01a0e0-db9d-4fff-927f-48ebdf9afae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0404308c-d258-4aa7-9d1a-6723eff22dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee5aca9-5eca-4797-ae4b-bb8955fce75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c59543b-5c36-4238-bb83-2546b5cf415b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa66a1c-23da-49fd-9e51-17adbf9f6ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a647c115-8f77-497f-8fc8-c132af079983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba94e7db-37e8-4789-b746-c3a69accbd07", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74c68f7-3a8c-4081-b1d2-ca9337d33bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1069cf5a-912b-43f5-b0ee-383adfe4c03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f280ca01-f66e-467f-91d6-eb17faea98bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920c89a9-67fa-46ae-9048-2393d0cacea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5788a8b6-9b0c-4878-adf3-ba0fa098720b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc08485-8d8f-4979-807d-0d401ee18fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dde012-3f13-4163-a4fc-184e9b3577b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d0c9df-1703-4aa9-bc2b-87f8b3e26911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.140.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0362b8c6-ff7f-4553-98ff-0b3500b4af24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.177.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e983af4-a06e-4f11-88c1-0eea68b77baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e89776c-8323-48dc-9f92-5a5c07de4287", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b157a44b-6dfb-4ce1-b02b-563e1d6ce431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661c527c-7031-4206-9231-3f0515b0255f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.248.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123a9997-7882-4d9d-b0ec-6e99e7e50823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.254.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b2b40e-5123-4715-b2d3-7442a609cb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe31fc57-ffc6-4255-90f4-f81695489ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.81.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ae0a5a-f7f0-4e40-9222-b58b55f5ef86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.124.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2013ce-fe02-4172-8f24-e0dc1434c75a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9f56a5-9d3f-4908-8a9f-cadc8740a553", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.33.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3b81da-eec7-4f54-8954-e89ed5ce79d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.8.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00343518-2521-4e06-baf7-6462dd7d04b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.80.240.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569e64df-afbf-4de3-bde3-dbdeea509be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c83427a-3dfb-4777-ba76-d1fdcc1bd595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.127.164.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20ad5c5-1ba5-49a3-bddb-8748da6a870b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.146.235.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd729536-e13c-49a5-b5eb-e68acb835a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66945598-1dac-4eae-a80f-c175f145cf2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9898a518-1976-498b-a3e5-2ab722991408", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bf41bc-2a3b-4ddd-b071-70b3140f5548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64aaabad-163c-4c62-b125-b61012a9f93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d9bcac-07b2-4e75-b227-9f2c1328db75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65efa9f1-dbca-40fe-8e5d-e8bde1c62b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bafcdf-0ec0-47c2-bda5-a1c58f7ca505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852ceb6a-a744-4c03-97bb-159f1f38aae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444539e5-1620-44fd-a46a-fb4d0fe016b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514db419-c1e4-4901-8e42-aa852240df06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8de540-bd3d-4432-b332-a0489d209501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1829f882-0a71-4be8-8f3a-97fe79e3b963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f555c1-4285-4803-a301-407a1e10c334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8992e32-a46c-4ae9-bb47-e9a05d30d51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91aecc6c-dd77-4628-8e7e-a7c9dbf17951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7c8533-5147-47a9-86f1-402341016e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be94ed5-67d0-4b77-83d0-cfccc2aba293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e5c510-24f8-4863-996e-208a08d7c2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52c48a2-25bb-44dc-b8b5-4b4cebcd6f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.69.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdc2de9-5089-4071-83dc-201abc061bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.205.134.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682d7ce1-8475-45d1-8ed3-af6f0933a280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.4.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cffc17-0722-4281-82a9-dbfe01d30b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.114.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79365733-4517-4713-a0f3-26c609948860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.14.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adaddeb-fbdb-43c1-bad7-8d9f814c7705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bc60b6-6025-4f71-82fb-b4c9f8684541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d6b9a1-a23e-4abd-bf5b-344f21ac4060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f207d2af-c723-4286-be6a-2d336ef6ca1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3d8b5b-f91d-4768-8aae-8ebaf5174acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eec86e-0b24-4078-a106-859dcbb056d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ec5147-312c-4776-9749-4e870c7293e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e51bcb-d65c-4d20-bdd7-a511a39596b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b345a2-ee75-4a85-b6dc-97560fd9c16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8c0e73-3c31-45d1-bced-523de34e38ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd7789f-0ccf-4dc3-905f-eded9a76fbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1864c5e-2c0a-4981-80e5-2788ba3b5a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cb0c2c-2199-436e-900e-f4dbee0f175d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2494cd3a-fd33-4c1b-a3ab-4684113ae9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5280f4-f324-4200-8a45-dc66322d9206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94724f39-683c-4af4-bbac-959df2d38e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ff258b-0344-46fa-8da2-2669ce5bd057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf23e9e-567e-4829-99d6-e4626eea5593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66817fde-4b0a-4753-9426-225070b70573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a34ac1-ac86-4123-923f-6c6aad046763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213a466d-e179-4ec3-a655-4e4ae3b8b744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55eccdba-c148-432e-b6d5-4365b83a54e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24887a13-16f5-4442-b005-8a06764201d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a303865a-ca78-4b16-bd90-c7033b121ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392386ed-21bb-4ed8-bfd4-6b3e161b5cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba00f907-7de1-4401-8493-9d4e898259a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7f494d-89da-4651-a1a0-3f725650de61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e28ffca-3ab2-4bd0-bd8f-94a9f5452001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93f1a95-1922-4b49-9687-5ebaab86556d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be7fa6d-2e7b-4fd0-87b1-011563283064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9822a1-0e68-4ad3-aed5-0bcb7ad62135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e468f1d-0b91-4d62-b831-89377d44eaed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a537639f-33c8-40e7-9ffa-b8ed5da40a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26acc08-798d-4be7-85c1-3cb8d208c2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9dbc17-9ced-48ce-ace1-b4a558067500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16063790-b79b-4437-b77c-955dadce2033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ed5e52-dcee-403f-8f07-f969b4b603d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724bba88-8741-479b-9da6-2d02e651692d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479cb47c-b16d-467c-aa89-76fd12e143dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8810ee8-534d-4fdf-95a4-884bb3580a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca39c22-4b3e-47e7-8fa7-18a2534ca7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.127.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dc15de-614a-44d1-ac65-e6de211e9717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.234.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b63064-d41c-4fb2-b42f-01c82f76299d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.138.216.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe003dd4-de6a-47fc-9a1f-767c9cfcbaf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.2.216.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8786bb-a3a9-4e0a-bc17-304f44d4670d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.244.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2188bd2f-6ece-4979-8c23-09b9950dac8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.94.145.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0753124f-ec5c-48f8-93e1-3c6f7654167a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.28.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772f8347-a4ba-458a-9230-066f37f44273", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.232.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d001e373-9768-4313-bb5a-813aa7967938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5a433e-ad82-4fd5-85fd-b076680797a1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0492a10-ba49-4be8-8864-4d48929457d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.163.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a03908-1c51-45a2-bb0a-9337b5b6fa25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.13.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff7b8ff-9546-4cab-bccd-3bcec6d84f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.229.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5b1ec6-5ff6-4176-acea-b829a4160ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.224.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50cc53f-2879-47b1-8412-be7a4c9823e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.80.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee758989-0828-4258-8883-2595660c618b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.253.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd2880b-a334-4203-83f2-a1beaed4c529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.3.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9db68c0-da99-4f85-b423-568099328544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6e3903-ea63-427d-afb5-eff5df88ffd0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2ae2a8-1834-4045-975e-09a07b571fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ec14b3-c97c-4fec-9dc4-d86a11223678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.82.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56f346a-8625-44d6-a44c-0e5df851e088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa4a53f-a273-42ad-8b20-1c17d020f20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500b8be5-ff31-4f27-b91f-b8cecbd19b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.48.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694e2bcc-640f-40c7-99ce-966574d47b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.52.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e8df22-97a7-44cc-b73b-9f38607c4861", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b33ee2-f8c1-4bc6-a43b-a5b99643e0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4c84f2-4a2f-458e-92f5-be0207cb9648", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.156.71.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4133c5d-208d-4b9c-87f0-792e82450a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389f8466-53bb-4054-968a-b55583e3aaef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.142.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c836e5ab-4f45-4f0e-8dd4-e1173930de18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.154.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3cb560-80e7-41fe-91dc-6a3fd0aa9105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.154.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef07273-d1c7-4714-8386-20b105abfaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.163.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4f5809-9a46-40a9-9e01-2a93dde0cd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13eec53e-9ed8-4a12-b50e-fccd019eeed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdfbcbc-6cc1-413c-a459-00c6cd53cc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.205.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680510af-de9d-448f-904f-8580b134321f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.239.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0215d0-3a10-47a7-a18e-fd64c2051729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.123.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd2f1fa-104a-451a-b4ae-6880bbe68b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.175.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b4d9ba-a4df-4cf1-951d-1613f3083c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.183.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4f0173-0d10-47a2-ba19-72d4d9cbeff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.245.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5d26bb-24d5-4132-a114-62590fa2b890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.164.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c82c44d-9b63-4d74-ac69-bc7657a20dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abdd8aa-335d-4f28-b559-df59f006c4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.180.87.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1a6825-a9dd-4bdb-93e2-99efd205bbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61a6733-aebc-4dae-8b83-81ae58533563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f736dca9-b6ae-4984-8c41-7c870fc4dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2a59d6-d1e8-43af-a7e3-f09da5cdafd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe26cc82-2f8f-4e0f-9e50-7c7c9804e44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9ac3e9-29f6-4589-a19f-327c1036d473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbd5a17-d9bd-4d72-ad1a-e19b63736a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.136.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97ea757-cccb-41b2-847a-d83decadd29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.18.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfda56fc-280e-4c2b-89c5-828c8a0eeb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.45.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340c9be3-cf38-4c9c-bfb6-88c5a95497b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.108.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52af35a2-6af8-4b3a-b7ef-3883a3766e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.111.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b583e69-a8e0-4d4b-9a9f-75085db30966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.143.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efbb112-5e8c-419c-b66d-5a785a0661d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.153.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d3d14b-d8b6-42a2-965b-be4b48bf3a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.163.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e8adc8-37c6-4c16-b7a2-0502628e9357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.171.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9dedbb-b14d-44d7-a3fd-c4aa2cbc0ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a007bb42-ac7c-46a3-b407-0aa1825330b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.232.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65515db7-0d4c-40c3-aab3-9598bc72645b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.36.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591b98c8-0c3c-403a-8098-5ef5b60fb8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d95574-c7d7-438e-bc75-48ed3212d87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.232.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7f9dc0-4c6e-4ad5-9f20-7861a5e98b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.154.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73017ee8-7469-44bd-a71e-38a6b2b78596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc4cfcc-2ebb-4a88-bf02-b9972448a2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.49.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc52165-9cb0-46b6-9d11-57a3e6b9340d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.51.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de422f9-d3fc-40b4-afac-c3261b2cf82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.55.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90172cf1-ed30-485a-97ac-69aee799e296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.80.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d259694f-0323-4f0b-9d61-f2b13f26eedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.97.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609b4b1a-1abf-4009-acfe-a2cdf9e0df3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.59.37.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c37b4d-67fd-4d35-8577-de320df4a115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f95a90f-6e98-490a-a0c9-54f61604b0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52bdd10-85fd-4f51-9fd4-9ce0e1d4ce6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d8cba3-d971-4a57-9837-7b552004a709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84be650-9faa-4e3b-ac71-aa2137f6a2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34668b8e-4711-47cc-a30d-e14d61ce2801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.174.129.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634a06d5-6c9f-4944-a6ec-deead62a9f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.169.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbacb250-0f49-4222-9199-fd88f9b775ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.180.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da966db-df0c-4d23-9551-0d2efec0fa1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c33e02-3b94-426c-bb87-bf53becb10ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.25.226.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe8b73c-92f7-4bf5-bb66-f01dfb43d313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.108.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42175a9f-1288-43ae-8b76-de7dbd5fa6c9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.113.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a13d2a-2822-40df-98f9-21f8e04a1cae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.142.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18331e59-26bc-494c-93c8-0b3735fdf9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962f5812-a86d-49f6-bada-4436ff7cefcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67f80e7-7f44-4ad7-b904-0aaf881b2440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d87b7f-409d-4ce5-bc3b-e2d6fb6c99a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5a6049-7bb3-4a76-b6bd-3e9ad5b68c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f844087-f018-4012-94ae-79ae0e749b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31df51f8-3a17-4ddc-8252-76e7083d2e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe0e8cd-d1fc-409f-9e71-3ac00c2fa18e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6beef2-a524-43b4-ab71-c3c49b30397a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627829a5-8b28-4ea9-af7c-48e4007736d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13b1614-929f-4f6f-b8ce-f837e29b106c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4529a0cf-e353-40c6-bf28-63f7c13e6a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.160.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5742d1a7-f045-415d-87b2-cd62437bf4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.142.230.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911f75b3-9b14-4371-8f0c-5c8338994555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.111.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe9acb9-274b-41c2-b609-f2adbddaffb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.13.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1cecc8-2121-4963-a06c-3d7899ba0fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a818519f-18a8-48b0-a205-571458bfabde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.194.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36cda7a-d64d-475f-ac61-df69aebb94d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.194.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab652b3b-36ea-4a30-8824-7002c0f89af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.53.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac76591-faf1-470b-b138-9b3f7f687e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.59.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbfe3c1-6aab-496d-8a7e-95fe2867636d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.65.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af94b887-a305-4642-a2f7-a9eb6dff7f42", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.81.121.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c0ce2e-14eb-4b5b-8f7a-1b56c6136a7b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.115.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1022aa-be33-4cc7-a26f-c0d06db59971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.162.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17b17b6-377e-4e3d-ba28-6da9adeb247b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.158.216.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434a6478-1020-484e-8852-0070437284d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315859e5-d28e-41b6-9f3c-dbaf83e96d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a04df82-50d4-4ceb-83d5-dd236f70155f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1863cdf-f27f-4794-ad04-f47332a26889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f5cd66-c84d-4313-ba6e-1ee3c54c99d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3fadab-2d3c-40f9-8b4f-5f5268064f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c0386f-c853-46f6-acfd-4c778298b531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc8df7c-97b5-479a-84d8-0f3de83a34b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1721381d-f3e9-4ede-b6ad-835909f1e64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f8a7f4-e255-4dc6-8aa6-4ad0c68a7518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fa81ce-ad0b-4709-a2a9-b89b72b7486a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae12bf4-f748-462e-b32c-5a675e01e132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a76e41f-4cdc-4233-89b2-1e405ae17548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38d6633-ec03-4ee6-bc46-e781517285c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332f0dce-caf4-46ee-89a1-6c2fc5629a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c684fec-09ba-4db3-8584-e6815498c3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e72bb09-ae47-4ec3-a22e-25c745c71c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827ca4f2-489f-4e0d-a02e-7b4fbb6f1b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43151816-b06e-466b-99d1-03817494eee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4730cf-6f29-471f-bff0-9955faac44b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67681d3d-954f-4c08-b68b-f84e3f953052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ee475a-7fdb-4713-93e9-b62cbf494484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb9b3db-742c-4ae2-8e6f-b78060c8a077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885de97d-3d7e-44a9-943d-e0ccf7953483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba86a4e7-0d01-4716-b751-b49d26b87094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af4c9da-838a-4584-9ad9-ee13a9925dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4064b432-fa6d-465f-bde0-bbeefd2a09a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19510b5c-c779-4739-8bef-58d6a43c57e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782c5e1e-da4b-4a80-ab56-3088de3fecf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184b9ac0-7ae7-435c-b909-f087d73aa94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bc023a-8c8e-4345-8fa0-36ab1bf425b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24a0b0b-979e-4d08-9895-e93936e6c40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c6281e-ee86-4a9e-9d49-21c9def7122c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3153aa9d-12e9-4bbc-a343-276d2239febe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705cc342-d56f-450b-a262-79c632b88864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fc845d-d722-4e90-a1f3-65f1bf44ebea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4116e28-9221-447e-afe1-bd899cd5cd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d26aa6-7759-4259-b938-bc06c2340002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046c407d-c877-49ba-b18c-8da5760743ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a89478-9c0b-4090-b3fe-7205ddeb607b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18757f4-21db-4cfb-ac07-5ba6b44041a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a753783f-5078-498c-9fb1-2ec15f937144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fd05aa-b1ca-407a-b91e-be5f49c39c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2efcd87-a20d-48b9-9fde-75b127609885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7448ac-8c93-4b22-8696-2c1b2a32d9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f2d9ad-8754-4e28-bf56-3d404f032b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b841dc88-99ac-4ed8-8f27-02777a7b5170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1e0edb-be59-468c-822b-097426b14567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2049fc30-e075-4ba1-8eec-3d0f3a93a8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56ce9e6-36e1-48e0-b50b-cc2196f964bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eea42a1-5425-4e76-99ae-2f2b11bdffe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d0237b-ed2c-484f-b586-3e4fe9a971d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7bee39-add1-44cf-b30f-52bc75d044c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5af06a-867c-42e8-9ad0-a6041af95c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a169def0-e35c-481d-acd1-b951a8883068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2889140f-c318-4e1a-b50b-c52c8d20b57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b65ffa0-944a-42b5-9392-6ec92fefd041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d320b4f3-1279-4173-aca9-b377c4922fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf82587-1a66-4d49-a5b5-6f4094c7b3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8838c5-31c2-497f-98ec-2ca08a6bcf5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6db960-01c7-4f9d-a0cb-4e9a57328fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce72828-70c4-4b30-b189-ddc9f71e75ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00b0605-c53d-4bdc-a54e-a88188146f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823e0549-c0cb-4c4a-a85f-a6ed15acad41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f545067-79a8-4c7f-b183-d058b28ded12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7bedb8-e32c-4978-a5a6-95b4f14a899a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b642fad-f285-4b4a-9ff7-57cefcbd4f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e24528f-3e5e-4e70-a0a9-78b43afc7e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0547ad33-dbaf-49f9-a224-67a096f6595b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f5d533-468e-44fd-95f2-34e7ff5c7810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca9c4cb-4f86-4f0e-98c9-d5fcbf5e11ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d7bb73-2f57-469a-a6f3-5c758bdb3552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b29cfb8-0d8a-41d5-861a-1d2a26b27266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65950e44-64aa-449f-81a4-61fa82eba15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311f273a-edf6-4453-b267-26363a3ca2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ac3165-eab9-4a74-96e2-69b73ebc85df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340cd2fd-fcce-4251-8404-c53630749b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ffd6e3-b6fc-4fff-8ebc-833ddda5494a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dc3233-fccd-4337-96b3-0bed2dcb58e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7176a25-63df-4da7-9b66-a0eab871893d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a317bd-02ec-4963-8a8b-a7aa28fb4970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb953d8-ac48-485a-bc5b-8b0a5f91a831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83cbd8c-2d74-4971-ba88-406ef0962ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c45b6c-f7c1-4547-b092-50aa27853894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c58d005-8d2c-4ada-b401-3d519af18b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170e6dfb-980a-43d0-9077-0d4ef2858b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1563f65f-8ef2-4aad-9a36-ae9fb7b96aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7865ef36-9a1d-4d53-8c10-1a3c1d8928de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3d132e-2da2-40cd-9eb8-fdaefcea573b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c206337c-75e8-401e-add5-59d5f60136ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4b706c-e0e5-4e6a-8044-a156d8c3691d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9d6d87-c02e-4270-bedc-c70ec0914f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8ac2fb-8bcc-4f6b-83b3-b35a90323815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2139e1b-0c76-4d88-a1bd-7e8379144acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6b2cd4-fdb1-4b84-91b9-e5bd0c3ced1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52bc71e-ac31-4d16-bcbb-392e9365017b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441a306e-067f-4bec-883e-d4a7b6619c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd351b60-ce6f-4196-8a38-708cfee07f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd55a12-296c-4f1b-90cf-b287ea6b6425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091b9b67-eb5e-4d62-a4c4-8ffc106d6ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343cba47-d53b-41f0-92ed-937221378f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c0b224-54a1-45bb-89f3-b6a80bd41359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eca74cb-ceaa-49f3-88c7-831f79b159bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5110d271-969a-4dcd-9549-ecec5bbd960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4579f9-a829-445d-8891-852d996cc309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210b06c8-3862-404d-8555-992d67ec7d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c41623a-e463-4517-b748-c40524633e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bce5bd8-2776-4306-a65f-0cf36dcda4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a181a91-a24f-495f-abdf-15d1e3b4226c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd32cc4e-967b-4fc9-8388-bb10047d84f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f3c83f-e9df-4f99-895e-a15be0780569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1ddd75-844a-4e87-a4a9-e90122e54e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d651e457-6403-4c33-8065-bafeb829d935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab70945-2c48-4523-b842-67b0562b7935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362ad350-bca1-4e0a-967e-7998ce6ccd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cd1445-9cb8-4eaa-a331-b9c2a9010d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06006283-e7bd-42ee-93fb-0bcd3bfdf6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018585d1-b6de-4446-84e7-f208c85ae8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a805293-d6ee-44f7-96f8-a876e7ff50df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfffd3ca-1a1a-4e1a-83bc-662f4227e3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b9b9b2-cb6a-4287-bae9-bee37fdd8a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58852f05-e7df-403f-9f9d-9e50b2647bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14492896-dbd8-4584-81fc-e3ffb3a6d79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cbf02a-f76e-4265-bafc-ea87df7d2343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c392dd-5f41-4f8f-9c13-7229e327354b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c92a4ca-de62-4882-b205-3572a4652019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92448c3e-be22-4eff-b4ad-590c7e14d7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118a96f3-95b1-4eda-9d30-b13501271897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d792c1d6-0e57-43ad-a522-465a90e95d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddefe68e-668b-4f12-bdda-cff0402ff294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83085985-6cd8-4e7a-ad0f-9a02fb97a802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64d51c4-3a70-4a99-85f5-fdfbdb7c1546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3db693-eda9-46ca-8b43-dba83a6a01cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9075cb4a-cc0a-4ee6-a8ae-cbc9dfb75c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dabcbb9-77d0-405c-90a9-29c888ac1f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d8dbce-7c40-4989-84d3-2fe996a382f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3f8427-bd48-4b56-897f-433792328fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f132b475-cdbb-4ed0-a99c-b4a1c1d9474f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf6810d-2d4d-4623-8dad-2ae74421eb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4fd649-a150-424d-8c2d-5a1befcad6c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bb1979-a9c5-43e8-a2ce-6d4c9ab9fd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4041ed27-59c9-4982-9edb-1f4c0b547934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd640d61-bb3a-4945-a23a-0ef50a045906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e30090-90ab-41c4-a80e-17faddd02721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdb7bcd-58d2-48cd-84e4-996d37a38196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220dce0c-be01-4839-9846-d3e6781dd89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5c2e11-98da-4b86-b5c5-073a3d1fe86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792d7ef7-2cdf-4ad6-a840-146676411db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed568897-cdf7-458f-9995-b5a6603395cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e85b1c-bf0c-4dee-b9f4-c51572e0e7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f104cd2f-6b0b-422e-8df5-d852cb34e8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344ec809-682f-4dd6-873c-aa8cbe606271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb756d0-3681-4eea-aef4-7ac09bb08a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee339f6a-83c7-4696-a9d8-d78c6f1c8039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13614de-f588-4859-b46c-93acef19fd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddad033-c757-4848-9553-9e4d09735404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37d958f-19dc-4053-ab01-48d0bec120a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ebc8c0-92ea-4816-8f2d-ed502997945b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35e7d5e-d01b-4e3a-aa76-6c2a1b134875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abb1e68-3b9a-439e-9b94-a1f117dc6d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0622a9ab-55b2-4568-87e4-687bdbc2fa66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeb2318-327a-4468-bd04-d93a76fd3e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2d7705-274e-4e6a-9a51-ec2557c3f05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73837de-6061-4077-bc23-28019ffe8c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba034891-396f-4f15-a4bc-e6f037f35b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464b08ab-54c5-45e0-9a14-f6257fb13632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16330e7-abeb-4d62-9613-2134ad193074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d746dda-0c10-435b-bf7c-4bb481b12c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54527c47-ec6c-4439-807a-4d0d291d4b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2addf935-17ad-40a9-81cf-a7155e98a56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de2d264-3fa8-4102-8656-97865d1a251f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b687e671-cac2-4f92-b0c1-ce91f4bccab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2dd949-8a79-443f-a8b9-9f5da9a5a139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422a995d-8367-4659-b7fa-18eadbe719df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7de610-cb7a-4f8c-9603-1dd4a00a97a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0f146c-6aa5-448a-a7c6-5fcf44377e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7a7aa0-ce8e-4243-ad4e-553dbdedb0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d723061b-29ef-4037-913f-1db8a3a7cd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f186469c-10dd-4653-9dd8-d93c73c0341d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532e0b46-0a60-4607-b846-826223f5d52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9356195d-4385-4353-8976-3d5c06f85825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21263a34-e018-4c19-ac70-f8dfac865b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1dff24-57d1-42f4-aabe-81e139f607dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b891d07b-4270-4332-a884-20f6e8e17c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3ac25e-01bd-4f5c-8b51-2c1e3b206c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e155b10-25e0-45b9-9a8d-d8e438a682c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde2120c-c545-4f4a-b0d9-41178e4460c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c80568-0db4-44a8-b60e-baa7e89ad73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c29b9bc-7cfc-466d-9992-0ce8bc32ec3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c13ffdd-921c-4d94-8f1f-8773b2a0c6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f69605-5b85-4ada-aec7-662f7ab6d6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24c7718-6c39-4f59-a061-ce8934831b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7147eb3-926c-4d36-8ef5-c266dbbf61d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75367510-a156-4fb7-8cd1-62cdc784d421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0025b9d3-bf0b-4d48-8f89-2d4d2da2787a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175ce832-ab9b-4e36-8a82-6a44f7a535e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ac1980-3961-435f-99ba-d124d11f068b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c374498-a03e-4e60-8ccc-775431fe4884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7f13de-db65-4c30-9cb1-9fac1b236363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdfc6a0-a07a-4283-885f-815a0a18e0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bccc7e8-b5a4-47c3-bc53-6ad59df0e5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb75bbb-d61e-44c9-8cc9-806aaa2f6e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87598444-e445-4a81-8ed8-3aa4dee884e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b72b4f-865f-4237-9e2d-ee77792dcbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd60aa70-b5bb-44d3-9424-6651ec4bd3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441cf419-ae4f-4d04-b7f3-3e8c717d4e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef9cc6d-489b-432e-9c5d-c8ddc75f1d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e77b64-758f-484c-ac01-e2d1bd6a3abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c527bef-66d2-432b-b90c-17ac5929ec24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4921ff1-2bad-4dd9-ae0d-30a4bf7eac2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab2a2fa-6eb8-46b6-83cf-e56fd7a5df4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae598c3-de5f-437e-92e4-7f41a7040eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3304d137-0c28-4072-84a4-fa5de22e2900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a555e05a-e4b8-4225-9bb2-0bf83711d47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f742a12a-f5a5-46f5-bf37-5855e96bafab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab085eb5-105c-49e9-bc17-a1f1ff14f858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0429dd7-5bce-4154-a927-cbce18d9af3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6640fc7f-ffc6-4d31-b838-c80cf1f31ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5648d0f2-08b6-4fff-80da-74946885dde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc6e2ba-75d2-4160-b941-4fefe44ff2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2188059f-b205-444f-b3b8-b1287959a882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b530606-a19f-4470-9c18-e171554e5351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a70c60-0abc-446a-9928-d3c7e224f112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc62985-3a3c-447d-9fe6-0cb0f74b9995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1606946-86b1-4335-8797-ba9d60e7111a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce93fa4-92c9-4e6f-831b-90442fe66c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff75f67-6341-4709-83c4-ef76db977be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846dba69-8edd-41fc-b201-62a65df60a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5440cec1-63b4-4b6e-b4b9-db984819c59e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d104ab3-c815-4ec5-a1df-6aafb04d52e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1978d15e-8318-4e32-a211-7a0f51298776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db159dc-bebb-4758-b4ac-c675715b8d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61958b8a-46c5-4c87-b504-d589661534d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6b5619-3352-4eae-978f-dd20bccc18fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9661a5d-c36a-40f9-a6e3-814a3a5e8c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053c5c89-407f-477f-b0c1-c561f8f500f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2696b3b4-6b51-4b6a-a87b-338cd7c27d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f49014b-9bf2-4333-9c57-6daf2368aff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b895a98-8b03-4039-b06a-7f9ba4a54173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e5c7cc-89a7-4847-bffd-099f400829c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e79f32-184a-4542-be98-b6d0f3aa6426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762a9876-1d2c-4f02-a3ee-8c6630f80aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbc0a5d-3c45-43ce-961c-fe1286135007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a13b6ea-508d-4401-8431-a2e488cedc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a702687-8cad-4381-82ca-04fbd24c90d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9970f7a4-07b1-4be7-9c4c-7c880ede3833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb0f64b-ce8f-44b8-97fc-f28867385dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e31d51-11be-46cd-8462-710ba2f756ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26e5d63-d750-46cc-b9cd-efd41c0552fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bcecf0-cd3c-409c-b139-d25d2fa5877b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344901d2-996b-43c7-a9c1-3746da16a3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e41ecf5-99de-4336-bd32-1ac430ffcf99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec53bae-41c5-48ea-9960-6b52de084330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7b44c0-391a-41a2-86b9-4d1ecc171506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0ab1f3-2837-483a-889f-fcca2432e189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb3b589-5054-4093-9bb4-73caadfad86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad9a2fd-95f0-4061-98a3-6b29ca6d160d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d4b8b6-0811-4c72-b032-33059a7623a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ac513a-b829-435f-9933-b6d48f729e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b978442a-6664-45a0-8e68-2022f9f89016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddadabc7-a68d-4dd7-b079-3fd2cb1c8f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5f0f91-2a40-4c64-a7b3-f0904c69f680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29215c17-5131-438c-9962-4370d5a16329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd847adc-717d-4062-9487-55d9b665ddcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e9dc22-a4d2-4b21-bf55-4f322bb550e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8394f7f4-4d6d-4bb2-b93a-a831095af513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996f3f1f-4fa4-4726-9804-1cf85c71eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b7f708-9de0-478c-9c4a-932391107934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfec3eb3-e6fe-4ad7-8068-0536dc5d2863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86424e70-13c9-4237-8299-c84aecebea07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef0dece-16ba-4ede-b421-813dcf4c32c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c17ed7c-c4df-4bdf-a18f-6de99f4e4d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92b7882-59c9-4ded-9f92-e61466c83b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67115c88-5b1b-449a-8ada-b06e17d83378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d266f534-93b2-40e9-aea6-463688c924fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe32bb8d-016b-442d-b8a1-9bcb65d4ffa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b8159e-25b3-445c-92df-db3fc40c3ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edcf761-389e-412f-a07e-800b08bebc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fef38bf-0f88-4cb4-8c64-5fb94a92cf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f54d6d5-8ee4-4068-99d0-71b27ae0ece3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663b6233-3ad5-48fd-9428-3e4e4dac7d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a328ea4d-1674-4cf6-8135-89b61ad061bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c15e192-ece5-4b44-ad34-64a99004b2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b629323e-8c9b-4957-bf90-abc148ba76eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126194d4-b8f1-4002-a1cb-e8cb18b7aeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876db2e6-50c4-4aa0-9e86-81441325ba5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6dd4a9-cc30-4131-b7c4-c13098f9f267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5127d54-3c25-42c1-a7c7-1144746e76cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a216b447-ed2b-4739-b710-e52f8425b80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588ce6b8-6bc0-4cd3-93e1-13093a955c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37a6960-0c79-44de-9bd3-400dc1d7e665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc65796-7793-4947-8d4a-bfd723ad3a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b19979d-5751-4fd8-8ea0-bc73f97ad9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b8c600-3b0a-46e8-a1d0-0b5255773499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa20785-1c91-4027-b163-0e2ee422a266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b2e8d7-f85a-4a7d-b6d8-ffdd90d56efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d4adb7-58e4-48d9-8ad0-9dfe58ea6478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5e5e01-ccbe-42e0-a93c-d259b4664648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6454e8e-e019-4189-8bc4-6ec3f8f29b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4ca793-7d41-4f8e-8e7c-f96e19fc9afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15833d2d-b441-44ca-be64-f6063d915c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4f2d18-8ef9-45d1-b931-f50bb1966ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a33e850-54e7-452b-8783-40212404e453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c890451d-674b-4c01-b4d5-c51f9ff1e21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16741d71-a477-488b-9b65-996596138276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa18c3a-f850-4ade-bd65-aed04905133c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a7b055-5e34-4028-923b-996079c29d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98dd2c4-721d-4556-8706-0b5f027b0454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10503797-25bb-4f9e-b252-c073d730d262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11350bfc-b8c8-4d54-99f0-cb3576768bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9649b987-0f03-4416-9d4c-398b266d1f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a8d825-c9bf-416b-bf6e-6d894ba68b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe46f20-72dc-4f23-bb9e-b01ab58af023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bc6757-fa08-4737-bc6b-474013d9f54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295cfd27-2896-4f6e-abcc-8ee79183004e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7cf911-2509-495e-975c-5352ecd63eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29c509a-2829-4683-96a3-f6e2d4aaa605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dd6d47-07af-4abb-b936-a79e6e4e8005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee003496-f2bc-42cc-8740-909e862913cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202976c1-274b-4a49-b362-b2f981b996ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0a26ca-89ce-40c0-8706-8fc43235acd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a871e7-621b-46cd-aa08-97514351acb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551c8327-2ee1-4955-8a15-6efa28343f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667efd3b-8049-4685-bd17-f2ecbe0d7edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ad6dc8-5041-4907-9452-fdbf8927f018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4677eae9-b580-4113-a8d2-b35f8ebf719b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c74df26-fb27-4841-81f4-3f456acbcf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ec60ec-6166-4c17-8a47-6edeeb9dac7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec68cbe-b163-467b-8bc6-6c0041653bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74161237-f6ae-4c48-a927-4ce23822b1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc8c135-6826-47dd-986d-e8ac897fa696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a48289-3271-4d53-8572-bbf67b16bdfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5411d60e-45c0-45ff-81d5-5aa37352fc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15314eb2-30be-4efc-8275-fde352548b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff946c3-604d-4828-ac23-f01ec308c048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcedfc3-dcf8-42b5-b9a1-96c20abf0e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d0986a-8176-4f3d-9f62-3ee31358ab2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd47eca-37e7-43ec-aecf-a798289dcf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2466c88d-7493-4665-a247-27cbc0c33acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f5cd7c-96f8-4673-bbbf-7b9731e7855b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b763a1-d21c-442e-baba-15f5442726ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2485965-4207-4e18-9718-d4c7f94c31ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805569f5-30f2-4248-a3ee-df89f6197a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f326b7-933a-4ba7-977b-64ed3b36edcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fc0469-99ec-4d7a-91b0-3cb9a2429f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e71b3c7-879f-42c3-bb09-14e91c21f1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be257992-121b-4d02-b131-95aa460c26c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66529a93-0180-441e-916b-bb5e2e63c88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b211a9-717a-48d9-96cd-e29171b383a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69763ccc-69a4-487a-9c14-101e81e57720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adf0e99-7613-4edd-aef4-9812917f69f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e48f1d-5d62-4472-942f-48a6a5a33dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7843d5af-9413-4b23-b154-6d5cc7e073d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71bb5c7-0fcd-4487-965a-89d5c17b7146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6962303-e047-473c-ac09-f43bf4d342a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef62fc5e-98c2-44ea-aeb6-1b9bb9e5a41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d795a3c-a7c5-4357-b848-e8117810d342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e213a2-ea14-4716-b8bb-853eb966bf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3862e5-fae9-477f-9316-6eb204e98f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a8875e-0eb1-43f3-9cfe-9e3f7a3bfe39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92221eb4-9be0-49b0-9a36-2435cf2a7661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b995de8-9c9b-4ad5-b69b-b8630e0276a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b6fbc2-bc0a-4cc0-b74e-c48a73cdc1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a136392f-3add-49b9-8a23-ec27d68bded1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33613a2d-8879-4519-a7e1-71b92e8aa995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede4cb7e-1d03-4e84-bc05-aba3f0d5d5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f261831-5a52-4644-b1e0-e5e1412664e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab83d1a-c0ca-4ba5-a299-e8f34d546175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a1a0dc-edcb-4020-8c88-bca52ffef2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cbb549-89f1-4045-922b-b3a7d3c21302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f4b8c4-b1f7-4999-98a1-eae685ecf92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15e9eb8-5ec2-4edd-a92e-7bfe050ce846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3855a877-2860-4723-bff8-b6060630d9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed1ee9f-ffbf-4a4c-bb03-370b99b3c6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb020fa-7ded-45a3-b5f2-dc948f516f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fab7bd-fb27-4fcf-bd68-1dd9442e18df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe58535-4065-4f3a-82aa-a01bf661078f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144c6838-3556-4473-9430-fd3885a466cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc6125f-ba8f-44b5-8f6f-87378101abfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6b5910-46a1-4923-990d-019c750e60ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21084e08-e80d-42f5-bf8a-f789dbb2adbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9844e314-e7e4-412b-a508-9e0bd37297fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a9ede3-15e5-422b-ac07-a67789a1cae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c356808e-cbad-4387-b3e3-a41825a30a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623402e7-b045-4956-9f9a-e997c0525519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3f8770-663e-4891-9ccb-7faae56d0bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a53209-435d-4b51-9288-64bf5b5931a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ac948d-756e-48a4-9a68-f1e860156769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeb8f21-db21-423d-98bb-0e0d0713fb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f4bccc-e70b-4c67-b026-f2ff5b63dec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff8d179-501b-4c2b-9379-0a55535f246a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eb39cc-e31f-49e1-ae34-1e4e64a6ebba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3891ad7-56b3-40ad-978d-b72493accd77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed592d2f-4185-422a-8d80-054334ee4739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce3aa55-301d-42f9-afa8-4aea7e5e0fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6642117-4bce-4b85-8d20-6dcb605f1c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34724f5b-4597-42f8-becc-3f729f89b750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5302e2ee-7149-43ea-ae73-d73c0f0afccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a985b02-798d-448f-91d9-fc99614d2839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277d87ae-ab97-4b45-82b5-cfb1131b788b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92faef77-a290-4cd0-888e-848918727b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02892da4-de43-4ae3-9970-fcacd596b2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c55c86f-b8cc-4982-bf96-f1dca2959821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac2405e-16be-4f6d-966c-d3e23f7610ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7223e82c-4039-4ef4-8b26-ff681aaae3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7701b62-ee64-4112-bbdb-9e9c49c0f36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c77cc2-a153-4583-b6e4-7ad556889a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26f0789-7380-4ad4-8877-7f37fb68f806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f741cf-d4aa-4b91-9e23-df2f502a8f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4d5f44-9e52-4d09-acb3-a1d7c912f571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f27b19-243b-47c8-aa09-67f9bf03a1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40c956f-2201-41fb-8512-c0402187c1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bf31b9-0719-4cfe-b8da-d58e41469484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f7977d-03d7-479d-9863-aea0906a5f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd71ed7-ae24-47cd-b468-1098cfb7d735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4543e1-82e8-4e6a-92b2-d64e91c2f67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3b605c-ac62-47b9-b836-994877c64831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047e2f0b-a82b-4fd3-9779-3a2a89f3b85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f7b1f7-fca9-4229-841b-edfb35bcffea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b4617e-47b6-406f-8bef-9ec48d7b593b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b2ceb5-ff77-4006-bde0-4e073baa1c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae584585-3e10-4f65-9cdf-f0a8e136091b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431661da-ad57-40c5-b149-8b6ba1ebf9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b666cb4a-7875-4ae0-bf05-8ae22da300a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b167b7-2323-4980-8eff-168f354ebb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e301670-5b60-442e-8fea-fa98af9038c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10694a72-e649-46ab-9270-bba6b68c37d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc24468-09c2-47ae-9dad-a1219a4210dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e20d4b-0bb4-4d6a-b78f-738eee8c93a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdcccd6-037e-44e1-a00d-ba486a564e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ed3172-3159-4e8c-a2d2-cb6d5eb7a831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab59257c-20c9-421d-b304-9ecde3701ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8739b70c-58fc-43ca-b783-fb7734fb8ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cffcd36-d54a-46a3-bd14-d9e3d3ca2a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fb486c-6ace-4fb5-9e5e-a7de260a5ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fbd5b3-063a-4509-997d-e2ad1a78a58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e76f6b1-0ace-401e-9db4-284eade88c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.114.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e111b258-382c-4bb4-aa61-4c6967effc49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1a8874-b9c6-4922-9b3e-5ce627b7fc96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.227.167.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286d4ea9-9141-4e3a-833a-cb99974a796f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.1.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550a01cd-242f-49e4-bc24-eb85dccc453d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d124b3-82f1-4ea4-89f6-e2351c5253ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f547907c-59e7-40f9-a127-ec259e96fc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.221.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2b01c5-88ce-4268-942d-e386dd82cd82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2729b6-9188-422d-b81d-684f498fb7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.194.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e7c8b3-d216-4fde-9401-ba20d20721b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.251.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4419963-341f-46a5-ba44-0d9daafc7966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.166.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e175667-f467-4a87-be41-f32e4f9e02c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e7d9d5-a6d4-4c19-a86a-316c66d68c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80db4706-7624-47fe-9cad-7a1c4bc634f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ebf56a-9adf-42d9-9160-39f57a9d0260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b75406f-1bc7-4f1f-a59b-7bbc3b59048c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b809043f-b18d-4ae3-9b53-004367852d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08471bc4-1a0c-4692-b87e-a2ca48f3ca51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6546c8-c5c3-4fdc-a1cf-a5065be18882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792dfc28-beeb-4e23-bcea-7a7f9456a6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f11f8b-d3bd-4afd-8617-86d066c9ea04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa68277-ba86-4fb0-878f-173771e71d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d1ff5d-daeb-459c-96ba-582de832cd84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c204717-5eff-4f9f-9b46-9c3e47879ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c468b759-08bd-4ab7-be56-2e07f7e7593f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ac299f-a128-4afe-82a7-00110d20b526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57921acc-2203-46b7-9302-e38daf18549e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad23eba-7e64-45d2-94bc-e9e8e63b15ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086f2195-47c6-4575-9feb-042383cb9d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689c6410-5005-4330-a536-88a6679cf005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41baae1-4f0f-4905-b21c-3941e5e1c4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab11784-909a-4b35-9e21-283a86cf84f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c363908-3fd0-4eac-b146-6d04f78a6714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2edfab-a9a5-4c03-9ec5-d956855a4760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b6145e-7c79-4cf9-b154-d45eab76cd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ecb10b-80e9-4c0f-a1ac-5d0fea6abca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebef975c-3a29-43d7-8305-b16954e2927a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2251d6af-0d9a-41e4-b5b7-a48b63cae837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0fdf31-c9bc-42a8-8215-f8b0d2817669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c46efb-d096-4458-8e9e-f87ca09bf40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bfc26a-df26-4428-959a-6c112033e92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7902feb-3f4c-4c62-b50f-135b7db60faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14313b0-d098-40b2-932b-cf20ef61b987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f93a2c-0202-4de5-8900-93f77a06f03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2d181a-e032-4d80-a1fc-698330eaff26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e4c3a4-647f-418c-a2b4-c61bea6823a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96a8ec9-178f-46bf-9450-70b49e856491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4ca7a7-d180-424a-914f-663ac91cc422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07232d58-698d-4fef-911c-388249f8e287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b063e9-0d5e-45e1-8d05-cb7761bfe0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9a7393-7bdb-4f62-acab-9c5f2fef4bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644e69aa-25bc-4988-9c2d-9a23929f3edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a4daa6-2f0d-4cfc-a9fa-2c8a52364f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e13493-b266-4b02-ad7f-8ea4216cd5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da537fe7-922c-4696-a788-5fde9dcc891f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac577b3c-80ab-432e-9f58-62ecebb75aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26d5b04-96d7-4472-9b21-3bdcea7c7eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb771bc-5df0-4f40-b2a9-34aa487732e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61878376-f540-40ab-bbc0-714b8274cb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9eac433-b537-47f7-ac90-b54026bbb06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa02290-af4b-42a4-b604-8ba9089466a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae32bfd-1286-4967-8be4-f9d1cfb268dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413969b6-ccb9-4430-8ce5-84476043eee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fef279-7c59-45f9-a6e4-e7e2f27572d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6512dc68-3814-41b6-8f99-82f74d6da9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62edcf9e-1b32-4a3b-8c18-d0361f139e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0567351-3e3d-46b2-afb4-70015851fe55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482890f8-58f5-4141-89dd-c1a8b316dd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e652a3c8-118a-4a45-928a-8e1c92b7555c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade789c0-3606-4a38-935f-16b774bbc9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ea8f60-1c89-47e4-bc15-96c7ce58b74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08672ed-64a2-40b9-ac80-219dd7b62095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebd3aea-b77b-4515-a011-9a28f11da1c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5454e787-cc23-4a15-9551-c6e496901281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7774c9b-a916-4b4b-9067-ce5ccd785cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3537092-5e56-4121-8728-4b07db9e9c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d3422b-4d7c-481c-b9f1-91dd98cac002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6b7366-28b9-4e1c-b144-5fec9e849c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e434f19-6edf-40f5-b3be-af0bd50e7470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e9d640-d25c-44ed-932d-17b64e4d51ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e66d7ef-ed9e-4834-97d2-8ea23ca393d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65610b6-84eb-4d38-80d1-1f67056e616f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee30ff9-07f9-4515-85a1-bf09773150d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd6449e-2ad8-4700-8f4f-e783e68a1ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c07e826-e0b5-46d4-a2d1-b6fd0d7b9ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2183ef-6ee0-4111-aa01-da94640bc725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4a4378-3da1-45ae-8ffd-d19c53c2eec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770a6d36-bbd3-4149-bb0d-4b4c197a5f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29d7340-fe5d-43c4-a2d2-3710121cf26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d81c27-4fe6-4750-a857-31eb18a2dbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a2320c-9176-496a-9252-93c2ccc656ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d057675b-c628-458f-bc34-28ac88c331e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b13e8b7-beb9-4f3f-a614-fa789c1eabcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fe598a-cc94-4a54-b181-dd9d7eb016a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e905c696-c709-4a43-85e5-96713825d8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac881b08-ebb5-4b97-84ca-f639af638e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f883aa6-a7de-4151-928a-636ae5f62367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0d1541-cd22-44ae-8bba-bb23a86be1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfe342a-1f17-491e-8c3c-579a98a281ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8db916d-9416-47a1-afd3-244b82f44685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d9955e-66be-4fa7-86c5-0c84f38e223b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792d1324-78b1-4324-bdea-ab57940af88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff8ebd0-9023-4e59-b9ed-056936b38f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc64e76-f3bb-4c54-b794-2792ac89d888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086f21cd-8d00-4238-aff6-bcb38d409b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e60cea-6696-4510-84ea-6c5e0511d2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822141a0-aaf7-44a5-ad21-cadd9c140a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f75dbb-7704-4181-bd65-b1da48dead29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bdf422-c543-41af-a18c-1c0d2271c48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62029fa4-bf0f-43ca-b2a9-6544681075cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434d81f0-3f18-4d18-9fd3-a5ed1f34de4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad6077f-b109-4575-a4bb-7dc490b433df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dea6183-7ab2-4791-8ddd-8c6325e58ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32608575-348b-4435-9d9b-c9ad653b0584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b687efd7-fc5b-46a4-8744-6beac1156585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8943c2b0-6924-47e7-9080-a8e83b92f1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6e2c57-38cd-4e94-92a4-6234f6f43d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205c000b-a860-412b-b74b-260e2992b867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198efa22-d0d5-4f57-b71a-5eb0f0a46883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4a2a2c-dde3-451c-96ad-8cd4a10f969a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401e057e-a8e6-46e5-9905-11dcc658a377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73a1592-cf9a-49ac-8ec6-e6ebbed7464a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f23b494-a3f7-4a16-8f59-3bc2f7257941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c820bcc-c3bf-4bcc-a05c-3a3a7c6d098d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80416739-0579-4ced-8a10-079a9e9e7c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eca5c91-bf4d-4753-8d78-e4dbb49e74ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73633401-b0a5-400a-9354-be2a5d86047a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9c0023-f190-4e00-9f1c-ef5dc6bf3120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a226e28c-1673-49ec-a83e-f4446af143b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdc294a-73d2-498c-9a7d-878964865215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada909ef-62f4-45c0-9235-2c2e26fe037f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc952489-7b9c-423a-b225-06e66311aa4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965617b3-2b2e-4555-b0a5-809a819f7152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256979f2-7f7f-4a45-ae21-0a771a81f290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aad098c-9e09-4744-af6d-2cbed382b5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce9f782-c199-441c-ac96-1891e4bfd9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bbb5ff-e1d5-4acd-8287-5e35c05f1c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf01f365-077e-43e7-96fe-d125691b5655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a839f1-6a3a-4aad-b5a4-a7404b8be377", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.177.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88fe464-ea90-4ca8-9f90-e73d97ad1128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17bb6e2-d1af-443e-b5ad-c6cc0423d459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790faf65-6bba-4185-a58e-3878bc5db97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea36a49-6280-48c8-9412-8a997d008372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d44922b-2625-4f3d-b68e-8c746a6bc205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60d838c-394a-4d81-852a-e2bcb24b9990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144ab58f-36fc-4f1c-92f4-d6e6ae3041a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3044fdc-806f-4601-8af1-fa4b129cda51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed8d5a8-3d4f-46bf-9152-7aa3db32d58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffee5cc-cdf2-4d87-8cd9-73b935e174fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d30eb9-a5d4-4cf8-a25b-f607254772dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd7ccb1-9f8e-4beb-a920-b227ec7dcc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d64030-e32b-4295-b961-53eacffee5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191d1883-0dcc-46b2-a4d9-4ee73bc46ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a09df2-9ec8-4f43-9763-664f6e4186cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d154badc-c315-4792-a1d9-e188a3c828e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde14e52-46ba-413f-a8f9-f44f9c3d7db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ee6312-80dc-4f84-9749-da3a1926bbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9b8027-480d-442d-9c8d-5ec428cd70f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc82d61-540f-46fc-94de-4e50f1878b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ca4806-9cbf-4db0-8ff1-9a90480081ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fa2598-0abc-46d7-a9bb-96fb339c8ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4260f7fc-4fea-4e37-8002-d77519990f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3550ed0a-596b-4afc-ab67-badafda4a026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2c4345-6b7b-43c9-a775-fa06c0627b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1809c50-c935-475e-8bf2-58f187d7c3c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0673c5-fc6e-4a11-ae14-a49a7c943740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2fa13b-e747-42b9-9f94-aa923a11b24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3d7d44-ef0d-43d9-aca2-d3544fa224a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e145a7f-fa9d-4999-b027-6cb31d2b5de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f115df4f-c842-4176-999c-8a8bf32c2df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b063708c-ccf1-4be5-a8a5-ceeb6493e800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7bb8a4-aa2a-4f72-a947-89b87aa74640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515146bc-15cb-45a9-aa8e-6a0cef99d204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d668a6db-7676-4045-9e38-33c54bc2dfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c32d99-a580-4d3f-af1c-842cc861f951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0de7a2a-50b8-48a2-8b6a-b1649773f53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d69cca-ab2f-450d-83b4-f3512aa6bb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.225.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ad33af-88be-4379-8377-86325f8ea8ca", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.227.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea54d3c-3fc7-4cc8-bf54-7a5444191547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fac944-f146-42ec-a172-c65c8604199b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041bc8a9-fdd2-4478-b074-e111b9314ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d2b954-4edc-435a-9583-30d16eb6edaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416e4596-112a-497c-9f95-dff88fa64ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0c6cee-f5d2-4dac-9e92-7951d16161ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0aea264-7d00-487d-af70-7190bf6a1ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec48ffe-0e2e-41ad-a8d1-50017c848e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed78b2e-bee7-450d-91dd-3539376af9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e5e729-0018-4f3c-b1d0-0ada7f2c9582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f025d1e-2d7a-4f37-b000-7b9bbe5872eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf99d364-bf97-4d15-959b-5660a370804a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfdb838-49fb-421e-b730-cb16a7d6266b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1745f901-46b5-41d7-9abe-8d387631c923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c5a017-1ad2-4458-95ec-5883f0076625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c51f27-0eda-44cf-9c6e-baf433ac4e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322f1ab8-7a3c-41a8-a321-fbd2a80a995b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cea6213-414d-42b1-bf30-f00dbef004e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4364af27-c908-4211-9cfd-ac87b637a828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b22db35-b4a4-4054-82e9-005b934c60d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d66624e-f352-40c8-884d-63fd1674f162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91feac31-17b1-4066-81b8-faecde7a9709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bcd0cc-c756-4f6b-9d1b-c69d75a69509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec47ff9-ad20-4492-9b2c-0e7a0f983eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4a5c7f-9920-4688-a136-4a1acf954587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c18a604-c0aa-4cae-a082-83fb82dce694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8dcfd9-ae2c-430f-9ae4-9d8fb1e05c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a5f112-316b-486c-97ce-7ed818f2a6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a547dd0-cafe-47f4-8341-4c175fc27b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c146368a-d291-40b3-98cc-dc87a3e390ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbd235b-a03d-425c-bb44-c7c879e6d9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f843faf2-38ff-4f55-9df5-db735a6b0eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147d7ca6-c0de-4b8b-a692-defcb571e4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85430e4c-fe91-4495-b54c-76c23e985161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33504842-4681-4ab3-8689-2b8bfc724a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e4b52f-9ec9-4a57-8bc2-f03509c9eacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5489b057-6714-45be-892a-8494a80c24d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.70.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5423122a-accd-4f4b-8cc3-ff4d39cf691a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.92.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f87ad3-d5a8-44d3-bd00-147261a1e205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.165.116.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683f524c-17fd-43aa-b370-bb5a91338f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.146.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af056c91-f213-4058-888d-e9e4335f6325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.166.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a8d9a6-3da6-4d62-b342-deb14d5179d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.237.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b45e98c-131e-4458-82d0-bac76891c782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9c59ca-7c3b-4e1a-a831-2a7ca89dc343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.147.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e6687f-68b8-4c14-b483-23ef5f03768d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.16.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce7806e-16e2-497d-b09a-f680dbe4554e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.201.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5362311f-f39a-43f9-afa0-319512704e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74231e6-b31d-4bdc-8cbb-b1199499370d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.21.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c8a9ff-bec8-4f25-94b3-e7d661f41566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.55.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ceb226d-b37a-4801-9a4e-eac302d89be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.57.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20f59d6-7a5a-4e83-9537-32be3f01dd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.118.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6be15ed-85bd-4e2f-9a81-dad510482e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.71.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3511e25d-5cef-442e-a6bc-366c2abade3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5fb17f-f7a5-4b27-89d0-b5efdf6e4569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.167.41.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce76db40-1969-4fd1-a089-ae2c81e32d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.121.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac09585-f7e9-412f-ab14-37d6afa03626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.137.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4687bf38-f4fc-4999-b0a4-a6c4d5fe60e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.168.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63888cef-0449-42dc-a309-7d88b80b3445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.207.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73735c4-9cb1-45c3-ab3d-e9a9a51adaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97ecb47-08f1-460b-9d2e-0bb9eec3a2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc75537-0380-4c3f-acfb-6a7af5dcc5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee8f4d2-5d11-43d3-97dd-d9b1b479e97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.40.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1848e87b-ca55-4c1f-b75c-47f7aaa03353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.51.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea126b0-5f87-4c85-9dbe-f55803179baf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d9452a3-e3c1-4529-917d-9913e086a911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.62.206.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328c41b8-5de3-4f95-9191-c83b9af821ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.148.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457c4c8d-9c0b-447c-b2aa-4bf887b4e51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.226.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb4623b-128e-43b8-84c2-5677dfdc110b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e55ce4c-c9dd-42d3-81ff-a739780e4350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.95.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c22db69-5819-4a69-a7e3-c984cb8d03a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.89.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f8ca57-0a65-4e7e-a452-757b7a16056d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4777e2e6-d437-4046-bbb9-6a668f1f7346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.166.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409bea83-3c27-4506-b555-707a9ff06f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d103b5-5cf0-4e5b-a967-8e5606bcf572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a790dfdc-9113-4f4b-8110-6a077b90c81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f624a11-dbaf-4547-8a88-a488994afe51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2553de-92c3-4a11-833e-e3db1b6b38ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793c188c-744c-4e56-8a0b-8becd396ef21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f7ab73-1e3f-4b69-9164-906ada1b24b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.167.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7500676-f87e-4768-99ea-6879570c8bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd2e08d-cb04-47e1-a3b8-391c1983f14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1e10c8-0a6b-4e9b-84ad-0a2be7e2741e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1fc5ab-d2c5-43d6-ba28-8f4dd1f57be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da79db2b-9932-4cc9-8baa-6f0b728b2efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90707540-39d6-4bf8-bf95-938e37f8f22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab58d06a-40f9-4de1-841c-30c31461d1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c27f07-7252-4224-ad6d-e4c48a62f572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d8ba54-b77d-4627-990d-6dc4efac5409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d5bbbe-7041-44d3-8205-e9d62ae787e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a73c78a-678a-4015-8c53-7976f3778278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5dd1fe9-0777-4358-9a36-e860ff54924f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a7eb8-82b9-4e64-8c7e-abb3e25e427b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469cd5a7-ee10-4ef3-8abb-74c2339f8dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18697f1e-20bd-4d10-bfe2-c51569ea7348", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b1d65f-ccea-428a-b1af-8e1d6a46d638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67432202-58ac-4298-9eef-4648cbc24907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb649d6-9048-4b78-b241-eb4c3f15bf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e5c354-cb69-49ac-95f2-4b5c7a5a5a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7321cac8-b122-47a6-a425-a5d71870d3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32042abe-8f16-49ce-aa63-4e1dc35772a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6ccac1-9172-45f1-87d6-27ed4018671d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0171174-2841-466d-a297-696d36db50f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c009ec-a053-4632-ad73-588b4c45cebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79e97fa-fd54-48bc-992b-b56eb2cee257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948f744f-aead-45e9-a1ca-e6d10a8bfada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595d5161-477f-4694-b8c3-154753322295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68e61d1-6616-471b-a9c8-4f639a07f8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a691ed-12d5-47cf-95a8-50f6acdecfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a544ab7-f527-4014-a0d9-115b21f5806e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58b6ac2-d124-4cf3-86b7-64df6b1ebb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d53721d-2cd1-487d-aed7-2f066b45b132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72872b8d-637f-4558-a999-02883289b222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b19ee9a-079f-469c-adf4-19195eba1eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3ed446-e2d3-468c-b066-f9fa1140216f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309ad3a1-349a-49e3-843d-b1aa70f4c939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91abcfe3-1098-4542-a7d8-c1a6db00d62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd45bff-b67d-43a8-823e-a1e7401c78f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05869ec8-e479-42b5-a4d0-bc76a76855cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabd3f55-8dbb-4d56-9321-9beb1c44b50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff8b9c8-6344-4743-840a-c981cd2fa4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7120144f-dd12-4749-afae-2fd22c8b979b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49764950-0761-408d-a872-6311a9d5adc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8f4ca1-9ae2-4205-a450-fe8685ca907a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad2cdd5-53a5-4a2b-93c5-07b14687f05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7277394-c6f6-4b4e-8ace-e59ac495aed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b706425-a830-4249-9964-f01d9090004d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fb0914-4ca0-4e22-9c51-2677f9581cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc1e278-e7fc-4958-8e61-07fa318f6711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b1e6a6-a160-4fda-a6de-975f95cab283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6889d50-73d0-4967-b8a8-ad0ce7d2d72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4269c9c9-e351-414b-8a25-95cc88cc9221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62e3743-02af-43e5-8c5b-bdd9d34e39ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4bdcc6-2afd-4013-bf82-b642e6a3bd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723b35cf-ca3a-42dd-8137-8d29ae5f8007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb97cde-093e-4819-83e3-cca95cc04196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.101.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b285cd2-36af-4b03-a369-51824ea0ba0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.13.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53424979-9400-4b89-9ec0-6137afb62a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.185.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316b6a2c-770b-4d6d-a2c2-f197aadbafd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.224.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2590be-6be6-4ef2-8f97-ee84eaf28d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b72679-18b2-424b-807c-741dd84de0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.227.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508d0a0f-c6ca-4010-b4da-a3b1c4cf5d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.85.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42464539-e858-433d-8efe-1bbb232fb4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83483806-c5ac-43ae-b8bf-93f206454fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac545c0-5d92-49fd-8b1c-a7db9042049b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830fa14e-764f-4cd9-b20a-b1ebf3ecce7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.122.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4958060e-d1e1-4540-b120-f212ae6baee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.145.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b9567d-6ddc-405e-adc6-acdabd3f2380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.169.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12abdbe1-ac6b-44c4-8933-fa0f522533ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.85.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f204b273-0387-4dc3-8690-ff72c92cd80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.95.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc85c3e-1ef4-472b-bb59-3d15af769048", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.72.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cc4648-f229-4f46-930a-8c1518519293", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.132.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2476c85-8c13-4ad2-82ff-62636d33002d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68a31b4-6e67-4841-ad55-8ef801ac7ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcd0756-8f7d-4082-bc22-747b587681e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3529b8d-0d03-4bda-8ef4-bbbea270afdd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.147.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce41fe9e-0507-42a1-99b3-ec6a3ab13780", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.152.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba06ee1f-e63f-4eef-ac33-9e9f3f85de3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.187.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b77b056-3147-4a2e-9c0d-bc7a1bbcde95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.193.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2c50b5-e712-4027-8ca7-9522de23a4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.155.2.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb59610-bde7-4baa-a938-4e7fb44c9bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.147.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551a5bc1-581a-4049-a584-e18c1d5f27c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0958ddef-a93f-437d-9952-60f007ab31c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c185a95b-666f-4369-a613-620dab426bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb6dcaa-fecd-4556-92dc-44599e37da3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32429265-3e3a-4bdd-95a5-c27cccc49637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7854888c-2de7-4d33-ba84-2bbe55012893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8ce524-0d04-45ca-aa14-d7137c4897f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf0e6fb-a6c3-45ca-9b19-7a5ca1a9a17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c9630c-5b49-4cef-8126-fe72696c9976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.238.62.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a51b862-5f12-41dc-9986-ca30779e0b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e588208b-ea10-4ae2-b73b-79fba7bdebf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9bdecb-0753-4749-b6a5-3da7d4462ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad44547f-bf81-4ee5-9dc4-8f93e7b602f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.164.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bffa617-b3d7-4933-96d5-65968d4ca796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335ade4f-7f4a-4fe9-8da4-475b24c1c24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.195.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4558df9a-3111-4b42-9d12-cc4ec169a186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.235.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7899b80-8586-494a-a83e-05b1641478e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.238.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092d921e-8930-472c-9b45-1be5ba1b15f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.239.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dde2ea-8f85-43dc-ab4d-5b4e0527f6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.239.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e874b75d-9763-4c57-9e3d-37b8982d900d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.82.104.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3a509e-2d97-4431-8cfc-753c461ba304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.16.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a6a802-ed1b-41d7-803d-b58f8aa53db7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.59.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cff496-a022-4785-a1b4-01461c42ba9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.211.125.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13dff26-a53c-44ab-ba77-ca3416d8a3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.22.108.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f503bc-2571-4a7d-b0fc-ef28c4929a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.194.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66e7432-88cb-4832-90fd-526c71b9d814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.233.68.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a034646b-3cad-4120-9922-754f95b0f7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.148.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4d3a4d-12e2-4167-8da7-8423634477fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db960ca2-53eb-4dbb-a74a-4d3c295e0dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3fa17c-3b53-4263-8e2b-25b17a4b121e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81622834-ced8-40de-b188-2cd8a5763630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.35.134.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66080f9-fa57-4f67-aedf-d52eb5703b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.6.192.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a6279a-3d7a-483d-8b2d-64ae6e03ec9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.8.138.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6703b4b2-7349-4258-af75-e647d390305e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccc2e32-3bfb-4520-a4e4-9b3ccae635f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a902ac0c-57b7-4f26-9205-a87592ee1b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c932f9a4-c87d-4ea3-b3ea-d2bfefbc7ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.209.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d988ca06-4e9f-4e7c-931e-76e11704066f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0947885d-d37d-4cb0-b8e3-e3bad0923cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.214.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17464811-9575-4d60-8adb-f3ccbb8ff6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ffa69b-028b-48c2-8e34-25b2d282105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76dc327f-1f35-4dd6-ba3c-5dfa72401491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2be01c2-62dd-4490-b571-8f28e794039d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d8b201-79ae-4211-9684-ee319d313977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf8d8c5-f3fc-4cf5-a069-213d4ac8c6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e8881f-e88e-4b8b-a9ce-d2c7e8251683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd36acdb-2748-4981-8ba3-2e9bb2367695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e151ed8e-1ecc-4c90-982c-868c22d4e8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6713f11a-9aba-4447-a7cc-0a8eaf24e4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9be492-c3e0-4ed5-b5a7-e0cdf825d27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bea644-36cd-48e7-a655-7a994bb50946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76965d48-ee69-4830-855b-26eef667187c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c184cad-a9cd-4b37-9934-d0171a3298e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34b777f-8fc7-4265-84bb-715dfbf0bfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857bb69b-53fe-4a66-bec4-efad939894d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.224.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5f093e-df47-4560-8710-a9a3f46e823a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.24.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5757d088-e020-4509-91a9-d3744842dcf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea20545-15ee-41d7-96c8-825d0b0212f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550aeabb-197d-4804-b98b-c6ba67b55854", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f274a451-0aaf-4520-8631-7bc5bf561b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628e3fcc-f5e4-427d-97e5-0c3fbf52cf0d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885e4de3-a3f0-4b68-bda8-eb0817d4d979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4fc29b-1597-4410-9522-177e9e101459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfe3bf2-8f3f-42af-84d8-922ece5d047d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cd9ec3-6564-4d89-a54e-4bb655479fa4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd622a9-f1ea-4a10-ad35-fb09545758a8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a6481b-a393-4463-842b-a46b7d5d87a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.241.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7364b70a-1754-4799-b200-66e991792697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.26.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3aa60b6-fcfe-4746-a20e-7e0cb5382998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6b5f93-4303-4348-bfcd-f6d0efd9f679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.225.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0abf8bf-a966-4f0e-87e7-3f71b90f529b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.234.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00962bf6-0017-4071-a0d7-21964cbac125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7f6e16-c31d-4578-8a6c-ba96879e90cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.177.0.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9692c72e-cc01-4a43-9856-ffae8f4992f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be47d88-cde7-413f-9cbc-de9a3576fba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4499c8-ef3e-4954-923a-0200f02cb085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.183.135.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e231c3-5e35-46c8-91b3-5f305135ac8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.185.40.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be8ea55-77e1-4260-9a06-9f5b25ad95f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.191.178.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab21d960-e020-40b8-80e0-1f56df7bbc56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.200.228.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38199346-02bc-43df-96ed-33ca5f7fdcf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7561e18-a499-473d-a007-8a610d2bb5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ee1a9c-164c-4c0c-84ce-583fd8ccec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5147323f-85f7-4eca-86c4-8786f7ee74a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0212f827-6a60-43f1-afc1-e1bbf132334c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea384297-8853-4242-82e1-547a93787d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1d9736-44f4-4ebb-acdb-f7de696cb6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b30a040-a02c-461f-a373-742224fbd2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f011284-852f-4b08-a27f-8faa96d61672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25fc98c-0b2f-4ce3-aaf5-4f1e4deba4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507f0f37-0afd-4329-a97b-5e534a4fa764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6d01b0-f5b5-444d-aa23-1606bd5a442c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca2f6a8-b5f0-4f3b-b1f9-86cece2da88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e37271-3aa8-4a60-addb-d95f3948c621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb85c63-0ffe-4237-89c7-75e48150b9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f71260b-ed34-41ec-b65a-2eb60c65af58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0490cd7-dc48-4236-acd1-debad8423364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c61445e-2609-4fba-8214-50c03fb0a22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4cab9b-7d73-4f08-8039-278805b71573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adaac28-b49a-4189-94da-ec40c46911e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.49.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9e4f4a-2653-4e0a-b0a7-585dc6d56420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.216.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769fff74-1d8e-4ad4-91c4-bfd8ea9f80e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d542ed78-f310-4a80-8eab-0ca6eabf217c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.234.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92a4433-1119-44e6-a759-9c567cec76d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96f9acb-fc62-4308-9f31-1f1b97ca45d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4188127f-435d-466e-a048-e61d29d1ddde", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.251.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839f8b13-0bc0-4e77-a9e9-0cc602a8748b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3f9a26-1c49-49e9-a4c8-c38203fd680a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.25.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22201f32-a74e-4381-99f4-d64b7f95ca57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4614b338-82c7-4264-8724-2ef319f691c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfeaa9f-b658-457b-bb04-07367520ebdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0be9ee-a7db-447a-a977-8a47c3e33fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6a9fca-200e-4adf-8e53-92b9477dd6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796f45a8-d5aa-47c1-a9b9-c0264b6d5c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb13df9-63fd-47de-aa6e-f8bd506d89a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.238.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86994f66-dc27-48f4-a6c1-7ac3ea80eb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba16c09a-28c4-4628-b8d6-e5188901ce73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725491a4-6485-4817-8b1f-efecfa25f675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08c5d6a-0a64-4678-b42a-571f71bd04bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f70cfc-3a39-4a39-8384-a92535e7befb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f41448c-0bc4-4834-9f38-23904d4cc0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2becf2d9-3f60-4d2d-be26-1edd13c51a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee42cab4-d014-410b-b7a5-62bcf99514c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3359a597-e2f8-4f7b-9422-96142fc149e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0c6153-91cd-4a6f-90bd-01e065689c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6df477-802b-44a5-9e7f-8c7827ff7bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8880351b-a7f4-4cdf-b585-1424a168f89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079a6eea-0eb6-47b6-89b8-18177bdd9bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eca52fc-5945-4bac-b8ae-5d01c3389359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac34b2d8-89d5-427f-9f14-306d3800d6fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6983810-01a2-4dd2-9292-afa8eb650de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9730799-f592-49f6-b2dc-62d6dbeeff02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511d2084-9923-459b-a899-c8095dd87b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74d9664-a247-4614-ab16-a518d52eefc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f98372-f17e-485d-9ae2-5b430643c705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6496b3-e046-42e2-a4ca-09b6df8cf66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd74e7ff-ad15-4de2-a284-54a506b5241d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6b2b1f-3d17-46c7-ab20-9a59ccd21700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ead11f0-950d-4fab-8889-1adad25d0310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cad5802-b123-48a7-85fd-52677278ba50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cba7ad-3ed8-4d99-bfe7-771290947c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50f3843-9878-41f5-a866-a58eb498bec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bc3405-131c-4af4-9591-e128f9e79f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b2f77b-af23-49d7-bd6c-bc487ba4150b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202037b1-c973-447c-b084-089e18c54bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87b6495-7dd5-4ee5-ae6d-338aac812a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.119.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cd03fb-04ea-4511-b80d-cd765ed0381d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb72dc80-95a7-4fb1-9a47-467fcd7a72e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61f1b14-cb28-4b8b-ad23-286538bfe600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf4139a-3b33-47c0-9645-c78af259bdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352b0dfb-4934-4d5a-93f9-629a2ea43f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e729e3d-9806-43a2-91f6-f343ef7879b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0265ba84-7d19-4641-a083-7c970f0bec25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6975b97-53b1-4b48-bb5b-8ae754ec81a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae22ab6-ad5f-4461-8251-538b4a9ed861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277a55cc-5e50-415a-9a65-7d8d4d865d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.239.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0c2411-9695-46b7-b2a9-d78488fe04bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.254.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3c0a2b-2e65-4b85-abfd-0154fa17df4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402d425e-e22b-4c1d-aab7-e8defef2f11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce9dba2-d499-46c3-85d4-cd030dfb8e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c761fd-6d8a-4060-ad6a-29c3a0b63222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0c2e63-66a0-4e83-a55b-9dd19ed48a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b70cb3-59ed-4db6-8318-1457a538bd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f0f6d1-7b39-4ee6-9e9d-c0114fe78019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75af9d8b-c59e-4c6a-a04b-e534850fc5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d382b87-d2e1-438c-97d2-c0af78a42d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f25959-44c0-4a0c-86be-60009312f1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cad54c5-7e76-47d8-aaf9-e01603d9ea07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13844101-06d7-4c0a-9551-bdc8e5a458d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3c9a79-c365-4596-a11e-8b0e35cfd315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9482f018-39a0-4b48-bdaa-732237fcd6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21efd1f2-110a-4988-9e4a-4b2c01c9860c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e12946c-ae55-47dd-81a3-d77dbf825563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c633758-ee8e-4929-9739-41c569568b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8747691-5169-4eaa-b871-d0dd89c3a564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.106.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93862447-ff4f-4d90-b7bc-06591a38959e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d35d928-eb48-42be-ac20-f289b978b827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b878e0-b33e-4e9d-aa49-ec6d6e227e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.82.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238336fc-f848-47a4-b37c-e0e381f2d8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.89.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a39f00-cc4f-490d-b8c4-f0cf3fe85890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.79.198.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d050434e-faec-42dd-8ac9-5b8e9f959a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.113.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbdf18e-c2fd-4b68-b11e-d99ad38c82f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.121.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d539dbdd-f840-433b-b7c3-cc2f586cfaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.72.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2ed036-4197-4958-ab28-afb2937d11a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.92.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9fddf0-ee7f-453b-b34e-0c371384ea2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7b21c3-4783-40da-8291-0c1863a2e61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508b8645-d19f-4179-b709-57acabec39f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.121.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515fbaf9-f6e0-43eb-bd6d-c274b14a2ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.212.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92615c8-b060-4663-8673-192e14abf02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7504c0-557f-498e-bb66-1243bbe0eaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad811ec3-24a4-4585-8070-cee36509625f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f23ade-070b-4d1c-8a82-e7eb76c06a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c14b82-27ee-46d5-8813-f33e8f2604b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e703a10-a466-4bf3-8f79-aee2ee5c50a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb4ccf6-f0e4-49c2-ae66-dac57b6738ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111501f8-1e04-4c15-a1f6-b3a4d636a742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec5b591-dccf-4fad-b304-5ec141a836ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.182.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7436b95-301f-4774-ad55-b5124b0b5b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fe5fad-974b-480a-851e-f9488e474836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.92.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410b98a0-d020-4b1e-8618-ee0455f68a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bfb35e-f43b-474c-8af6-646199d173e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.240.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcd7d50-9029-487f-8c0a-e55e345f16e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.243.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a7083a-9f1b-4631-819a-cdd0d60044e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.22.214.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8ecdfb-f041-4c0f-a35f-addee54fe724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59ac48c-0d62-431d-b830-0452f52609c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.240.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2764b0d9-7b0f-4d39-9cca-71dff008bfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.16.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbde609f-ae1c-44a1-a85d-dce159946c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.31.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2c8f37-85d7-4f45-bbdd-6f136b31c9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.204.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebd2f38-5449-4730-b4f5-32001bea748b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe15652-34b4-402b-aea3-0e4c0de350ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f4eb2e-45d2-439b-aaf8-67d841320a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.214.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bbb9ef-2488-47d7-9d7a-ca54fdb1a0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ac4849-7494-44b4-9c78-2fed03c9aceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abc8eb1-831e-4cec-bb11-dfc79af9b4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7fee18-3f36-4bbd-b4e4-5bdd6a4cdbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e973292-3562-4562-8054-95aea665d616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be32526-05d1-4155-9ed8-1f5f9d2cd850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eed8d2b-48de-4f06-bc59-da9a52d4d19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c5ee93-d972-4452-9efe-3aabe3deb7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c031dfdf-9140-4aeb-8d27-dde0996f9652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4a5d3e-1458-4666-9c2a-5427c9f15ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31927c47-871e-4261-ae69-8069119955e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fea9f72-f82f-49f5-a3e1-f3754e7b256c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af29794c-3453-40b0-85cf-480008f236b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef578bcb-d120-461b-aeb4-a4b6d6b5067a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e587699-a756-44d2-8391-312e297cddd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049cde66-6b3e-465c-a60b-b620736db25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2c2443-bbb1-4a87-bbcd-31b54b64f9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96a385c-e324-41a5-9adf-9df071de2b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a719a9e-dd5a-408d-95ce-723a1ace68bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd94f28-2986-4711-9b8b-d51c863d1cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c72a444-3593-4cd4-a193-60b29d55cb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36587178-9335-4313-b3e4-eed87c5bf3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be01315a-b038-4592-9169-5d0df9106714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1961ce20-d592-4d5f-be0d-25544646657c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a920cc18-a0b7-4834-af18-944508d57390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e408562b-0d25-49b7-a0a5-cd0d9abb3414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d35a0c8-7abb-4f62-bc28-5574fcac6643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367045bf-3642-4074-91bc-6fc8f60bd0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6097b0b9-ccd6-49b1-bc2c-2a82cf9924b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67588d2e-84ff-41d1-a1c5-fbead50c5531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7744adff-8b02-445a-91a6-59eac03d372e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84bceff-30ad-4432-a0d8-5e899a35bfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e7c4c2-3b7e-4bd8-a627-442345860780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778ec362-8c37-47d0-b21f-415483bde5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0849f80a-b22e-408d-a4d7-447dd4b0c9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb33f6b-63f6-4112-9391-3b43cde72133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badccd3c-d78f-4b10-aa13-dc0d4d98bf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.237.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6506985-1b68-48cb-b547-c9f17af7c038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e556d133-f374-4a59-8fa8-037955eefe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06893b18-c2a8-4974-a228-369d97f697fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.44.62.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d29a6e-6b54-47cc-bd90-7b7f28acba1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.32.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a813dc-455f-4812-8f60-9b66c96aa0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.47.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1910a2c-bcae-45ae-9b80-218ed9caa4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d788cca1-bed0-4d55-8f81-e8632b7f544e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.100.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcdc97f-54b0-4646-b9ce-a0f554451e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.196.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa76fe3e-1da7-4743-9155-c332b2cbbaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.205.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de1f4e5-7247-4ce6-8ba2-e55207edb5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.144.123.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3e7e3c-ff05-4c59-8cbc-b1a87a8af010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.192.243.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8989163-207a-435f-9325-4e244708625c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f5e3e5-56f9-4e5a-97f6-faa16209d860", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.208.192.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2368ef3c-a4bb-4064-87c6-1fe36e3e5357", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.24.174.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3141a6e4-edb2-4f0d-b34e-776624f60f69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.171.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f6fc8a-74e4-4437-8b50-000b9ec3d1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ef0387-3b21-46d8-a5c6-819c4c7fea8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.109.97.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9580c9a-2783-4532-a1b7-cf6b9336a9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.119.185.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a369cc-7912-4c10-be9d-223f3d4a803f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c3c757-6c03-430c-8ff7-aec46441401d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0f10e6-cee0-4336-bc74-fac864de33b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b360fc0-a7b9-4b3a-813e-5ccd3292c2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.196.107.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dd496f-26bc-4588-b16a-5ab6904ee1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.236.169.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91c6478-3fe6-4e2a-b9a8-57af13c0baec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a794da94-1bbc-4df3-85e5-1de4b24436b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5db72c2-4abf-4527-a276-78b954ad1764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444413a7-292f-4024-b152-5aa276f629c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3967c9-ee66-47e1-b002-542a27c24682", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1210fac9-670a-410b-bff1-fcf1d5e5dae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839677e1-f7f0-49a9-855c-69ddf8f76ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b47e2dd-119f-4b64-965a-020cb5b846a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a749a1da-3ced-456a-91af-dc7be6e39a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cbb701-cb66-4cce-97c5-42ec22137218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef420fa0-1f7a-4be6-b10f-7b494e39a526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d66870-5e4d-4606-b81c-621490b6dfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09dc9f-377a-4ead-8b98-9f32eaea6fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441350f7-625b-488f-ba96-59c777207828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9278e6-cd8e-4ace-bb1a-7b2357ee6182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dfcec4e-9e11-4781-966d-ed12f7ee9ac3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf4f78e-6915-4e4c-becc-12ab52bbd492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bdf142-7972-4b53-9ff2-071ec7d151c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99fbe6a-198a-46ca-93ce-d7cc63914e62", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d6b5ab-6726-4d28-b06f-27f08368459d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738515a4-4ac8-416c-95f2-7720e62f1b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72c0c17-c4ed-4f62-9178-6fd0f34ec6b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47574e47-5795-4294-a032-d4e96ade2fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c62b2e-17fd-4b0f-93ab-309ef644b31f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef860ee7-a271-4f75-abfe-6b315182b6cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0b41ea-b9f1-4b3b-a095-ea240a2da5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81557c2b-318f-48ef-b3da-d9d19a190fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3612a6-9422-43a1-87ea-223ccf564eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0f27bc-020d-4b1d-8970-d61719eafea4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b4af6f-de76-4b07-8990-06c25700fba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847e2b78-63ab-49a3-9c9e-46cf9e629a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a852af3f-101b-4eb5-84db-2a221ccd9f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae8ec2e-73da-4e43-a04d-6fa73962fb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bb55ec-4866-45bd-995c-272753bdf360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a973dff7-2aa6-4e5c-b24e-d4b11c42b1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8173ab57-d2c7-422b-8044-b6a7433ddb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a303434-34f1-4a7f-8271-f6ef725b1a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f68fef-54e5-4d3d-a8a0-ac826753f7df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3dd7d8-f358-46c3-8667-d545dc68d984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7291a2eb-d0c1-4299-8de6-655b249e5d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb52d2f3-4491-4f8f-8b9c-edabab10a6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fbc94a-9dfe-42b9-a2df-da355b6f3038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc82e16d-40de-4a82-a449-237a2d5ec01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9042b546-4a30-4490-8b8b-21dc2cb8ef68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1838dd66-92c2-4ad3-9b19-9377b5720f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d638fe6-ead5-4e04-ace2-78f8c92b09ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9fec5c-ad75-4b25-879e-70e5a1df1e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1da4213-959b-4b05-95a9-cdb666ab73a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722ce88a-1ba8-42b8-a28b-a8a1866b2a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8d87de-24bc-4214-8f20-62f7e65f1cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ce2bb-cdad-4e2c-94b1-7acc722086fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34656df9-4586-4f19-97ab-28249c670d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555a9dc4-c99b-42b4-be5b-97a3797e3b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354a3f33-b5c6-495f-b522-3a73bb4eb49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cdac13-2cb9-4ea7-8a49-de6e9f724f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec17c80-22aa-4df2-b32b-f809047edfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aef7ca6-1070-47ad-a2b9-26fcdb75774d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105ebb55-3610-4793-8454-cc428eff27c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb428e7d-14ad-4a9e-9941-dfa327470301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf8c6ec-535a-4d6e-9afe-fac4ac9db936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.11.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052d75c3-9021-4060-8238-617f39eff0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.124.88.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590ce85d-7eb5-4545-ba98-be134baf41df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.126.132.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf7bb9d-fcc8-41f7-a48b-a411788f4f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.136.254.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512eab04-dde3-4fab-9155-0d8b053c8600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.185.93.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ad6509-25d0-4c1b-b105-1ee1924005b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.22.44.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95aa479-5d61-483f-9a82-f70c672c2909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.23.233.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10102243-1c10-4869-bedd-a12f2e20a0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.38.202.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce14b310-e0e8-43f2-a32c-c4caa6810e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.86.178.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2406b26-0677-463b-a9ad-ca7bad939bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.92.66.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ee76d0-2345-40fd-b7ea-390ed21a87c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.163.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef57a26e-4571-4d76-8c21-fa877fb5b644", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.120.1.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa7a973-c333-4b31-bdbc-9c13b60c2095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.173.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81918b81-a7b3-41f0-9271-62f4ac47e033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.215.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f38c24b-da2e-4150-87b5-37add0aeeffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.225.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4cb945-7f93-472c-85aa-c1f4be76b709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.3.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1ee7ea-67c8-4dec-9364-f688358627d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.9.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3767eb-a82c-4d2c-9c23-28d7f68f31f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edb9d4d-67d0-4b80-9763-41dce98a64c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.150.97.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fe69e8-e632-4154-bea1-1e2730134d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7fec3a-705e-467a-8db0-530191a2cacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eff90c-a088-4981-af29-55a86f9d00ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069caa9c-03f0-4d2a-96f5-3342772d09a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.225.26.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e82c60-e288-460f-9fa6-f66b146ca9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.123.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bc0fb0-b9f2-432e-9acc-ed460b2d1668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.217.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5040a39a-25cb-4d3d-929d-b2766c6ce629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.229.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eba8bff-eb66-424c-90e6-90a6c2f97e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.45.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a38c07e-ce4e-49af-8b00-8463d8bd0da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.88.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313efc6c-ee8a-4893-a79a-935b92daaa99", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.0.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa32e84b-12c1-4b28-9039-f35f9538d217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.46.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10258feb-edb0-4cc1-968c-df7991a36b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.232.136.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cb2337-3806-4c96-98c5-0db5055819ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.36.55.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eaaa1ea-9378-4abf-a694-064bd5645ac0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.42.249.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e272c4de-3ed1-4079-8d1e-9b10e6caa29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23be0cdb-caaa-4792-afac-3d36372a8f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.163.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfad36d9-8bac-4875-a652-975944b98228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbaf7f7-55a7-4984-aa61-cb0cf488a8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf2df7f-67a8-4f0a-bbdc-47ea2f302fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5929c8e-6b31-41ca-8983-f1f4f5a5aa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee7d495-4484-4ef5-b575-0b26379375bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.97.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a30cec9-287b-47ba-a37b-9271e7de5e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.118.101.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb193077-3e7a-4042-9429-ded390ce8942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef01d220-16b4-4da8-b84f-6886e27c7149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85345ca0-4380-440e-914b-ae92a96de364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.181.219.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6189a9-4f37-4889-98cb-659c7fe05ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f5d62f-a44d-4276-85bf-c56ef82ad76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f559cf-a396-4555-bed0-4be363140562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.185.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45537bf-9430-4914-ab17-25dff94b1ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.199.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709aac05-29aa-4d8d-b955-9c47c68507d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.204.217.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5305c4-85a0-4748-83a5-40527429b518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.205.117.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2beaad2c-3911-40b6-a4e8-f95203b2e5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.171.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2394548b-62b5-4e30-9303-009355700f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.236.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3a0952-ff39-4fcc-971e-c3c386e781e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.241.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0945c3-4ae4-4261-8ed3-3a9941231ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.169.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0f7898-beee-4ae4-86fe-3ffb7219a285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c390792f-0af7-41c8-9e26-4804f3e0ca5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.216.55.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb4ad3b-6d69-49e0-bd31-28d83ae4b24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.177.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac8fb95-acba-4124-9520-627faa813fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe16dd3-0d75-4ea5-934e-cba8580bbadb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.41.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ad3bd9-e786-4bd2-a4e4-5f6f7f6d4f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.232.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcacfd9-e3ac-4e14-b7c5-053abb715f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaa2c1d-1709-48c8-8ea8-6e6d4e8aab81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.22.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a773a48-939e-4f94-86fa-a9d3fc1a60d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.225.221.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1ff9f3-5ae1-478d-878d-4ab3e3001e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.225.5.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4249446-7057-453c-85bf-11d948a9ddac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.191.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ccd214-5449-417b-aecb-c9c1aa8bdc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd9d92d-7a60-4b2c-b447-364ac19b8af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af7c82c-4348-4e6c-ba77-c7282b8349e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88f54b0-c273-44c9-986c-efa3f7a14614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.165.19.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83231879-83ec-4346-928e-06fec787802e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba6f6f2-bf11-41d7-b3e8-c59e2d2193ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81213862-efc0-44f4-a1d7-6f1f48aa2792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.173.123.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575b0717-5cd2-49b0-9882-9d67fee80ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.188.24.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ddac4a-9abc-4836-965d-38dba2c0d895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.189.174.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d91471-d34e-41a7-bf20-d807785791fa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.210.128.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d588565c-e23e-4029-b03b-4fd3fbd391d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.211.96.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4c8ee6-ad64-41ac-bdb4-873cb6567d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.137.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c1a95a-8d9f-4f22-b61c-839f0cf20394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f2edcf-64a2-40b4-addd-c7723a418284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea022d99-59db-4e78-8347-2141e74f9b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.114.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d149119-f208-405d-86ce-42f0ebb716a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.75.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfb9d29-497e-4ddb-9638-07ca2964e661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.97.215.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a2d4ff-a23f-430c-ac3e-fe5bcefe8b01", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.147.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b911f0bd-8943-4566-a244-030dbd2cf8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.192.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ae9a90-47cb-46f2-bd30-96edbdf0a2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.206.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98023171-b6b7-4339-a5ad-b49159fcc1be", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.123.62.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf1f71f-95ab-456c-af98-5c32fb8a64e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.174.164.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7b035f-3dd6-4b5d-8a25-191f807c8227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.176.62.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8715fb-9222-448e-91ff-c0139752bb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.89.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84dca33-96b7-4afd-b5d3-4f7110b31101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.89.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44b46bc-a193-40c4-931c-2d97d7288687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.91.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086973b5-2034-4d89-a713-193d83460370", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.47.9.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff9bd21-ec30-495e-914d-ace5983da304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.79.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc21d64b-6e03-44d8-b1e2-1533e1d6a820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.92.250.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8725d6-4a02-443d-8a12-a648c5f8e569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.11.152.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ceeedbe-bd15-4cfd-a808-d99161b83cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.125.117.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef5af67-1b85-4ce9-a7ce-38cebd1948e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8c675b-6560-44e1-b967-cc99801d8aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a4cf61-f092-4478-bfa7-0ac4a0a497f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7cc8c2-c554-4b39-840f-6316d9f3c1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.48.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f39a51a-8f52-4ecb-85b2-782d887e4697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd944d63-2e0a-4971-b3c6-ff2cb8dadcc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02d385b-78e3-4d1e-aad0-5678b813f8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.40.103.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943df5a6-eca3-4489-85f0-b00a5a4d5a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.76.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71f74cb-4e52-4c52-882c-29a2260e182f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eb083b-f972-4e6f-bbe6-52de76c1e504", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.70.243.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deb2a91-86d7-46b8-91c1-f3155dd25814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.79.111.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e72fb81-3dc0-49a4-bbe9-83d9597d8d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.191.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2a99a1-0bf4-40e4-a4eb-959bfde4a4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.151.16.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e66f609-fe8f-4211-9007-80bfb2f586a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.20.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed93ca0-c3e9-4250-a74c-6978d52b9a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.221.22.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53138eb2-8ba9-47e4-a4e8-918ba22fd388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8eab8bf-d7ff-44c5-b50a-4309878cd01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193d4f6a-8574-400f-947b-ec07ad4a3528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e51a6c-3de5-40e3-a24f-0ff9f41924a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9554ece4-7bca-4c29-92df-19782e8ea393", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.86.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f333d67e-b1ef-4251-af91-6a8d1f71a7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.107.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e5a341-98ac-4ced-b056-b19fb7a3d24c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.111.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802f17a0-fd93-4f38-b9bc-56525eed80a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb84c60-c762-4956-b79b-bb7d5c468df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7d19ac-49fd-4a11-853b-1c0aa6c59145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c660311-8bfb-4e55-b0ea-253b6815a2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ee7d3b-9314-4f60-b73d-0a8b2d10c41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e6690d-bf49-4917-8443-b6237b8de3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75befcc8-cafc-4188-b0cc-66e28c39ae3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f0613a-bc6a-48f6-92b4-48ebfa3c0eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2445cc-c62d-4237-a641-25f5fa0eb07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c886f5f6-3402-4ae4-b54b-8b34d74da821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d639a8-7c1f-47b2-ae58-b2898f920590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab962a67-11f8-43d3-bbda-ecafe6d7a942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb890a0f-fde8-4b5e-a736-7069ddc36a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575284dc-492a-48bf-9cd4-9d362ffad796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045f6f68-9b74-4e44-b3df-a8586a642450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41534f38-747d-4147-821c-dba621afe492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1b7af1-0922-4475-be12-cc873ac8030f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589d1c4f-38ba-4903-851a-97269724ade2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcf6f74-378f-41da-90c2-3f029c29ee75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69a9f01-81aa-4c46-9dde-f8b6dde60921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe40b06d-40f1-473d-b8eb-848931f28169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dc7270-09ba-4360-9122-2c99d7f3926e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121b32c7-b2b8-45c6-8ec0-1b256e08378f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cf5a4e-9f84-4884-a753-c291831ab619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9987186-276b-4cfb-8175-953358479a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f8daa5-4c10-4092-8ce0-2190ca3dbb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6b4bfc-77bd-476c-b9e8-29724a976261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db335acc-0e8d-4bfe-a8db-69b75f1178e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14ed804-8e11-4d1a-b5f3-ff9b43a31c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc985e6-277a-4d34-845b-491ab2ab6197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1172ded5-eee2-4003-8324-12355217e9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f010c3c1-009b-43d8-9fad-b446bd166b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fcef1e-15dc-4edf-9354-54dbf9b5df57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbd2b8f-0700-4ba9-b00d-d975e7181e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5bd7d5-445c-4d30-8227-a2e11e6e6787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08375f3-91f0-44b2-a55d-fb1ad8cfdfd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a085e8-5224-47f0-a00b-99553a98612c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc140485-e645-4e79-b8f7-3a8726d54936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7150a9-e227-466e-9a72-23e32d5e5c34", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a7d1b9-65a6-462e-af79-6cd3c6176051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b682a9-440e-4838-b827-81eaaaaec924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce7d8cc-4122-485f-a08e-91b316bfb621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8e5fff-5af9-4b67-bfb6-1bf5ad05a2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8b81c7-a43c-49ad-a6dd-ce7a0ab41f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6ca036-edd3-48d8-ab64-42f0c4d8b517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9354838b-8eed-4eaa-afaf-0d849b03d35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e421fe-460a-4321-991e-5b385a9b18b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519e21f9-22a0-4137-9962-1931c84fdb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11f5aaa-714d-4ae1-acdb-e90a55960184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3a821f-e5d4-4165-bf41-9631cd47ef9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695e3e7c-2f62-4c4f-98fd-7d2ef77aa8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2013e66-a89e-4f04-ab7b-1ae5aeca77e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054df46b-9391-49f3-971d-5bfed58a5475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d18a66-868f-4545-866d-9039d288fdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f7b2d3-545a-49c2-a554-9e3fc4f012e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ad5dc8-e503-443d-ae5a-43a02750f008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a05351-2926-418d-803f-26aee87b2727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330c8af7-6d72-4179-8349-e44a0110d392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0b7dab-1371-43b5-9858-0396135787f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78fc352-ddaa-49b4-8039-ffb3e953ec96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b988fb-970a-42bb-889b-8f75ba67a620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6648eafa-af70-444c-8114-2e4148963be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a41123f-0d39-41b3-b367-83b7ef3fcf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d34fc65-0ee0-4fe1-b657-1abbb47a23b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacdb992-f29e-4980-acc5-d99254f77600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a31278-afa8-4e24-b66d-c26c87751561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500fcd3a-2926-4dae-a80e-2a21665de9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbd84a0-e00c-47ec-abaa-d071c1452e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.156.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433cfe36-49b1-4d2a-bd60-1c2e983c31b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda8ef57-c134-48ac-b7be-caaf29581dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2d7981-cef7-494f-9d61-70290ba2c7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.194.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c98bcca-bc91-4213-848b-f8ed175ca4da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.215.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61badc0c-76df-4e26-92b7-240489812f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0604df82-d660-4556-bfbd-2413bc03985d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.106.103.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f1ecbd-0447-4ffa-b9f6-b60474514986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12efe732-6ab5-45bc-83b1-9e3ecafe3c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e7429d-584a-4277-9926-f34a767274ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.126.239.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77293920-94e4-4e68-a27b-b7211d4e0445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.135.137.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa05683-7c56-4db2-8b8d-79bb25a6297d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5e58ff-d06b-446f-8a40-ee33c8bd6ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d34fce1-2433-43fb-b9ea-f7c481b5179d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f5be30-2676-41b7-9787-86ffff64613d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cd380e-ff28-4e13-9add-4b03b2f3e068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.149.26.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4d0434-52e0-443f-839c-48fdec069aa9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1468301-bd0e-4f41-a393-13aa26a85858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5278da5-6b31-4bac-aaec-b46292c21413", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.158.22.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb4adba-3ba9-4f11-b583-50b855e1012a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.16.39.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dff3b95-0ca3-438d-9c9c-a7dd08007d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.50.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fc323c-0c6e-4d90-9ad1-c00755e75c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820d9502-0a96-4d39-89bc-4979bce48407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1405ac-a65a-4fb2-9e87-278689e5863b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1eeebdc-b0ea-4dfd-89ef-db913df5b3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fac66e-39ad-47c8-9904-95f8fc77e7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceccff7-df29-4f58-954a-49533625e670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.177.72.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a2430b-0f46-43a0-816d-633be4547c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9090915d-9df1-4f06-985d-9bbcdfa35538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8bc316-fb14-4a30-9187-d49270d8d71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7ea5af-c03f-4dd9-9a1b-b19ec88afc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56895c8e-fe6d-4873-a621-6d58ca4b10cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bbe553-6f08-4487-ac1c-a0a20d03c837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129311b7-0507-479a-ba21-b5f517b490ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5061c3e7-2824-4437-92f3-be73f5cc6fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8a0dcf-f701-4f54-ad33-81552f32ccda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.181.8.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921dddd1-693f-4dd3-90a8-04ca482a7a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09181e9-5543-4536-a411-c270e7837fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5977a13-7f3c-4b71-a4fb-c2dc1c24c4db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a4aec3-7eaf-4440-9032-1c76678097d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb2d1ed-a371-4c6b-838d-2d1486120dc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ea6912-0977-49e3-8bc6-d1afdd7a05ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737c98ac-f75a-4e18-8c27-e2e100f28dd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a4a57d-a840-4947-8f79-566a323a4cff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da30ebd7-7f82-4b78-b17e-6a496d8b28ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0485b8fc-4677-44d4-9472-57d2d8b46d9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad0d49b-c192-45b7-94d8-5877171fff86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f51d76c-4720-465c-bee2-81882bad6ba2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081b404f-91e6-46bf-b09d-82f10b43035b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a15976-305f-42cf-b278-7bc9b3e72c84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3333a62d-4506-47fa-80e2-ff3d014b231d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708446a6-7e8d-4b5f-8ab1-7ca4751da1ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb273aaf-ae79-472b-9289-2fcc50a1ba7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1f5bef-9183-4df8-ba54-ce0895386c80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b85771-6419-43d5-89cb-c3b2a927689a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591bf8e9-1f29-4212-ab84-d0dbef3257cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a51374-a209-4497-894f-6b057c63466c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ad41fd-8ad9-493c-9d0c-d4c6c11eff97", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.13.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad10a7e-3796-4c53-b5c6-135b6da1ce1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6934adf2-6284-41fd-a3b5-2ba52e7b9d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2150e943-f94d-4d27-873c-c7dd08066471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c512da-d9ac-4f4d-b454-03542eff38f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3ef8d5-c387-42e8-b067-0e43d68006bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c34bf35-aade-45b4-b83f-c85650792cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70dac1a-c78d-43d8-a47b-30da681b5393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dba88af-a19b-44d5-aa7a-dc641afc634c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12ecefe-d88b-457a-8408-0d3733bbbad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.56.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9c8394-b6c1-4c5b-b318-d96950f03c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.156.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8660cdca-3a74-47f5-b66e-4e5e7e42ff6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.174.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329feaf4-f64d-4937-a2ee-88452f48846e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57ba89a-07d9-456a-9072-b597a7758e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06603307-508e-4c17-ade0-dccf8f2f6ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a56f20-bb3f-45b6-9b53-750f4316a1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e22e82-1d11-47a1-ba19-a474a3a60daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f961b1-aaa1-4f27-93c0-2dbd7129f45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77a1b84-3931-4efe-b20c-44a4bd239918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b8746d-bce5-4f5c-b6e6-4881f9734ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8f79a6-0267-4aab-8102-fc11cfd55ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521e927c-e3b0-4c4f-b3a6-bad2e5960c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ca1c6c-aa08-43e0-992d-20135e4c73a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e48d73-b134-4c58-8e4a-2a5555291d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297c5dac-7b0e-4e0c-bb71-6072506f45a3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.188.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe0148d-d924-4255-89f9-f3f54a8acbf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0586e06c-46cc-456f-b2e2-cac7987fafd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00549ab3-3c72-431a-963e-412b79015def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10378c5b-9ffe-41a8-8797-c7cfac65e0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.222.138.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d116ddee-8eb6-40d2-bedb-000c5acf434d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad89aa8-725f-4941-8c9f-dec105886527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2306f2-ebeb-409b-8adf-4cbbb759a991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0cfa1c-f540-419b-b1dc-f62ba7e5f11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97764621-47d4-4a1a-a6f8-8d785471e2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5848881a-e717-4429-a07e-f9e367b42f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f0b763-5426-44eb-b9ab-19ef074f5689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef99fb84-ff7c-4a7c-984f-09968cf03325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5d95f7-7f08-432f-84ef-f65d160adb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a34b6e-644a-4837-8936-fee0f6e5aa10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f53c8a-b8cf-49b7-a4f9-9afc29e1e577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e83b5a-7df4-4806-89b1-591184c463cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a435009-0fd9-42f3-be27-0dd08648ad10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc2737-46b5-4118-bf53-fffbc5063aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b6a47b-2b6a-4c3a-9be2-ae49179aad2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90367f6b-47b1-4dbc-b9b5-6c382cdd1460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea24ada-f8c0-427e-a040-a773c2133b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffd4d01-f4fd-4197-a38c-6e1bc2e2355e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae45886-5944-4a57-bdc5-fb33e3e1c9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7673b5a-2844-47bd-a178-640a0da28838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f50219c-a9a6-43ba-8d6b-c765fbe7a6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59cf072-59a3-4e22-9edb-ee387c517746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6a48e2-4c07-4ad2-aaea-dbb49c4a2313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d8510b-b653-4580-b4f2-a8d047652c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971ae6de-1d36-49f5-9e27-a12876a2078a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9285d37-d894-4f73-a0c4-d8b3b188ad67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59952ac8-8a1a-40e2-b275-57af080b3f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a998ec68-385f-4164-b12f-eb4be673e7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9c1c7f-c942-4eee-a5f5-956b0b44411f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982b3639-07ff-4a7a-8885-d1d9621b5ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e737ec-110d-44cb-a0c1-9310ced0f89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f039f4c8-673a-4464-8932-609a5f259c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8569844-f62b-465a-96a2-4184ec723f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b9ab46-d5e8-4473-a090-2a5f0f57cc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674c3a80-820d-4d0f-9608-4caba15b6fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef3fe8d-2b19-4b9f-8766-6f3f41338539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df16aa30-d13f-409d-886a-08c2cf45a26a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb081a63-7f9a-4e2d-81c7-8182d2c5059e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.0.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c592cd5d-a2b5-4c37-922a-1438cd5f0f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d393ab-4ba8-4244-a521-82c67f2e7ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a096181e-00d6-4572-8591-a1a50b263463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428eba6a-eae0-477f-bc60-3cef983125b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f656145b-52d8-4d7c-baf0-97559e035066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910a1160-38ff-4209-ab57-fa63a49cfacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644c3e8b-fdbe-4859-bce9-47b8ef3d8294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac716b2f-bf96-45d3-b97e-82eee8613ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822880a6-32b6-4578-8d18-50cca9af366a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84784173-b165-4ce5-a410-61fd8deb8db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd6fde6-cdba-4861-a43c-b1bc228fdf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b6fe5b-e38c-44a8-b077-db74bcd7297d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6794550d-a134-4ff0-905f-d392852cf981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3bac1c-bbcf-49ac-b7c2-5ee515c7dbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d2771c-026d-44b2-81bf-d02db36a6f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d8080b-86df-4d6c-971e-44e5cdb158bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.92.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373efaee-98dc-496b-8f5b-fba997284063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5904ee9a-c39c-4454-b87d-4c88d712981f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.135.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060560d7-5f43-42de-a9a5-0d8ec097a0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f83fe97-b99d-435c-bdcb-91400436ce23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.23.18.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa30e39-72f7-4be6-9b89-1ddd3807a6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.234.69.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932a02f7-348b-4ded-9e77-442c4feb6974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.22.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7188e15b-8441-46b7-8ab0-736329522c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fbb546-b4f0-4592-bf9d-9f665f67f2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4e8724-7af9-4641-a65f-1796f3a01458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9d8da2-9007-4eba-950a-208611498874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2861f7-b514-4658-9345-0a2d16a299d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff326b60-c0e0-4045-b82a-12214c23a7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba146ca-8847-43b9-a73d-bb326b3d2c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df40b8f-cf86-48bc-b94c-7bff91b9de3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ba58e8-8ca0-4696-a088-b76e37eab54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35e790c-504e-4bb6-95a6-64971779264e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42929ac-ae76-4fb0-91e2-c7283886fdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1bb668-a182-4012-8301-6e9d89bd2dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b607c7-8182-420d-a788-3b62557ef645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ee668b-724a-4615-b0e9-e3b0b4cd9efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b40210e-381d-45d0-92ae-937f500c56fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140af5c5-d128-4536-83de-fbd9754413f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765a8179-5a48-407c-ab25-6888c29c407c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0877f764-203d-4975-9d75-bc83ee9c9977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fc186c-4e6d-4441-8ebf-35ffdf55025b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558a2921-689a-4e98-83a5-f31b0bb6ff3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932b4c91-73a0-40d3-bc31-0d4e8618b981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.233.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df4d145-de20-47f5-9f43-2a02ad8ea470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670d07e3-ca29-43c6-abab-e5963bac337b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33b5059-9ef7-45f9-be13-3c90d01332aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fe6129-4224-4039-b7e4-729f03f7ff98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c296876-abf4-4648-8a1c-d37998758658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4a8313-660a-4d7b-a57f-7a91ad728841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95271b84-45db-451a-b7a5-d8b387e85b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057fd4e4-1a01-43f9-b03c-a0bb441f268c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.128.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ec6789-1dbf-4e45-916f-9e3ac65a6908", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2836f258-150a-453f-978b-08d3d89dfc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181b0b3b-682e-47ea-9911-83f38232bcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0947d070-0770-4743-ac47-5047a9d966cd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d383fc9-a0cf-41ad-8a82-6d4d0035c6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1394ac16-2c4c-4425-ac54-50d81cc4cc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb477f0-f733-46f2-9822-722baf1bb8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6846483-00da-4f5a-a292-e7f983c24615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40ef2a3-6215-49fd-9130-1838954e036c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38599b1c-d401-4225-bbba-47c6abbf41fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414eaf60-336a-48d7-8373-9f806ba2626d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f1ad4f-8536-4fc0-880a-04f8015b46ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde96d16-16aa-47fc-bb5b-16ac2344e61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.134.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1573c2-0eec-433f-916f-359a2add5191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.66.225.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae6f264-52ae-47e2-9ae4-9262de700be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.8.164.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a5cc47-c060-4d4a-8072-befe3b564b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.82.139.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302c8978-3fd9-4b19-8e93-cd90f866a729", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.83.153.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0579bee7-a4c8-40f2-bc50-85528665ace3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.89.249.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bd003a-d803-447a-b016-cab18d8cf143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88898643-c039-40d5-bb24-19e63dbaaf68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5aaeec-d3d3-464e-967d-d0fcf5e4cca2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.1.167.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1caa7e7-0c5f-48db-b491-e172990c2f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.122.177.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba453ba-1e13-4d7d-b402-dcf149fc65e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.138.1.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b0c4c7-c957-4894-acf0-a327b1d786e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.158.200.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58e4010-3a81-45ca-97b8-130804420687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.17.122.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a3e8d0-b2be-4bd6-8c29-e637e492d927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.215.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2209b7-1e9b-446d-b635-62328e76210d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.190.224.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e0c0a-25d4-484b-a455-a52b637d2596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.233.184.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c392fff6-fc94-4fa4-bbed-020ea973b21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.28.14.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ff5856-7ca2-4dea-a9c4-77c7f7da0d62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.56.11.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9be529-09a9-44dd-9b18-d7180e3ba511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.67.30.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb61d4e-6597-4336-949d-eb694fa2d8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.69.121.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6090c7b1-8dda-440f-a6ab-cda076ecb1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.7.134.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b8fcb5-1aa3-49d9-bf6d-35965bfeae6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.71.90.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe560e3-1c3b-41af-a377-cba1551a33a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b98325e-5fd6-4fd9-be90-7141c859fdba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.149.173.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83b0853-6929-44e8-97c3-a86b51573af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c562ffd7-80e0-4f49-a88e-e2bda3478354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225bcd05-7a2d-4f5b-991b-7c7aa59e7dec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.229.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89d8496-a17f-4123-8073-ed3cfdcf4a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5776739-abeb-42f7-a056-3ff91071bc92", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.202.250.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cd906d-fd6f-4994-a58e-d36ac93228fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.21.16.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0530a6-0faa-4e14-949a-12c59e0b08d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb9750e-0cc8-44c0-b6ca-0822396cadfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.95.125.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3716d5-e9df-429c-af2a-a2ac4d240061", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.176.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c14448b-cc69-4f9b-b37f-fc685b6e2d90", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.121.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b20899-74ed-450d-b8df-933c2372c595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.176.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3f4ad0-01ab-4910-9c61-437bdda845cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.24.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736fbf74-47fe-481f-a352-72e6ccea42e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.33.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db9444e-3b2b-474a-a1d2-78d966cccf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.209.129.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e150a0-9a52-47ae-8d5a-fee004d534c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117b3bdb-3053-4bcd-b966-963739cb38be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92be4370-4971-4ddb-8238-ea545094c2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f36abd-b9ab-42f2-8f6c-3e98ac50372e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad4ac4f-ae60-4554-a10f-048d23fa4a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef4fade-6142-4788-bf20-2fa285de2beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4e7d72-2205-4a5f-880f-e7954ce8799f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974b2dba-2c76-4e3d-a924-5eded8b4b122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cb61a5-5ab8-47d1-9654-e46b08dbc5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9111dcb2-4520-40d3-9167-e88a3b52ba21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0669e895-d804-416b-af61-0f1382e6947d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c1d886-c637-4cf2-9e4e-4d8911660e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd91e47-8bab-4bae-8119-738a81043ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619ec359-38ef-4b46-9b81-6ab502c4e2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa8519f-61e6-4748-a6f4-1dbf480d8db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb88882-5aa0-468f-a595-6664d5215ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.241.62.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c779cd-13d2-4556-a64f-c0bafe12a744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528c5030-6a81-4794-9347-c59cc79eaff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e106f28c-4eae-402b-a6b8-1b0f3089e43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d2d214-63dd-4702-a690-e6d43d31739c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ba77bf-6072-495f-9c77-beb4bb9e7aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.54.53.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c85709-01e5-4299-a03e-d3052221cc41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.13.253.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8250bbb1-13e0-4d92-bf9e-16ca0e9a17c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.169.77.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fe7386-e4e0-4023-94ca-2dc30c5d7d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.18.33.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b012faf2-a121-4bc1-a1ad-41ae4110070d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.217.130.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84152cd6-bf8a-4ca9-9785-5f08c867f214", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.245.176.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d0caa5-17d6-447d-b92c-907d72aa9a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.45.167.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f759bb-7929-4044-bcf5-9746d2131aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.51.43.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384eca7e-e06b-4d49-98f7-1e7b4e5b17b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.7.87.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da23bac-199a-4dbc-9687-c11fb2f1905b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.109.21.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24fb2be-60d5-4082-917a-f50373713a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.187.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f36507c-1bd3-4bb7-ac32-cc5368335fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.143.191.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391faadd-66ba-485e-88e3-06f5572b04f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.148.112.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5229af1b-9a06-43fe-91df-4ba7357ea3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbb8674-d6b4-4456-a7e1-7bec6138e615", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.160.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb8b1b0-0677-4997-a638-46ccaff4634f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.244.39.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1f7cfb-283f-4a74-9ec2-9feaa9b5baad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.255.34.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbcfb19-fb55-4240-a045-7349c109f3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.3.40.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72cddcc4-9aca-4485-a42b-99f5ba0fc890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.34.5.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f879f3c-b3d5-4039-b4e9-c01b7bbae68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.95.248.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09afbe-79fa-4a92-99ed-bab78ac96db3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.97.165.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c911fc-7947-4bac-aca3-446b4a0183d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c57164-ae00-43ed-b171-07da8060369e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09414b6-99e7-4402-b8ed-cde55448862b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387e5840-6ccf-4b10-b45c-f4f7ff902748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.177.160.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2b3249-6a89-43a7-bb55-879ab6eee429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79004e5-6f00-4d59-a735-a393efcc6f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.34.117.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada0ac61-5ebc-40d5-a267-ff6591db0ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.210.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da302a93-be72-4108-8ac0-1a0be9a0f94d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.2.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2829c6de-b6a4-4ea1-9c90-56b4173140ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.145.37.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552a4f36-7093-4cf0-be5b-80c9258a7d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61087874-f63b-49f9-aa9e-d1f47c5f9c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc52896c-dda3-4182-982d-3de819f3ba58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33177a42-1553-4968-8d87-0c442c2980d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d5f2a5-d428-4ec1-a38f-6a0e13d8037e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd3362c-3f5c-4767-a657-8e461a855c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3d8e13-d8a5-4544-ac89-e67bed156d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6bdf73-a2cb-499e-a027-6e51ae989864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab590474-ebb8-40f0-ad83-049a8dc82751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b006ab-fb9f-45b6-acbb-1a650f535387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c531deb7-5a56-4c31-9183-299979e2b39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.168.1.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844ec925-8187-474a-afe5-c75d69e11043", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.152.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7f864a-d75f-48dd-987f-06b4449b676c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.157.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b17179b-2c18-4407-938f-abc92ef8821b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f90153-a57e-4dd7-9bd4-421535d01555", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fc08e6-da6f-49f7-b41f-f1cea991886f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c9a5a8-c419-4edc-b2e7-1cb0318ef6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7542c96-b2fb-434c-bf16-d667d9628a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.193.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ae9f97-f498-4455-94af-92a304127769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.210.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d456e50b-cef0-4b27-bd26-ba2c263f0a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eff7298-281d-45ad-b44f-3f233c19ed16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201168f0-a068-4248-8ceb-d590491e2476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.127.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6174fc-ef30-4562-ab97-311fd74b24f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.145.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a7ffec-f927-4ced-8206-eebfe9a671cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d6a15f-af4d-4772-97ef-2c0f89331cae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.36.109.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9d56ad-8da2-4f84-8ca8-453779cc4bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e15923-c56a-4867-96da-29e93565e3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ffa319-b71d-4924-9c51-8b24775df691", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.12.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af9b970-5cfd-43ac-a0a7-f022c79ca775", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.71.126.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c3a028-1c71-4736-a8b8-06a4efd12163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac9820e-a61c-4466-ae24-51171c8a84af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dd1935-2e7b-49c3-995e-a8ad15eff0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03137d94-7006-4646-8e6a-e4b1a2057b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d01791-1f59-4eb8-a29c-427e11ac5b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.63.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6db1483-e254-42ba-9cfd-1f8d7625beb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4171c199-a930-48ee-adb7-f817cb06fd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea6dd05-eb30-4280-92d7-0aa0593d0e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92582768-f4a9-45ba-958d-843accf76cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2934dab2-1321-49cb-86a6-4c24fb9f0107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e46ae87-303f-4d89-a092-a81cd38fcb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065865d2-f85e-422b-bf54-385cf5c389a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86316bf6-1868-4acc-9cb5-4016e40c083d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a588f2f5-a26d-4180-b4db-21cf9f4cf930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66054076-a507-43da-b044-9c78c4818758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597f3d6a-b5e6-4b7d-a87e-2b5bdb97ceea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf78819-23b9-47b6-9fd4-77832279b6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0cbd8b-b71e-4958-b2c7-ad63c3746822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be62df9e-e90c-4883-8109-a34f38cdc9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a4a9c6-8cda-4fa8-a0e4-91d7bd3736a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb361a0-fe2a-49cf-8270-4ceb0649a8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0cd899-4e09-4696-8993-a40dd2c397c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33af6be-1beb-4dce-8173-78533b322b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589a3534-7bde-42ae-9c62-e565305ef8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e2d66c-0336-4053-9bfe-134c863ab7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f539f9-6b47-4369-901f-24af5ca54ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa80a5c1-e961-436a-a31a-aff7ff5e4a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826bd736-cbbc-40b0-a93e-d56e157e0c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53a383f-9d6d-424b-9a03-5a27a07ad313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4750765-2da7-487d-a84e-4d094af2a8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073c83f6-f9f2-491f-af89-a304b65f0a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c26997-c322-4e2e-8b3e-e69fcc2f32ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a100d4e-e94f-4c29-83ef-3fba132a5d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ff43fe-dcef-46a0-856a-9d8ccc92c061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fa2bb2-2501-46b6-abef-652f3762fcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae29f0e8-eb35-4077-a218-a6c95b6db58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d77214-f481-4f6c-825e-c76f8378f94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b170785b-d83b-4c74-83ab-57307ade648b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71e2dcd-d8af-40a7-b2be-48c746cc7107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c9ab84-ca59-4eba-8e3a-b20228e56e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ea820c-3174-4035-bbdc-eaeb5ab7356a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c3eef8-edd2-4390-a9f8-9d4512841a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354ad139-642e-4af2-9541-f2dfeb7db030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19eb5645-c9a4-4612-bb76-8e11584b0bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f90cb96-b0b5-42c5-ae74-1d68a4934b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd505ea4-6424-410c-8bff-982fa64042b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532138fd-70fd-4030-bbe3-c03e16dd5e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297569ea-3419-4a2b-8181-90db493da87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312efbc2-7ffe-4e4d-ba66-5ca5e192f6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf23aa08-437f-487a-83be-91f80fd8a21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5116ae-ef4b-4d94-a66c-64b3791ecd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35efec3a-4d5a-4602-a8b3-8f243a307ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e37e67-f2b3-47a5-9249-622acfde5f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ba3980-f307-4f85-9ff5-e2012530bbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e14cbe-ac7c-4265-9f48-c674bbd149c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b484e88a-3596-4024-9876-299c6513e03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481eca99-5d59-4079-b8bc-a9d94c71df72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fce2d13-a87a-4cf8-84ce-bf968d869d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed95f85-ce8b-44b8-b86f-e05542ee2a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1545c5bf-7096-410c-bab7-239d30a4d809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b6920a-5362-48e8-a473-8dea48cac788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a364f0d-efbb-4c09-a6f9-73045d37aae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9cb5a4-9e4c-49bb-afe3-1de53994075f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6647c4-e83d-4d18-be81-45c2067962e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02559ec7-c4d4-4925-9961-cdaff7fe55c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1283a4-8fce-4a3e-8e7a-f75d774094f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994c23f9-2029-41f8-a7f1-e68d154fd703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a356cda-316a-407a-8dcb-3ed566ee709d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e37aa28-5512-4c3f-a875-9d894dca1f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd665e2-62c3-4c1c-9599-979bed35c4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30a76ea-d461-4b40-babc-29fb8c60d064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9864b7-5d10-48b9-8c57-4ab15ae51f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e18284-bcc7-4ab7-a1c7-4b7f6d2f87d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8353dfd8-6ce0-456c-a6a8-39585f4dca86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748ed6fb-5108-4cbc-8625-5680cfd4527e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d165df74-320f-4742-bb81-fdd9e41a446a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae68acc7-6a60-4327-8a01-daa50f654510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72391f7-6399-4537-975f-9bb23050530d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2596d93d-c8ab-483c-9736-094c781b29df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af183941-11e5-4de8-97ec-9ce8a8ab565c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db6f4ec-8b98-4d9b-b6da-584a477ccd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76971e8c-72fe-4194-8d4f-1020a159b739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e71931-98be-404e-80a8-64dfb93e6526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0ec937-e813-49b5-bb98-9d8bd3717d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1567e7d-a595-482f-aede-0ac45d0a9681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740ae26e-c9d5-40d4-b97e-be7744c6ede1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7f4197-11be-4deb-bdd5-43b2ecdfe237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51623c2e-3695-4c58-9efc-824cebb6191d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7219ee3-ec70-4b9f-8d6f-dc6d8de3559a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb493f4-0bfc-4feb-a72a-cf6a58181fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7096193-391a-4efc-8675-ada86d07e241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84da3999-1a94-4600-9973-eddbf9638dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29c1ddd-a5d1-4a14-8ad4-b610b41f3656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b37916-9241-4955-8365-5a6a1b706803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ca8257-ecf1-4078-b991-8096d256d8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519b2219-f133-4923-83f7-dc77e5a2da25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e77c3e-0649-40a9-9afb-d21b7655ebb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7581721c-fb78-4152-94cf-5d96a118b5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56feb4e3-279f-4d3a-885d-6290db1145ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e3e7de-10ec-4211-9c31-a3ee984a15f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df79b6d5-8da1-4ad4-8a52-1d5bdc28e53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50417cb5-9408-426b-b2dc-d45335054ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7293ae-f91a-4653-a92d-8dd7fb38fe7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30574a04-be9a-481f-9111-edca093e96cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07671a0-e969-4f9b-8828-0ac5cee5d3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f36090-05ab-4beb-9769-59c0fbf34019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4338c1f5-b30f-4703-af66-f2fd1cd49b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3126a45a-5668-49a2-a978-89606bd341c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238268d1-f7c5-44fc-aec9-ac4907f56250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64d6fba-3ccc-4dd3-a932-2b5f2082381f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf2ebdd-b8c8-4033-939c-b6ffd5c5c604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502e7cbd-a5aa-473b-8334-5fbf860e9721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0514641-9b0e-4869-85f8-3cddc0c64e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6b12ad-88f3-4e18-af51-a8da64b17bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf08780a-44c5-42b2-b47e-2ef59d30ad69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b525498-4b60-49d4-bd05-e8ff3efc00b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a56775e-654e-4751-a196-ad5fe190dd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50cfa49-98c3-4d79-8b2f-5f56de6d832c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c127b53e-98c7-47a2-8232-59e5933cf7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c11288-f026-4d62-a274-8a98325a1a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26f5a8f-0fbc-4388-87ff-3d0eb6f70421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578d8a2c-5f27-4103-81de-18ef13cd20cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a789b46-30a9-4a95-8b5b-9f841cd9b2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.201.80.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ddcf4f-a947-4bad-b5ba-cc3e79d2622b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47f9f41-e33f-468b-8178-267ad85c9a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.228.128.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9aed3e-b2ff-47ec-a10e-cbf1138dd26c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85041a1-2b86-421b-bac1-be9c9e81d834", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c1d46f-180e-499b-8a08-539756356058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1dda91-b208-4e44-bf11-a9fd0dda3ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d880b9e-8fd3-441e-b195-dd29bbf28ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f7eb7f-e9ae-4c86-912f-b873780d26e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a170cbe-cfc0-4296-9ed7-b75a1b961c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb4d5ff-822d-4fad-9584-539b3f743db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ba8b1f-7aac-4bca-b9bf-6b2103368cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f67d11-b3c0-447c-b06e-acd3363bb27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfadbb7f-cf1c-4feb-8d4c-87a58d12baa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2b20a6-a613-47a3-8c4a-fa090fe55f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c1791d-2ff0-4cd5-ac51-3b71ad34f1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0036a293-e940-47dd-9c25-a342e81027c3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.30.14.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26db227-0e68-46cb-95bf-f28c40790729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff816422-cca9-40c4-9a00-b81160c65217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da778b31-70aa-4b4a-bda8-a72ad2745438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0301d6-da86-4c68-a376-4b3fb50782c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c282eb-e690-47de-937f-68872c66d825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b5f2ca-60b6-46d0-91aa-c096a024f171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e40faa-9f8e-42ce-9d38-4389e7114b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5348eed-3884-46e6-8874-ede4b752f088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcfbcbd-f6a7-4d98-9aef-9c4d5c9b645d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c93889-0c49-4211-baa8-7a8ee80c8ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a85628e-d891-41fb-adb1-4239393e6185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9af532-a755-4504-b0f6-924605d7997c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273a03f2-bd51-436b-a8c8-8af05c95bd87", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.36.225.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b66c5e0-07d8-444a-8861-b1144fe9a3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d97bc2-78e7-493f-8580-62f5b3f244e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bfb2a5-48dd-4f2b-8fef-6428ade66392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e1771b-4f90-45fa-aefb-952c6494f83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0cf958-3fcc-4884-a708-87a4f9c8acc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befcb208-b4a4-452d-a7a5-70407fcbffc5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccaa8aa-ec5a-4ea8-881b-dac7341d0d61", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e8fa47-b3dc-4f4f-8afe-21cd429c3001", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59db3f3-6dfc-4f91-9324-3857337af7fa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e691bdb1-3603-41ea-939d-1500ac37e4c8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da3911d-8109-47a8-a3c9-53ffa47d4c3f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dffd08-37e7-418f-b238-c250bd5561a6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f8f1c5-884b-4716-b23b-0d49f4b3ee0b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090c8e84-510e-45df-b324-4f7309d0789a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e244180a-9591-432f-9f3a-7ca343ede8fd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e8d1e8-5d7d-4cce-8ebc-cb84e41def85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c328c80-b35f-43fa-b804-fc5ce0468f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11974e28-cd00-46f3-8270-fb854ab42bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.133.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b028f35a-d86b-4dbf-b7dd-7023211223e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.174.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e52df3-f6f7-4003-80bd-f0a68562990d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67abfc6c-710b-4bf8-9df5-52fec1dcdc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34ec4ff-f521-44a4-87c7-1fe35c73987e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85ff6cc-81a0-433e-8afb-1e89a525c78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.54.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1463b129-11fb-444f-b7ab-50e70ca57d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e793e01c-bf76-48ec-bdab-865530569f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183bb83e-9f4e-4e25-943c-615ed3d5e8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884a96d4-b289-4629-9c69-382353a2041b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc1cfb7-44a8-45ab-ad54-832e50edef02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.176.108.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5902d8be-47da-4ddc-8511-e9459405597c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a7c180-9466-4999-ac53-662364216d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb3440e-7d0a-436c-9834-7fac5b183493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa19f26-aa73-4a57-b516-1379bd4b2af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db990d22-9541-42a0-a9e8-ae7eaf65b628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c97c62-0c1c-4330-a66e-7dceeb9ab569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4bf4e7-24f6-4956-9db3-d4b21479562b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f392e4-d31a-4804-8f15-b2a277dc310a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ae730f-43d2-40bc-b538-80c82ae3d0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2972571a-e1c1-46dc-a8f2-282e068aad86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa3df74-afdf-4044-b309-6fb68475f225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.190.153.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0bf4d8-c7ee-431c-bae0-cd5d81f83b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7628360d-d6f2-440e-8afb-c4be124adcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.211.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6148eb-6d3d-4e93-b9f6-475c768bf2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.85.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f937a875-7bbb-434a-9ec6-60eb183b2c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.247.164.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d1b49e-2999-471f-a208-956bd67322b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b8eeba-e730-466f-956e-c8e15d9517ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.5.237.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46777bd2-8ad2-4338-a67a-e0e9e6311dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2959b021-4204-4bec-b7fd-80bf39d24dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cf6b8c-facc-4b79-a737-4dec29fc15b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c82f59-6453-4fac-aee7-bfd6c5d79c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fe6dbf-fb76-42f8-bd78-f29a495daa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2f04b6-5c7b-4414-a680-7d10a08800c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b6e426-19af-4c35-8884-fe020d36969a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc86a24-284b-4319-a4f6-dc564f401b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbbe3ee-2fdf-45ec-a152-8472763af156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410a9de3-ac68-493a-af6f-b03b1ed30119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed7582a-f4a7-4806-981c-f85c53740dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62c20ae-1cd9-492a-9e0d-ae3aaae0896b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.246.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34f7951-2aa5-4beb-ae8e-d0ebbec12a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.138.64.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f645000-4481-4c20-929e-76b38b666571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752fb0fe-6d33-474c-b319-4eab5abaa2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e467ee8-753c-4e4a-87e1-046df3723148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd41076-d3c1-4fdf-b666-7e9ddfb210b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c726cfb-7183-4a2a-a446-778bec364df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1825dde-d42b-463b-9e20-72c79c9105ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97cf263-2a1a-4e84-b37e-22f8ff47b7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0207e10-3353-4773-bf5e-f83cfa10d349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf0a747-961a-4c0d-a3b7-df067d326226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a2c728-b754-4530-a627-995b973fc920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274cfb9f-aefa-455a-8307-4d5245e38430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.170.172.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695b2832-281e-460b-8cf2-2061297aaac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e88ce4-6ca0-4b32-9f94-06437158d2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68207ba-ee66-4587-b39f-ba6091e2d5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8073f8-b6b4-4bd1-b1a3-2d2f8161b1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f74389f-e8c7-445c-9c8e-3cb706b04251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9091da93-2b8d-4451-b40a-191a97e4ab1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97018940-1958-4038-a38b-74143d1603e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b329ddc3-0aee-493e-b23f-318cb8096fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a385ba-8a12-4764-9f05-f6bf6228c8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379acb8e-4abc-463d-a93f-3fbe9006abae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad4cf8f-6466-4c7a-9610-df1569347cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b56bcf8-f6f4-4f83-9dd9-831d8e00d0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562df095-6eff-4eb7-bd39-d0bc9ea3f2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251da683-5dc7-4496-ae74-58d8a92194b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93209ce2-bff5-49c8-a8cd-261370463e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fea5bc-a4ec-4663-824c-42b839331cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b61c17-1c89-4f9c-9e42-fbdc3b8fe5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f883f3-e4f5-47a0-8d12-353cf2438e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0007b5d9-c2bf-4660-836e-f83a0991afc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46e1116-71ef-482c-9fcb-628b2b2ee230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761dd915-65e8-4623-932d-71f6866b921e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27308131-eca3-4a7c-b1a4-b4e2df81c005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51585911-11be-4522-84ca-c18807efd3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d0d837-fb8a-4ba6-982d-66aa2343a89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8bc257-03f7-4f18-91ca-28b66e79687b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfc7cb9-c382-4675-ac74-37cc73298db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6b14b1-3aea-44ea-b8da-98cf5bd5a1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.19.49.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87832859-d893-4fd1-8364-5b7dec3fdae1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2255ba5a-dc3b-4279-89e9-62dc00d420a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39e0269-e8f2-4de3-b03a-06ef3544c76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f3123b-d8e0-4858-bc1f-4676215a55f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6754ead4-5d5e-4f39-806b-54a8399300e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbf92cf-260c-40aa-9a9f-00ebebfc0040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0dd03b-2e92-448c-a957-d04bbf6024ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5605bcb2-547a-4d91-bc95-83f23f926b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150765fe-e317-413e-b6c2-cf9d4daa03cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba31b895-d6e8-4bc9-921d-7ac93d2368f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200f4454-b4cc-459a-b147-ee91d415f943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7629185c-ca74-4250-9295-5c8c168e3491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.211.191.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c3db5e-ad7b-46ad-8a51-271e9db1761f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.211.96.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30c083e-ea70-4353-8df1-d0be838d5d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1028a7e2-7d18-496d-9582-d3e9a988288e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4939a7a5-33e7-439a-85f5-7c4bea231036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c042d2-7787-44af-887e-87692736a460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ee3d8e-62a6-48d3-8a37-f612ef48a573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7b5201-0e99-4486-aae8-220a474afe87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9effbba-3e63-4eb5-bcbf-450cfd6b35fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77276a6-a594-476b-ac2e-2de72a8bb476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76f429c-e8e2-411f-a5f5-26501b073342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19d0d65-f1eb-4f55-b75c-b012afea22ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5b0e3c-0592-4ef8-875c-dc915e39686a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb72f2c2-9633-4184-a734-b5613656ced2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a1e611-daff-488a-b758-789f2c6fcf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0ce903-366a-488a-bb13-4e437fbddeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6c1d70-2622-4eaf-b778-e05acdfba7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a9e4f7-1f33-4277-ac35-d36f2315abd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61b4aca-9872-434a-a8b5-23db9746a0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fe513d-77c8-4ed3-93a1-f04a91e93224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b14884d-98bd-4a58-8ebd-41de0f576229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79c72d2-41b9-4410-aac5-761761ac0ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4407dd01-e8c8-4101-a1c7-70edc129ced6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.236.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7caae1-5587-40a4-8bf5-58cd7b1c181a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.96.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1015b2e5-4b29-4157-a158-83817894d5b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.190.0.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f5955d-99eb-4b5f-bcba-61b76889ef04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.71.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded3c6ca-25bd-4021-b0b8-64acd2833b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a3dbe3-414d-4994-99ac-3336a09140ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.33.226.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6452e5fe-d3cb-4980-bd20-2e9eae81329a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.46.110.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56528ce-c2a8-468d-8af8-78cb5d9f9f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.46.96.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4264c2e0-4ef1-4205-8b5d-127796b7dbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f446f6d-9c3a-4c4c-925d-6dc7b22015d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.166.232.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1d5502-cf44-48ba-83d3-e228d871cc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00888735-5e93-4c7d-bd41-44a23616a274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0073bbf1-83f7-490c-880d-1f1bb2177ddd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.126.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2155a0b-1ae1-4b95-a5cc-6b42755cf853", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.48.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d5062f-4d17-46eb-b0e7-a15a16ea3cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.53.133.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68620d6c-3d67-405f-9d8c-9db59d3b40af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.135.49.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6f9e68-d3a6-45f0-88f1-2194cd398047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f580a1a6-fc3c-441e-94c1-9726bae37232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.123.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59a9da5-75c0-4e94-8f7f-098a8c434ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.87.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a047e7-1500-4cfa-8d9c-3bc321063823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.110.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea435f53-1c4b-4a29-a1d0-229fcddddbab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.200.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169126ba-6b89-4508-b802-f755b262f78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce2077d-c5eb-4f48-80dd-19175f1240df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae64c1ec-0d98-4521-8af9-1557b52e299e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae539e1b-5c98-43bf-aa65-164110b2a25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076ec1c3-8178-4f5f-b4f2-49cb16777345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e04ca4-64eb-48d0-9e28-beb48a627709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e81376e-b010-4dc4-84f8-06f8a73d052e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9844b4f-da8e-4d92-9853-3f47cdfae75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029e559e-e58b-4e85-bb7c-0b05e7e97657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10267c1c-174d-4f5b-8b69-ec3a33a10d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e00e903-9455-41c6-91c5-38471bd10dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c29132-9f77-48e9-9116-bb3973251112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8674ea-ff24-4083-ad40-220f91a90544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d7ac46-2ab6-4b96-b652-e9b45287db46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e346a673-26a3-4eb4-8917-b256ce09535a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cefc10f-ea8f-4b4a-99cb-2272f42dbb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dede5f43-c9cc-49aa-9b95-8dea43b7c03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756e77c9-ab7e-4409-85d3-9dec61ddd5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1b65e2-8932-407d-b6f2-1343be7acfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde7a423-69b3-4fab-8d0d-0ae215d86d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f60cd4-6b16-49ec-966a-57a0464892fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7e678e-9b75-45a5-a81e-c9ce46ac7ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e46a38-19b9-420f-831d-41468b3c54cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a79cde-5d2b-4bce-abfb-c4b9d6245a69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8cfb77-8ac7-493d-abb3-22b56a23dc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145ed30a-ea41-4052-bf72-a3b55ddddfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836ff774-36ff-4149-9e9a-4fe0f0f779b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a1d5f2-716c-48a1-aaa3-43e608177fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f955d365-9516-4de8-b295-4c861f79f00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a62f48-ec78-499e-9edf-c429787ea39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bf5b64-e7a5-42dc-8dc5-759c4d5c5913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9169ed5c-cf33-417d-bd5a-0afd8209506d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d98dfd-0960-4651-ba84-c6ffe1dd27b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a558fee-4694-445f-9a55-184ec17e5202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acaa947-a88c-4aa1-b19b-00f90609a055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16003335-95f3-41bb-a8cb-89e4dfc697d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdfb702-9296-42a6-baa9-de0250723ef9", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1266a90f-68fa-4652-b630-b9b76c6d532f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d262dbd-55c2-495e-bf9a-fb94bd4a9ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91947fa7-8fb0-48ac-861f-7dd2a8266e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d80280-85ef-4567-be87-3f1e77d91cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8978a3-81c0-4591-b3e2-4d9dfbe4d962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73299771-6aa3-4905-bc15-cda11fbcf848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d84c8a8-92ef-4cf4-9bcd-ced563170137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0013a302-9135-4e0d-b379-97e25f8bff36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be90e1f2-4f72-4af4-a4fb-f9e124088805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7982ba-c538-40dc-b6aa-6ad37c129ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75cf3a5-ad02-4621-93b0-3a3452b0961d", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceantoronto, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:openclawglobal", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623a0212-95e1-498b-a876-fdc38de6261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8fc6ef-aa94-4aef-81e5-665b14fef310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57d98a5-f1a4-4bba-8d0a-f70f1aaee76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257eb7d5-b04e-4df0-8dbc-81307bee3e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9010576-f764-4b47-9c42-6fc3edbd7c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380d71ed-ef80-4e44-b6d4-8ab35fac396a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7156f29-e611-4a2d-b600-ea4d64ef4738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be73b19c-b741-4012-a9f6-0916adb35a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0497ed3e-344f-4087-b705-953e8de884c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaf7f13-3d7e-4174-aa25-f1d8eeef9cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cbd94a-13e1-4595-8a06-fe97761f390a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac3b6a6-2aba-4388-a880-7e61552d3dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec548d1-545c-4821-ac3d-bcef4e489391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e7a418-e3ab-4f1a-9a55-71cfb5efc8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92614b8e-c786-4c7e-8076-d4a0fb17aab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305d8662-99e2-4d63-ba69-abc50f2593e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5458e8-5f1e-463e-8e17-ffaf7647d14d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ecbbf1-7f31-4f7e-95f4-2e75775c2424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd527f4-3e72-4c94-b050-fc9c42a80a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4877ef5-df4d-449b-bc57-f2aefd5b3061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7b50ad-8aa7-4791-98e0-296ab362d4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528107d3-ab3c-48d3-95cb-c1a8ba115399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f666f85e-30d4-4a2f-8e91-9d4a5ff7f288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900a3c98-01a4-4dfd-a7e5-cebe8cf01a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbb07e0-64ec-4613-9d7c-7e53295370b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfab487-2cb3-430a-8979-20c0699edb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a814bc03-2404-48b7-b2a4-7b3f1e5aacd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3337552b-5e63-48c8-9232-ea546eb26404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66181ee7-c149-48e4-a57e-5be44a9b7cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8da610-bb95-4b03-bf6b-8a0ec23a22b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862b4d3e-d982-4281-92ed-9f697787efbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904784a9-fa8c-4144-9119-0de0660770fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157625a4-4321-49f0-bca7-ea92852894fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4695dff-ae41-4d1f-9b68-17502fecfc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4306a71d-6c59-4cf7-8caf-8532a4773daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2f06d0-485f-4870-b1f5-7c416d8b67bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2f35aa-ae24-4c0f-b808-4a9ad0082b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be960804-b437-4bf1-9540-f121dd5ace99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9390170a-09b7-43c2-a132-b0f165e04849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8baec51-ee2a-4521-a31d-4b03036d697a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23ffe41-40d2-4676-8d7f-a9f86e880fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61aa81d-30d7-4725-abb4-74a86990efb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c321365-7a7a-4f63-bd7e-8b1648353f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89438140-0f7f-4264-a450-30d9eb3ecd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41186ac-4301-4d6e-98a3-609cb98129fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3277373-af00-4be1-bac2-61461a7bf4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb0f700-39ed-40d4-bfba-5b2608f5471e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fc877d-8b04-4448-948b-f41e84a8e8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5229d0d1-7489-40ec-a64b-84f9de8930b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117d44e6-7456-46ee-a3af-81872f0536f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c27057-18fa-4e93-a561-14dfaf763cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6afc33-acaf-4976-9a40-906a99e25bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bbdcab-3fbf-4f00-b915-ed59850684ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08de251a-7669-466f-86f8-44611ead803f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d62e6e-7806-40cb-9dde-0ebf160ee49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6ffe3b-20be-43c8-b469-cc4d8bb6f45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81a6b8e-6627-46b0-9ae3-b7ef39ad7483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaf708a-30e6-4b7a-a698-1fd797b72d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e1cb29-713b-41c8-ab29-b8f3bed59714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d23bb26-b257-4dd8-a669-3b31f025aa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91282735-ad76-4251-a4b1-280ef229eacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c657d4-59fe-4358-a893-704fe702c606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c92033b-de3e-4a4f-aa76-c2f396358222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ad2908-680d-462a-beb8-fb45e3255c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8d22ae-c887-4cf1-b50c-e542d29cfd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2d2bef-c58f-448b-9f7f-6eb26e7b7a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e822cabb-e8af-427d-9e77-46286929bfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93965874-0e7d-4d0a-9491-447c977fbc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6224a8b4-f531-421f-92db-e626d942bc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc62283c-e6fb-42a9-b7e8-bfd44ca86183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d593e5a0-c92e-4571-aff6-109dfc1ea574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7faff005-67b5-4a55-b163-c23ae1eaaeb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92536ab3-4a6c-410f-b0f3-3a29e1f15a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d820ab3a-7e12-427f-bb1a-855d5fa4a01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2a410e-9f91-44a9-b14a-3fbf8ef02c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c13ed74-bd58-435b-afea-2d2414822722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f503912a-53b7-47e9-8eca-2035ffeb5a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b492396-57e6-4199-84a5-5ccf600beacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00294759-3343-4f85-9a99-158368f7efbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bab4bc3-c60c-4e37-9c3b-5cbe8e2f1be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd7f5f2-cdb4-4bee-ada7-ce789a64dda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691c3fee-bdef-4fe5-b3f8-59c1e92defec", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9935d2f-1ffd-4d44-81d8-b3844e7bf92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98751e2-8af3-40ad-a6fe-f5e709c78ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2d19ef-2f56-45c7-9ecf-64d9ac5435f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b59c72-7e9b-4e98-886f-3fb6190308eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1f3623-d678-4583-9503-08325ad735d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd294e5-d4f3-4a03-968e-a11ca26c1384", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeccc7c-08a8-4929-b400-7749db46c7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535d6d38-4c2d-4e3a-813e-699ce307852c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f646828e-7f8b-4019-88d2-8a1428bf48d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5115bbf-d746-42ec-8846-8e706393f2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1600d189-8f67-45f1-b80f-ea58c9b69385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c68ca6-ced1-42d7-8575-6ee4e70eff7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f20722b-5879-4bbc-b85b-7c5da3da1481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ee789b-03fe-4dd9-93c3-684faf56cdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e1d03d-4c08-4227-84ce-92a4f65e0125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b796b35-9081-4fe1-8c85-9286482cd280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdacf28-cf43-4f49-b44a-857ae5b5fe37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4edc93a-84f5-4bbc-a042-1530940c04f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3757836-a708-46fc-afd7-224d9dea1b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1943af44-38ab-4783-92d7-02bac7d03ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c71757-de27-47ab-b935-9b63a9ef15d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49df29cd-1a58-4b45-8846-35a4779b8971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b54d354-efac-4292-8236-13ef22616aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36c7a48-6dec-42d2-88f7-d26b59bfd39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca2f75c-55e1-401f-a096-f707a635962d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcbc2d9-a6b2-4ee7-8c69-419628940a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93020823-ad7f-4a49-bae6-0dd0efc45117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135ab763-3c8d-432b-9656-610c2c04209a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3283bb20-2e81-4c71-9789-8d05144b1ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02afc59-d731-454b-8a97-a37234656a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2411a015-00a8-46f1-b38b-085cd7281b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c92148-8647-405b-b4d9-32a86ef0ceb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca3cd01-9a9e-438f-be1d-1f2a0ff791aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701a42ae-303a-4f73-a7d0-00323846dc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdbf0da-e879-4ae4-863f-6a61de54940e", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e24d92-9a45-4fdc-8423-908ed967fe28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a65651-058e-48d4-8e06-08d9d8602b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7501de5-71d8-49bb-a3f7-609f95c7a2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77fcb8d-9a84-4ebc-b81d-3d485de253c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca64124-a9b4-4d50-bd59-6a6b912d8f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d47798-73a8-407d-a346-f68e73a3b281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb9f430-8680-4adc-8896-a3799d69207d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5193fa35-1e9d-4ae2-9301-89d4df451860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee0a3a0-919e-4a8a-b807-305d660bc5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18987b88-d696-461d-a13b-f9d64be275f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdb64b8-8a06-4e16-9b1f-cd139eb8b64a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.91.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012d55ad-12bc-412c-b4f2-95e07f70844b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.44.237.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21eba49-e3b9-4870-853c-60059d7bb901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.140.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f28978f-77ae-48bd-9778-47b389f3c069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.239.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd9ab30-d928-441e-83a7-6ed3628e8a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975713f5-9cc4-4472-87df-e69ebdf86867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.53.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815902c0-fe8c-408b-a71e-1b327d8f241d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccbad26-5787-47f6-a2d3-8dd1061f5653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb28250-0cfa-460e-a945-8122f6d8ff16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bc2848-0e06-4c3d-8acd-20f6c41de4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c79a76-7a65-4861-b3e7-e5ec1c02e553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0200ef7d-8fff-4d2a-8753-8ba5ac613f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dbdb78-814a-491d-975a-2732eee61ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8cc1a2-19a1-465e-b920-a2b427754187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31bf682-8ad1-49d5-8ea0-47fbae397672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.89.99.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fe4b2b-8946-466e-816b-67f9d4f01a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d04ad0e-4404-436a-b40c-bcf901b39672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.245.176.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd97d5fc-6b94-4960-a0bb-3d8a351e5550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa7a7d9-1476-44f9-acf5-0a91597b808b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad36609e-bbe0-45f8-b8a6-9a37f819fc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6e328f-8844-42e0-918f-b3fb77e96729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f69a13f-3385-40af-8382-5fef1e1c71be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeadb3d6-3325-4a92-8a64-b8c040a1b57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76197a1-1cfa-46fb-a145-f2e9bbcf9ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e76c45-fed9-4d9a-9246-a647b22ea7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b727fbd1-3f57-41df-a7d4-f759318603f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270e438a-cfb3-49d5-b7af-2da2d3bcf316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69708fdb-4ab1-48f1-b43d-8d2673b9a026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3987e674-8928-4b6c-9168-498f7c3cc9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d014d46-891d-4e1f-8228-ffcb97b4163e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a06130-4d01-423a-a7b4-972e38dadac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eefb9dc-e62f-4d1c-ba07-cf6ff2c5fe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d11ad6d-de14-4a1f-a36c-7e1847f2d2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40488a84-e8f3-406e-b35b-3f0ab48c1c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba1e8f3-4e17-4c8a-82b2-a939f61bdeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d23097a-a0d4-4229-a3b3-63bbdc92c52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c53a6b0-a090-45e1-b94d-b8b427b8526a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a990df-f687-4802-b248-7a0ed2068595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc4d6df-c7f0-4678-b6e8-8e88e92db065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49337f0d-cbde-45e2-a837-c9d1f12a39c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd37e8b9-3a56-45d3-a3dc-72bb0e79f259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3997cd3e-bbd6-48bd-971f-f065e1a0e161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6600bfbf-5899-4534-ba0b-4489e3839951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6143d921-9a58-44d3-80ac-d533a5456b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b49bd7-b56f-4622-a04d-0aa9035f993f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d50fde-62d1-42e2-af7b-56500afdccfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d21b44-bb55-4054-90eb-2e04d4a27840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16906aed-bba1-4d5a-bbbb-e1e77431a31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa96ff0a-45c6-4f1f-bc29-f2d92752d1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.185.147.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0931da7c-2632-4d4a-8081-b3469a0f9f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.165.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d92b84-533d-4dd6-bec9-e14b6ebb25ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.37.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76879c4c-2cff-416c-9a52-466ad1063363", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f04e0f-54c8-4485-aaa4-e01b46f99279", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e12e71-9017-4e0d-9221-9b26e4e88a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9499499-479e-490e-93e9-02cfa18bc32b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701e288c-3748-4adc-bab4-639f9621f8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931d31f1-5bad-4afd-a7e0-13f98d4bfa03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d52dd43-078b-4301-8bdc-05590da20c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5322c59b-c147-4a5c-bd13-f4c097f5856f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.89.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117b21f5-594a-4fe9-a21f-d725024bfc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.98.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211af721-9ecb-4433-a673-3923bd6ae11b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.105.65.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb577ae-fa43-4ca5-bb37-db2a83c7ff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60bf644-169e-45f7-88be-4a2e1c53ee84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473ac75a-b7ab-40d1-a40b-59937e310bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66257b16-2bc9-4173-835b-d646b07aafe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40754d30-3e65-4573-8580-deda2c8a09b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.197.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f716f8eb-41a0-4e0e-898b-7e10c2d7ff21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7965f71-26a3-4370-a0d0-f499c00602c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e37eb4-b907-4f1c-b36e-75d82230a8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12de276-5d89-479f-9f93-16531535eb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e767b59-3901-4b49-a796-fb61eae7e42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b93c950-5a24-48f0-ae79-5f1811ad5a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e61a81-39c5-4bb6-8826-9faa23ce7b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26ed995-39b9-4210-b82d-702b46546a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.201.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068661d6-b92e-4f7d-b5e8-75e396ef4ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8565fe0b-155c-4eaf-84c4-24a4a5f71071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526e892b-c50e-419a-ad2b-9f806a85b6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65de826-5282-4f5d-a28c-3d17d8ce8587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2412b70-c92e-491d-9509-4e91b6016fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf2b9ca-a3ce-4e84-a82b-fb336b7ac633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230368fc-15bb-421e-8ec5-dc0a0b0342da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1eaf936-687a-4858-aebf-1af94ad7af2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7435ada0-3248-47f1-82c2-baaf3b3df659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c7d02a-bba2-46e5-b6ba-c9f3a42c474d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6289b35b-868f-479f-ad77-59936c5c3920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.232.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b14968-6dc4-4e0c-927f-6665eca87267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.233.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f670b2e-4d44-4091-baf4-b36fc3772ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c38bba0-58de-4317-9573-f8e0dc4b023b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ee41b1-638b-4392-b422-cbbb59930431", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5939f5d-9c52-4582-ab4b-1f76d9b25fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa10ff0-f0df-4a89-abb4-ab9768814b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136919e2-ffc4-41ff-8af8-40e051fedea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.43.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187ad7bc-ce92-4cfd-9049-2ffc9cb847f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd73a00-4897-4963-b411-dcfdfbe78430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.75.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bdfba8-410a-4a88-ad53-950ef5278756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.86.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518b3c7a-e671-49a0-a0a9-9229ef5040d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccae2b0-9de2-4e19-81ce-bec1b82e1cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadeb6ed-435e-49b1-89c3-7d60af39b059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef97b8a-8f84-4f75-8ccf-6a8e09f7bdd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c788e5e-3b99-4905-96a0-00f3e8d4cc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78e6ebb-82cb-4aef-93e7-c7575662a23c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.123.146.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d5d6e4-910e-4d1b-a90f-07d2893a993f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.123.146.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5107ba-606e-47ae-8551-b7ff359b9586", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.123.146.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23e1150-b496-47cf-8a63-65264cc1f19c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.123.146.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2928a19c-e1b8-4958-8672-00c6c8c446e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0434a64e-e29e-4cdc-999d-9456b87ef69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d44d54c-ac38-49f2-aa20-b38644a19e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a0bc20-1cbb-461f-b92e-d3c4fc7d55a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.155.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca6d6ab-ad09-4989-927d-dc95b46a2a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.157.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a50d7f7-9dfc-4afc-a1d8-91a785260161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1faca48-db57-4caf-856a-88d05e6352ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.200.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c442947-44d0-4c37-81a9-0ef98f4a3246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deaf001-f689-435e-9554-153e1ae8a291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.203.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec318945-b07f-46f6-8af5-7a2f494a4531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.210.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfdc56b-c5e5-4e37-a780-e9c0864ab54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.224.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d4532f-1f88-4894-a169-5cc5105e05a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c97448-fe73-4636-bc58-6d1eb6e69f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166a1cfd-21ca-4d36-a476-1477d0c81c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4539a6c2-909f-4c59-9829-369a7f435d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2886c6-4fa0-4ece-9756-416280b11993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00642f62-38f9-4ac9-b23b-8989fdf1c400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562f4e38-f32c-4359-9788-35dfa9f71296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277b4d87-ca40-4be1-8fd0-566adbe3c318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.80.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22446ad0-9139-4626-ae95-229dd7c33639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab644e59-ccf0-4ef9-9ae0-082783f6a6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7934f153-b4d4-47e5-85cf-748fe6d9eccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.88.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f591f42c-4d5f-4e1c-a90f-0ef4a94257c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44fe467-399a-44ce-80ab-3a6d68123441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482ad1df-d762-4f34-84d7-935569e135e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047f044e-bb85-487e-b47e-c00d794f44b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348b592e-9ea1-4607-b501-d898779c1deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29dbf23-915d-49da-8a51-e6179c6d0fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233ad42d-886e-4aac-966e-0596b56df4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdddfb0-2985-4eba-afb8-0e3bad38afec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9301c7-3d4e-4dac-9df3-9318ce4cca0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f1151f-0242-4c94-8b42-eaea506aeefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75a76d4-15e2-42de-b0ac-18f98e33fb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77266f05-492b-429b-9d3d-41aec857625e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ab43bb-fa74-4b14-aa85-fb8404e8db18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.196.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c80c0c-f969-49e2-800a-9c379d7b8068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.161.58.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6f2b03-3351-4aee-a710-a18516003a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1703ead-4dd0-4f2d-bbd5-175bef40632d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83936540-e277-470c-8e1e-b43f751750a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b78f8f-ee65-4d1d-a712-da91eb5f48ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a529a0e1-a0f6-4e20-9691-52fc3b8f81e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f60558-8623-4494-8186-d9bf1989944f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74cafef-d08c-4d90-82c4-3ba3e671b319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df217ea-8280-4c9a-a0ff-b130cfa9fa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021747ca-20ad-45bf-9ef0-dcb4eeee0754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35833a11-3d89-4af7-bd0c-18f0a5c64b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6778dd3f-177f-4300-b580-12de0c7adab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81891d2-5872-43e2-8294-e47973bec695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903856ed-de72-41df-9c51-97e7b856afef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5109ec0-d3ef-49f5-811c-f516610b0043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f37dd4-3a6f-45c0-9d86-5378cd867bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da51349b-79bc-48f1-bce1-f55f6cac98c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214a1a8d-5515-4761-ba8c-378afd1fa903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818a344d-2681-43a6-8b5d-d2df668835c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6b7ce2-4524-403b-b9c2-13b8d6c9b1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4118d203-f63f-403c-8298-48349bd8fcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f96355-91c0-4f69-8033-6b466883b27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6087b1a-2051-4583-9a1c-5fffabba872a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2145442-5a5a-434b-903e-45d20c9e0d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110ba7c7-b68a-4407-b05c-ffe7e09c5627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745bb7ab-bc41-4dc9-aca2-92147012592d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e40d45-82a5-4233-8f17-9bbfd73981b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cce8db-e38c-4bc4-8ebd-6de1c3d1f14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba48badd-3190-41d8-b8d8-381302a5e0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4654bf31-ad6a-4fea-8c0d-9ce20e1c1607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1901eb1d-2368-4017-8a75-20d6ab5da9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6745ff2b-e604-4f5a-b678-56c27c299f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377e7921-7e5a-4424-9a76-8b7ac494f4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba08ca1-0429-4bfc-baf9-aba8830f9ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388dd31c-0d34-499f-bdba-31b846925535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e59bb6-38ed-44e2-8762-61bf8cbd4525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca0a1dd-519d-499a-a4a9-c4b354373aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab00890-212c-49e1-a8d2-fe13ba5f7a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0347616-87ed-44c6-b473-1d21996361dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933e7729-e5f5-4f2a-bdea-3fde25163670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.113.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c9b83f-cb53-4770-ab64-306ffb97eae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.114.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70e87b4-c47d-4944-a737-b747c7816089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db685b97-5b5b-42d4-bf6f-6cde43e5c01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c91138-a944-4429-bbbe-fa4960d2380f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d6da13-6564-46ad-8cf0-ecd927879f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95382f1-1f4e-498c-a4ef-bfdcccb1f7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd6181b-9d53-4e6c-90b4-450ddce7c42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a1a403-bfae-4861-b25b-864c046a2084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5ba68a-9b4b-4e0c-8098-b34f57082a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c2e899-82de-4ab2-8a9a-5d750b2cd6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de8ca04-dc35-4e86-b12f-a9c5254d846f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58d2372-1326-43ac-8b3a-9975c2594f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0368a71-3b65-45a1-abc8-0f134f9ec3f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab67ea4a-751d-4bad-9661-bb9aa3462c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13af0b97-8a82-4195-bacb-4fe66f52756e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965217c3-4ee4-4528-92cc-20e396e3c684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b53fa8c-559f-4e74-bb55-20c4714baaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c90925-fdd3-4932-83e1-7e23a4ba5d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3976382-cc3c-472b-aba5-e582e92d4b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328e4f82-9e48-42a0-9a3e-d390a4f876e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7719359-fc09-489a-81ee-713c05469393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13d1291-4d2d-42c4-b340-e02e9c30b668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0de84f8-e8ca-4a96-9c25-6ddc810a281c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d50c40-eee6-4c76-b821-4e3e582012f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6d6c41-bd20-492a-8645-04200dd141ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee097a55-41a9-4e4d-ad43-c38c87b162f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0080e64-1e40-43b7-bf33-06dfbe3ff297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce097c2-7a9d-43ae-b5ed-c2db842bf43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f4bad9-6ccd-4996-ad1b-e740602c6c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55119499-d4b1-4561-b27e-bfe25720be0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54658e5a-b07a-40fa-8abd-e3a7b9910c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01c79d3-48f2-43a6-872b-f08752bf9df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a39e7f-7df2-43bf-9648-ddb092171b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df97c0d6-875c-45b8-9f96-f55a0ffb581a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e0ef7e-4c78-415a-860d-0dd6c9323ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53619263-3977-4dfb-894c-a492173ab33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6f02de-0b0a-4a35-be02-110b051f723d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fed483-1715-409d-b40f-8cf334ba7600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463632e0-f7ca-4133-9178-21d71d96e636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4e7ed3-f3cd-4c47-82bb-3691c35c4f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd97702-f072-4a2a-a833-4941078cff39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400c3fbd-7dfd-4a13-9340-d3bc4fb94911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff78721-5ba2-42e2-95b8-d4273fda3dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c823c67-0ff5-42e7-86ad-a6cc92d23821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e1089e-66a1-4601-9535-8683bba76314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63fafb8-76b1-4937-bf26-01644260263c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27bb7a5-741d-40d2-938e-ba1dfc9e9bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde80a58-6e9f-4209-9f84-ac885553b5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ef2700-019b-4901-8415-e397f8945e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d4674-79a1-497f-ac7c-0dcc7dde6a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8004e8a1-ccae-4e42-af9c-cbaf3cd51a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b49b15-4819-442a-840d-2081b05d23d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0146e437-1389-40a6-abac-032c673ccefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1e3a09-68b6-4e1f-aeb5-85e922ece347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c2cb05-ebed-4947-8df1-69fef414c1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bca409-113e-4451-afe4-bdcbbae40aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff23c2f6-b992-498c-a08b-1046528624fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1da4d75-0f9e-44ac-a8ab-05c4a9c99677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fba0499-79a8-4a29-826c-69f226d0b2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e49542-0e63-42a5-9e6d-950bdfafc892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae11cb2-48ea-46d7-b56a-c1d21ce5c1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3202d7-65d1-48b4-8685-34bff9ca0552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028ada87-0435-4208-9f87-f2681b1f50a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce26c9a2-c5f7-4a75-9e91-5f2ce28ac901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb5491e-d8ba-4973-ab14-7b59b8def73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca54d88-0146-4f00-8394-9552b1da09fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1ab045-e1d1-46e7-87d6-3d052919400b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910fcb94-7d37-4be6-af41-c23fec880896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfefddf5-95ac-4bd6-bf35-bd05bd80922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c89ae91-7245-4975-8753-64b78412fbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dddf2d-5480-4bd6-83e5-477ada942349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b7a9c2-5858-4b66-b12a-69d8baf213e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0538322e-98fa-49f0-999f-b1ed3f464ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2eee2d1-2c62-4c39-948b-257d9c2c63ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f319e741-230a-48c5-9a6e-6bff427f3ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af8b04f-1eb7-48f1-b2af-1a0030213670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e00b9e-e0ef-41a0-bce6-ac5c2d7bce45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d4c619-90db-4a05-a822-d8e471ae38f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3e77c8-a740-419d-a402-29a937dedab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6b0696-0043-44d6-b150-cb3de0e41bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d5d684-d4ae-4a6e-bc9b-7b811e9dea0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bdb6d0-7155-47b5-ada2-24d33735218c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd937aa7-10a3-4314-bb67-17587af09058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bf460e-00eb-41c6-bd3f-e3633c013440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63ab729-b2a6-42a9-b646-1a3f47358b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81098296-caac-4b22-aeb2-d556b335cc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde21334-750a-4dae-802b-69dfff261349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.186.232.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ad0737-a962-4acd-bc0b-5aefcab36cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c37f16-c9b7-449e-8018-f56981a6a5cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fadfcf-9126-4067-972b-a554bd9d77ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a086279b-c527-48e2-ba72-f4e64309521f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2bee88-ae0a-4a7e-9fde-707e46934498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d5d8ba-bca6-4649-8a92-d2c4f913edf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad63db2-513b-4efc-9917-eeede6eea216", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.157.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93b10d7-7172-437f-9301-8578f39e1dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.243.208.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a01151c-5046-4be9-b36f-cd5030c285ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8327ac9b-b36c-4cde-b79d-92cfbca180cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4930883-07a6-4b68-8b30-4e668fa55d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1f1a43-c13e-45c2-8448-edad6d783208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2f17b5-1260-41e9-9085-229dd8dab716", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b39763f-0082-4922-b163-2f51e5bf7f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d52fbbb-0dce-466a-bbc1-92e0f7162704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463ead0a-73a3-4b48-80f4-04acd5d765b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc76e01-902e-49fc-8e41-11d77a57fed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5a418e-01be-4018-8187-bb166f5089b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd15d67-38fd-4305-9033-e9ba7113fcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.8.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a350b6f3-e0d6-4473-b0ea-adcc1c72a262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8340c74e-bcee-4532-bff4-e3760227f88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.208.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7354960d-723a-42aa-b739-63fe247fa5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.209.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1498acb4-5b78-4e29-9dc9-85af45b27657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.210.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809b9165-b3bc-4484-8a37-d8accb1b4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.217.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b8a0e7-8100-469d-b72e-fad215fe61c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c130190-bde9-483a-87c2-2bc009137926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b6c404-6a95-4d82-90db-68f4e3f0b943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ac2319-0d30-4f7b-b363-e93e5418bc55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.92.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833945ac-0bc9-4b34-88a3-48e0b0699e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c50855-4233-4a89-b44f-0066019cc972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81bb7ea-9463-41d5-b24a-c0fe02e1178f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8e23a9-0623-400d-8ef5-1ad78a494f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01aa74e-5703-4f8e-95d6-8310537d5ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.246.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc2e7aa-21d1-4247-b66f-f85752b5d082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e6556b-3f46-4925-a1d7-b57b42e87edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dadb8e-93e4-4367-8a27-b42fefcbc030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.235.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874b56f9-2f46-4b5a-bf06-60b0e1c4278e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.241.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd33bdaf-d795-475f-8d4b-fae4d9d7a22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a13969-7a9d-4bae-9dbd-811cf3eb73a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f6550f-46b0-479b-80d8-7d2d0cb55106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe92832-508d-4069-841e-fe0062e2271e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.73.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d04554-1eaf-48eb-957d-7f258b54de11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73800da8-37db-409a-b89d-e28b72c7712d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fdb684-1c0c-47fc-83fe-206261923e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5462d81-2858-45cc-b077-2bfac2443d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7083431-b33b-42c2-b8f6-6169349e55cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18582bf5-ae26-4dcf-ae8a-bfa512f13dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20851d1-d609-4199-8eb5-7aabde97ae1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6d1978-9c13-4333-9513-74aca1000fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2e5560-4508-46fb-aa8b-5a4fb0a7fdb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530f69b6-f5ea-4129-b0a2-21d37e397456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f6dedd-dddb-4708-85e3-be082cb0c987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcce019-f596-408b-8fea-9ef2214ef990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb6a3cd-27ee-49b5-b76b-67cae714392f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf38a49-cdc3-4142-bbe5-b2456e3fb204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1d0180-51af-45e9-aa98-03dcca9a9adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c280c4-48d1-4a4b-8b5d-4c046708abbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75913380-3411-4f66-abc0-07b2237f94c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e303c77a-5eb5-4fc5-8953-9c75ea4a351f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e77783-2510-49f0-9533-0adb78e0231d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2811d8-0df7-4491-b2a0-dce564a9f7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379ae7f8-ed66-475a-b8fa-9df2febae7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfc6463-5a71-410a-9d9a-f2f00b509ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289ceef0-f329-451f-a356-e7a3fcdc8093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8208bac5-d1d7-4e65-8391-91d74daa6b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ef8bea-96ad-48f4-b675-f405e0c26c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d11194-a472-432c-aec8-e16607c872f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0f4b58-804a-4d2a-9336-c36baf2b6359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f363193-94dd-4a3c-8f17-52912ba1f23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c449b0-f1a4-48c0-aa61-5e524a5a4fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dd336b-eaf8-41e9-9d4e-e120de6d4e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe489ce-601a-4bd4-b56d-f297e1c2fde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff3b0a0-3055-4731-ba02-4fd71a41f82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c846cec7-42b7-4d83-b735-ed9d452f514f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf11893-4595-49a5-bc8c-a836e85b2a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eed7750-7168-41aa-b781-e275b2527c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5269e49f-0d80-4bf8-a958-b3ae9f5c3e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c0c883-3023-4907-85e9-ec9bccaa3325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dad04b-df57-49ec-9279-97e0e1a6bb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931fd01e-8270-413d-bb66-bf3f2e73b0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228dc60a-82d7-445a-bb19-4714b36b5fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441c393e-9b3f-4a6d-a0fb-85f7eb63087f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca20264d-18a7-4996-a24c-399316ec8a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24ac713-3ff5-4d96-8f54-57c877ae61b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9880729-e743-4a1d-972b-c402901352dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd84537e-e1ac-4a47-afa5-097ba5921d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29acf62f-01a4-4165-8312-ee1bd349e6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461cefe5-2bcf-4d83-8d5d-9da384b4dc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a7c0b1-b165-4290-aa54-92b4b71a03b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0257fe-161e-4d76-aa5d-2e01d025a15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be67c28-1813-4280-98f0-91b49cbf7bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8228a48-34d7-4ce3-987c-170f25ee53a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e85088-3c69-43ea-bc0d-9ac4df847557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc13314e-8ae2-4c1d-ad0b-1fbdd6903bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5271928a-fd2b-4d78-b652-998c92bd1a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90cfe4c-6fca-4517-baf8-881c1f70469d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f802074e-d3b6-44f5-9a48-1b2d77db7cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ad471e-6831-46d9-b0c1-9e9f37838332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ee3f72-1c6c-46d1-bfa2-32c9908f5eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1877be-6580-4de7-8a11-91c5036b9544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a452ba44-79de-4e13-bb43-abcacf2342ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44b82dc-cc5b-48d6-a468-601da9b8d722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337bd22f-4a32-4b28-85e1-fbc668bf409f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22743020-e015-4b41-94af-bce5c95f965f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327d6b53-c3f5-4302-be70-18a161b08d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554bf617-2292-4fd0-9100-92d1f82a92bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba9ac21-84f2-43b8-9863-09f61bc71045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe893e9-0063-4fd5-affb-793c424a428d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29132c7b-ec9e-47b6-aa22-b52c1bbdd141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7286ab1-4054-449d-bd2f-a26a57a6b654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ceabed-c31a-4eab-82b5-40eb8c5a1ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4ab3dc-c2fe-4251-ad77-af91c8c6b076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc413f7-ed77-47f7-befe-ff15320f30a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0043c3e5-0101-4cbd-ab34-c9273e47e2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f829ab5-2a04-4311-9701-d3a9fd83f905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3e67c3-70fd-4f40-a86e-a26293731881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e791177c-bf0e-470b-8e8d-d824fefd07fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91277016-cb95-43e1-89f0-a97869991ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0f36fc-bf0a-45c7-acc3-0f6b5e13b757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7243bfb5-7dbe-4010-a66e-be2b023f54a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd57fba-1730-4ee7-adfc-690e0dceb140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f4fef0-bae9-4f94-97ee-fa1b50eec5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e737eb63-376f-4759-8f63-ef5c9dfd5e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39f90f3-624d-45d1-b823-f441c43b8ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efde4837-ceb1-489d-bfe2-d6f391fca95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c61aa2-000d-4c7f-ae8a-aea26517d2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca09b4b-b821-49f7-9674-a6593b9e5893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2da4f1-a451-4559-aef2-6ae89dc4b719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90b5e35-341a-4279-a0a5-a77cdbf80b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babe8209-40c6-40b4-87ff-5e42868eb6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870b6eab-a688-4206-88b4-6433071d4640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1b8076-1394-49d6-887f-e19726a5c765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4995778-cea4-4c7c-9461-1f64b6855610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4c38b8-39cf-4a8a-ab3a-e7dc07fa5b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf46a58-1372-4646-b792-6b6a339c1b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a7be58-d94a-443e-9a3b-1c79f201559c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b046452f-4926-4b5b-9f92-50342bf88a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1428793f-f7a6-458f-b0ea-6d6a8a410007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbde68bd-676c-4339-92d4-3e1631fa2654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968a6857-3fc8-4e81-b8e0-26891788f43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15a82b4-e1f2-4e09-8d90-9a76ca3b95da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fb4eb9-ffa0-4af3-b075-bcbeb98891ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921979aa-f4bb-4867-abe2-c9940aef47cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae2b826-1516-47b1-8325-4ed187e4b3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3096171-52a5-4ab4-8a7d-621c4c4e2c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743c04ac-3b14-4d12-bed8-8c82bc389eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219dc4d0-3552-4a03-91bd-c75cc34e8bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0eba23b-58f5-49c2-b9f2-3749b6c4e437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259c0b9e-22c9-4e20-9712-859dfdad18f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd46efd-0a77-425d-84a5-515ad7650388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a057204-aad9-41da-8b0f-c466fbf8de52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4676d1-f722-465b-8f74-7910a6c24d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8429da8d-a595-46bc-b5fe-fcea8eacc5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6416be57-6c06-489c-a41f-e9656c953b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09953036-6186-4a8e-adce-cd9b049c7401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f14d178-2cee-46c3-acc2-c6155ec941a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784cacd1-4de9-4b0e-9efc-e573b75eeaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acfd3ba-cf8b-4e19-93e6-2d4023a47922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708f4ecb-7c1a-4973-9616-9e374b6dda95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c42ca31-b6f0-4078-8723-48e0ea521837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed4dfd0-a4bb-428f-ae31-f7707de4b9e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953f2ffd-9972-4441-94af-914862676834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193dd7c8-b756-4012-bfa6-8d207d0ed977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af816d6-feea-4341-ad30-b99327c03c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccc634d-e88a-42ec-a105-c180d898e2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c2569d-7f96-4dab-925c-f9ae93c9fe5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a8967b-2007-473f-ae1d-f714e439b550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.202.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265615c4-7edb-4ad8-b1ca-160516c56479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a89e88c-9a16-49fe-b3ce-6ac0e7696413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994b46b1-7cc4-4390-b4c7-f3c70eeaf006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0e557d-9e2a-4179-9db9-9a8e5619fb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb96aad-6f0d-4621-bd5e-23da1b9e22ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184f922a-45f5-4380-be7b-8d031bfb0de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4781016-f413-4f2a-b6d4-849d35df8407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce03615-b1c8-4f28-b1d2-f896d6314fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6003ff8c-16a3-4465-b4c7-c07d34c29961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058878fc-8472-4d16-bae0-48669f9f11f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb528416-d679-4b5e-b8c0-11811b7d6baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a45e92c-751f-4302-bc5c-b204488b16ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b30abe6-3c6f-47d6-85da-a30eda271e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ba95a3-94a6-4158-9067-aa7741b1efb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b348fe-e527-4d56-8199-06c033aaa4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7635b5-b149-422d-8c2c-17b30f020b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.82.185.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6433d71-0508-4f44-baab-3f0c350d5baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a525d953-5b8b-4a33-9a19-5fee87d6d026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfb2e18-88b3-4ab5-85ab-9806d03a1f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3fb7b0-f5f0-4fb4-be4f-ad76dbcaa003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14e426e-de5d-4c95-a3ff-edff0e24ecf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc78e9e8-45e6-481e-ba90-b67b08631fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e772adb3-56f7-4c73-af37-6c5bdb2945e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce476daf-399f-4272-9055-fe5d6d245153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68b9859-33ad-4cd1-be1d-c04b78ada2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.61.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cee2682-3b0e-41f1-b7f3-e9193f71bc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.68.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9b60bb-ffe3-4397-a4f0-7411794e9f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6339250-acfc-4ffe-b667-771ce7a428c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbbff48-4cd5-4108-9fee-e53e991158d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09bb690-efaa-4d8b-b349-7702cecb693f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09728e0-7720-46b3-a764-00eaaebecd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5862f27b-2919-4cc4-9f17-77c3176cb23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.122.20.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7155e77e-b0e8-431b-9392-0be702149686", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.165.70.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2167a95-2b1d-4eae-ba26-0107dacfa1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e3156b-1b4f-42bd-9144-947721fba7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.41.232.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb5d849-89d9-4b5e-b41c-2cef30f1c598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.57.190.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8195f1a-a8ed-4dea-9b46-65b56542d3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.75.136.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87a4b32-48a8-4efb-9f8f-8e8dde0cd2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.124.18.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bc3d4e-5636-4468-b4df-972f6020b54e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.149.53.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d302bb6-69d1-490b-a4c5-fd7cdfbe75e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.208.190.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6adca00-acfa-4306-bffc-2ece486ba56d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.205.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48430996-cf44-4689-a0e1-a0f61b1db32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d700bd5-3c8b-4665-bf8f-c3a9d04589c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.124.193.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288c3fa7-8358-420f-9fb3-53d68ef9997c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.168.163.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47067f1f-43b6-4da3-bd18-9cf1cc5d279e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4b752e-920c-4be5-8df2-d2812574e7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.29.83.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac5f8f-1bfe-4344-a74d-61c0f9a76a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.50.55.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76352ecd-b70e-4f5c-a670-a2fc2470ebb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.63.202.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12819dce-6758-47db-af76-5dcb9318bf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.78.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e21f15-87d8-4fa7-9923-61533de3c422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4b2073-1dd7-40b9-88fb-04f7babc01be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.146.129.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c31dae-a7ad-49d5-9280-c72361425982", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.151.27.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33ca6e8-375f-4585-b374-6f39ff8c5190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.156.197.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72eed60-5152-4280-b713-e974f50ad16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.159.90.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbebcd2-63ca-415b-ba04-f99b13a86f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.163.247.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e592196-13d0-49c8-92c2-e9143743378e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f42b2b8-d494-4a30-8bc8-840e7e9d1fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.50.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abdae62-61f0-4880-9715-5b6a045b97e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.192.197.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62e6233-f2bf-4a0c-b973-e5affdf80126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.242.185.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7b5b74-a294-4c0a-96da-552eccd826b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.223.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f283e2-8969-4d94-b994-df221a404416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.3.112.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2716c4ba-fea6-48ec-a5c0-d272dc9093ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.32.69.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1a1d31-b953-4afa-9d8b-0d9b7f9e8264", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a2fc42-4cc0-47ea-aba8-91ae102b83f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.6.235.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb258d85-0727-44b6-a27c-5f4aa2e60e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff6bc68-7cc7-46e5-8f64-3b418a60d236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.91.75.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c598636b-909c-4706-82bd-f343963d7009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.91.75.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d52984-2733-4486-ad2e-ad5f13d23521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.91.79.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896d25ce-cb70-4701-b954-135d998e9712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.152.193.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813b6057-a6ae-4a56-9431-27748856d2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.18.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0382c2-a2e9-44f6-9eea-a0d79f80f1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b2695e-79ce-400b-bdc0-7bff032dac77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17f9816-6b8e-4a21-b8fe-7a421fe8a3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bfdd98-3c00-4cc8-8282-8e214e3d18a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a392ff-9981-4dfa-9698-e74492944022", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.118.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb98d99-8a76-48ac-a35b-742a0b976f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb1bee6-2a23-4067-853d-22582877b80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873a6818-7e72-4a77-9d7a-27397aa05abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd06669a-73ad-48a7-b504-981c1a624ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6411e4ba-3fc4-45e7-846d-6834aab38cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a1f48a-03df-49c8-a75d-7b1d01c8316b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe17aae-9547-4991-955e-8a19bed2f359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f36a37-69d7-4a5d-87a1-15dca853803b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a96c7aa-6b3f-428c-804c-1520f7ba37ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8bdf5a-baa0-4b84-9f2c-9a526d3c1165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f96690a-4b4a-40b7-bc29-6c6d1f0adea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eda6d5a-02c9-4aa8-a299-3363aea514bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db5f8f9-917d-4bc3-9882-c2e2a67caa6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e118fe-9597-4c4d-95b0-398a0cedf02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b9abbe-97b1-43cf-9c31-79841d152165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfac94d-0bb5-40ca-b0fd-5bc3d306e6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae3b563-f132-4259-96f3-29ee8bab2873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a296a7c-1794-4e62-ad85-cb85619fe3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26b8828-5101-41a5-992f-e72cfdd73303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d51c09-900e-4969-8b71-febee0c7970b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce6623d-d295-4736-9900-6b7083fff330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d8123b-4b9d-496c-89bc-36a6ed7cf79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1d7233-3a6a-4b1f-863c-b59d7b46f952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa058b3-cf59-4347-8b1b-e4811624772d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f982a7a2-e4c4-428b-b6c5-dd4d1a7815d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b948a3a-83b4-4777-a00f-3775c5cb27f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c767de58-571e-489d-9a2b-ef118979f78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28696c78-2f7c-4c47-b004-fc86a93a4be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0c530f-b0cc-49a1-860a-12c6fa3a8973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc5cc1f-b7b2-47e8-8bca-2cbb96874d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c74081-0219-4ba1-84fb-f47c6b33e1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11fa46e-ddf7-433c-925e-f891e8a7410a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b0734b-3bf5-40c7-bf28-077b59a96e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e743aeeb-c5f0-4294-83d7-7855404f478a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c92362-89c5-40e5-a66f-811a8244dbad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1508da9-dad0-49cd-81a2-5444698b42cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15abb78-9cb4-45f7-ab98-428d4d17f4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f32e65-bf4b-4aa8-a33f-d0d7e90fc412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f65d2e-9d59-432c-8b32-101901d2a080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d432bcdc-a782-42e1-8ae0-361bb94e1e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaa7b06-7260-46d8-bfed-c2c002076487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794ce7fb-556e-4bd8-bc76-2ae3638627ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2608415f-6c65-4d57-9d4e-98e8082646b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8d252e-5dad-4460-b90b-935d5032148b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df04f595-f435-4bf8-97ab-a0de8b799bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13819f29-c968-486c-ad75-6485cee13a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8114f361-ba69-45d0-a007-02390106aae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3bc8b7-1860-4465-be8a-e54d3ccd405c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6a9f6c-48be-4243-b4ae-cbaf238a0a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521dc613-ddee-4274-822e-65bd39004e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481c9ef3-2d7b-4a2a-937f-03fdd9504cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e1abe3-56e4-4c32-90dd-514b9fd4db6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c688e4a0-f987-4f0c-a86d-7045a8b445f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93edc97-582d-41b0-a99c-7b0c24c93c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3581072-980e-43eb-a5ef-514034fb12e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8b8170-25fa-4248-bbe3-93b6051510b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89e54e6-6053-4b25-a098-47ce496f338f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9913499-9dee-454f-86ba-7c5337041c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb55d9c-35e0-4bad-9086-263631f6682c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bae83c4-1624-4b82-b0a9-1a3ce7c14ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bf4af3-2a71-449d-8e9f-8d7b83ad51b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd8c8f9-9de6-40a7-a687-40c6f24c460f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e46f8a-4ccd-4c11-b2f6-8fb2ee448e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777a2cb9-87fe-4417-ba1b-844640a75e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d872dcd0-faf5-46ee-8b40-b3876fbe3937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ca9306-24d7-4a23-a5ef-d9a4384462db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592fefd9-525e-4bda-b79b-ee9495e99741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e318fea1-80e2-4556-8474-8429c8bcab30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14405e82-ef42-4629-890c-f4cf89ae825a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862066f1-307c-4578-a22c-b045501c8fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4277958c-4b94-4f91-9d37-61d881a752e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cb605f-651f-466d-a5e1-a313098f6c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a829ca-aabb-4620-8457-20b25f50f949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724e6464-3112-4e1e-8413-af8d877d0589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89caf99-1c6c-45ac-9b2f-848baa5c3c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e478119f-0c5c-477e-bbc9-ac1b7534d4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b990c08-2a15-4adc-99f6-e4952ecf68f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4141ab86-6552-4305-bd86-a4f036d79bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4910afd-1f8b-4b7f-8cae-65eb2ac12a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4cf1cf-818a-488a-993f-2447ab325fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0d2c50-058f-4d13-87cf-887ad9f8d0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decaaafe-f36e-4bc1-9f3a-c75c39594175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97c20e4-248e-4310-aeb0-b077a375c2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970b8375-7e75-4dcb-95a4-5ab39adb1195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225da4f5-de07-4071-8762-e0793a14b870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30589b47-07d3-4507-9843-94a808866d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ab615f-b760-4184-9f00-87b25e71d1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c772e101-2013-45ec-98bd-399d235628d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2fdc15-f3fa-4730-8b65-d4bfae76f386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e4e8cf-8cb0-4d1a-9fb3-8f02e1ed537d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5741f0-a571-403a-92d8-7a2d64d5a0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7a79af-5d85-4459-b31c-45828e20bdf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48c4816-9615-42e3-a841-5503f52a3b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f59d43-57a6-48f0-b734-3a73b519d397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c64540e-cadc-4e7e-9223-5c62b9bb6e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d41339-8dce-4da0-b1d3-d718642b6e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d13e17-2502-492b-976f-f827fe496cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a83b650-fe63-4e30-9072-e18a17f6b753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2338c406-baae-4a17-a3d0-52b5dff4105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d97111-95a0-4269-a036-09e63f496f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74629ecb-ffd9-4efd-a0c1-decd4a9797ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fe4cd5-227f-407c-b0eb-2742efef6a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82a43fd-cfdf-4899-b995-a19e79bcb81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b53569-fcfd-4770-b2cd-103f4036d90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e515b4f6-bf5a-44f2-9c3f-c927a9afe9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648ff1e8-ce2a-4152-bdd6-9503c43f006b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de09dbd5-85dc-444c-9229-8d6d5bd0d4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7669f306-72ba-4506-af5b-59a5e4826753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdc7d52-4088-418d-a338-a6dad10c2a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9eca67-3757-4074-9941-e6f318c6efe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07c61b9-db33-4a59-8a6e-ddc021f5f00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e8bb6f-33a6-4b8a-b7f2-caea3a798bb1", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: digitaloceanlondon, openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41abc55c-201b-43da-a48b-c4834fb37478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d568894-7ed8-413c-bc33-fb3ad17243e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9102e69a-0ab2-455c-8f8a-ba32ed692580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e524d716-9231-4f00-940c-13871ce86fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfd22ca-31d7-4b9a-82b2-546bdf037f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cfee18-0301-485d-bc0d-7b268bee1af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384011bf-789a-4719-bfb4-e24d350b82f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dee2c93-5d51-42c4-b68c-c6bde73651a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2947f9aa-757e-4a76-acdd-6793a2543fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e205bcd-d041-4c44-8d14-e9cac40ce5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a5ce70-4bac-4eb8-b620-e162866a7c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a584db-5bc0-4890-90dc-cd4db22e897d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56e65a6-7036-49d2-8a54-9a3a5b3a4ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86950e77-2488-4c57-b79a-d611e5206991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837ccfcd-5fd1-4f7b-ac81-5974e07c65ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4f09b0-c63a-4f98-be86-ee75a71d6496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ac4ff4-3451-4298-89ad-fed7fb6992e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4035ce-acf6-4f52-be13-3aacd1076e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9372320d-48b4-4b47-9b36-689855f5b625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e482a7b0-af02-4624-b51c-2f7aab222cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7fb563-87de-4e55-8342-fffdf48921f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523847db-b6e0-4d60-8800-818db5ee83dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e695b41-c7d3-4269-8749-237efcf97338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db2ce6a-6265-4189-9393-2fe5ff13df1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f78bf54-7480-435b-8054-12155c05e343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4791f2-a327-4865-8de8-d84ef4e5f35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63044c3b-6c0e-4e35-aa2b-55b84c07ef2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b84b55-54fb-4d84-ad04-e1fa8abb00d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba089b5-5049-4a6e-9e4b-5a215716d4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe50425-d6c9-40d5-97e5-bd8d6445acb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bea9d8-2bef-4a65-ba22-b5530347d811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e049947-3bc2-426c-a425-6f7cd7d695c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da42b07f-ffcb-4b9c-82a5-02ad0824688c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bd17e9-6d2f-4e19-96d1-b2c09b700c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece1937b-2df8-4459-847b-0bc30bf51ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4430e357-fc1b-437b-bdf8-58531ddf9676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dde777e-a759-436b-ab49-5ff42c6f93cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.183.111.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c82c8b3-e4e8-4558-9e5f-deaba8d33a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa4e6bf-b36e-498d-ba0e-20a61c22eaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.169.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5ac978-f7ad-4c09-a1e6-dc107e40e1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.53.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed68fd1-adab-45a1-8bbb-e589eb6ffd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.71.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8124373-fee0-420e-80a7-790cd9db85cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.76.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d899873-a1bd-4c9d-a3cf-dbda24b5b8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.206.103.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533dad28-8706-43de-a434-a6b7ca6b7f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df52926-0809-4ad9-8cf2-a1d8e1924231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221d0959-c20c-4939-b64c-df4ac627e5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90f5eb0-8018-4722-888d-b98599cd4d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7390adae-93df-477e-b7d2-d95d0be41707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.134.141.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60859541-226b-484a-8fdb-9794536c599b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.205.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e39044-cb08-4744-88fa-e5ade5b981b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.217.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec6449c-6bbe-48a4-ba56-1a69be791100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.236.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd3016f-8400-4f41-aada-b990932d46a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.250.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0eb62f-17e1-45f1-b3eb-1219531c7bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.15.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff21f357-17fc-48b4-bec9-e602b07ad5a8", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.2.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b228c6-d4d6-40f7-88d2-52b8808c85a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.95.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8ed09f-7303-46f3-9ae3-4e3c95bf7e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.244.242.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e068f5-650a-486e-b15e-067b3dadc832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea595c2-b825-45a5-be05-49e8e9477305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f865f5b9-3ea6-44fd-8a70-b2c5801c85ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e105d7c7-c360-473e-8a98-16dbfc5cd3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0b0308-1e32-45b3-80cc-8f20ae617671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0118095-ac62-4d89-a046-f4f770f0e997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88379bc-75af-4c2d-8074-88a0a797ae79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c31c1f-3836-4d63-88dd-0aa31fc214a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ea081b-795c-490c-b43d-4192549aefcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f14ff4b-734c-4fc2-8261-c3319a88f7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d9d98c-c6ee-425e-8eb2-90b7476bae4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7057785b-d235-4ca7-9595-9a0c171b0b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d2a48c-2536-4270-bf8d-03446e47375c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02feb97d-178b-4e5e-8615-11b212b75c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cdb6a7-6190-463e-9e29-18abf3cb3975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897d495a-6d23-4816-9e46-71321d3d2b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.89.60.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd96079-5999-4e31-a60e-de2df52f9e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6d0356-1513-4712-ac91-0b07f3e4b80d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.52.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3e7f2a-c25e-4932-bcc1-affad829a712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.182.216.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194bc658-ce84-4af9-85b5-e085f31afcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.209.8.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92d5b35-c692-4411-9f95-599ee9db2915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848bc9d7-569d-43b8-91e1-f0487996a722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317cea4d-737a-4e0c-b3b4-5929b0342814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.240.231.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a113f383-6ebb-4168-8b78-dc7cee47d2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.234.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388560c4-64ae-4b68-9002-6867f8f594f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.237.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11a42db-a598-4899-aa63-693073433fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.243.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75881821-489e-4c41-a3dd-58935ad2cd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.74.83.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2825e58-3882-41f9-8efd-b43b47f21187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e26b55-e6e7-4b16-b06e-f9ddc0fdac1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed55eecb-bc6e-4951-9541-eac9e3970bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8747de34-a4d6-4db7-8121-e55baf469b72", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcaa9c90-5a84-463a-8341-45e86912334f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d37207-c23d-4764-89e7-a9f3608ceffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4302fdd-f3a3-4781-af5d-c88791e2c650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059e8bbd-20f2-4838-9f02-a22bdf3c71d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.176.44.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fb82c3-99e5-4903-9411-df9ef0f52c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ec25fa-2a01-4397-9edd-a341166c83c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.209.222.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb92013-285b-4369-8fff-10fa744a636d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14ea55c-fa93-4b3c-9f05-f4eb38eead7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.4.66.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7aa620e-1013-44d9-af33-67bb1253f4be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.61.64.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e3f9ad-12f4-4ab3-810d-4c85b562e5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.79.142.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e190f79f-f39d-4bbe-8f63-4e3eca6767f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fa582b-8fd0-47af-af74-11c810684f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.216.58.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43959dd3-bab6-48c8-94b8-52173ba7caf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.228.142.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9258af37-3530-401e-bb6a-748776d4f7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.240.117.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fbbc50-7636-4e27-b209-7f8f28858375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54efc74-17aa-4169-96ad-9d68ae6896c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bf777b-0cc1-4323-9533-22415a848adb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.46.177.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce762460-ad73-4e7a-b674-04d222fb9852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71067e92-30fb-411b-b42b-4ac81fe125e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f37193e-c3ff-4c20-b818-795e0254582c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae804a44-0644-4127-8001-1f7f6f7498be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.123.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd0145e-1024-464c-80c5-822ebaee0442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64adbd5a-ab27-403c-9fde-828f04bf5fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.14.247.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a945d9-58f1-4d3f-a8a9-a0d1f98947d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.154.234.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56e6b9b-503a-4ccf-8b1a-28b6836cd615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586d8382-168c-4248-9dc2-1a6f704ca417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2946d1-9200-4295-b588-a23abadf154b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62a0458-1544-4c39-8e94-dadb7fde5301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5f8ed6-8730-43e7-bb0a-14fbf6e480d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9d86de-d940-45bf-9a70-4099f7e779a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4feb3f-3c5c-4376-9d1b-fd16245baa38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0238901-7a0b-4c51-80d0-c9a1781ba753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839da48c-583f-46c7-adc7-64c424ef4f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1f2db9-ac6b-4c56-9fe1-71c7b627ada3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5457699f-6b32-40ad-a774-2d99e7535545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003ae064-6d63-4b97-9b3c-82b0964bf129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1265cf-5402-4e8a-b270-6decdc84e06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75d124b-58ad-4c31-bf05-c3d27d05382e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b411f9-a2fd-4ae4-b2ce-a4836ef64344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59886951-a435-4b7c-9e06-1fb84db35188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca7b058-588e-4e39-8c0d-c1a3fdb2c2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bf87ae-0a2f-4972-a615-bcf52dfadf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ab5c38-49ad-4c81-b3fc-e4cbb8b7e24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83415ee5-26a6-4038-9cff-9e8a400b72f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45432a3c-1a94-4f1e-a703-3f743aa5ab7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169c396d-42cf-4a21-9f17-296f5e6b68eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851cf9bb-c1a1-42b0-88a3-711c2554dc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc8efd9-7afc-4c98-8cdd-c3d1a6642ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb09b1fe-2da0-4ddc-a314-6b8116dd8771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652547fd-0889-4950-b403-5cee294585e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c945fb6-3f79-4128-a119-031c095d4a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c5ac2c-b013-4eb3-917d-84070c0f3811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd1054e-4bb3-4c37-be1d-56a633f1b89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3223f3a7-1499-4951-b3b5-d1fd9e4084f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1c80b7-697a-4029-a29c-28159809fd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.22.93.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22758e94-32be-4ee1-ad31-9b611b66a69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.247.156.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd4dde9-ec48-41c3-a143-95d09dc5e6bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e293cd38-294a-4c8b-9aa9-613bd35c964d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289053c4-4a83-4920-b9d6-582ce13018d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6d08ac-4827-459f-a142-5b642a0e8131", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f81059-d917-4935-b52d-2f5fcd4f8016", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e169f3-f6a2-4419-8806-11bcdb742332", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1255a81a-ebcb-43bc-8299-53687fd65931", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af47159-24c4-4846-a5e6-cb9be0d41a43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8f3aa3-e4b4-4625-93c4-04e101b15703", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33daa086-6229-44ae-ae47-a1a514fa5fe4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec18d42b-c2bf-45e8-b003-acfb70375227", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.30.36.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afe505a-ebb3-4f8e-9984-70050f92aa01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a661af3a-8c07-4ea2-9adb-65aefa0dd1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.49.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec76b93e-fec2-49d9-a0df-874b406395b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.54.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615418dc-1ff0-4078-8f29-d9ba8a5b897f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.251.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532ed7fe-9d0b-4efa-a20f-093a2d72ba64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.109.169.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0cd579-779a-471a-b679-54cbb5261d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad99b36a-f4ae-4805-9ab3-51d60f810baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b738d2-7dc6-429d-b51d-3d9ffbea192c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6996a3b-51fb-4d29-abe7-cf2e25898ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad306525-ace8-4ebb-b2c1-5085186ddd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbd0e4a-7a82-4c94-8680-1fc13d04c5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d01ad67-3109-4911-84ee-e5f8215f47fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e6ccd7-60be-4904-9c6c-4a572e792af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a48ec2e-57b4-4860-aa39-4f4e0dc610a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2e26b9-a1fa-4749-bfa9-03fab28ce819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.176.67.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a8bde1-3fbd-4139-8b10-78b63d999245", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd7a24a-8dc2-4184-a91e-a3bc14f0f7da", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1878032b-c3f5-4eb4-acf0-8045273d22e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10af584-3178-4c4c-ba4d-eebbe4608187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7457ec3-08ba-4b6f-b6fa-f76e8dd78b85", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c866b4b0-c338-44ce-be28-dfa6e59a9e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ef184f-5611-4da9-b295-b420ea2fdb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.127.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b862ba99-cd9f-4f69-afa1-b3355014a276", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.236.160.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41702ea-479b-4d66-aaa4-1d4f39097385", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.128.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c127c2f5-49a7-4152-a397-9d7416e4395b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.236.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ae6ffb-7d65-465f-8206-b0a1ad51f95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.239.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a11ac1-306d-4ab3-bc4f-13921a5a46f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0012e887-3fd4-4839-8704-a5209dee330e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43346e77-92e4-4337-b3f0-1a72edcb4379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38125d22-5608-452f-9cd4-4e96ceb883c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52566f9-7b25-49b4-92ec-9f787b8b999d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a94cb83-dee9-499b-af41-017ef12231d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccec4c55-2b10-49d1-9beb-f12aad831244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65420f6-d9af-4616-95cf-1a8ba33e6aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dee1a32-bb76-47fd-80ee-11e2ea64664e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e05996-fe2b-497b-80fe-c0a7680cec63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95537c1-332b-420f-a784-227c33a7d6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d86194-0203-4229-b3f1-cf64f2338956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0319fd-b5a9-4744-b9dc-78f4df63ada0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da35cc20-16aa-4edf-a0f4-1fa44b5a0558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b961e59c-13b5-4634-aa4f-76c7618bf577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3c4e36-24a9-4333-a544-3221110cf1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296c2e98-fc3f-41f9-9e5c-3732698fa27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190311c0-b9b3-4750-97fb-7f5a98c5fdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b23327-f7ab-4e24-bd08-4b269e5bf5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f0354b-6095-4715-bf4e-2122527440e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699e3026-1650-4370-92b5-b3bf5bcb9f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c8b965-1f6a-4d3c-8f92-9700fb5923c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53edf3c-4f84-40c2-b57f-9976fbfb7e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7e6a33-d5f4-42ac-b9e0-95b2768f6750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecae596-4cd2-4769-9518-e8358084183d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44414e4-1814-4737-bda4-2a36bcc70545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7f87fb-5efa-4d62-b224-ef4d2f7655d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aa9001-d47a-4d0c-bbe6-2b90b1825b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2baea9b-638c-47fa-9ae6-d205c8fe378a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c247bb59-1864-4834-9b1a-152c8ccee464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eef394-d37c-4929-a6ca-208c75154342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77487b17-08a2-40ee-bb97-51cf53d29fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5de181c-79dd-41eb-bffa-52534af3cf75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358c5c1e-6c85-4401-8e44-78eae2525519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5869a277-ccd0-4b61-b8fc-0cfcaa70d357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37b804d-c9df-4a32-86d7-8ad1c816b3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a237a85-4d48-498d-8c90-725d28942807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9b98e7-ec6b-4ad9-8fd8-16c387a0794c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeff690-d396-457f-b9c4-ddbab1ffa245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae89b3b-e3f8-4bb6-9857-e0acadc87db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57360df-63a5-42d2-9d35-9b359cca93e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54b3f76-f91e-482d-801f-7f706b208e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea32608c-ae8e-4667-a42d-7492056300d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595d05dc-9353-4979-b366-6e5aafa6a8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a40a0f-1adc-406e-a436-82e20c7188ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.238.93.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9034bc33-ce58-4f77-b0bc-20f5de9451a0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.65.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f33408-e95a-4124-8e22-27920321135b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af631995-f96b-4913-b4f2-6ea26f191724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef829b6-8758-4fca-8430-4036b32c5ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08957615-d801-4be5-8bc6-ebac4d698e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58933f53-b4f2-4862-8f37-64b3ed4608b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45fc5a8-12f1-4dd8-8d8f-843e3eaab6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec1e811-436a-4394-8c6a-f5ad71eab629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee8a2e7-6ee0-4d01-b6e5-e5197f18769b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25285dbb-441f-4ecf-8421-5b2603d40c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f17506-ad7f-4fda-8c2a-796c8c482a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69bb45a-610e-45e2-a604-dee952a8dc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da6f9fc-c3eb-4649-b2d3-354d7297082a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241b5b5f-0562-4fae-a806-23eca37b4dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbc5391-a5cc-4d6a-abc5-659c13871065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eb10ee-4845-40ac-93b9-3098cf28d739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25c165e-8cba-497c-892c-ca767d5026a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53708ee4-e5f3-40d9-897e-bf2dbd67b1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b2d506-16ad-4362-83ae-324246eeecbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12430e5d-bb14-455f-b6a0-62fc77abe204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e2ce53-585c-4e96-bc21-4d9a1d76d892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2062fa55-d14b-45d3-967c-903718e733ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af33f8a-1dd9-4a9c-ab1b-01c6d7bbe7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfe43bf-24d9-438b-bf4c-38806c13c5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb13500-50c5-4546-8ddb-c13aecf46142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fc1bc4-57f4-41df-8150-3e4bf7866344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209ca0e8-6cb5-447a-ae0b-226fc20d6f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8e2e2e-ecb4-4eeb-9f74-9e48f796e715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf913d5-2b81-4814-b62e-e0213acf2a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a158b93-0531-4649-b610-86e901184f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e14c0c1-7694-4b12-b6dc-135af5926b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a596e8-8137-4838-a080-a9944855c66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f53420f-71b0-49bc-acf0-f97898000f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7619c3-0b1b-442d-bbfd-bf96ace9b1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f26053-2fa1-4f62-a6f5-81699c786adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72923e24-ce73-4ddd-a2de-4f3e7e2bc144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5393046-b17b-49af-b5ee-f29eb7bd0894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11f63fd-38a3-4168-b9a5-981b715ab891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc3b417-d427-40cc-b3ff-52765d840352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e6903a-13ae-46ac-9541-9723da046af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf3c575-6ddf-431c-bf50-2e7672138afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0f2f2b-15cc-42b6-ab1c-d7ae397a2cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde9c9db-5c6c-43d9-9f60-d062e3eae5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c3718d-6557-4486-8bc7-777d6e23943b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c25927-1152-4118-9dc8-adacbe9cacee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f466887c-76fd-49b1-b41c-98a85bded880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f887ea4f-2ee1-4fb4-a641-5360f007d65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093350d6-5f2a-474f-9657-86fdfe31cc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99604ee9-a2c3-40a3-b5cb-2cf5fbd80def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbadd32-2d3a-4631-8206-2aedd7450c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3daf4006-87b5-4f20-bfe0-e89765c3a33a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115d6675-8809-487e-aa1d-250a9526209f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc48245-ff83-46ea-8c16-da374a9992da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e798f319-410d-474b-b77e-a7b2d8a8d0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59e4b70-d563-43dd-9da2-049c747decae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb96332d-7da3-4528-9fcd-03d1b94fcc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914a342d-7059-4cce-85ce-d10af1a8c71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96be1443-4b02-4663-8842-6ff525bad1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5503841a-20be-44f5-a85d-aa99271243a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bf1de0-2d8b-43e4-b418-ffbc6e786f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7655edb-baaa-4ba8-b435-21123f93868a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0078877a-dd56-4296-aa2e-0bb174ae52d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c3e77c-26a0-402d-857c-44cc60344b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bf6583-163c-4ae1-b7ec-87c37a6493f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0914fdab-61a5-4cc1-8791-f4966156e0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6beef74b-4678-452f-8341-26049d558e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7477003-9e7f-4577-846e-0135fea2cc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe6ada2-4b92-451e-9482-a923ebac8165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a195085f-d36a-4746-b8d1-b4aeb06e3961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef8cd2c-a409-46c2-9cc8-dd4ba7aeb1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fc5d16-aa42-42b5-ac64-729a2df6fc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d05297-b06b-4fe8-b6e4-2bbc35a80061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d38d22-91ee-414b-a4ef-f82507fb0cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f5c791-a927-41bf-afc6-88a97cad1b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fbed82-452e-4e1f-a3e8-7bd34a467f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631d23c4-3a16-43bc-8010-b7f61cf7116e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a34744f-d01e-414f-a3e8-b8038e7e6d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cb6df5-d96c-41a6-a2a4-2d6db4ac7b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461dbd77-df2a-4c35-8c64-8bd9b2576b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e63383-d0c8-4787-94cc-a098830b8206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36e69de-8d81-44ff-a23e-d662a6ce51e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6758d9da-0165-42da-bd09-88a85fe02983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe980d4-389f-47d4-95c6-ab2e56ea352a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf8e77a-1087-4c26-bfdc-bd4dbc38da27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794a5528-c3a6-4b4b-9436-e77356fa2411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffb3dc3-d07a-40d0-aaf3-4fb24cc5ede6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05211324-2c81-4333-b148-aecf9602e1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bebdf4-b09a-4a8c-a631-f3992af49683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22e365f-6028-4614-8b4a-b5fd407eaebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf03a8b-4c90-4919-8c59-50b8054b57ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5f048a-6e5c-4de9-a5bf-b919a1f58cea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.57.110.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd787c2-1f55-4d79-9d77-44ea84ce0e22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.163.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fdb595-4742-4a89-8b0d-6d05ef980932", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f255913-42a0-4ab1-b1b6-c24e3849a3e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ccc54d-d1cb-4dff-8964-3d369e058557", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50ccd26-b5bf-4509-a019-6a29ebfdd1a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e84fb9-3e75-4659-9ef1-5584042e21bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.113.49.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4448ba-05c6-490d-a100-4ab1b2596788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e347aec-08d0-4b89-a3d0-666b31dba594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efe1ef3-136d-4964-9ad4-c15a05a3ffb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43c40aa-8cdf-40f7-8a25-e78ba93d81fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ab1116-2b3c-493a-9e69-15b6da90f481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57ca51e-0bb1-4685-beed-9f75e273ec19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029881f8-ca49-4efd-a87c-5ee3d462c0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fd6ff8-87f0-46b1-ac54-e07ea5e908b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8419cea-fabf-41e6-93dd-ae25c2f1b993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ef8676-d320-4d99-9755-074720ea510d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e9b77f-4d71-4154-8d9a-cf20159e89c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1834c1-8f09-466f-aa55-935acb379d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.144.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783c0195-35b1-4d7c-ac6d-a17b32ebb284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.173.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b599fc3-95de-4c09-a549-bf5f663b06e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.156.65.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3a72d2-c72e-4861-a26f-cdd222c319ab", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.50.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4517fa5c-a0b9-4c3b-b178-4f5ef5bfbac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b18139-fdbd-4dde-9de6-244b2ddbd72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307f928a-0089-4bf2-a6d2-ba7e0a4a720f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.218.249.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3df25ab-5505-4dd5-a5c3-339ab62319c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4573e88-b233-478e-af58-10f03b4007c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.1.221.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e241b97d-f6f1-4206-88a4-f6c6ae5e1e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9e3b51-2732-4e12-9334-ed2d3360f868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.185.241.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4493a6cd-f5c7-4820-85fc-00501d0299c1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.245.1.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be472f5-b70c-4ae7-bead-2e9f6a0593ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.250.181.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c49726b-cc46-4533-96af-c1b0db99dd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.92.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da43478-37d9-4afd-b75f-bd3c7f0daf74", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.131.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaee98e-b3eb-4be1-91c6-6392664db55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.102.104.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6089c9a1-212f-41ca-9a74-308604674076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.146.66.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c54418b-1962-4200-b9a0-8594ce5375a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c7f7d7-b8c7-44f1-a956-da9f0ed95f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452e55f6-8b4d-4bb7-acd9-486840f5a13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.77.189.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b042e901-f36b-4ea6-b591-4df40acaed9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1ed98e-85c3-4c00-979b-17acaff6aa0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.133.210.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b045dd-8b91-42e1-a7f0-b8a4be0c1ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.118.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83d56df-b355-4b4f-b1d6-4a2eaa369032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.162.198.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--056c7b6d-9876-4543-b540-ca49e3cf03da", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.171.45.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c878643b-6996-4278-a848-c0f0c1746b02", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.179.138.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52f86bb-7d67-4996-89db-3740cfce17e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022ea75f-287d-49ce-ac27-d49e889510fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2763d0c-0c12-43ce-8323-ec5e16814bd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdcd0a9-046b-4245-a015-e42dc80614d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4425ed95-b367-45f2-838a-a92d3b632b80", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e873f4-3281-4b88-bb71-dba3ef383c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ee69fa-502f-48da-bf6a-3c62695ff17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.210.132.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da0c9d1-0231-49e6-9bce-379bdf3ec368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.246.79.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d5ccaf-02cd-454f-9100-0f54e0926f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.249.15.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64c0f09-e4c2-4fac-9649-ac8702c178f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8de2a47-ec1d-4f50-b0d2-193648d0e04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaba3e8-346c-4325-a020-fe263e7d5843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.201.102.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb38494-45fb-41b1-91b4-545d540fdb50", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.217.95.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8088419-84ee-41ea-8674-b374bff0502b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7a6025-91e2-4dad-9327-37135cc02e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.234.36.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af219fcd-4695-4087-9bae-a670c12f9156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.236.21.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e5ad4b-de8d-48ed-acba-f29f34a72670", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.102.21.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd06d12-d157-4dfe-ace9-da9d7578a890", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.118.151.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a900d4-7cb9-42bf-ade6-7e8fd3cac642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.128.44.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00bbd8a-61e7-47ed-ba07-f9639cba1482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.132.26.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c4591c-ef6b-410a-a97a-f7920fd73d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2796963b-499d-4ca3-adbe-d0fe79372da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28e255c-a051-4649-ad1c-13fe9fb5b9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b0e871-1618-48d9-a609-aad33ae842a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.211.66.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654f465c-52cd-4ef6-b259-435643e22108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.212.83.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1039ef67-56a7-4aef-b2c7-188b6b04917d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.222.72.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a624bdc-25ff-4ad8-8c0c-80f4afb7bee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.252.21.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45857c35-a0f6-40a2-925e-2d1207512460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.88.163.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7f99c3-e4c2-4020-9b2b-8fb04365dd08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.89.169.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a33d2b-af41-4853-91d8-2986481d43f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.90.212.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8906f48-2801-4bcd-be71-e27b7e92f2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.96.44.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b94288-1454-486a-a1b8-0906be101132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.108.176.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3654ce1b-7195-4fac-b8cc-520a9f347a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775d2535-2053-4bdf-8f73-b0bfb2bb9b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940518c8-051e-4456-a889-d9070af3fa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.43.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d0b420-3b74-4bcb-b1e4-5f06254edfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.43.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ccccb5-2db7-4c77-b138-305ef5d7bc28", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.44.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f29e0f-a77b-4894-94b5-be9c9eaee334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.130.154.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0121ac-08e1-4535-9a71-dad787cc32c7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.15.246.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06d33ae-a549-433e-b739-e16356882ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.22.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b37b10-0481-4806-951d-775a77f35c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe28c58d-b6c0-4f28-9e5e-23f622fd9e8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.197.186.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2b3e13-1229-4621-a718-b898905fb3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.162.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d462107-e352-4e79-945c-e792174d05ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.164.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e77300-4a98-414e-b5b1-7d54491f6599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.176.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d4c19e-c716-48dd-a8d0-6bb1ec157ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.131.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8f85d5-f43a-4796-aa05-8dfcd5f51397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3253609-ad88-4fd4-8a6a-6f585de8c6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.73.51.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667cd083-5a3f-4fa5-a54e-09b3781d9e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.83.21.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705f661c-343e-4752-af06-18739700397a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.102.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c423bc-0eac-4012-9293-9465be760393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d65699-34b6-46d2-9f77-5f36df12a9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.43.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502c4004-5a95-4f4d-b722-5e42284a709c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0157e47c-5fe1-48a4-ba90-88f1e2e12e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12fecb5-1dc3-4d74-9f09-8f02b95316d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9883b92-8e40-4948-bd1d-4dbce7af61a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014491ac-9d35-4acb-a9ca-9c0ef51cdc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7beb7432-2dab-469f-adc1-99c1b663830d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5ad5cf-5bf3-4949-acfb-9d51612847bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7535ceda-d173-462a-a716-f54cefc21ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dcd7c6-a3c1-4b1e-a254-5e3a53ec5d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc31b3e-1cb4-4e5b-97ac-8df5af10ad6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f943e000-ef25-495f-9c6b-fbb1ad0b6adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27c6a26-57a5-480e-89dd-e115b388755d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17636bf2-c046-4999-9fdd-b0645291e379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e513743-b9cd-4468-98ab-114022e12bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd45799-1725-4a47-ab8f-d62e2ce287bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703e8e51-aa70-422f-82c1-5e95c5fbc6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.21.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b644acdd-8e27-4263-9b42-b58eacd26f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.29.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b27898-600d-4497-9b65-a6d9126d28db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4472bf-a87c-45fa-bec7-3f7ece25a078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843fb7e5-c46a-40ac-8f9d-a206fc03bcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1526b77c-94e9-4d8a-a303-ae6edea55f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.166.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a23156-9e66-4627-ad77-9cbe9907ff05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56db013-1a5a-42fb-b2ae-39db4d521bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4371bb7-415c-4d0c-b6f4-22906947df1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.110.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af251c68-d8ba-46ce-b9d7-b254ad1f760d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.252.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aff122e-2bb9-4127-8a80-61b7af31bf4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.137.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516b1ce6-11ba-484a-a647-2d5ee07a9d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.20.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82ef9cf-e222-4f7b-a077-10f378f6641c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a44570-906d-47a8-aea4-9bff6629e2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981f1a56-e238-43a1-9901-1664a1dbf194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.101.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0576c46-211e-4741-a03f-27ed9431e084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.88.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4848d06b-bfa9-4dd2-b37a-6a4d058d8e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.98.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c66f11-8da7-4d5c-9873-f42ba4c434d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.213.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ebf62e-e0ca-4eed-978e-8a3c95b5e2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.68.130.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b52268-aa52-4710-b2cc-d7bab45422c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.71.230.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53a27c0-9371-445c-b0f5-55eaa065edd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.1.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4f0f39-d1f5-4b2b-820e-e627e189942b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.2.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01070ac0-5cda-44e7-8b2e-c80e3144d415", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.46.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbbddc5-6f63-4974-bf70-62e0210034eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.122.232.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04135777-0a04-41fb-81f8-0f3c92e0b096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.125.168.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dc5c15-86a3-497d-a06c-c66d5a24c696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.73.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b861e2-f63f-45c8-a1d1-2d6eb1dcf6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc5f246-482b-4c0b-b87b-d0ca03ba90e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.95.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45684a05-b2b2-43d8-9aa0-e5aa0ce7e212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.136.116.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd28dd3b-421a-41ee-a265-c4cdaa7a8a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.136.160.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd09832-c816-4f6d-a65f-d053010a5d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06d637f-ea0c-4880-8f16-bf314b9e0ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.232.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24997b8-2b15-4188-a4bd-33b5f418180b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.80.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632ccf23-a8f2-4452-bd1f-1cf2d1da39eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.137.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ede826b-25d7-47c6-af85-b5a05e5f1c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.71.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7656a9fb-3bea-4205-8b60-8280579ed705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.145.182.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0d441f-89a3-4660-855e-0074fa975fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.15.173.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d082058-43a0-4d37-822e-93121291dd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.21.167.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8a19a4-1654-40b8-83c8-f106aaeac562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0716343-5d41-4875-a7ca-d8fb7b6c9590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.65.40.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f62453-c36e-4c24-b778-0d0ef7785f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3af3b7d-65d5-48ab-96de-e6d38b153f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.72.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19635a61-837b-4763-8ac3-ceecdf0e46f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.182.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38c8f17-3d21-414d-91e1-13cb762708e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.81.228.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5078b0f0-f4a6-4889-9e1d-d3c9898eec9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.35.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed17823-f1a6-4e6d-8c55-3aa5e7a9de89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f881a94f-9b63-44c0-9e3e-6582fbd86a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.60.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfc1b38-f93b-443c-9d21-c4ee8fcb0aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.2.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12734d8e-3140-4cee-97fb-3fbb90c2454b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.50.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3310665-89e0-4593-9cb7-11fee7397d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.196.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f75b42-6f29-4e9b-9128-4ed49f22d5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.130.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350268d3-64d6-4853-a07d-3f1114405347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.220.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cdc5da-6e04-4cb0-bcb0-ae514bcddc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.62.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b1e4bc-54aa-4676-a35d-e235e02bd388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.220.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cad302d-e474-4db4-97a6-9ab5711e1efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.30.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71c39a2-ede7-4499-9ca3-bbc1ce79b2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.92.61.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869718d3-dc8c-42be-b1c9-3083632a312b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.37.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc97b4c-ac00-4327-89ce-4060495602a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.13.213.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fc5fd8-a422-44d7-bc23-ff999e8739c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d306a8e7-21c2-4e4c-ae71-ea3c894e11a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510d870f-8fe2-492a-88f6-87cd7ecf33ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b532ea7-1ea0-42c3-b2a9-f5c1bcf3304a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7ba4fc-20cd-4eca-ad00-e796f75b611c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003428fb-5378-4293-bbde-6b5a9acffbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bd8e0d-1e7d-408a-b416-bb1f51f0ff3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22164fe6-3e5f-4838-bc28-e04dd48a85f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34df9b0-b0ea-4151-8657-588c9872d916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807f1223-6223-437f-985f-32d588f57271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84851d3-5fa7-4f54-a5ed-9f7c3d0ebe56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac85bc0-5ef9-40bc-8348-05f648e41ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0387d6-536c-48c1-b631-34d73c9c4672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbab5b19-83a0-44ea-bd6b-7d313ac18158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6967ab2b-4d71-41d9-b914-d1a1bb6d1eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf77ebbf-9b23-4ce5-9027-5214ff53c410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f2646d-69f9-4ffd-9fc0-892dde638c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb05a01a-148e-4d70-b477-aceb83182aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45637765-061a-45ea-92d5-4694287ccb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30852a7f-5824-41f5-bebf-38377ddb9512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da64b37-faa5-4951-815c-c3245bd1bdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f96def-8305-4e8a-adf5-cb2232e40d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4877222-a2a6-4832-96db-5976e9a14962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2c237b-4b19-420c-889c-d223abc5dfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.171.153.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a3da43-3518-429b-8bd5-886c6eb7efcd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.179.197.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee590ec-8f3e-4162-97f7-3d0d0ce8efef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.125.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428a57e7-c57e-46f8-a937-5a9ddeff09da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02493c4-55f7-4828-9474-b10b8dce4bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db57a841-46b8-41fe-9cd9-13ab5abad034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.44.5.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82920bf2-ae93-4d85-8b18-5dd82e3fe63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4328b1-a7ae-406b-b64c-fe8da9b60aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d88deb-cc01-42e3-bdfe-c00424524510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6ee303-01b8-47f1-bf8d-bfed44c46969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6c3fb4-f4da-4c99-ae07-44cb675050ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6549f49e-2b27-4dc7-be27-88b052156964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83c83d1-1cc6-4f70-93dd-62a696ae0485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.38.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cb42bc-50c6-446c-8da1-be7872857fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.97.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe65663-5eb2-4956-884e-5fa6cf9dfcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9a1c77-8484-4d9b-95f2-8717b6af0e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faaca470-7677-4c5c-a36c-94c0a5aa0e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d1e240-40bc-42a2-9117-6d4eaf6008eb", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.184.7.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d837cfc3-ece2-4e67-80a2-b0fba98da393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.196.233.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbd65cd-a9a5-418b-ab48-fd0daf096b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.197.122.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1a4564-d97b-418a-a6e6-f1d9b06fdbea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.190.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6bf8db-4655-47bc-93f3-fd63784b1f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.120.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554fcc93-7a1a-48b4-878a-0e5e66f4e696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.66.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b93e2b-3c8c-41d9-88d5-e474b1d596a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.12.191.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16695da4-c4d3-43bc-849d-656cd19a3737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.122.42.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83fa1be-a6e6-443d-9897-ae5bc50cc5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.177.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c90dfc3-f4cb-49c0-a974-089963af5fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.241.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269d88fc-8ef3-4d33-9eb5-2ac6d08477a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.22.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc85cf8-a5b9-4619-8305-b0d6d83f7035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.4.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f99648-8524-48a1-b4ec-354b17bdaa40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.19.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430b4c98-12f3-4b76-8808-f876d715a511", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.251.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24cf5a0-67db-4f3b-946c-b1c8de9d3e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.75.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0a1c16-2176-401e-a867-a41b78ffceba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.151.250.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5ef755-a23f-44b6-a886-52f0b937e873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.143.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219754a3-70ab-48b2-bfbb-496a6bff4d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.219.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50b134c-713b-4a94-8ecf-8fc46bb8a772", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.228.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e73ac1-a235-42f6-97fa-de89921ec91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.254.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667910eb-017a-4d74-848a-95dc000cfad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.90.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330bfcd8-690a-49c6-814a-120b9e983f7f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.95.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094037a9-0673-4ba7-ad7f-5f1326463c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.181.149.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c76509-7a5d-4af9-b55c-c678d7e9dd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.35.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc17380-0ddd-4c1e-9474-5483a3aa0753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8923bc97-110c-43d7-8242-18d5e5a21f45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.198.2.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9738c7e-2d2c-4649-ab93-bfad5b42f4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.39.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487ef649-798c-4a3e-8454-ea2a46268207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.202.237.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5509fb69-ae8c-4101-920f-19cd39a3b899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.208.194.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cec8ab-a0e8-46a7-b4fd-930fcc4b0895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.242.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df50ef4f-9efa-49dd-8c8e-1e65d06bd135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.50.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0461253c-255b-43f1-80ec-aac838966da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.176.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b2601d-b219-4166-951d-a4b0711ed063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.181.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bef2e70-996b-4f58-9e5d-2ffbbb603a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.15.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b16bef-775a-4f41-a377-4331760f0873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.58.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ec26e5-046c-491d-ab9d-c6b4a382228b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1089bf22-2c73-4291-8763-046e508164d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.235.129.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31404747-08e2-43f0-885e-7b3118c99c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.237.242.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a02f94f-c139-4169-85e4-703ed1b68588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.238.51.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b9bc87-96fc-497e-9ef5-70be78c5706c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.118.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b01763-e7d1-4372-97d4-5740e837e57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.107.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a29a5a-7f04-4330-8ba4-331c6ea93ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.35.55.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1250fe49-23bc-453a-a7c6-cff39051d862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.166.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd83b618-e865-4834-b449-7227b1d4231f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.167.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f315eda-9a3b-408b-871b-ae04f662d394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.174.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dd4c60-02cb-4cfb-96ed-2b79238fe8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.239.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b44671b-ea0b-4f57-bfba-3033e003897e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.29.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f52760-e7f2-43ba-bd20-8539ead519ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.77.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8b9aaf-f30b-46cf-ab67-9972e1f13786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.82.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5846455f-3dad-49d9-a8e5-0a573b9351fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.39.155.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6421a1e-7c88-4dca-85c7-1e71fafa5a02", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.42.34.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf362af-8f21-4e5f-a082-ee96739d6433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.123.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0542a8a8-2013-4150-817c-f56692a85ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.158.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4aaabc-f9f3-4b31-b236-6cdfe90289d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.252.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f3254a-a9ef-4ea2-973f-c9a076591d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.60.26.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a01836-9cb6-47b4-a995-fe286095e3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.121.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1ddacf-675d-48d5-a694-8c5cd3d1b85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.138.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d966bd8-0d16-49d0-b1eb-f95d292a061a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e17628b-2a4b-4ac0-af7e-46b71f3e9ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.244.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8888b113-912e-42f0-b159-988690b9478e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.253.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a0fbcc-2af0-4778-af73-b093b51be695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.36.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f785560a-ad5f-4031-a5a0-67f769ae08c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.69.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adad3cc6-fe5e-47aa-87a6-eb99cee52851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.89.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab148d2d-1a3e-42b3-9d40-9e1a848d0af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.146.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58019690-944b-4ca7-82b1-537825a5e672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.120.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e1eaa3-0b13-49d8-849b-10622ac769b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.166.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e43fb0d-7523-4e63-9862-18db86272c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.198.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd14b05-3058-480f-b373-c991d5a567d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.207.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0506f67d-6f43-4259-b108-10a989f849d5", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.166.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7882a3ee-6656-40ec-b77a-40eaa1d4b00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.172.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0890f4f-fc76-457c-adec-7b20ced6eff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.191.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8658f36-4cba-4fd9-afaa-708f27662c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.50.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ddad06-2ab7-47d2-8226-7374065f32e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.16.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68041ff-28e3-4bf0-9039-2f4885e4ac04", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.243.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c241fc-6552-4259-8d99-1f525dc26b25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.77.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f1fee1-3166-4437-a230-794bf2ae5554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.86.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b7e81c-8bfb-47f6-a758-0e17450ba8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.88.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0efa1c-2437-40c2-92cd-dbbf6461f472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.131.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05e3a68-2cba-438b-b717-b4535e42708e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.211.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f26403-c583-417a-a9ff-20bb679785bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.41.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b69b432-ae52-4ad9-955b-e9b0d7432fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.249.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8d2672-e94e-4d6a-a020-3f53ed72685f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.123.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb01157-0539-4b82-9d87-4f3dafaa9e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e3c171-db8f-429d-b89a-ef2b8a9fff34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.171.6.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc0d087-f490-4d69-9df7-ccb54295c51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.184.186.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ed4c6e-5d21-4d4a-ba3b-9c9960b2c03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.214.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2d2250-e320-4916-b10f-97b757c6aa95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.243.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f626a80-4d87-492c-a2df-54894c4e6785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.77.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb21b23-3765-4dc4-8d62-465077465c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.216.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351aac08-f437-4ea2-95ad-0a1fcff95f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.163.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f57c601-de35-4031-96ca-d846ebf2e3f0", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.231.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272bc59e-9395-4941-9601-16965d8ddbe6", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.84.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c069c50-f2b7-4666-a7ac-5dbe56f22fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.157.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da897c1-590f-437b-bd7f-63f0e183bbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c012580-dbfb-42be-ac66-283ff7b7eaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc77d4e-28cb-4149-a56d-e05e599ecfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90b6b2f-a12c-43de-ae51-925ae093371a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d9f20b-9589-48b7-a2d1-0f0667195e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accc3247-5a20-4162-9134-75cc4f4934ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25e0efb-26ef-445f-ab4c-4216fad781f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cc9713-58eb-4637-959e-9a27b4c73acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cc939f-b9b7-4cb4-9502-4a90f51d2401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58a9fc3-5f29-42c6-a5c0-d3f76daa33d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ad6597-dab8-4871-acaa-c0b2e5842564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b466aa-7e62-414e-812b-7ce0a141a3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239a2319-8a3f-442e-a788-2049eb3573e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec573fb-0439-49a4-8987-5320e35e8cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad38c7c-4d00-4ae3-b20b-6e630325f4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c60590b-55df-4b73-90ec-2faa38dd2058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3a0971-c3a1-4b18-96af-d2ae7c943c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61d2dec-ea17-42ac-8dd9-89c3b7068e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda425a2-7363-4f72-97cc-7175fcc65e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc26fe76-5956-44a4-925d-c61a08948fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7414d6-f24b-47f7-a05f-9fa608148e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546fff04-1e3c-47ed-afe4-1d7a3375dd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f349aad0-045a-4fae-904d-671682a365dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b57a451-307d-4f50-955f-7c362faac20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fb4273-50f1-4f5c-ba42-b902cd0a0817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a450890-c223-4c55-9f35-b15437721955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0ecb84-ef80-4ebf-83a4-e393ef4d270b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974fe430-9db7-4dd5-a476-a8d79b9319c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30149991-01b0-42de-a655-5361c1139197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e311a8e-d8b2-41f6-b62f-e9cc59c423e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf7bfc5-7e80-4ee7-9e6a-bed1507815af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fefc7a-6a2d-4a83-9c29-305fcd821bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7323eaeb-0291-41ab-8cfe-918aa26e262f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba834b4-15c3-4bca-a466-4a9d992b52be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811b08ea-cc45-4bf7-95f5-344f5fe5c46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea9cf0b-3b0d-4c2e-a677-f58a9a265f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dde6fd-bbcd-4f51-a2c5-01abae65bcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257bf02b-5ab1-4430-a378-ab9dc8d60e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20f5a3b-1087-49c6-a621-c2ef1ed0c9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b314cf-9dba-432c-b15d-2cea2570a1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27c1b05-d328-4105-80d6-546d7b5c06c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f1853b-345b-459f-8b88-1f5d21bb4d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac81251-8f90-4132-9069-a15f2d2976c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa5fce4-4cd4-41ac-bc96-8eb70f46092c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6e74e3-f1b2-474c-a253-1bb259dbd1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8826c0e2-5958-45e0-8c39-3efa8583893b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483324c5-4986-4775-81e8-abed203272d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677e2590-8784-45e1-84e0-568be0b15b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bec46e-c691-4d90-81b2-e1ce9807e139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5802a6-35b9-417f-891b-1d0aea891aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdddee96-849d-458e-b708-79f2617ae41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c207112a-3439-4631-8cb5-7070c165ca74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6b352e-7270-4a85-bc06-3f5de79bd062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c859334f-d3db-44f5-9626-0736d4471879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2ba10b-eeb5-4cdd-a536-0fdc7ca9a6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440ced1c-78ad-48ec-8cd0-a8071ca5be03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662ba2a2-169d-4170-b431-8ace0a669644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddd7283-9070-4cd0-a95f-b0da70293ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27375fa3-1f64-4386-ba3b-04b9dff4a633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d9dfe0-ad50-4251-89e6-f01083331301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6151737a-856c-4bab-9bf3-a2791be5c19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725a8080-73dd-4261-b8e6-30aea611da86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e81bc6-a44d-445b-8f9f-1a575bd32b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91277efc-f4f7-4c5f-a98b-50300338e06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd61288e-2c16-40df-8698-ff217994a0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826bb132-62d3-45a0-8a84-1c25ca8a30e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d693772-043a-40ab-a865-36b100263a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697b0035-2d80-45c6-a8e6-fdf091f4b28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19074be-6003-4722-8cf3-1d7b4869df11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c60ec4-3880-4616-8120-400c7edf3cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86fe1fa-7af1-48fd-9818-d05d755c5366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5531d863-1a42-48d4-9780-75ae5c51cfe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4de2e7-6e82-4e71-9a6b-20e53c2a4928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbd99c3-0705-4cf9-9dd0-d3570be47811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d4dae5-e84b-4e23-8aa7-519338a73443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b88cd4-d74c-4cb0-af1a-fae4f73c43f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6255f452-2e56-4216-a954-473d6c67aca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b57fbba-b73f-4ff5-b10b-a77f5bfc36ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f2554b-1171-4219-8719-cd66301c8595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bdc66a-ab2f-4006-82ab-4fdde7f6704c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142bf3ae-fd69-4884-9121-322661000162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848dec18-4359-4864-ac7f-67c649a7a8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2253a3-3f17-499a-a603-fdaef514c6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f334a3a2-624f-4cda-94ac-2811f703c8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49087427-1897-450a-b6c3-45e7c65e47d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dfdea4-5ec2-48c2-ad0f-49c5434dcf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b6b689-ac29-4117-9ef6-d41db8686377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49a33a2-aeb7-4f6e-9ffe-beed7106ec06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462a469a-7225-4241-87a8-48a16537b14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3936372-2ee5-4eb9-9f16-aab60ae75a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291424d0-be3e-409a-aa9f-a349620558ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d9fdb6-20f8-425f-85e6-59e26b19db0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c08a06-ff9a-493c-93d3-5e218c009fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffc1888-14b9-4a76-bdf2-2e581e96bb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdc9acb-b667-4213-a093-7f423c817458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c09225-058e-4841-9b04-c35e8ad6f77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3653eb-694e-4767-8647-f9648703287b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab878a07-846b-4da6-8a52-8db0acded4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b733ffe0-a7f2-49f6-98ab-71f5439149b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4283a879-f245-4a59-921a-0a08d8244858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b452fc-dc3e-4d25-95f5-9d6e311785c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1a4979-8b0b-4593-b1fa-4e02932c63db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2909f4-7016-472f-9e24-9e59c9427155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c1aaab-4450-4263-88cf-8177d8312451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a82454-71f5-4851-8073-c5dcf752f58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4b8d95-267e-4e87-a943-9133d222000a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c020b1-e355-4cee-817a-45705bd269f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5cb9be-f7eb-4376-8a3b-cb13a7d35b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e24fbc-8c1c-45c2-90d0-34c79b7b40b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ea4996-fd16-44f8-bee6-e12f76302c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a14daac-285e-487d-94a7-864abe864c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a6e0f0-591f-4f3e-a5cc-b73606960fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbfe3a5-dc84-4f12-9e6c-c95e64ea8d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad19800a-d9c5-4dbf-a255-4d5a1d468e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40526b2-c6fd-4247-9c2e-e07b2db35989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd6164d-c7d8-4993-a859-50493d040802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b388f6d8-dba6-4bea-9f5c-8c80768edd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b6600f-5833-41d0-8288-ad31da5c3371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909ec2bc-573c-4a03-83e3-e83ba4873462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e801acf-304c-4697-813c-e33b7aa0f575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0696f26-af86-4973-8273-f0c22d185e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293340de-2cae-4644-9f6e-db2e07e13fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0157cd8-89dc-4669-933b-aa2c6f155506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae26523-8d3a-4071-a466-e631055ee4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcff8dfa-25cd-4a76-805f-7d82b34b44de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0429b267-b83b-4065-a783-9cea1c3b6677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b67611-75d6-415a-8a47-e004a7874f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211a5546-f83d-4c0e-bf56-0883777208fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f67fadb-d317-4fb2-846a-a05e0857f49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e29820-b1bd-4859-92f1-9c43c3a043cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81045aef-49c6-4df9-aea7-2b96c7a0cb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0b0a07-3b2f-4e30-bc9c-fd61fc73af45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628710b0-0ec7-411f-82e7-58d27e9c7988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca9ef75-f17d-4702-9cdc-b39d257bdf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e4ea12-fd93-4243-9314-40472a3b1661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d680a140-2565-4275-85c1-76afb31ee8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a43f29a-b102-41a8-b6ed-13a5a6c99d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebe2ff2-30cc-48d2-b253-4e65484cff06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afb19af-39af-480c-a87a-d0668c3ba4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021a1d85-75bc-41c3-b5bd-40aa190122e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a33a90-956f-475f-afa0-01d3e2f68562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ed8dfd-f825-4ab5-86cf-54217ca3df30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f4531f-ea92-4d4f-a08b-b3a2e6c190ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5847fb-1278-428d-abb3-730e84a301e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f5656a-26df-471b-a2d1-e63fedb80771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0472b67-ad73-4a71-aaed-0f3f3cba9dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e16cf4a-d0c3-412f-a826-d9235f0615f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb2445c-f752-4335-9486-e46ffe81a0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855e0714-a854-4c81-8727-422925266d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6786866-c4c5-416a-804c-1bd6391a6743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b110a55c-53d5-4783-8bdf-7f849a2903d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90a78d3-7486-414b-8d8b-84970124adab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6365b05d-5b22-4e4b-8374-fc64d4de215e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f848c7c1-77b4-4e1f-847f-98471717d5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bac755e-099d-4421-848f-ff4da47f3b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b9d37e-19ca-4862-821e-479728a712e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50c7498-caf3-4649-89f2-7cb39e3f6a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1dde8d-718e-4cc2-99c0-c611ae5dd438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941db2e7-5dda-4709-95b2-3e5ed115a9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba80d9a-abbe-4c3e-b685-ecb5b9d5e09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6026b61-e95f-4363-b04f-0c8a47e25aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d854660e-3ccb-4237-867d-68c44a49cdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408b5674-1c4c-4184-927c-96f8a105068e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88678a34-123e-429e-9094-ac39211e8d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456ddf73-22b5-456a-908e-4ebe197070a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079fd9ba-18aa-4cbd-963b-711d5cefa745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c60f56-517c-4d69-b6eb-6bc8fb7e851b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2bb8f5-87f4-48c1-8a8c-7be6dea195d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d38323f-d10e-40b5-afc5-7486625847bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee9778f-9ffb-4dd7-97cf-b1b15b5a952c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e17dde-3b6f-4213-8867-0e0bff6ecc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01afb121-6ec5-4639-9467-26d02553a4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33be070-c26e-45e4-8dd3-3532e5c60998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d106e4-fc66-4d95-ae5b-a08be0c167c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a41a8d-7d9b-4d10-bdb0-7db1a4d62a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3b1f49-7a0a-4c15-9d19-8a7f30b677cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8bb492-7bbf-43ca-b724-90f17247f22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65184439-a0fb-4b44-898f-646ccb7568e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23bd6fa-b629-47b8-b7ba-3c1cc0db8025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7ade7c-00c5-4927-9b5e-d0e913eb7a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c349621b-3d4f-4306-ba99-5db9ad9a5ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9f7958-d4e1-4c35-9bca-b9e4c54f4cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27af19f-0762-4757-9c62-e045c0f591cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e614e5-18f5-4407-83a2-b241b9162cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd7f3b8-e6a6-40fa-8909-a2582bda43da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab2d795-8e80-4b9e-86d0-814f2c22178d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ea13ca-ea73-40ed-bd17-c3bbcbfc7b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deb5cf6-8f63-4210-8dbd-43c56724d5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07a300d-fb9d-49e4-8465-908c4d19efea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b142fd8-d656-4387-ba4f-1317ffed5131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0703ba0a-2107-41be-9d2e-71bbdfdc1805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe19a054-3210-43f1-bfa7-16e1c0a9d47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e26ccb0-1859-4ed9-a967-c4dfcbfa9fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d26c57e-6ddf-447f-a219-048c4ff4c05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3dba7f-4e8e-4744-ba75-328ad1bab6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2228ec8-5cc5-41e2-83d2-ebf8c1cc917e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b52c38-8893-4803-8bde-8e185f859806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ee9ef1-a70b-4b16-badb-4f950ddc2f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05734e0-9e68-4f0a-8a4b-06ac1b03eefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ead6bb-b164-42ec-a507-1defc89cc647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182a822e-0f6c-4bf1-b1e0-1d18539fbe15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b899e4c-81e8-4bac-abcf-1bff5a1867b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d467c0-6e87-4586-baab-82e438187755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d027f997-fec0-4359-a4ef-b9ea4e1b5ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d19488f-439a-4b69-a223-c2e18935535e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c965fc-56e1-47d7-93be-a99221f00161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f5f329-6119-40c1-b809-a1ea810f7d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c22f6c-c168-42fe-8fa3-be8c4f97fdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebfef7f-4e1f-4f4b-9c9b-c0a3c2a45f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e8d27b-64b7-4be2-af2f-8b9b45246bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212ab5e3-dccd-4198-b969-b6b5305bd86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be329879-ea28-473c-9e3e-34a4d2b5c09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97e4916-2999-46c6-ae2d-2832bacfbcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a260a2-789d-498b-96ba-1d2a051ada86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f4e0c9-2a11-43c4-b0b6-971eee76de1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9beaf78-7af8-4b7f-bc13-0fbc726c64db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de08a5e-5cdd-40a8-a942-ea281b2a68ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4399f8-34ae-465e-9229-4564567089fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab579b8-200e-479f-865f-bd2f54be7bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98662d6-6162-4aa8-baec-69582e792b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dadb97c-1c3b-4e10-b6fc-acdb3ba91a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeed7a1e-d366-44c1-9999-46ff4485dd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc72a6e-07e0-43f7-9c36-eb73ea5fcda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f273756-0494-4ee6-b367-390ae1c1cf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715fe6f3-870c-4faa-8cf9-5b73d0529ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26e3140-ab64-434e-b2b7-eb37595a9491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66887063-46af-4d1e-b1a4-540878efbb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75de010b-6517-4fad-9b0a-c0a0ef16d216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5628946-5754-4d53-944d-221127ac18df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315ff756-7918-40a3-80df-6257e5997dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d86a1c7-ca88-4631-82fe-0208aa357faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2ea837-b845-42f7-91c7-9a4f2540fcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d895f0a3-275c-4b6e-a4a1-3660db06f951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebad6640-739e-44c0-bcce-83530e797da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935a353c-b9b4-4282-9120-021f214b4c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55a8c16-3fd6-4ac1-8ac1-f94ce1bde7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85880465-739e-41a7-8ddd-78bc440d709d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed92219c-0f17-4a7c-8da9-9d5b14c896cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec07e324-23da-4a41-b18b-f05836a1d50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dd1a42-3856-49e8-b128-ea49513ff310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4643fd1-7287-4351-8585-5061ef98e3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d9ed2c-150f-405a-aaec-ce39314e3fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d6679-d9e3-4258-9756-d86d01e6ccbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba9d601-b2e9-4e66-afa0-c3a8604e3af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9805f0c9-ee06-4496-b52e-9425e899b7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64df72a2-20b5-4193-8b0f-2b32fde876af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8799067e-3fb9-449d-a15a-2f6aaf39a9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b404d2e-f6da-48b9-bb6d-0397bbdfe085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b42dce-e448-4d6f-a123-3809465c631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f505b4e4-6878-48d3-b28f-711df6f89169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa4f5e7-7d1b-4714-a37a-7a4480a90651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf11311-de62-4f85-acf3-2d9207bfbd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbdeca4-e51a-48d5-9977-6897370b34ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ddb0c1-46c3-43ca-b7b0-07fef5f6234c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c5a4f4-0f55-4c72-8f01-2e5797856789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d2093d-9905-4f00-b70a-5777b88058e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed4e157-cdef-4913-92cb-f381a9ef4b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c568a2d7-cf1f-401e-8293-020ed316c0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c81f39-ad2c-4adb-b5fd-e0071f2875d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3aeeb9-cbbe-4115-8f09-e73535e0a71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62128fde-054d-4fa6-894f-125f0124612e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9bc922-4a5b-4037-83f3-e4f933ffb36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f6164e-7aa0-4f83-8c1a-4f502a71eb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef9a747-2850-4bd9-bb69-ebffa48b5c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08690c21-e568-4957-b880-f9a4c7886e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5531e4-6e54-41d1-8ff0-412041cdcd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102d0c64-bd51-42e3-bc7e-3bea6ad13c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628ef7f5-bead-4f25-b9d8-d8c5fcec6b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cbfca5-6320-46e3-bb63-8ba891b7abfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a361e5d4-ffa8-4718-9e29-f54a40b9ae44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535393a3-2026-424f-b0da-afc838dd69c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d517a7b-e47c-4af9-94cb-5445dc21c6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ed3e8d-e9b4-44da-b1c3-1346666e8151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d13ffb0-ffa0-42c5-83c1-b204ba2587e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af96326b-4ded-4faf-aaa2-88ead9c6a2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cc4e73-b2d5-4573-94ec-1ac59b67c78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8a6d0b-a791-4b63-83b6-abb0a0477668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13570bc7-ad05-4e16-ae76-8cff258f7496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fe11cb-22a6-4ed5-b56a-8d6c6088a81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de821d44-19c8-42f8-97e4-5206ca566110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4246aa6b-aac2-4ed3-8bf1-be6b50a21002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329df87b-831f-44fe-8bbb-8e4b86ea9183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce36b18-9d00-47c3-b8cc-8af82f0a6b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8311c5-c420-4abb-bcd3-8c2acec53bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4809eb1f-e6b2-48f4-a74b-a196415cfb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be1a7ed-20f5-44c1-a9a9-de8071ff08a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f04af8-1a97-43d4-8d41-f3b47f9d95ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a840c14e-50d7-4dc9-bf3a-09288d894a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1792b87f-db4e-4331-b18e-ab792e0e5a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a42488-f88d-450c-8dfa-6fb0dc7b8575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f515097b-5d92-41d7-87a5-c7a3b391938a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a956f8-ae7d-4f54-b0a9-4be1e70c0ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e695f9-4b3e-46cc-bf13-8cf6820cc3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89770df4-ba8e-463c-b454-7b988f098c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bb6567-d2e8-43f2-a3de-b3d12c756bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8429064e-0771-4fe7-abcc-dbb110100be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17727f7a-2e18-4a07-938a-b80d9bcbb6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980854ef-4b6b-4737-9671-bbdb84aa77c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395d72ba-6d52-4e85-8864-b74262273a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63061a4-c81b-421d-b4cd-1e79fd2e3d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d38a8b2-e7ed-421e-a723-189c0536b81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4cd7ca-12a7-445d-b8dc-5f373ade21fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e159eda9-4900-4c24-a4d4-08ffd0bc27c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c267a2e2-7e5c-4b89-9a8a-ac656ae0ced5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbe9068-cd08-4a3c-a6fb-38b26e51f1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebde01b-34e4-4e9c-91ad-aa0ecb056555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44614194-02ec-4519-b300-bb63430c88a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11ae33c-6714-436c-bb2c-918a7b8cc0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34745c70-5d2d-41e6-9855-7524f463f4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e12c72-b72f-490e-b7e6-7734d42c81eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d05bfe-b2e2-49b5-a3d8-35806d8e8cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536012f5-dc7d-4455-8d8b-b497f737773b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bb511b-530f-4cf7-bf59-32b7ad9a99c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bb1e59-c469-4075-b474-bc0c57ec1daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0174d2-ad48-4d06-8869-c065c22bc40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044adaeb-7582-41d1-9708-ba3672b15076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eecf67d-efbf-49a4-91e7-42c7c6b151a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b645212-748f-402a-a530-2cd4b4810249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488b9403-8615-440e-93bf-0f4bbea0d4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9205e6b-14b3-48bb-8860-19a378d89176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1874c799-a25d-47c3-8c93-de778437ddcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace4f2df-e178-4cd3-91a2-100121e49f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76934820-0bcf-49a0-9a5b-e4cd37b2d5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169317ba-70e7-4dd1-9e10-012586cbad06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db957770-dfe1-4c02-b9fc-670a83c53400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6fe6f7-91b5-4309-bbc6-59c27f36ef77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b413d456-fecc-4fd4-9606-9045752818dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8a4495-7eb9-47c5-ba75-aec055ab1f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fe6cd8-58a0-478b-8c50-39e7f68b9f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae39b4a-3748-44bd-a2a9-6037ae686fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd09999-6e7c-468a-aba0-aec716f7df1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c2aacf-397e-4320-b854-9b808e15ecf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03acb387-8348-451f-b74d-9336b5129c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65c75de-b30b-4528-82ea-f74f54807fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39bab69-760f-48be-b507-105b8658941e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd81a8a-87cc-41de-b176-a7767817d7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147afbd8-9a20-4456-9c7f-fa0b68b61f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1150c837-5228-48bb-84df-b4696118904a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894e3790-2510-4b7b-a6e6-d91966b26ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb9fba3-7bde-4e68-bf69-030e6e1f8805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8340893c-d1d9-4a0d-a3bb-f11ebcbee8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4fec0c-a76b-49c8-bbc4-94200b8ef614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c969c1-4d9a-430b-b88c-709c969e848e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9496226d-be1e-4f3f-ae7f-43a300ce1459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c55768-d953-4e21-b907-c2096e45ec21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd340c11-5820-46ba-9618-56d0b3225a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ced3c1-3b99-4012-bb86-15e5087d0e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6158da16-82e6-4760-81c5-a20fbf8ee942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5e0f52-acdc-4958-afde-19bef67e6060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def75523-d1c1-492d-9c5b-836fde757941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e964ff-3a2b-4ae6-9f4d-9bad10360c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5866b843-1514-446c-b949-f20525eb10bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13dc56f0-ae7e-49c1-abf4-b4c800bd0c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dfc3a3-ab94-4938-90b5-916b41b2d1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77a0951-b94b-43ff-87c1-71b780748911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d55ed0-d56a-4d24-aac1-d3983f03a1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61aebb2-7fae-4b54-83d4-efbdd4fde870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9662c47c-f133-4544-a4d8-6f9bbb12387f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fffdd6-80a1-4d72-a94f-1d0eb9f08fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86689914-b5a3-49df-a8e2-96c58696d43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54825c59-3f3e-4f2b-96c8-3092d8333d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1ff195-5796-413d-908d-9d847989322d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d0adc2-ca19-43bf-9563-1cb701cd010a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a10b24e-c0ea-4e94-9337-7adf2a5bd443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59292a43-894c-457f-9f2a-89bdac13c8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eecece-005d-487e-b841-738e726ba2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6d5fce-458b-4e25-8498-76a316efffcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28047081-947a-4210-b67e-06536dbb55d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4499bc9b-75c8-4a7d-85c6-d2545b8603ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4682abba-f12e-49bb-8be3-172bba76796c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b32470f-55a0-4cbb-9d72-641193e57efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a759c7c-8cec-4d5c-9c42-aab71a20ebac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9912b5-2022-40ba-9b21-fafb95805674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfd610d-5f9d-4c72-9862-823e110f21ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dbe68c-0e37-45d3-9627-39002fa6620a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c25f88-4339-4368-829f-481c9338d145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf6ac74-dc08-476e-b452-22a347bcd044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2194dad-870d-4b77-a24f-86329211e9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b13b93b-d1ac-4e92-904a-d56ee3740771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6d0af7-1d43-4549-8ed0-7f8fdf736558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033c2a8c-3078-48df-b96d-585f3dc0a678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cbb09c-6e0d-490f-b087-904e48e7c4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849675e1-c44d-4d40-96fd-4b8204beed0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfbc4d0-f778-446a-8437-32a08903577e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22de1aa7-cdcd-42a7-9c80-b39cdc23c803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e999e3a1-6d3f-4ce1-a295-5e798854cc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdf5169-3186-45cc-9605-edadc880e9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f8b0e4-d0ce-4c2e-8360-b541a2dcc65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593716e7-0ffe-436c-a6b5-677b9f5f9621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc351471-c4d3-4238-b614-6676c2a2764f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfeaf7b-08e1-40bf-aa97-61e36ac62b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fd53a9-e06e-4330-99ce-b7f68f92f57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebb5a3a-0e74-48e4-a524-4334fb420846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa21836-ea79-4a03-acce-23e09f4b3e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4efc90-c169-4d64-99b5-6820bedfb88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41462603-5154-4086-9da9-c267d08f9895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cff57c-ede6-4940-ae07-24719cec9f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79b17bf-d3a1-402d-bb36-9bf82c9c1038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9e04df-1cc4-4fa2-807a-472f74680e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c60053-4955-4ee1-a1c5-5822e1cd25bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b212c36-5dc6-48cf-b071-98535777f4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50052be3-abb8-4d98-8b18-983dfe898909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5ab59f-4f77-4f4a-bf42-752794f96297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc1ae79-fb2b-4dc1-8ce8-dd3502a899d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7800c5-ff1a-49af-a769-316e620b18d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a816c7c-0462-42d5-a420-5de4fa5e0e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9279896e-228d-4e72-9f17-8cba42717dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3987a0f7-7f63-4397-b1c8-dabb73859407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26391b27-94a9-4e50-bd8c-5aabfccbcd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4797579c-0b06-47e2-86b7-9d849324376c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f0a43a-c813-4646-a6b6-6f4600c3da21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39f72fc-9fdc-4d09-844b-f4fd3e941d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c77d6f-300b-43e5-aa8c-2633eee97d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92c8de2-2cf1-499a-9809-71aefb53ee74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7ac503-dc74-4356-82c4-3f1745edb9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc07006c-ff4e-4723-83a2-6f8439e17477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.204.47.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fa5200-660e-4763-8ace-f4ba5f24d42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.180.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8dc669-d167-4749-96a4-424e7e64d6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.192.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefa536e-d805-41c7-9726-a3339b03f94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.48.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1f6267-1115-4755-a030-99f437ae423e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.89.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00e6906-e0c2-4318-9424-7929f18b7116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ca7d19-441a-47f2-ad36-cbfde7483dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.234.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de98e982-47a2-48ad-b75d-dd9b173bd8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.223.101.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a103d8-621b-4a90-a167-0e895464f328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.236.149.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8ec324-029c-4b46-88db-67a51fffe728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.56.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a3286e-12ce-4c30-a703-f897e1c3e2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.246.193.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19085306-8596-44bb-9106-ea19f2c787d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.253.215.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb6e0e4-0f34-4ae9-98de-867191c427b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51171cb5-9b1f-46bd-912f-014d835089fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.111.32.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b92ad90-83b0-4986-84c1-1f73074e5871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.208.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9933405b-dc2e-4fd6-bce4-1b296f9b3a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.154.71.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09c8562-d6b6-44fd-848f-04b2bb22a63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.156.154.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b9ed5a-f876-472d-b4af-2ec205d97551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.170.124.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ccbe2c-b1eb-4b02-ba40-5055c973028a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.238.99.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b025781-d193-4250-8bea-c88aae42e616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.26.66.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60688522-81d8-4fc4-a36a-a9cf9c6e97d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.39.206.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edab2d0c-ccd2-4370-b230-575ece2ee552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.135.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1742cb3d-434c-4263-90e6-d3bc0631ab25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.62.32.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e74e700-c24f-46b8-8467-4d909b4d67e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.93.144.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d535ee2c-c770-487b-bcb0-168911e11f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39492537-8a52-4a07-9fc4-cc7d6f1c659c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.213.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b13ca2a-efe9-4b2b-b0d1-37db177d8b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.156.35.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed76362-36f4-4b80-886c-98e2576dcdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.195.171.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eaac01c-2529-4769-9397-1bdbf1d1a5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.228.64.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37842a0e-32b7-4179-aad9-e92ae12efb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2d26cd-fe9b-427b-936c-e7326b1ff024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.44.238.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c097aa-a222-4008-847c-5e187882ef41", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.48.253.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5d63a9-f8f6-41b5-a73c-fc6ec5149c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.254.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf214f6-0fb4-4a0e-bba9-d0b52a4855b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbb7e53-38e4-4dd7-9bb7-ae40fe9c6b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7faae674-3430-40be-bbcd-5083bc55e212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.126.208.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5af861d-a360-4fdc-84ba-91ee473af01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.137.253.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306d4416-7714-4493-8870-b4360406dcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef1c435-ba63-47b0-8e2e-aa448a12324b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.22.170.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fd1ccc-d2e6-4a7d-94a6-6b64e78b1beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.90.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14eaad76-bf2b-484a-adf5-5c9fed997f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.255.44.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b32f8b5-9073-4ff9-98f5-75992ca0c2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.52.128.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020eb12e-8ce5-4b6c-8e84-3b8f0145f3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.54.113.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbe6294-0f07-499c-a313-3bd16fb9cd9b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.163.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f531bf30-4acd-43d8-aa27-bbc2a848c971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.196.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe15040-4d29-4799-b17f-35ea3a98ba1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf339dc-ef8f-47cb-b456-b18bc8f2572f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3983e46a-2b98-4482-a7c3-242d2010d946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a266b3b-8c52-4205-80cc-bacf3e7ab777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.63.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4fcce2-db3e-47cc-82ef-4df7e68c6b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.64.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250ecd25-d502-4c2f-a4eb-24ec1903c37e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.108.91.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5452f7d5-639e-4b23-8946-0df2c3977392", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.117.79.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafdcac7-59d8-4588-ba8f-1876b3c3fda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.144.112.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd48ae2e-48a6-4162-807d-ec828a7bcaab", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.61.48.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ef6a16-0500-4a5e-8cc0-a748d58b728b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.159.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10251051-5a5e-4615-8ee4-c7cedff36dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d3100a-dd25-41b4-a6be-c3c0e1cd186a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.210.186.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67946f2-1955-42cb-94f4-6a8f21070f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.221.162.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae680b54-fd2a-4002-b6cd-8702599918aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06db5f1b-72e6-4d45-abc8-8df281b5bb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.18.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70d26a4-52ff-49ac-b323-ff2f3a31edc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.24.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f51073a-2888-4fa1-b3f1-ac27802f2e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bf1f7c-db90-4e14-a89a-e88f7cb236d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4cd7fc-0140-465c-a2b3-78fe239ba418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073601aa-6b94-4b7f-8417-13106952fa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6741b9b-f3a6-4a70-b549-9da4b5714e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1774a8-93bb-4e24-9278-7874c8fe6238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a653c8-ae7c-4bec-81a6-5a7e4551bf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12dd0c2-fc15-45a4-88c2-4c7c58ba3627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf82c27c-8263-41fb-b133-ecf87a7470fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e75c853-4cde-4b05-9412-c9e582f3be4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7698ff46-31ed-4e47-a697-8cedf3505d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3668d9-072b-408f-b673-f1c6796a732e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da49755c-3659-4b31-af5d-ebb2bfa3e0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b00df0-332f-4d92-9e16-9f6b147ef99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466931af-698b-4a70-85f6-0b9c7ae6ae98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49bf2de7-de9b-40d7-a80d-c48860f754af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5cb91d-bbb6-47cf-9789-d7fe2617df1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b5c1a9-436d-4fd4-ad08-bf59f9322c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a434c1e-cb24-43bf-abe9-1b258569cea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e32aeb-0da4-4b0b-8ec1-2ddbdeb87c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f0ff3a-df16-4e98-b362-d390f9d17a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808919df-326d-450d-8e85-9c6959c1925a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9bbe43-37ca-4a9e-9ec1-1ff9ef43ccd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5343e109-ad16-46bf-aaf4-b4a4dc6b405a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5739aa-8539-49dd-bfa7-ec992ed090ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8856dfd-c303-4747-afed-f39202c28cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581e1025-31af-47c2-b812-63a9e8b5fd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58b099b-c811-4f6d-a473-151e10174de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3cf707-9309-4a7a-b8af-63e88d605a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928964c0-bf70-41a4-a232-67f63e870a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd5ee4e-4046-4b93-9187-d21b2add2fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d486df-5e81-48b9-af1e-d8df88d408aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fa46af-4209-4d65-b797-6b36629e4f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e4f9f5-9034-4d97-ac4c-88c6199949af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e54ccc-067f-4ffe-8139-f402445e0b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ea8d93-03f1-47c1-bbcd-2366d0c619b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b28583-5a77-444e-8bbb-d73ae21b3908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07696498-3492-4d76-9708-5e7875c20dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c91bfcc-ba1b-452e-8960-aa27d752f074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df717980-1989-48c3-b143-9703710b56d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7028ad64-fa48-4cb0-b246-60bb0318ac90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7adcbd-5375-4d38-9e25-29e42857c688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657c9a90-cdf8-4e8c-bd21-145c3486f6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573b467c-77d1-4a27-a003-d4c3bc0a2bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39dc0f4d-23b5-402d-b186-aa3bc2fb89b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.177.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b73a22-4eed-4096-bc11-00d5042bbacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69af04e-2cd7-434b-b1a4-7de36dc60088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bc0a28-25c0-4e42-8938-7c884d9dfa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdce696d-ec86-40ee-8d83-572661707f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670a62c1-6770-4bb7-a506-cf9697bb2e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d346f6f6-ea03-4105-92ba-6ef13dd1b384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2d63e6-7a92-4730-b283-7416bceaa948", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc40192-7d80-498d-9fd6-77aa495968f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea84d541-19b7-4612-9510-692803b34a4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a84f83b-3069-43d6-912c-285b7b46aff9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a149ead-7093-4f11-b3bc-12716b609082", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054f97ff-ac40-475f-8d6e-c8b50ac8e132", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1fa8e3-5736-4145-83dc-e85c4b06ae34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2cfce4-85ad-4daf-9b67-b50c9248557b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47022acd-a48b-4a5c-97c4-64765c2d261f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54516cea-f98b-43ce-b79a-c91e83a305b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e1d828-90a2-430f-9826-d93f60a9dc6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a954db-4bde-40d2-820e-15b1a48c5533", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8831976-daae-449f-acd5-a041b8a65a67", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a1735a-e992-4399-9095-68223638ad21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bfa135-c2ce-4f54-b90d-ccbc79762fcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036342e7-6f4d-49f8-9724-1844634fbf85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9673af-3efa-48c8-922b-6bffc9b6647a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c421c6be-3f76-459f-a56a-0cfdd43eacad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105304a1-b8f2-41a5-89b8-31f8a660d111", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4493d19a-8daf-49b6-8fc9-660a9b4d96f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f0de4c-f0d5-4e40-a8ac-d4d9d9019ac5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6238ff45-5730-4f4d-92bb-a7e31373f18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.200.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c4a639-8b55-457b-88fb-244043723923", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d27bc5f-c93f-4e57-95f1-5c99e0f092ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb7402a-7706-4b02-9d8f-4521ea2bc232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b9a73c-dd47-4efa-97fa-7f53a7ef8d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c79d2a3-1d66-4cf9-85ec-9bf87a1a604d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.207.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83204b77-c8e5-4d41-abb0-8962bc803225", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.178.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d190cd9-01a3-4dec-ae56-91aa0bb269c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.139.183.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f80329-0562-4fe8-a3c1-500a696cf754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.193.154.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ada2a4-2ab5-42ef-90cf-943a09f789e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.208.20.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd9cd7b-f701-4299-8101-aba6a88a63d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.225.138.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c97c8cf-627e-49ad-92d9-212f2e15c16f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.44.85.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad06215d-a27c-447a-8a9d-e29365684420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.10.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f70d96-c450-4fc5-b5d1-7d2b8576c02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.10.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449e094c-5fb5-4109-abe9-98a1b431ec67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.10.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe4339f-17c2-4866-bb8b-e36b0517b491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.11.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d357d622-06a9-484d-a7a4-8fdc32d5235f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.114.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010331ae-6c5f-43af-bb49-4cfae9e81998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.128.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552a8a65-813e-4769-869f-5f2aa2b8e8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.131.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8812759-df87-4847-9049-6907c0034305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.137.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce7b924-3e8c-49ef-90a7-bc6e3a2c0b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.15.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd379f0e-40ed-42fc-99fd-66faf0ee5e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.157.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c477d2-d0e6-4d2f-a3d8-c6b62b25c98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.168.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab63138-900f-4d98-994d-763a7831b9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.191.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293330e2-75a2-4b31-a64d-e34d6553e2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.22.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05b857e-6e46-4ed6-a9c5-646a152bb840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.231.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9a7a9d-34bd-4698-8530-592df1714410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.241.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7643829-efdd-4104-a911-4d336a5fb77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.26.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26aaa588-7e9f-4b8a-ad07-a7d4bd0519a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.30.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b68232-6ca9-462a-bb53-7170d6af9000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.37.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab512df6-a5a6-440c-afa1-49d8c44e4e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.39.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7d24a2-83c1-4de9-9b77-59290bc2009b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.39.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2a92b6-f645-47c4-84de-0a0f40f2d2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.50.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018d97ba-786f-45d1-b0ee-4af1ecf2047f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.51.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6791a08f-a54e-46d4-b167-a7080302f1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.74.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4a4dbf-c5f0-44f8-b12d-f4ba6907a788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.76.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89442058-4ece-4f39-9561-d5951e4c1d53", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.63.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007e6939-cecc-4c71-be97-424a18a3702d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78231398-0621-4ee3-9785-f0a26c2754b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.3.90.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af498cad-f12b-402d-9f95-25c346b42324", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.19.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43ec0d4-b773-418e-b284-f603b5abf1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.108.42.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e336a8-20a8-4674-9bbe-15afa3eeeb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.38.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab4b098-c6e2-47da-a9e0-7fd2ac6c69f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.39.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53ef535-808b-4415-a8f6-137e75074f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.122.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f92bde-263f-44a5-a405-f41cf2361513", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.116.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b73169-c24e-428a-a5da-a4675e13b5bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.154.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8085453f-31b2-45a4-9ef3-1ded8721498c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.16.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937ad051-1517-4189-a37e-204ef5925cc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.3.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3078a2-1abf-43c9-b550-6032fc9146aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.17.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d48db9-69e8-4262-9646-14d073156c25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.137.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9eaad3-1761-4a3b-83ca-e2778a5ed8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4945f9-6f6f-4dc3-bdac-5e11504042ef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.42.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbade9c-19c1-4bc5-b653-973fa222474c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.71.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f3587b-3217-4597-86fc-628a6130529a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.113.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67a7c9d-2ee6-488a-adf4-f80e577ac38a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.135.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c52035-3366-4d86-8da4-3a9b5d9baa47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.29.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc1fcf1-4629-48fa-b5a7-75950e56ec20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.153.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4432fd4-f534-45ab-bd13-eeee7ab3dd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.183.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b5bb87-ac05-45ba-bade-0810ea645a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.98.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970695d8-caad-4822-a31e-20ad5961ab12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.128.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d40f0a-ce02-4fc4-a04b-59b7f05970d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.56.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512bc907-1f75-4c58-aaf8-203e2a8cc11e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.215.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28711e2-2772-43fd-bb7d-723c7a2f6a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.217.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a967f3-418a-4275-a9db-0580a05f8668", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.103.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41b290f-7661-4740-90b0-056cb0777005", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.114.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d2e0b4-21a9-41dc-af8b-3a1c0727985a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f23b17-8171-4008-98ee-dd9c5c732ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c114351f-8d1e-4730-9375-2f8e689711ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.192.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccbbf55-144a-40d3-a887-537d7db1824e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.125.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0972ff-b7b0-4b38-9c9a-40c8633a1ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.183.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e44f87e-f6ae-4050-97a7-1ad50748768d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.130.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef9c716-fe49-4af3-a4ae-cf7b983bd50e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a540e348-8572-457e-abd4-411aa123c771", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a1eab0-943c-4dad-aa4f-756425ca5514", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807c4999-1949-4cc7-b8ac-87eb810e79a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102b142a-ab1e-41d2-bf46-6c87520bd3f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275eae85-2605-4c6b-8393-540b832ed819", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db74fc0-eed1-4ffd-b6de-034b260606b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd53950-758a-4dad-be41-4edc7a0b3e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.36.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16930988-b2c2-4c7f-9791-3408b15d1f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.112.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf8dea7-ffd9-4493-9fb3-a85e97de7152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d21dcc-169f-4ede-9087-2c571bde5322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3eb194-205c-4b69-904c-26a49f59ff8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc9daa4-5524-4cf1-ba97-969884111009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eba2a76-cd98-435c-9796-1da78a008da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e44e40-258d-450f-94dd-c8ba951610fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12f4c69-5155-4af9-b904-fd7300762e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb751cb-25ef-4878-8767-84b95c05b33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e2a09d-39d3-46aa-9003-c5b924a88ba1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.141.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad14225-c597-4b52-aeab-967f884ce25c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.141.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afc012e-5cc2-4c10-9f23-ca842604df85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.249.33.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e276d406-5292-4d86-b181-dbb03d24b84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.181.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5853d36-8816-4c6f-b3df-90753903c53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.99.73.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15a9082-4ca9-4046-9bd6-0b553325a6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.77.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372f7f95-d67f-466c-9cfb-98eb26d3f1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.125.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7a353a-278a-43ef-a559-93507938eb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.69.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958c18b9-43dd-404a-a24b-7e5dd44d3c03", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.217.144.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f8afc0-9489-473b-b3aa-f51b41066156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed25bd7-6b1a-4289-85b3-34f4e6989491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.224.211.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3a87b7-06ad-4659-9d3b-f9bd5d254fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.225.140.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f49012c-d1cb-4d00-ae77-98239dfd9179", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.252.54.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a231ea5-eb5f-4d43-9f99-424936c657c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4beec575-9c10-4666-8d99-45919c574d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd69b8d0-b175-4174-acfe-8e85360febde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.116.113.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688a1847-adfc-44c8-9ee4-975a4cf713fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.128.12.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a61031-db36-49fb-ad5a-f3a89cfba041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.98.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8745e0-695e-4fef-96df-b6ba7b05807d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.16.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a25c26-f1d4-402a-93b7-a8beb731828b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.13.186.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77878cca-3340-40d5-9915-f074eb3f7c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b45d6d-7090-4d54-8664-9516ca58c67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.74.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d37700a-99ff-47e1-857d-778129247bed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.9.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df0329e-6aa6-47e9-9311-9b492dc4ea6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c118e68e-244c-4ba0-979a-11dcbe3dddc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8c8c62-4782-46b3-83ec-dfbf54af272f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.195.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f35c4e4-0386-4330-9dcb-32697fc1ec38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c70f64-5f57-42fb-8d01-51f9e83ebbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba7cb95-2d45-4905-912a-b912b4ca0637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb70f47-b5f6-4a91-889e-043eda3e1d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbd2554-f6d2-4f43-9dd5-f99d1ec882a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b2ea71-1f7d-4e28-8520-e4d6a30b709c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aca45b3-13e6-425d-b4d2-e6ad910d96dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64d50ba-abdd-454f-a567-2063f8da346a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaa94dd-a792-4eb6-b987-a41abb2d6a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a21f8e-3d41-40b2-be3a-44e98c4a59ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aec1fb4-a0a2-415e-a490-f04fce114274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef6d670-82bf-4942-a0d0-c7e5214d1265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97381c5-5bb4-475f-83d3-5e3348f5ef6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7734ca26-702c-4932-8ada-9a954c103068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8eb8f82-fd33-416f-bdba-c24d7b072caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d2c2e9-d93f-4ddc-938c-c67676edcab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc1599b-c2f8-47eb-b324-48498f46177a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f410e0e-3868-4d01-9af4-48ea02265137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dcb430-7e40-400b-bebd-3fefe21f0cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f8b1ac-a594-4398-a902-9eb033e1bd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.3.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61687ae-6a16-420e-af5d-0675029739de", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74760bb0-0683-4346-b0d6-c0634750d915", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40be9c18-0387-4692-8c8c-5a5fa52ead5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddab629-6483-4831-8afc-9d1df4be9e65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1015095c-05fa-4314-9f48-2f4e5a0bf8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcff9f3b-b81e-4a3c-b251-0281ddd61fad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0bfee0-2416-433d-89d3-0626a802e6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6e410e-0b7a-4517-81d8-43fe5ff9cc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02222552-644c-4e7e-ab8a-88c557f938d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c5e3bf-ccd3-488b-86d3-266a57979031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a442643e-0216-49b2-8d78-eade6b48c7f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cc1dfd-bd68-4e59-9b2e-9d744c385eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7c59f6-8bfc-422d-92f3-b764251f838a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303824ba-7d0f-449d-b69b-32933a7083ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.147.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5b3bff-9c40-4c62-a4a8-f3672bfc8b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.15.65.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bf03d4-0705-4242-a6c6-8854d50690ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3700c9-b231-4d31-82ab-4d01ee4726ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98134b56-9f05-41e0-a61f-22ecded03edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b141f2-9a3b-49fe-8cc7-a65974e1145c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276c8b25-66de-4c31-be30-d2b2556e2da3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6ba88d-936e-4214-98ee-f0cbb0ecad7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d016a99b-5cac-45d3-aa28-a4fe4ee5093c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e1eee8-cafd-4c1d-b443-f506419ecc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e6574c-bcd3-4ffa-ad2a-577fc321e259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19f0331-9d7c-4f0d-ae8a-a75c5f19db2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f629b97f-f550-4173-86e9-e7ee7794fc33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7974115c-17ff-4d60-b3cb-a207a37d560a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57a2abc-8741-4032-ba04-8b9d09b171ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ac63e8-432a-4d1f-9013-f3b89c87526b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dd87e7-ec82-458e-a6da-482b397895ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44c66f0-69fa-4ff2-b2dd-7df3777afbc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b984ecb7-be12-46b2-a42c-556c74b981f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c8d082-51be-4ba7-9976-d245cfe0df6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c7e213-fe06-4716-9be7-e1fc3087af60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c49bde1-7450-48f5-8d81-624df47aba80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f6e1ba-99b4-48ad-8249-2cfa4ecab462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021254da-47d4-49da-888b-cc9a55201426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59eef4d4-e2cc-4507-bd40-99ab7805469c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cde0e7-47ab-4c78-aff6-bbc083f67f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5583d2-362e-432c-8e00-3fe9b5edb93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e90c93-d312-4816-98ac-ad97445a560e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e679add-f6ae-4e95-8837-a1b5d74bf0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068fc46c-6d2a-4c56-bea6-5d76f03b7bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e579ba07-f933-4360-bde6-bd33fa7aebae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bfea17-2963-4c0a-b3d2-a2e893436676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de47f76a-5755-47ee-afd0-25046bd9fae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfed325-2f3d-4ce6-ae9b-575cb950c650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db93c783-6bba-4188-b0c1-f60588f5001f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f6cb2d-75c9-411f-92cf-932e431d2517", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f0c7e2-5919-4001-af2d-233cf5ff1219", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee4836b-4a0a-424c-b054-b933c3ea32ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e656f3b4-e104-41be-94b8-33443611614c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.161.237.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe672aa5-19ee-497a-afae-e5733572e39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b524843-4e56-4e1d-a07f-ce880a42a7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.10.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791ac01c-9d62-439f-a600-4d968e0cd896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.191.154.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616228bb-21b6-4c3f-ad2c-dccf229e733b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.97.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8202aa05-1302-48f9-9b36-c4848be4a55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.66.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cfc963-f722-43fe-8a7c-3a411831d754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f07eeb-9f03-4d61-8560-25053cee4768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d237b36-a0ba-4bbf-8c08-50e53cd14927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdd7699-75e4-4715-b652-cdf1ce6ffd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203f0f20-7646-411c-878d-4e142044a103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93543329-52f9-4ed1-bebe-b8628f487a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfb6404-7c83-46ae-92fa-8ec8f8886604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3601822-dd59-4777-9fb2-c902dfe43c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07cb401-15c2-460a-980c-06d75b87236b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.197.146.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a453c1-34ad-4aa5-826f-6ac405ccfd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.197.150.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e31ad86-bfc4-4be9-90a2-2609efbc49a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a658165e-4989-453b-a097-05e82af07f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d273a4-415d-4a42-9c6d-3ee258045639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df799ac4-4aca-49d8-898c-ca85f44af3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f92192-ea7c-4ef9-a148-957f9bf5e8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c98aa44-1809-4c71-9830-77eec0b8db11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a21d02-f6ad-4214-a2d3-c3b1227b0927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6160d31b-c02f-48c1-97e6-c66c93a9bde4", "relationship_type": "indicates", "source_ref": "indicator--e6a21d02-f6ad-4214-a2d3-c3b1227b0927", "target_ref": "vulnerability--57d0f18f-ca0e-461e-b051-791e381b7036", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36be7531-8391-4c34-aa0d-c5466b08baf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067fbeea-4332-483e-9dcd-8d18645e97b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36802900-4d27-4679-b6b6-5bbed92a21ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95b7a47-69c6-4811-ab9b-6b42925cba65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04be40d0-4688-4757-ac22-7b347f524c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012cd7bc-2f2a-48f3-bc50-79659015dda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a973e9-648c-4331-8bc9-46140ad4689c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501ea93d-a5f4-41b1-bb39-97352f59917f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.205.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07c2c5c-1a61-4fdf-b190-14c8713f22cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.221.118.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dde160-d2c1-49d7-b5e9-38fd8e4d8760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11057d74-0e26-4bbd-bb99-97426aa84f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60a3e2c-a8d5-4339-a479-69b23b7f5f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c52c7ea-1ae7-4981-bc72-f76c219e64be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61431ec4-fbdc-47f8-a5d9-9fc29cf0f167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e608850f-637e-4375-a2a9-59f1212c7777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a08525-8e40-4d35-bd82-b7675f6f2697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2efc27-203b-4cc2-8bd9-cbf8b7647c72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113ff353-c010-4eb1-ad99-9edcc45a48f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.66.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f5ab94-59d9-4eeb-8564-6098b1cda49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.66.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa08d607-4e28-4643-960b-75626b6096a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.232.17.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7efd7f7-d6ca-4689-b426-80d67916ce38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.101.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc64dbf5-7b1c-483c-abd6-48e92316f3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9318f22c-66b9-4a40-b819-6504bc496351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df52765e-6c68-45f7-9825-b964d1c9b373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c59528-4663-4b4b-8a07-471f9d8d514f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c545c1e-93dc-430d-8daf-a454ebfe4d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0058629-df80-4f04-ae5e-a27233532d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa2f81c-d871-401e-8473-ce8f3f1203d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd6ebb2-36ac-42cd-84b4-f0635c03594c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d0ddae-93ba-4da5-9781-806ae4a2f08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c794176f-a1c4-4c23-a64a-4007024acaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49493f9-c1b9-4d50-8235-392c220868b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ea6a6f-8ad5-4507-82f0-cb12e94dda39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18bb21e-9c18-49a7-ae8b-4085caf4f2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7898838-c2f5-4af6-8727-7c7b9ae0dee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3bbb73-99b8-45e9-9ef6-4717cdcf0842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.16.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b4e53e-a97e-46aa-b492-67a0b2a222c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.26.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5a5182-571e-4030-83dc-7006cf601053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f754e620-8b86-4b12-a8a6-84396cbfd8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d328262-11bb-4940-b38f-7ddbf5488861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49233344-d8b3-4ddb-8809-7c687db90c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b6ae40-e6f5-4ee8-9052-4572eca5ce07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fb7ea9-ae0f-4579-a912-65ed75694b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d713352f-d0a6-4c37-8f44-309601b7a4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4db2a9-8601-4619-b302-10c7f778da18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.7.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2ca530-586b-47aa-91e9-a05a6a45978b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77919be3-73ad-4c46-bf49-b38fd0ea7787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccbb472-4fa4-4ca5-a3ad-7c3d0bdca3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770b1155-4d30-41e7-b425-8ae91bf5f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636856cb-501a-4255-bee6-0818b284d1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa63518-bca0-44eb-8aa6-af8a466f1e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dea3cf-b030-466e-8db2-f52c776cfac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cf947b-50e7-4d97-a6d5-5888a4402faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b1c67c-6571-4156-a828-b732d5c20850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74fadf2-988b-4ca6-80ce-90879a87ac57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf87eeb-65cb-4d2d-8bdc-b247bf81540d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f859efd9-24a5-49df-b25b-949a99f0c1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a3854e-1566-4410-8ddc-432989acb63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b981b128-f393-4b71-85e0-0c17ccf97291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9b5bf6-aac4-42ff-97d0-e284d5c75376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb97c500-e007-41ad-bda7-3b89134c4a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968c2005-e27a-49f9-807a-e747bc146e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31417c0c-7c5b-4b30-b57c-4b0e8cff364e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a842e7d-405a-40ae-9bbc-11f72ef18092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8524c32d-7123-48c1-adef-00e3aa6d446d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6071c018-add0-4740-bf44-e353b2d284cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f4e2bc-41af-4066-a70e-49f141621589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d86a3b-d91a-499f-b8b0-68fccf299786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dfe404-e0a9-4428-85c7-8cce4d6dbd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ce6dbf-ed5b-4ff8-8ffb-526bd70e35be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3f4723-78f5-4683-a73d-18a011989a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8217d3-e72b-40f3-a779-ea3a6fe34c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db1b12e-1822-45e9-b401-8500ea1ab388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.214.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbfee9b-cbdb-4f1b-bc4c-d6a0d5c5f6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceddca4-d33b-4cf5-bf7c-dc670ddabb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2bc08ab-1165-4523-83f3-ae47dbf52d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049921bd-e40e-4e3e-adef-e26361663e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bba651-1aa5-4dcc-a4b8-3cd3b763fe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494e9ed2-a7e9-4e03-888d-07107fa5820b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1baa5c9d-ea95-451a-9147-8c7788335be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1a7d89-7387-46d4-97af-4d69aa6c7fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6137116c-fc91-4b6f-8afa-118a730902a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b721117-546f-4218-b7f2-73f06e0028e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7112784-f034-4087-9039-d2dfab82aed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8e317f-180f-46d4-b1d7-18be068068c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb076f4c-89c2-4cf9-a294-8f6df06778e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0e2b1c-50e8-4c74-8a12-4bffd5d14726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339f0963-fa34-44c9-86fa-8b805c284595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ad1a48-e32d-4ae3-a9ed-a060f8e879a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.158.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fd4a83-36dd-48e0-a638-7eec356a1dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244132f8-add2-40f6-ba41-a0fb53afcba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2e4675-abf1-4791-bb56-fdc885d704e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6feaf4-3965-423a-805a-b5a07b911346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410409f0-ee88-43f9-a801-a5adf5a0b4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1bc3fb-913b-451f-be59-840e8116b406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4743fc1a-d7e7-428c-8281-3907ad9cf20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8594185c-02a8-4ad4-9e5c-6c6a27d640a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc856357-4cfe-4962-a7c7-3a8f494504ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea9e5ce-333f-42ef-8c32-fe39e1f08d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.71.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8273cbbf-026c-4e2b-87f3-4a69364d1ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cf52d2-934f-4db6-9c8d-12e27bcee1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.82.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38dcca4b-16c6-42e0-ba1d-699eb9bef952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03159e30-5522-41b4-aff2-3d05f3ea9412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242daeeb-493e-4598-a6bb-32b617df4685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94c1570-92b6-4671-8ad1-982d2a9a09ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fba1dab-a688-4eac-b81f-2c37244e3e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b22807-302b-4089-a196-b53c984dc824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.59.124.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02013a7-4fd3-427e-8212-5edb522fbd48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.130.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb5763c-f26e-40d6-b58a-ca65790af990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.133.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bd0a37-debc-402b-ba33-c3f24023486b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.133.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67104db8-33a8-4c2f-923a-219519c31df6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.139.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d79e49-0636-489e-8802-fa4a5d209b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dbafe4-3e20-46e1-b52d-9c4a441bd8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.64.134.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96b48fa-915b-4cdb-aee4-9252237ab685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.156.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ea6805-9327-419a-8961-543003325b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.67.217.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee088518-6b73-4d37-814d-f7d5ea4d05bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.71.123.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7ffbdd-a9f4-441d-8882-08f1190f8c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.71.14.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f653ce0-04b3-4e49-b7d5-13cd85221210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.188.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bccc8ae-1550-4de6-ae17-f34c21107a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09129bc-b586-4a19-922d-6fcd18511387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f023b94-547a-40ef-bd92-bb9f70f1ed6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90e842a-b1a5-49d8-817d-43cacf1d41ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab7532b-795e-4818-a05e-adfd9a02637b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a662475-f65b-4a66-a50e-3c3ec6781335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafd48d2-d4dd-4d93-89c4-1e8cf27b2c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ac1b52-347d-479c-9b44-d2af11b93c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7957555-8b1f-44f2-8a5e-bcbcb5d7e3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a43eba-b51f-4292-9848-843d0823129d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00b838a-a5dc-4606-a4b3-688cc0a67f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f0e32e-dd19-4650-a136-d3611fcaa260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97a5cbc-edff-4af6-aa3f-942cfa76ad3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb8e420-55df-4834-b974-36e6f77ca7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.134.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414af28f-b5a6-42d4-b3d0-bb9a6c5f472d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.137.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1341015-944e-4199-a78a-bb57b0210e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.137.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d741eb-cd0d-4555-9334-1afc98ae1014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa23efd0-7823-419c-ae53-e999659393c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e095d4-d2ef-436b-955c-89f99231943c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842d7657-d322-432a-b642-f899916f879b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddf21bf-88da-495a-a6bf-e1e4c9caf28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f8deb3-7dee-42ca-8e65-29b1b8ce5bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b8a3dd-07f6-4bf2-bb1f-5c86f2f8df2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1601cbd-74ea-41f4-b757-b9044d0c0924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a67617-a5fd-457c-9aee-ec56d2701bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a6f025-4a6c-4340-9858-8c7b6b58fe5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.159.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab2ecbd-cd95-4506-9dbf-f40e1e8cc1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.159.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed587ae-cd93-4864-a487-cb3a437d45db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f151077-a36a-4d7c-90bf-dc193dad36d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2156f9e0-74e1-46a0-a368-72f96eb8992f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e31f62f-1007-4f3c-806a-c3eed09ee4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5326ee5f-b6f0-4200-b0e0-6238c1f21816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39520666-6057-4c5d-8ea7-86bd43a8dbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.170.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9ac180-ff1e-42bd-92c7-2c4c399c893a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.170.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c4a18f-a796-4d10-9285-5dbc8a98e4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb3dad8-01cb-48ff-a1e4-a35ab7453436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15706bd2-0bc6-483e-97cb-ecab0a1ed3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2682afb6-a6fc-4a75-982c-5faec62e444d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c30e4fd-65e6-4897-99c7-923173f96ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ee12e2-54c3-440a-953d-0964fa631bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e2b849-22f7-43b4-a960-4de1f363f5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0775d7c1-1663-409c-9ca2-bfdfb18a216f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f320fcc-6012-43b6-95e0-afcd74fa1c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e95965-c88f-4e1a-8e50-1eb6ea0bc038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e671bdf2-3299-437f-a2a3-a8b4e0aa76cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b0212c-c6fd-4625-92ba-2490858caddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c23ab0-5537-436c-8784-25a341ce200c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8256b6a0-fb6c-410f-86c7-faf7a7c50dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0968ec-3f86-4449-bb55-8e1c05637607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce30fd83-cdb6-43b8-9539-63bc426bf567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc74b40-65cf-4842-9115-73808d6a8d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2577eebd-7a4f-4e40-82a7-56f6fe50605c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f63608-6d26-424e-8a25-9146094ad5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f78464d-9e4d-4ea8-aeba-f53bf10f30b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.183.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fed3a29-5eed-4c26-a170-bf04902aa087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540f4bdb-3f3d-40ef-95fc-d4d21c70df22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.187.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48019c1-e9a2-47b5-9c35-a733a750d0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9023e83-bb54-4754-9c11-7ff97d19cb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9acd8e-688b-4f63-a147-193cf41c6687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e178e9fb-7142-4348-9e50-faf91334b826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3c2e57-26e9-42eb-baa0-a5346b9020a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a4dc18-82b3-4216-a69b-c22a4e7a1d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126587c7-51b8-421f-bfcf-916e5dbb07c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1277d93-89c7-4e3b-841e-e1d43308020b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.2.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b13d76-c78b-4384-8f31-0d698bc55ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f2f828-b5b7-4a80-b48c-00f849c3e82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f16ed6-9b2b-4bb3-9097-a8f7e8913e82", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41aca84-aad8-4b04-9231-1bf3f42ce3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf54fa8-f322-4d54-a2e0-155fce5a5a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d7540c-f76d-4cb8-9196-7ab35d561dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1d7574-69a7-4786-be69-e50fd6c20236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903fbc43-01ce-4da9-b0ac-07e15555c1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc420d1-dbae-433a-ac54-0d74b76d539a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1acdafa-5b03-40bb-b71a-764ccac7b121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.3.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c9a778-f2d4-456d-8544-d2289ef1087d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.3.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f7b85f-d421-4d6c-9855-c1703fb6bd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.40.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29316d8-896e-4605-bcb2-b40d4b06ddcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8173d548-48bb-4868-9450-f6aa0143a405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.7.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a2e090-984e-4dd7-bf34-5c0e3ee4df04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.8.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b45bf9-2da2-4d8e-ac8f-80658418206e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec22915a-84fa-43de-811b-df975149b8f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff498d4f-f1c3-4057-8b17-cc423f8b1e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08cc956-a1ed-4700-a30a-766ddf002148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7085211d-b655-47ba-9b17-1ad929fd6db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2cbd11-4119-49a1-a0fd-c0b429418080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb236f8-7a61-4adb-8de8-e201224601ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475cb57b-baec-4f31-b331-aa8fcb9df2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3e1d77-3144-422c-b808-973056e51d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c110c3d-7ee4-4449-9bdd-89bf15e6cbf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304eca0f-9ee5-4ef7-80ff-6968220da041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f3bae1-0f7b-4012-8cc5-09ac4fd7b5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e60422-ca48-4071-a562-a374764ed981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb285054-1f13-4f4e-b28b-53a7d466c0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b7c668-40dc-4b21-aa92-39b8b9e369ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207c38ab-ae90-4577-a28c-61fa6998de95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5c06ca-d4c4-4551-b01a-36511323c0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1f6991-32d3-433f-855a-4fba52108547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb8c0f3-3805-4e6c-a167-5c75373b8b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20707b0-8cbe-4d04-96b3-79eb389d410a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2c5c7e-3b1f-4497-adb7-c4fc9ef474ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26c16fa-0c6d-4fe7-9824-71f94aaaf594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325945f6-58d3-479d-817c-9a85099e5ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c049c19-0b54-40f6-b653-c660076decb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e52770-6454-4213-b621-c2b80f97036a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32209b8-01fc-4ec2-aaf8-bf17454c0d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42049262-6e12-4fcc-bdfb-b027763db392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd99db3-0cef-4bd6-83c9-8928558ba22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b52fd25-5d10-41d3-bd83-82a477fe7d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fca40b8-e9a7-4284-90e7-914c4eb0fd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546f3da6-6646-477a-8945-624df4f5c3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba88ce7-b12a-4a21-b433-80eab62b679a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e78bb9-e2b8-43dd-88d6-48dc463ead87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d975f72a-2eb9-43f3-b2b0-d9c45e241f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9c8d78-88e3-4cff-888e-1d668e0bbebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3832f7-1129-4486-b5ab-cf3c89674519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c60a92-20e6-459c-bd3d-034a9b3cf92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa9b1fa-ba64-49b7-8020-7a45ff0a02e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe7ad41-bc0f-4efc-b4ba-87ba6aa054dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7651613f-b242-4293-8e96-b3d58e7d57e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7c97e0-126e-43ff-872a-e1964f5e91d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41de8090-b608-40ae-8650-a8150e25adaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4465aea-1c03-4500-83e7-732eedfb3ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08e69d6-7cb2-4fc0-95b3-7442751c12cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78a7787-b146-4059-9aba-e26cd090980b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.84.88.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94040289-dfd7-4e63-ac84-628020ebfd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f53ae9e-ecaf-4080-9dab-7dda4a0ad0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.0.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb3a3b1-41e0-4bd6-bff7-970af79c4b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.105.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d0662a-62a6-4f64-9c7c-58faec4826b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.13.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eacf9b4-879c-4965-bfc0-9822feab9d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.57.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786b4be1-e283-4540-9b07-e4986771b2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7468260b-3ba8-4864-b35a-4c8803542353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a577fd56-9447-451d-ae99-a47c8f44a2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c993ae67-5f67-4a41-8b75-93fcbf4c6f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b17c15-7f1b-4f3a-991b-cdfc4d3683be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.95.65.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3b41b5-3f34-4166-8177-cf10ae4bc9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.158.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d062056-f102-45ea-9fe0-a7de242d8f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d974817e-673a-44bd-8381-addc9aca2e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.36.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41adb2d0-0a5a-4372-8750-dd163b7a98d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.102.249.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91035136-4b5b-4d05-9e45-94fefaafe37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0b2861-f9e2-4441-b33d-71aea989b7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bad73a9-22bb-4237-ad80-036400cb9a7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.40.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b6bc11-d9b9-4165-959d-7062292750ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6166e6b3-9cc3-44d0-a90f-daaad5f80cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1088d0ac-7bc4-446c-bf6f-21299224a58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad22c878-7f69-4c92-bf13-cf41f92328d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ff3ab5-671d-408c-bdcd-af1c2ff8b7a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5ad424-8a9a-46c7-8e7d-c2dac60e4208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.195.11.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2b1faa-4dc1-4f15-be10-ee1739702aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.238.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9ff7f2-a5c5-47bf-88d9-f938b4f540f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.236.65.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81116ff-c4e9-4f01-8227-3db4ad6b1123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.233.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af6b76b-f7e4-413b-95f2-bb7f67941c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.253.89.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20aba40-4778-429d-a008-dba3e31b001b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.157.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee2d5a9-03d3-482f-84a6-18b3d5310117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.174.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb083c64-c3fb-48f8-8077-863199f6ffc5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.225.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab560c64-72c6-4ae5-9b59-f81563199f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.62.239.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41b6b85-7fa9-4a75-9989-cf9a7b054849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.102.128.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e67df18-2c87-4401-a64d-c0b6706c3b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.157.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdc5ec2-e265-4fe1-a91a-a5c85494452c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.194.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b52d34-62eb-43dd-9d83-4621d76dc654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.123.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da9dbd5-32e6-4edc-98ab-022822269e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.110.79.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04b89ba-f7c3-4244-b03a-92ce02dcdff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.111.13.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ed9ed4-3d4b-431d-8c4e-9634271300ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.111.180.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10df5f1a-3523-41a8-97f5-118c21bba73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.231.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d93809-cba1-49e8-949d-046d840bace0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36448e13-029f-408d-83da-ebce30038e3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ddfbb3-41b5-4414-a77d-e3595fabc231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.130.108.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef27221-d180-4268-9fe0-d99aa42707c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.167.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fae0a0d-a540-4378-872b-ba2d2952301a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.179.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e551e6-b351-4879-908e-eea639aeb08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.198.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d88114-3ba8-4a3c-9690-96cbacf319fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d727d34-3cd3-4af3-ab80-023717284559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.203.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6858cb-c741-4746-8f29-594027f6c51a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.24.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a30986-9aba-43bf-90ef-74494aa5515a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.242.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239793cf-6c32-4028-ab5b-8270aa4fa2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc31e47-afad-4fd6-b120-39929fc22955", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.114.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019a00d0-f5f8-46d8-8280-6517d5641eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.169.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e213f9d9-dd04-4d82-b537-eb1f72ce9aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5e956f-9fb1-4180-a812-b1e4420b1f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.252.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14938509-77f2-4966-8371-7e4290dda802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.85.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a096237-c5d4-4ee7-a4ff-4952127ffd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbced617-0030-47ce-be0c-20cc8329680b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.88.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226115d1-4f4e-44e1-be6a-411f29dcbc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.39.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6beb0dd3-9149-4616-b473-d3acac0638d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde25ce6-2849-460c-8622-3241533183f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.116.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae65a572-bcad-4c4e-8c2a-38aa5bd0ae16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.117.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d68557-e35b-4eba-bef5-078d3b39d1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c85a89-5e1a-429b-b137-5f5a80a4e6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600698ab-731d-4875-873d-f8ad48ff10c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978c8623-b704-4fae-bced-6715ae2bdf06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09d390d-9d56-4bc3-8124-b29106e493e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.13.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf672b60-b39c-4644-85ad-574c3001a5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.130.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61357996-ac29-4f87-bbce-832e9d6c08b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.131.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f41d5c-0598-406c-b461-a83940fba88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3211f008-70a5-42b3-a6e7-39c100d4e8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f109ee-73a2-4aa1-9d0b-537d566315ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bab4e4-fba7-4d93-81f3-63034df58011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549ea6d3-8adb-4809-93a9-c1562064c2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b61730e-7be8-4475-9547-710f0bb9ad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733845b4-a519-44c3-a77c-f13a24b9c0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361ca626-f462-4d7b-a782-69cdd52a92b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42def57c-7ad6-4f7c-b421-38bc4fb14935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fc7195-b6b2-47bf-a667-ce0204cbc920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fcabdd-0a21-42b0-bf0b-4ed2b2f7cb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a47ecf-4d49-4c6f-b045-5bd056b0cc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657f11e6-552d-430c-9597-b7162100a9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9560b13-4a25-4a57-8a3a-c915f22566b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9912361b-b4e7-4ece-b89f-08b72ee7f6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d1976-9e32-40bf-a556-2112fc0c351a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa3f0e8-8932-4de6-90b9-981f5b84d1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dcba10-4f33-44ac-933d-f8d3ce5b17b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb281c1-c46d-403f-b34d-e73f52b512bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f880773c-52ab-4d95-adae-867af808c7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429563e6-90b2-4452-b940-154f94c46273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd0c26e-c4e2-44f8-81ec-39e73e1719d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d60ffb-758f-47d2-b77a-13caed6084c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86848176-eb26-4472-aff5-d9ce97107638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be715ed-a30a-4cdc-beeb-917d30653857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d784646-922d-42bb-b31c-a8c0ef65de67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd2880c-2bc4-44b4-b6a1-f5a7646da868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53da20f-1e54-4d62-a23e-33f4db90ac21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc6a366-f31d-42e2-bac2-a4fcea2b50dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29415993-64d2-47fb-a90d-ea3f5aedb4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110b0748-7653-4155-b2a6-e0e1d8605e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51908568-eba7-47a8-b3e1-4ecdb1c1cbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b813e8d-7cee-4c86-b542-9d5c51e89451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867f5da5-4ef3-4abe-8f24-ec532f88ec95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea76d66-8bc4-4602-8e28-26df04e5db79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a44de3-befb-4379-b19f-66f8076e7052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facf6430-f909-4fa6-aa23-cc9e1f4fc2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9c279f-a0ce-4945-8a2e-6189e77499f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb8a2ff-343a-4a70-8c3b-33830ee3b925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6318269-b475-4504-83bd-46b8ec206e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceca5022-fd88-4244-a39a-4dac5404679a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.96.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d82ff8-abbb-4bf6-93c0-1407944ef3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.11.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b2724e-6083-4edc-9e88-a14992ecac81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b71f50-354c-4012-8e1c-704a988776dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.113.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c379595a-0cff-4559-a27a-17fd59ac73e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20d714a-7d03-41b1-bec2-30914ae6ae6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d716fd3-7a2c-458b-991d-68e3c3a2692c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e03c258-91d4-4615-bfdb-05633ea5a511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09586819-6306-47c2-8649-8bd42570bde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c8abc3-9dea-4987-b8d7-6e48c0c582c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64e50014-993c-486a-90b8-cea53a52fca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.122.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a1d8e4-9fd3-4eb7-b499-046ff89252c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16360c74-ed05-4529-9d3d-25ee88754069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78966406-54c9-4835-8d53-a20ca3d4764f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bb6775-b736-4d43-b49c-8c1d734a3f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ce3dc7-c77c-43fa-981a-8a4a74df0e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c66c2f-0f2a-4b1a-872b-4c466e9bb802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.129.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d44986c-83da-48d8-9d07-8f2d789f12aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb8ed17-c0f1-4a57-808e-98e4b8f58711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221e796b-19ab-4e48-af10-448f536d2dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a023fb0b-38ca-45fc-8693-021195628825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.133.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002646e9-3086-4a91-bb99-bd86f443096b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3304870d-6fbb-4ca4-a5c5-d1d31e9d1641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032dcb20-db45-4ecd-aa8b-b64b6961f44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc672ac-332c-4b9d-8024-2fa3257df1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.140.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2627941-3fce-4591-a94f-0ee97f8e081e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.141.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f133cce-9d9b-406f-b174-bc4c98bfed0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e6182b-b7a8-42a3-9aae-3398d4099c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.147.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89595ee4-7767-4328-ad0b-b8c2b9315a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba89f56-faeb-452f-adfd-a7e41af1f562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0f799a-a17c-49ef-82bd-d26a89394ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.153.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f5cd43-7d2a-4326-be4b-c02872a4ea72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a70667c-d93f-4232-9f45-cfa1d29987de", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c8392c-feb3-42b7-8fa1-1798dbdc7811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.156.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e453e454-0a6d-4e08-a43a-d23ebf765c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2a96d2-9554-4133-b884-f07b03f6b27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215a42c3-70c7-4fbc-ab84-848b3c17cd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746b8db8-e4c1-442c-82ad-159769de24df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07943fd-b530-4d73-9baa-91349840c760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.175.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4054353f-16b6-46e0-b627-1c238bdfc873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.176.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edb8d40-3128-4e20-8642-07d6ce5c8c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee06fd0-a07f-448b-ad7e-7b641b6a621f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c629f81-34b7-4f27-97c2-485043ec7326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5bc920-c222-4db2-8fac-8b72a59d8863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a10f472-a3d7-4db6-bb98-164e5eb7123a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e570956a-51c6-4563-b953-68db25ad6fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5daeae-e9c3-4b3b-a4fb-907872c436a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610d938a-57ab-4a2e-b2a7-edde1ca0e376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.190.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f6be4d-fabc-4046-8ea3-c9c121902474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2a6525-57e0-4572-92f2-46caba1176b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a69bc6c-2de1-492b-aedf-1fb7126f0b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.36.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f1da94-10e3-41a7-9e36-beed5e00edde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b67ea83-6f2f-4ec9-bc66-6b297ccbb9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2f6e77-2842-4f5f-b740-f2dae6097bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.40.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9049180-84ee-43d7-a2aa-aeafc15143b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4c08fd-0d4b-40fe-8bc2-8372c225206c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.44.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e1adbb-bfef-45cd-8358-c15981e2c3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a4117b-cb7e-44a5-90a9-a88c916c0c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac995b51-a0a6-48e9-879a-530b2ab0810c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.48.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8241a5f-b2ff-4d6f-b5a4-1bc4a3985aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0171172-369b-4c24-abb2-befb011c35a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12e21d6-d3de-4b43-9a0b-0ac4d653b3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f8269d-4a4c-4c03-a4f5-8bc02b93ad6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33bf3ee-47f9-450f-8088-dccec16b2559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea243df-8b8b-4945-97db-ff3199953339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0974bbbf-5505-48f3-a28d-14ae097d07e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cff5db9-83d4-431f-bda8-d1becf90c25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae5cf27-9d74-411d-8809-ea9c9b4eeff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3692940-6ea3-459a-ae4c-2759f2abce5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b744589-55bd-485c-b9d1-b06af8dc1acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae226376-a448-44cd-ad54-40d09317c20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67946460-54dd-4626-9930-7a285f9d3c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b7e038-d4b7-4017-bb97-e63382460c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e0cce0-6439-4388-9d19-63f759211e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faca355e-c505-41a7-844a-5c7d84f19b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ceed1a-2adc-4e98-b873-fe5a5db9c61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb26f43f-3a25-4c4b-b415-538da1b9710d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c06466d-be52-47aa-9f93-ec3cd363800b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6085217f-32a4-469c-b21a-87b38ca9be9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78318955-3f0c-421c-bc66-4ba6bbb14ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.103.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb686a0-4b3e-464a-8583-95765ec10cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575cb229-5cb6-4adf-aff6-1953ca0512e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.114.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46b9df6-a3f4-494d-aca4-5b9538ec139a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb3f78f-c67d-40b1-8fd3-0d3e12e674c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e210adef-3993-4c7e-a9a4-c0ea9e36b1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a68d77-0b3a-4f0c-b639-cf98d646fbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd52a9d3-4459-4d7a-b4e9-213aa14ce56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b2343c-dd29-4edc-a6c5-ec9d17d70c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc31d8e-1b16-492b-a14c-d60ac66f4247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab400b66-c067-46a9-a259-93b80493a02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a853ab-f937-47df-9c1e-05823c6db6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3080e0c-2794-40a0-b383-e293ceaefd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4ad354-e86d-4023-a7aa-b437f2fd4640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9da53d-4cbd-414d-9e30-98bffb795413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848b2f93-91a4-4f2d-98bd-5559940a6b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b896f99-8935-41c1-9489-3f7186c2ac4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96cea2d-0c25-4534-b32f-19a25f73c576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cee772d-297c-40bf-84be-86716490c39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0ead01-effd-4d3f-acd2-a73c7c65926b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d9da8a-f2f8-49e8-bba2-b1f50645be41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42417978-5518-4505-afc1-ae19dbdd2b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c6445e-90b8-4d79-a1cf-ce7c5f5e1cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.161.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1ea067-2537-4b4a-907b-222d7c55d7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.166.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c36c38d-79b5-426d-9407-d09101d08ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b6cec7-6843-427f-aff3-3ccdf940c30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b6774c-8dfd-4aba-9695-12beacfdc5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a1f93b-aa1c-489e-a74c-c15df48c6cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bb6c5e-cdde-4f78-8fec-f1231f728d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34b902e4-5a3d-45c9-b179-c322887bdeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.18.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de71562a-d6ce-43da-91c6-8b464d789a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7257055-93e7-46f1-821d-48f4b2a9a6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975c377f-8670-4d57-b195-46fe3e83b524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.19.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f854ae8f-b07b-43db-a1f1-310714036f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df01f9ff-ef44-4000-94ac-037c471df298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1c4f88-84ae-4b2d-895a-e874787ab8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3b2654-7e2b-4540-935a-c4e0e0e528e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2b78f8-44b6-49c5-ab39-b8692b5b3727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cbea2c-90ec-473f-9262-49b9c546be27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2e0baf-d063-4320-8276-7dfd2855eced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6593913a-8ad6-456a-b7d5-0541d83de08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da25700a-54a0-4697-ba96-c61e5944fe02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.251.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464e1cfd-be82-476d-b35b-f083dee46251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a581dc-07b4-446e-ba64-f2aa8ccfc3b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d4a351-ae0d-4766-8786-da04270118d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b628945b-bb46-4ad4-9219-7c03eba1570c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.255.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4ae77f-3210-48f1-b690-db868bd8b75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfda2a7-6eaf-4223-8edd-b5913f124848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40537cdf-13bd-40bb-b2a5-f3e9b9f60877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed388be-b657-4e37-a46f-d5910fd0103c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b566b0-8dfb-4b80-97eb-220a38e32f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.29.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8735a8cc-c339-4f70-8cdc-468bb0c1d7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f362c4de-ec15-42ec-8b6a-950767877a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.34.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35f351c-7f97-493a-8c72-54c90abcc76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.35.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c03a9e-1b97-4b06-8f0e-994f97a5f783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.44.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5638fbb4-22df-4f7a-943f-f44ab26d086e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f91ced3-0fe0-49d5-8526-a90965253ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe4fef5-5290-47e0-afd7-faee949dd7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.5.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820f601b-4b19-4336-8ade-5d7c4c2e2ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.53.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fc1485-1641-4219-a4ad-168cc1adb2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0d1602-fdd4-43df-b9ff-e24880a6780d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.62.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2140ad91-002e-4c8a-88ee-ebbdc4a35c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.63.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8ad279-5d41-49d2-af18-41b31367378e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.67.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36c7f7a-446c-4677-a031-c090bdeaad9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.67.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a803812-2aca-4e02-8d2a-0ae99601a5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373d4b15-67c7-47c2-9db1-140ddcaced8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.69.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c8b861-5932-4928-9a5b-c61ae0e23acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23f044f-0974-4b4b-8b4a-d214932f1e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a705de4-4dde-4d22-ad16-96b04918acea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.79.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d8f2d2-b7d6-4526-b2d0-af75f2137de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d1ae7e-8d34-43e3-9523-2e346ec35d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0d4090-e1b4-4168-b062-649822e56d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7c35af-1681-4d88-8008-6218c4bce164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.84.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f5b3c0-4cd8-4ce0-ace0-fc41960f6a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.86.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f396cb7-1f6d-4360-82ab-27fcc89707f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.9.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7662fbcb-8591-4197-babf-8e98d4b91c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2edb081-9ced-4bfd-9c09-2e0e0d4163c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf95a7e-9ce2-4e56-8ae0-da2e08debbe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcdf479-6885-462f-837a-965dfcc1f81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c7e592-3f46-413a-a66d-7e727d5bc2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80f797d-6661-46ab-9a4c-5e874ffea118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63474451-0d5e-4a40-a99b-7d18fa791947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60448e88-2afd-4b1c-b717-fe8dc66b5880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0635c1d4-66cc-4b81-a77f-d561e4efe2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.95.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a8469d-2632-43cc-b13e-df4e581c927c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ab1fa5-85c6-4ef8-be40-ce03b3d0ce78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.19.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5bb956-6ce1-41d9-ae69-c6dcbe08af94", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.149.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc5216f-6681-4331-905b-c73ade3d36a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.196.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d350b5d1-f14c-405e-94eb-fbae4eed078e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df54bf42-a0d3-4c20-897b-b99836169665", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7556fc4e-4c3c-4392-b67b-0f4d6e29841c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.122.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9035d55a-6fd3-478b-9c38-c08d1e4541f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a64b93-619b-445a-92f4-6b1185f97bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba1e907-0f3c-485f-b69d-5c058f4e993a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a032b6-47f5-463e-b214-255c611093eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9f61fa-8107-4240-b030-5828725289f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.146.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d41d9f3-8f7a-49a3-b799-6d7021a65011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.147.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f038608a-12a6-4875-bfb3-12e1aabeb766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6914b0aa-4fb7-4bdd-ad9e-264cd4b72bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527ec976-ebca-4fe3-ac50-fe7989122309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277d3614-ae03-46d9-9370-108eebe27f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012f3292-a45c-44b6-a58f-067958a05053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c628b491-744c-493e-a7a3-250782d9bd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1a4ee7-e39a-4c9e-8a08-6cf5ba9ec738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.178.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c0f3f0-162a-4274-9e90-db9c2be80b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.178.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25499501-0364-40a3-8d98-cc5376b08e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5489073e-aad3-4102-a614-1d1c97a57e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0441d928-e7bf-47ec-acbf-e127606f0171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.183.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f028f728-f9fd-4742-aada-bf25e2403ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2016bf2-2d60-4200-87a8-cdafed8aaf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.196.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe92cd-90a1-4dcc-9253-b677827ea988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba81278-6a66-40de-9314-4bb8d4a1b103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.198.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5529eef2-1736-44b5-b63b-40bd925b2497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cc8206-1523-4eec-af56-1bb6a30be17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3c5a59-12ae-4c27-8492-258dbebab2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.216.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c4d18a-1bfa-4774-a29b-30f749c1605e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed7bec4-4da8-47b7-a83e-fe888cba6b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b00d9f-564d-444a-b6dc-54a9302705f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0ffa63-3c33-4461-8459-f1692cd94dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189b667f-f862-44b2-bf3b-c88f5a3c027d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53789f9-c87a-47e2-90cc-b79c49fd9b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231e4188-e8af-4762-b5f3-9f1bbea983f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9a2d75-12c2-4fe5-af2c-6e6ac5d8c010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8edfefd-727c-4850-9515-1743af8e8c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.244.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0f5934-0971-4173-b79e-de243bc0c0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4aa48e7-aa32-402b-9813-fee945e0a94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292d20de-b551-4b85-b266-79babfc2f8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc75c93-7159-422d-9cf4-4eb19fe4c7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.27.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8bbe44-e18d-4c78-a2f0-ee7684715e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943a56cd-7ce5-4dad-a5dd-66e0b4498f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a18511f-07fa-4bb0-b0ef-49021a1cb98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.38.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a373fbe-3123-4220-a817-1ec196fa8512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2113841-1e1d-4185-a17c-23fe8e6672c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.43.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb452977-3970-496c-b46a-7b29fec84809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa09584-ae93-470a-a838-e44e081b608e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.56.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412f6e87-452f-455d-a684-5f2ccf5aa2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd11fcd-ca74-4f82-88da-bae59c06d902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.71.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84380fc-84ab-4726-bf80-249531e0d4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2031d01c-c89b-4055-8101-f55505b150f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.94.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94df6b2c-4fe5-4b14-b38b-70471b771ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de545a9b-35b9-4138-80b8-64be8ad9d71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.47.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d709ae2b-b604-403d-b1d7-6ffe302452ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda71b25-8141-4614-a625-cff04f938038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.63.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5fd7ee-79d2-4375-a386-5b1029fbfe6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d610473-a22d-4cdc-ba07-387d2b6bba86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.193.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d97094-d82a-4fb3-9cec-9f7353acf95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.195.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492cae5c-ca3d-4b0a-88bb-f623012d227b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.195.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c7a77d-aef9-4a95-86d0-ba09e4e652c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2e1d6e-2ea3-47a1-8997-d1ce0b6f4bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50099109-7e72-42bc-93b1-399e3a0857bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655e9d3e-4566-4457-a6aa-ca501378ea32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b8dff8-c1e3-4135-b017-818a6308c101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.217.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf974c5b-9d89-4852-a133-b302cb5b5971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bf0a00-c950-4d2a-8bbf-8e5486556cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1266bd96-eefd-4a12-ad52-f42ba8515b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c69159-e4f6-4b53-869c-5b2b195220d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea224e76-d9d9-4701-8b24-f14f02b2d153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced8dcaf-1891-4076-925c-1da32ba464a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0472af8d-1116-4a44-9893-736f2a957b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d771794-bc3c-4f52-ac9f-a1db142c8fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae993d4-8c68-459b-b716-522347c7041f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a970069-da0e-4acf-b62d-ff7a8d35b9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77227cfa-935b-470d-8e93-1b4ba7b2ee87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d57b49-cc43-4f5e-b8fa-398819d8be79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b39c2cb-9e51-4efe-bd4d-50f5ab83bd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7bfe5e-3dab-421f-b628-4d7cb3b42f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a54f408-b9de-4ec2-ab86-3945e4983e46", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.67.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d673071a-fc5f-463a-88cc-20a517271c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f065fa3-a176-42e0-9ad7-50943dd7c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cc6f22-42de-4fbb-9f11-3fb9b82622e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a291881-c6b1-4094-9669-b4617f4f640a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b3466a-9142-468c-8d6a-c336bb763ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded8040c-6407-4a91-b43c-904043c15a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0201c91a-841d-4b2b-96ef-582c98109658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2cef1b-94a1-4e4e-ba3a-19018fc2e787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cebfc7-2500-4ed8-aea2-8e01d14169ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a4fccc-ee4e-47d3-9d22-ec87df222acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3d7ef2-5e82-44e7-888a-61003c4ea198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf75a9a-fc07-4dc6-b539-0c6f31cf097a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172ee7bb-3e02-449c-9126-2e2c4e4696e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8d99e7-e1bc-4319-ad36-a48eb62f5c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e261b028-0bc0-4d4d-b867-5cd24943f477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4b1fc0-3f78-4165-9912-ae9f3bc313f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2846caa-c769-4441-a873-0865a772abb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2782cb74-3374-40a6-a871-e452d4aad907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.107.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acda6c2f-1042-4912-8958-d6042303aee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10febdf6-bb88-449a-a494-9c2bcd179d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe6f5da-9cb9-4191-aaff-173d41492e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a1eaca-4094-4c4e-bd8b-72e17c38465e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06331203-b9d9-4fa8-876f-624f9f9c94f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b94bf5-a2c7-4368-a68e-aee4a1bbfa1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38ee569-bf4b-426d-8d57-f5af298f60e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d70eb3-dc4d-49d4-bd4d-5f2f35118fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ef8b5b-4cbf-4393-8c21-70da1510fbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc209f58-4933-4d9a-809b-c35dcadcae79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f8063d-9860-41e7-b46b-e2d22a8c4e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb9cb90-b693-4ba4-a062-f00265ed12c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b2e59e-8690-49f8-a3df-6ad0c40abbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c379fa9-c0bb-44ee-8940-df6adcb57ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.118.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165c528a-a954-4479-9fb2-cb18e0702309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2450cf3-21e7-4adf-93c4-5f007cbbdb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fc79e1-ed68-4379-819e-42de8de8ccef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6f775c-c6e1-4397-9b9a-82f93eeb49b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04e393e-5768-48f8-a1e6-05352fdd6179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d1bc86-3499-4a25-a04a-2908a6c347ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313a4921-fa89-4d32-980c-d6623b6e1f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592f9580-c1a8-42cb-9523-b0e7fb8f314b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0643bc8-786c-4c3d-bcdb-aba0f2d5ab9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad38dfd2-c0c0-4bcd-8e09-b7a6325d696d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0020d618-62b4-41a3-870b-b5f0e4aedc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a9aeb5-53ec-4c42-843d-881385ba62f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09e9029-a3e4-476f-9680-14c2300d97ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdc185c-4423-47af-879d-714645d0f67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a646b3-8f5d-4bec-93f4-744e9f8774cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b09babc-1852-4893-8a7a-36140f29f339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39356062-2102-417a-b489-6033912803fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6295a544-2740-4c01-8e38-7c47fa2cb9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730a233f-fec5-46a3-a707-81c26c101f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f708e9-1a39-4297-940d-6e9c8373b63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3523775f-840e-48c8-ad70-04bc455f6209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4542366-44d1-418e-a630-863c8d0f5e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412903f2-34f1-4222-af9a-3372a336daeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a3c6d9-e09e-4f13-bb73-b5b864565b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d70eb2-1ebb-4919-b8a9-b27c89b67d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5db483-2ede-495d-826c-feb978bd56dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5ef4d7-2939-41fe-b2c1-365051b6a0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb33e135-95d5-4ccb-8e4d-da020b5e2b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea74371a-8b8f-4f48-8007-564749d41fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2705ed1-76b4-4226-9736-f695e036fc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dbe572-64c6-4e8c-a371-6338265b9fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f374c37e-31f8-448f-84ec-a6be66c0e57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.180.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba8aa0b-ab25-4fa7-96c3-070ce4d86dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38176c56-4f19-4258-8cf9-3bec21f8f71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.188.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13dafe3c-7c75-4a09-ad46-8a46b44b9ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9dc1c4-50df-4c20-9b7f-9c0970a316f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b294388f-083b-489f-b325-01287956cb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284c2631-2365-45c7-883e-550668c3566c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f259901-e24c-46e4-83d9-a293cabf254f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06067af2-488a-4d04-b342-abe046d471b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd9dc2a-52ec-4c31-978b-1dd347da099b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cd66b3-c461-4a24-9d55-6213a2635564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb81b0e-d492-4818-9ee2-055d02d9fdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f57d744-22b1-4be3-b6c1-abd8e6d450b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2974c7a0-0bd1-41b8-9362-a2db6c3cda58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156593ee-4ecc-411f-93b6-fcdb233756c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54cab05-9e5d-451e-92aa-64b276aa3009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8001d0-239b-4a41-980c-146b1b7caf88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5158bd3f-0de2-40f3-b6bf-5d525150bfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b63797-275e-461f-8c69-8d0946a5ccad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0764b525-14b5-46b0-a561-19cf78c5bc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eedbff6-3b0e-4e0f-bdb2-4b48d106ef31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d102dd-a414-416a-885c-569e9454b2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83797e68-4fe4-4ea9-a84a-b73a6c0a49fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a105bd06-85ce-4f97-9f31-b86dcfbfd38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.230.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8396533a-a2e8-4180-b0a0-ddc65cc8fb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.100.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2145775-322b-489e-a312-2651185ca8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.104.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb6166b-cf19-467e-9881-8d9c5659de74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.29.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6440db90-e3b4-48f7-8857-81a278ffb694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff35e86-bcb9-4f9a-ad0f-9311f8d96e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.30.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c895e1-c7bb-4395-9fa7-b7654180e12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1760e7d-37c0-4639-b6de-f3053af2fdd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.55.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3a0073-388d-42c3-8591-060985e4a313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.57.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440fe4e3-d362-488f-9695-18bc7d002e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.6.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75e904e-55ad-4625-b19f-86fa859c1ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.77.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29573aec-0724-4a92-8680-8c8c22254f74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.9.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75771f25-ec2c-428f-b52e-f69e7d3a71be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.90.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8d0518-f91b-4092-a944-ef21aafab65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fa0e53-faa5-4479-993b-f2f86dc94c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcb0e86-8613-4975-86f7-5c6debe4913b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4075cbff-f543-4921-b36d-01d0a692b140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.234.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0323f637-4c8c-4db7-b251-e4ded73b31ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.243.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472162d9-a20c-4c20-a596-7d94265c8b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.247.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3177fb4-20c3-4c02-9a58-60253e508c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.125.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6880fd4-463d-4dd8-bc5f-d1794a2f3548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.72.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f2e4af-c19b-45f6-9b4b-f97ad9396473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09df49f2-99ff-4140-ab67-27fe346acf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.77.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919dd40a-0ba6-45c2-ad28-ba76e9141c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e422a9b7-4e1e-4154-8baf-d1bbe49f2fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.94.102.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6600d2-5985-4a6b-a016-755fde561486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.208.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03f3f87-4047-482a-9db3-899a30fd3600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee65acae-ec1e-462b-920a-985fb7c39e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.97.38.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e5c979-c768-43d4-bfde-d4a97080ef87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e5ce9c-04fe-4145-a3a4-e24db1da6f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8b6318-0390-4c72-a094-be261dad5885", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.204.74.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a09ffe3-cb22-4a7c-988f-ddb94ef5a859", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.178.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4954b7bf-36dc-4de8-a2b7-3a0f840c4780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.4.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0060d7be-ecd7-4fa0-8c5e-b541b28d174c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.235.121.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f751580-2e5d-4d4c-a77d-a8beaa007551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc25ebb-54ab-49b6-b63f-4b9594371572", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.166.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba674e-f759-4113-8417-08e8198f74ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.7.204.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f17a44b-e56d-448f-9e08-3e62fab7020e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.74.7.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c58dce-2af6-402f-a3bc-9747ecaeb0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.1.1.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d437773-be69-4877-abd5-4c78d95512f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc74574d-bca1-41b8-a1e4-fa7476355d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.11.135.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6780ae53-5843-47e4-a7cb-4791c9f817bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.167.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d22c1ab-22b1-4da9-b00f-92328ff15588", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.173.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32b8c23-bfa8-4c77-96b4-a282bcc25386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.101.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20383105-1f15-4b39-9682-7b4630705853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b133d85-f086-41aa-bf48-504236e797dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.192.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0473cfc-317b-4dbf-be07-edd38edab6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.27.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7cbe26-890a-4916-b6ce-a28dc0632f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.27.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38056865-3da9-46ca-a569-973f8f12af53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.28.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07275767-73d0-4b17-9787-19a7260812ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc40a85-fdd7-4723-b92b-8e64396c8713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11c4b14-b057-4c9a-ba67-2f610a54dc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.108.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b769c184-1300-4cd5-9718-e15e18ac9817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976f82d9-c827-4f93-a8e5-4c7b8954c83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75434bd-a598-4acc-8894-6132be8fa392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18b8e75-f961-4f7e-8ecf-5d73519e6bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7ef968-3362-4a07-b6dd-07fdf048e337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d81fb0a-fde4-4678-9041-e104d4929e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.177.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593cbf35-7f04-4835-852d-175a01f15809", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.202.169.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4646191-e53d-436b-bb78-add35221cb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8437b969-3287-4abf-8262-57248b496045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b421588-aaa3-49a9-90f5-95aa644744f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaed888-decf-4f42-be52-aaefdbb6d0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cb968e-e59b-4846-b366-96a34baa3bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01cc31e-d754-470e-9fed-b6f8264516ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de69db5-6f97-47e1-b9b4-124c8cf37b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f7228d-aa8d-47e9-912f-127fefdba66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a2f607-6d7e-4668-913d-b6ebee79891c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec91476a-152b-48db-916a-ca93524ce712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93c0bdd-04c1-4464-ab96-183cdba3a86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd33130-f55a-48b4-bca4-10a56ac9ffa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec1bb31-ae41-41a5-9f2a-27c81fc89914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3a2882-66ca-4a6e-9946-d95ff41aa689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81141cae-56b1-4519-ad3c-c82b4ccee4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09b544b-b2d1-4d9b-a499-cc58e985c8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d26816d-b880-4a91-858d-123f94fbf48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3668fe-2a9b-477a-9d72-354da25d3ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d0bdc8-7c3a-4377-ba22-c2dacdbbc50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f396f798-727f-41f0-bd77-38a273c2d462", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.36.101.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b15abe-ad1f-4083-8fa3-42fb64e63567", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134192c9-8644-4507-9485-855c601557ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4d4e3a-5239-46a6-ac1c-b792dd486ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5401401e-fa62-4bdd-bd73-9073d716d237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1139bd50-ca78-4ed7-9b38-9fc18b638893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4253d3cb-f719-4e0d-88c1-16698b9c8ba7", "relationship_type": "indicates", "source_ref": "indicator--1139bd50-ca78-4ed7-9b38-9fc18b638893", "target_ref": "vulnerability--57d0f18f-ca0e-461e-b051-791e381b7036", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd59a32d-53ea-4d0a-9c6f-4c38a1422ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.75.128.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9786fe81-a676-4d83-a7d2-779075f7ba99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.78.205.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3579ba71-03e4-495a-a61b-d698023eefbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.134.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78c1125-e4fc-4ca2-9412-8887fd13c9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1182e22b-b8e0-4940-a1c9-5f3dad8ae4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a546579b-3ca7-4468-b773-6b27b304f30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b7e8a9-b6d1-4571-a8eb-fc84d42b76c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e88c903-7353-4467-9c47-6f823a77946a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b630bfb-f7a7-405f-96ea-62d8c5439b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.48.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca0a3e2-9582-456f-9bde-0350a488f630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ed06cf-23c5-4705-b0d4-f04ec9ba762c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd728f4-5765-48d8-82cc-e17bcdf578f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd60b079-f0fa-4f8d-8075-f17829393f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.49.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c5c9a7-aa75-485b-8469-704cdec2975a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cac42f5-3f3d-45d0-8909-90c73bb4cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481cf20a-89b1-42dc-a60e-cf2876cba1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60689b45-0090-419a-abaf-6bef353fb7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d630a74c-cbc2-493f-a5d7-4ce82b22f22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50f2c26-e08e-4444-9836-f36dae5d586d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bc6993-d5bc-4be1-b581-bbcfae527db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4381bb0-c10a-442e-9ea2-91c5213bc1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.54.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d78802-5419-415c-b10a-0fa6fa968b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b91dd87-7d3e-49f3-998c-37fffbb1f640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.56.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f834cc88-47b2-4e5f-ae32-a395dea6d74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dc0c9d-1b54-43c5-8ab3-3fa39ea0e25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217217a1-638c-40a3-bc3c-4456ee7d1112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7bfb40-7330-40e5-b5bb-8d5a162f7d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ded5004-1876-4bb9-9013-ef7891cb9218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1220f10c-16a2-4ba1-9401-8913677cf143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.63.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fe8793-459f-4c9d-a803-b996946a515e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afee29d2-fa7b-4020-88b1-5aaba5b543e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.17.59.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0071819b-8a9c-4d26-a0b5-5f84d4566aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.17.99.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b189d8-ebed-45f3-9b81-f8f2956173ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.187.96.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8579ed9-7c78-45c2-9ed6-294da5deb7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7242ec-96a6-484c-8be6-126f75c1012b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b5eece-df35-401b-8d2b-1af7248c383f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.158.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f9e888-ea12-4fc1-a004-2ac161f084eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8e322f-3849-49d5-878d-d65735a76b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76580e64-4502-4bb7-85cb-75424766fd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0e4bf4-fc7d-4d94-b18a-66901a585c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a51a0a7-4747-44b0-83f2-b832e6d7c820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045f5dfb-f565-4dd3-aab4-9e71a3d73efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d4ee53-42ce-4843-b63a-3be271592cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d16dbdf-96c1-4729-9974-cde792c3ccfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.198.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccd2eee-778a-4c02-b83a-91f8be46a5d9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e595a223-18f3-4d05-83a8-32d6487a6120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.41.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31316596-b407-46e2-ad9b-e95b11fe6846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abd778e-aaa7-4fdb-afee-39b18ae94ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.252.185.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f417878-4b6d-4a61-a7ef-b9b7988159cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc6f9e5-0207-4e60-819c-4c8ca238fea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad17be8-622f-44c0-9dc9-45e7c3e64f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.126.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9e4347-c3f8-450c-a549-6f9487353f12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3515e6ab-54a4-46b4-b31b-36924dd100ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd0f67c-6b48-487b-b279-e5c256cb0059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c82d62-3681-4df0-9426-bd768b3ff6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.53.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e0927e-22e2-425e-87ef-29a52f6bd69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0f2b37-9cf0-4ad9-8819-57a51d4bbf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250d504e-794f-45fc-a0ff-2c98dd3f8736", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57335471-701e-4f49-8877-b69a1020efdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.151.196.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4710cd75-48bd-48fa-872b-0cdbf32b77d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc33f5ef-fec6-455e-ac8b-7afedf31560a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e04d003-342c-4404-85e9-2cba893bef1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4091faf-465b-4481-a95a-fdc7c2ec62b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4cb0f3-f7a5-46a5-a072-37b19246dab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d68bdb-48e3-443b-ae4b-8285fddc19a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407a096e-4589-40ec-a65e-fd722a183846", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e45ff0-28ed-467b-9145-e9775be28bc0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8b7aad-f639-4428-a2ba-eee6d9c19008", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a42ab58-ef5c-4d87-8390-5b61d520042e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e7aa75-399d-4dcc-bd09-4eb1ab5de4ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402a7f2e-f05c-4785-aba8-36e347eb3a04", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47e7969-0c62-4f25-960b-f9fab36229d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8570b56-830c-4354-8be0-b2ae4c8200ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2663fa9-f604-49f0-9c65-870fae6eaefd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98104941-db6f-4b95-8314-75eb2bf92715", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ce9754-3051-4779-97b6-74099baee67e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be265e58-264f-467c-8f72-11a7227a2d5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860b998b-0743-4282-ba9d-15286bbaca6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbcc788-cd2c-443f-8844-2851ff55616b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0578ce9a-6095-41c2-8984-0ce1a75ad54a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.176.211.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9b0fa6-cc36-4d71-bf71-fd18acac2619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a7acd2-c79f-46c4-9403-25a4436ce73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d6f1a7-dbc5-48ec-a941-bd8733d5e69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.169.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befa0abd-83a5-4989-952b-bf5d778684bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.178.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a407d13-f46d-4910-8cb5-d6d82cc19e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b269dab5-dac4-4e74-93a5-76f567d32d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a12499c-de2f-4184-a495-2a7f5ddbbb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3e0679-b8a0-4f35-aed1-c095be5da5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76dfd58-b336-4556-8eb0-a233bc639a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198df5e9-b701-48a7-ae20-53ae1722c407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.195.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e963c3-a8dd-4ff1-8623-d9972bcaabb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.249.221.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba49863-d153-4ab9-8960-dbcd2c33d237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.36.131.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a41be0-51c5-40c2-a446-dc3cbf38e0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.39.163.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a54e6b-f1ea-4f8a-945c-010c7c6dfcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.42.138.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a662a070-43f6-44e4-ac67-8a1b6754a209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.50.145.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304b71ea-53be-4fef-af7c-5ac706fa9a0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.53.230.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a984876-a8f0-48a8-8e9f-8cdbe189b33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.87.172.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a531663-8dc6-4446-ae4e-46626fc9b4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.49.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117ebd97-3c9d-4d6b-a28a-c76a07a432ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962c5087-3485-4818-b35b-6855ce834c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.145.22.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aebad13-4ff2-4dc3-81d3-85117d718e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.152.20.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6892705a-9ce9-44e5-8aa0-2e6a18cfb4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.152.98.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db14721-3faa-49b8-a790-52c0f3c41f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.28.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed0e3ed-efeb-42a8-ba08-c7fff5eb1985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.129.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3199c9ea-f662-48a6-a67f-16ceee46a406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.177.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2b6d93-c5ea-4bb4-bdb5-8791c3e87794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.218.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b82774-92d6-420a-b8c4-5977c2bf60db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.171.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712af0f0-f98e-4918-a474-80db1fc62a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.39.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef274c0-b0a5-4b7e-9479-13b1932d09c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.64.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4cba87-d1b8-425e-836c-132952fe3fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.65.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c96d75d-f218-4e4d-992c-59cead34a21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.169.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71035d04-5fe8-4053-96ee-20650d5a8be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.65.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e95b26-eb9b-4fe7-b70e-deb4de19500b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.193.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fce7afe-f59f-4d6f-8006-735d0160ce48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.217.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ac81a6-e721-48d8-83ef-1778e9175de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.97.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b735c393-4a5e-41f6-a3ad-e221ebd32d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.196.134.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fb27ff-e56a-4d69-88c9-427728114120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.27.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba59a7d3-6f52-4fe7-9db7-697074457d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.210.101.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd229a0-6e44-4d52-905f-2a16e8ae6aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.211.4.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdae3cf-2a54-4f49-b4b3-a2bdf07c9354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.171.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4a2e0f-60e6-4ae2-bb3b-54145a2615cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.56.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0a0359-a842-4214-ab51-2db9ab52b5bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.161.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4b920e-37e4-4698-878c-29b943663c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.228.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d7b07d-0fff-44ab-b19c-a84e53e9629b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.142.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4b2d12-f792-4eb5-b483-b21667dc6d3e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.36.18.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5cd25b-8920-4d40-b7f7-a9778a39dc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.86.44.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9f50f2-684f-4f9b-83b7-9679c3415406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.87.144.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb19e112-b041-4811-a612-ebd72ab6f1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.130.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249fd5d8-bcde-4797-b718-80879eb6c1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.3.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1cdf9c-4121-48d1-8b8e-b988dd6e86aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bb41b1-6b1b-4f4d-9795-87157aab7fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.99.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42289520-463e-47eb-99b3-7459e38f90d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b58a208-d442-4c67-9e63-db5c7f9f6e0d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.153.203.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3401471-86b4-487d-9b96-9c1c6cda5a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.211.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674d91dc-fde3-4cd3-bbf0-907b1cdb0f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda43753-2522-4172-a83e-ac2f31cf1f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.106.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37456864-28f4-47b6-a5a7-03256876e198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.76.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbb5c8e-f726-49bf-92f7-7c815b75bb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94de74ac-7ecd-4f8a-821c-abe62176c1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89de8fb3-60b6-4a0c-9db6-b3f5c3f3ed2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bccac4e-a1cb-47d5-9759-819bf742ec14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.214.29.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860ce77a-835e-497b-a887-36f27b0c5d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.56.204.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b22927d-c3ac-4caf-9e6b-a059e6497f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.106.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97178dc3-6a5d-4973-bcb7-bf36490f7682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.15.58.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd6dc5b-8322-471c-beeb-a7694e67cd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.151.214.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f4647e-25dd-4bb2-8e4a-ea19c4f774dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.176.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28274e73-6a7e-4a7a-b16f-d731f2ecab6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.58.173.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f452d8-2a47-4883-8703-5b0ac865b9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.88.247.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1e0b8e-b341-4155-b0f3-f3adcc98c7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.95.97.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f61a67-8a83-40ef-9584-59512f1f4442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.200.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256b492a-ebbf-4e41-9c9c-13f3a093fc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.83.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd7ad0e-f697-46e0-ac90-e4a3f0384f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dadcdc4-1285-4f70-aeb8-5b3f9ce243f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.119.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20ca5da-c0ec-4075-8ed7-11ec80446df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.247.168.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66eb9cb-a7a8-4884-a039-863d387ac5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.250.94.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d936d7-72fb-456c-94c0-d3afcece4128", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.255.229.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe0cbf0-3cb5-4c55-b8dc-834d1c68fd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.31.142.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2f29eb-b258-4fec-94fd-6dd16a263e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.24.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e43be8d-89ec-4e31-a2e2-b94c2c0bd2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.52.192.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74bc673-9997-427e-886d-caffa5e8b65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.54.165.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326f1599-37b0-488b-a0b2-99e8c290dec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38efe12c-3e03-40a4-9d24-a5a101914f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.63.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2c100b-74db-46b8-8c57-3c274caa3537", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcd80e1-09ce-4abd-8607-bedccf8c9774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0e42d5-da71-42b6-a6ce-e29846812af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f608a177-7fd5-46f0-bd51-d830ce000592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bcd577-40ee-4214-8a91-6d400e85bf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da3f3b5-4a88-4c47-9ed8-a83f528fc789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa091dee-518c-4b6a-a41d-1b17f251e94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a209ce-8ed8-44eb-a58f-9f8889d0c96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7d76ad-ab33-4465-adcd-4f577c8439f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.38.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf13197-3bac-48db-b627-0f7760edeb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.33.231.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0695fac8-5a96-453b-bfd0-79cfc7b543d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.155.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89e8281-867a-4f08-a5ee-23c6f7bd1170", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.183.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3561f36-958d-492f-85c6-361c3b9d13e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '63.205.200.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c8e028-cae7-4e6d-88eb-2669df5ba8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.137.188.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c252b06-abf9-4eb7-b273-671ca3170e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.60.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f96568d-90b3-4d98-8cc4-091c199a4201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.97.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc3cca8-d2b7-4f5d-af43-96695757c62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.70.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843881af-cdc0-45dd-bdec-eecd707730ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.98.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b48cadd-934e-4e6b-8361-11616ad36eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c83e095-8acf-4c71-98d7-eabcba56d958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf587bc5-b801-47fc-bb3f-ceb670de0e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.164.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102e4ce6-98aa-4087-a797-3cb13875a064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.2.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59936890-b73d-4d26-9cdd-c55fb25c2ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.34.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc02bf72-4679-4340-b614-cd5e4d1e73cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.41.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e44480b-7c4a-43be-a9e1-89fbb1355a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.5.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e714e4c-bfe3-4754-ba76-f3de0b432834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.59.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147ec4c3-f428-4d3b-aaa5-43812a1b7225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.74.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fdf8f5-da4a-497d-a95f-d4da58e311cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.82.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df483ef-c222-412b-a849-e7f8db99d18c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.93.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf1a8c1-7bce-4f69-bfdd-62615671ab27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.135.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134891ab-f13b-41fc-9157-8040b677273d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.163.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3eb0cd-da5d-46e4-b043-8ede2d4d9e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7228a06c-a195-48ea-be16-99f0cb602e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa38153-5e24-4ea5-be3b-b96e0cdb8878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c38a53-413f-4ece-a9fc-5876da6111d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c9ece1-0748-4ecd-a9b0-cdeb268c69bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420ac3aa-25d3-4c3e-914f-0247e681c359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49c8259-2bb0-418e-b31d-68ccb17e77f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724d5d57-a6a2-404e-af56-4b46ee65f9af", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af3997d-9b72-49f3-85c1-a6a5f975003d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7380f4-8595-4437-b86e-45d2b8c85b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba11eb5-3010-400b-92bc-04795347434c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69996a02-ed82-4693-baf7-46aa184c4221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668cea79-c2b9-4c13-b43c-264bd5baa581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefd732c-a491-4cd6-9b7c-38f5fd268436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0069bd-82ab-40b1-b715-f33aadb5e17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ce371a-da29-4363-96f6-aa57e834e86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5d4666-1488-486f-ada4-07c717d6da23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2368cc-1c00-4534-9389-cbd07848a44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3310ca-66bf-4864-a01b-ec87e15e9c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb71dee8-5017-43a8-a8c3-bd1614035587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804c6d9b-a4b3-4f82-b176-8b376c304d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e68c87-74dc-4203-bb25-764899bdf95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44edeb9-36d3-4aa6-acb9-f2533e542f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b701c13a-291a-4b71-87f3-d3ec87c802e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f8ffc4-e681-4ae1-b318-a53bde7a59dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3397e30-4fbd-42e3-ac0a-7bae767728fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f67d43-33f9-459e-a175-1cc4fffc8b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e83e14-d467-4a3f-b26a-340c289b3f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6caf8d5-158e-4072-8b2b-a2d2ab9338c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d6e68e-8135-44ba-acee-c1a7b8fe17e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78d3435-8d88-4a06-838c-7f96d2d7cb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2343ac26-f0d1-4375-bba6-c64aca4001db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfd55ad-9a7b-4f6a-a487-caef60c6d6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9b2d00-7808-466e-82e2-9df11b2eeb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b32ad7-4ad1-4653-a49e-a55a2693448d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9d9db6-7bba-4ee4-b747-c46bd014819b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61478127-e7ea-41bc-8fdc-67b75f4a6d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41226d4e-08eb-4591-9229-7fb563bd1e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b574c-71ed-4952-b80a-468345d648dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52de6b25-b403-41bb-8501-3b7eaadfbec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965bd3a5-77b4-4bf9-bb83-d22639c644a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29c2503-955e-4dca-8983-7f7e10ba27d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148829a2-a750-4d67-ac14-e8551252e739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50802bb2-e899-4b0e-b6dc-0017a0e1d1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201ebf2c-db08-44dd-a5ca-860f5c1b5bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76432d5-57ff-45e6-b7ad-e749b8f2ddfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11ba3e4-dcc8-4f0a-82e0-0663188532fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7157de13-8c42-4600-8059-af1ad4de90e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17db0129-6ae4-430a-a92b-7800c92f1033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a248c5ae-2b6b-4420-996e-d6a2164a4850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0db3784-cb9c-49c0-8832-8fb1eea6fd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7902221d-9a82-4476-a7dc-539f80a34d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383a98a8-3bc4-404d-b8c3-3a905d8ae30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bd5603-5623-43a5-bbdb-9c6c3729c2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d499adf0-2718-4f33-b01d-e17a9ddc3c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacaa6bb-12ef-4df1-a5cc-4c55520eddf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b966f374-30e9-4b2a-af58-ed0e17228beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0407ac1-394d-48dd-8ed1-bca35c882dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f73bbb0-78d2-43f2-b925-661f15c9351d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0341206-692c-4d77-9be2-3a73a153838a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46256cfe-2076-4ebb-9699-0cb5cef601a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec520ed-cf18-4208-be08-67d7ecabe8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314b9066-b592-48ac-8bbf-ea370bda1e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a36cda3-71df-426b-8d5b-3346e4965606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6dd8341-ea07-456c-9c17-6b8c9ee9eeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244e1bc2-cca5-44d9-980a-a7194a310598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccb8e33-07a3-4740-87eb-332f21b9f1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b58ffc-57e4-44e0-b617-678a29961991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a66095-736f-4578-91db-83701d99d69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60759b84-3bba-4592-8690-4d10caf4e473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c6d40a-68f1-4ea7-9846-2fa49ee58917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eeee9a5-0349-485f-89b9-7619c7beca81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15d202e-12b3-4ea2-b21c-cd4bffa931cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eef6348-2398-4bea-89db-ce3810e5c078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eaa1cac-c69b-432a-94cc-3e98989d84ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a030957-678a-448c-b638-ca163061e772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184105fd-fa3c-40c4-950c-208b49912676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6146d517-558a-4bf0-b422-43298ab75cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d0ec86-3904-426a-aa05-eda7b5686997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ad15fa-99c7-4e19-95bc-fb5aecc3b91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0f49c9-05d8-4147-a975-35bcfd3f473a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fe439a-4283-4dcf-8afb-095f72c81360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e51156f-e563-4046-b75d-15ad719590cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321045c4-39e3-4517-bc98-78dd3d3dd896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c9541b-6bf4-4f27-8179-540199161d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e20abd3-3aed-460f-ac9e-fe6470869b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe3b470-bead-4060-af0c-2ed96143faf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7575d98-9468-4ff6-88c1-eaeeaf9d1ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d22cb9-99fd-48ca-8607-bacb23f05e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae13c43a-35c7-4996-82db-af95a3e308fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b53dd37-87b2-4d00-ac7c-3d358ca3603f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347df87e-c725-492f-9b4c-69dda2c85f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1e3269-b6de-45b5-88dd-ad2dfa2adfa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b070cd7a-6e0b-4489-93a4-13a82dac6ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65176f3a-e3cf-4493-b378-e400c532ecb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3ccb50-f5fd-457d-9f23-e92e916506b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af458063-3e1a-40a6-bfe4-aa083f03acbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a533b-b331-4e82-9078-e29c20d5159a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd57f02-b534-4aa9-a615-52f0ff0045b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13aae48a-3dac-4320-955e-8bf7c6f8a2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d07d9-88f3-49b9-a22a-7d108735db8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fdee86-2adf-46eb-ac11-3d1e0e202f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff682b4-b83b-404f-b6b7-ed46da59947d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9280446-d09a-40c2-bd4b-b7a8907939a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60355292-cb63-4f8e-a395-8c1a43cce2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662670b9-ff05-4bf0-b044-6517ce4459ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a02b5fa-ac6c-44d3-a520-18d19e6cc205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ccc709-9ca3-4ed7-9862-a7afc988ff3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bf6985-d0dd-4e12-8aa4-6a3e937b45cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bce7f7-b3b3-4dd5-b658-e8f7eb4bdead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04bbf52-e50d-4100-b232-d3fbfad7647c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf39ec1-d78a-4328-8414-c93e2a2684e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232c58cf-acf7-4a70-8c3e-e9b37e2cb9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8de687-59bb-4d22-b515-27e1212fee5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80299970-f38c-48ef-aa00-9a2a65ccba25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b5122d-060d-47b0-b293-a70327a04c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c070e39b-45fb-4fb0-927e-9615c9da3c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49db1159-171c-4409-be86-0555322e749a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d52665-2e80-4909-86f4-e7bb7b34455b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94633d2-e834-4f0a-94af-cabaef0ad373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbddf2f4-9b7a-405f-9c8d-3a9a8a3c1484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163131ef-fce7-41fe-9d10-654e294108a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae59413-623a-40b3-b406-c6c03d19a83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000d8374-e80f-4711-8293-d16cc19f2494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cc7a65-c11b-4845-a70b-2eb04b655399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca8dc5b-5289-4e54-be29-f7e7338bc5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db50457-2b9f-4270-958a-5b559ec5c7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c957c9f-3fcf-4f75-8a3c-6dd67e715bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3803823-d9e2-4961-b5e0-f2d59b5c358f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd3752c-26ce-4914-aa61-af6ca6632c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd550455-262b-4e19-8928-b8171af93616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfa6ddf-c321-4314-adb6-fb67c506ca7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e6066f-c550-4bff-ad95-ef3cd82ade65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbfe448-bc19-4711-9792-ae0e99627fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b150086-d032-4f88-a1d0-35e831e9fbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3d1118-391a-4438-9862-eb39816b4b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e8969c-915c-425d-b802-57b9c04f216c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fd4552-0753-4d52-82ca-15b2f8a13f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6993f75-7965-4c11-b309-767802317797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41c4cdc-6f31-4adc-8fd6-c156713ecda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fbe10c-cf02-42c6-8019-32f086a88b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dac5ad3-6cba-4cd2-ac69-1c3d3d638411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e533d0-f60e-40fe-9957-786da77a86b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfa2e69-fbe3-4987-bf91-00a498b46233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27711077-30a9-42d2-a719-bd763ada3961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806d3bc7-8d2a-4527-a795-15ef9aa2bbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6197c6-5521-42a2-9441-6cb602f4803f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4a4fcc-57de-4bdd-b1e3-ea1b5b0b1654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e97b7b-dd1e-48be-a91a-e79e044a6ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1d1369-7f95-4e8c-ad49-8147ef269b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93e98ae-f0c0-4a72-ab8d-b76901391393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c345ab6-2002-4515-b9bb-aaa72363cf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3718dd0b-4d78-481d-ac88-f20eb06e4e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dda524-32dc-4de6-ae40-e5da3739321e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2608617-5b8c-4d15-899f-29a6a8ee56f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7859efde-6eff-485a-bb5b-9166181dce1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2e1b7e-c77a-48eb-937a-89a1bc78bf56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29990b0-ba7f-4500-a07f-5d258f1cc8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0b18eb-892f-4ae7-8579-454d72482fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1c6072-d057-4450-9aac-f317f68323ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d4b893-1eb5-47b9-a81a-73b6288ec80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33acd617-cb09-48d0-8d1b-8e8ab426ad44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7548ed90-5688-46c9-93d2-d5b89c88c072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dbea1a-13f9-4a94-9425-6759a903a484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c53875e-ea5c-4610-a867-ad818a77080f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13edecff-f0cf-445b-b907-d52b2658ca5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae20088-aaa8-4505-98b8-a1072ef90cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7037fd6-7f44-43ed-823e-950c02beadcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98770f8c-4d3d-446b-8f6e-f718a07a4b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca386b52-4939-4c79-bc11-3d23645b502c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3bda22-4543-42b7-95a3-7cf6a9f5a58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497ecda9-ef59-4cb4-bf10-b6fa19ad1fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bebb69-04ed-4c35-b448-08987f597236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d9edb4-266d-48d6-b205-3108eda313cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6549302c-aeb6-4279-8fe3-2126584a29e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd40b781-be4e-434b-af7d-332f63dfd58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2652d1-b274-4335-9852-69b4eb1d604f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6967cfe1-f5b0-4d67-a380-f08ef38ac8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91aca9f-b713-465d-bd75-ef51ec29525f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844ccb30-d8f8-4ef2-b76c-e429c21a0431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69475020-370b-4d19-a7d5-51a1d56378c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e9d644-611b-4d0b-9809-0722678dfcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71ab231-1f65-4c7c-9eb3-dbc266f494e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734c1bac-fd51-4052-ae41-3c9b7c521ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f4a737-0fad-4afa-9e03-f655242e2dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864095f2-ed7b-4cf3-9fd7-c8b7050df8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13634b80-9d35-485a-a621-c6790ecc2a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dd469d-4b01-42a5-83a2-ee0e5189e3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90d4f84-22c1-466f-9b3d-3c7ea3a72bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6677987f-f7ad-4d57-82e8-906af1ac62c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e35fbe-3bac-483d-928e-7af543d58441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa0e1ca-8a44-435f-b638-fcfdf4263b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf50342-d54e-4ebe-bbd0-3baf40069760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923d9908-b636-4d5c-8e62-222cfb470faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf27fa61-5efc-4e4e-83fc-065511bca137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6b4098-c767-4fdb-89ba-cbc029e321b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eba7882-99f1-4a2b-88e4-9b7a657b632f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10948b9f-77a3-4379-b213-2da825625952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34beb7ff-0eb4-4422-8cb6-abe9df9d7c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73506cec-c792-42ab-bb07-49cb83bad346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125b309a-2f33-4c41-9e05-6f94dd36edf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c961804-ed49-4a50-9d94-77eb467ed649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6add0680-131a-4cdd-af4c-36f5843883c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06dc93d2-1c95-4b10-a15f-bbcbfdbb9e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b8b00d-ea06-4143-9e36-9a2fd084f267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbb5fe5-888b-4929-8a01-e3f009585228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6246edd6-5d75-44da-b086-1cc1bc704175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bf6590-6b7a-4bd9-907c-aefa07a051fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d12e29-1e09-46f9-96d4-7c644fe87ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29b2ce8-f3c6-4dd5-8fb4-5acc71054fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc32c90-cc56-4481-8c88-f91c54abedef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45104e29-beb6-4c66-9fbf-8756f56bfbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea2f77f-8037-43ce-b81b-8e9b7711445a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3345a1f-77f3-4f04-9e62-912ab6eadc26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22314cfb-7b92-46a2-83bf-f16fea471d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874754ad-8a1e-4f16-a03d-71f0d7897fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3713cda4-c964-4af5-87ee-878dd525651e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c88acff-1d5f-4c80-a601-56ee4e698a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c85e21b-58c7-4faf-be11-cb44f6ad9374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dd42b6-c211-4e14-99f4-8f48e0e9259a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa7ec96-d005-400e-bb9d-7853247a7883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac5f233-2ec6-4677-9148-5ab4739eed78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d227a3c0-5053-474d-a204-0b82f043b9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1e66b7-77c6-42d2-a83c-fd4223a79106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16db7aa9-bbb1-4d51-aa5d-f8d439a38133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e804ced6-33e8-4824-a700-e7dad1288056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb419d3b-1235-4b9e-ba78-bef694f716bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbc4155-df4e-4d13-8d13-b3b7c4432652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba5d752-c1a5-446e-99a7-651aecdbc083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d4f770-aca0-421f-89fc-a65a7b74bb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8635c7-b2e5-4452-ab3c-0652fd11b34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2383d8-4c33-4f50-a0d7-1b4bbcede9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa3e099-460c-403f-a422-81c511eb26e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb986d0-cfc4-4597-bed0-8d2a178cd6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d81e6b6-baf1-41e8-ba20-71455098c9e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347aca86-b330-48cd-bbf2-101bef75b148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f9b488-df3a-47ee-b716-bc98a18df6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65553e1e-750b-4f08-ac38-a0f873593a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dbc90b-a09b-4392-852d-112777fff220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dab15c-709f-47ea-80b8-8734657c6495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4becc9f-a618-4ab8-9524-d0f61ccc0cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c9f837-dfe7-41df-8a82-a33b6b58f1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887eb999-c004-4eb4-bf2c-86cec3ddc75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8075d196-7ece-4768-8351-53c66cef9626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4520663f-8e14-47f7-b315-e47d1ede12a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e666b2-93d9-4447-bb59-134a6f3e2101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c4e6e4-bc52-478a-a4cd-695bc21a59d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5542ac-7d49-4aaf-b423-9bdd102dc41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0695d4a-e5ea-4989-be6d-8af8c076e5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d226c26-c5ac-4bf6-af13-06f8d83b22b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b18a78-47bc-4ffd-8807-8042c6edde2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45e7ef1-0386-4805-911f-20675801ac03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5815d57-133c-4443-ae72-d14d25f73ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da5343c-9d5e-4dd6-9ecd-0cb1bb532571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfea59f-8b32-43ed-9559-0cd18a1bcad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b853b5-a491-4ffd-a139-4a6ebe4002c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab9badf-4b81-4dff-a461-a4cfeea7071f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca0d7e0-2b3a-4cf7-91ce-21f44a885c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6975d38-3b46-40e9-be2c-bdf1e567d63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae295cb-8536-45de-8ac5-5b379a5798ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e71234-0e9a-431e-b9cb-81746bfb55ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc378b79-342b-4511-b066-6845d24851d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22ce76a-28f8-4d3e-b527-8d51130c8bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaafb9e-bf3c-4acb-9692-11c9e248fdf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfc111f-48b1-4c7a-bd2e-f3b7ea7e9e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef7a7f5-390a-4a25-acf5-a683257c18fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946b80b9-d2f4-4bc2-985b-760cade5d23c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee06321-e0f0-4ef1-ae29-4a22b04df0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d026c8cc-ae1b-46b6-b972-17765255900c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c413eba7-77c6-43ec-b580-7e81304d936b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4f4b0f-04a6-47ea-b3d6-5c147766c994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16c71a8-15f4-4dfe-9e0e-fa7049ddebd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7be09d-3317-4c75-bc56-991331fdaea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201b4ccc-ea08-418b-a27f-1879098ed721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6caee1-28c0-41d3-8b8f-158f2c022a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5f0035-840d-479f-8f5f-4d6b571c8d2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ed7d18-2979-44e8-a44a-594e3ac3ad6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542e86ca-26b3-4bd3-a811-4cdef09a78fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6c6e40-e99e-45ae-ba64-883f22dd2fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8b11d2-be1f-41fe-a586-22064b4e7c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fec362c-09a7-481a-bc0b-b2b72fafdf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dd614e-4f00-4757-b97d-7c9e0961dbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a771d4d-3e5d-4814-b345-a3736b538319", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39d257a-34b9-40c3-8958-92754b7f5983", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940fb7f9-42f2-4cfd-93b5-f90e0a560efc", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a2f809-b831-47e1-af36-80c5fc8f3e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb579ce-46a6-4d47-bd0f-cda6986daed3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aeeaebc-cecc-4f63-a76c-26c4f4dba86c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd389b6-6126-464a-9ca1-8eac109ed92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c0036f-b5ee-422f-8e7b-8c30a71ecc6c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b38de3-4629-49e8-99c8-6cfaac5e2cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d146b09-f24c-4d60-becb-1eb304aa8e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774d4bb5-f42f-46b0-84be-a695d04f1c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d1b756-31d1-49b8-b524-6844b967ee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b623eb-85b6-4017-9427-282d75233eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79317a5-dfac-4767-a203-c9cac18ef922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3c03a9-b81f-4437-b5fb-8d362b6ce289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.181.112.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caac1adf-2023-4dea-9d2e-effa576f4281", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.166.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802f28f8-5800-4f7f-ad34-19bdb654473b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6499af-b85f-4708-9057-5d8e1f7219b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8fdf7a-a310-4dd6-824c-3b2022cb4254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1512ba-005a-422a-a8cb-33c13bf58246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711e3b14-8f92-4148-afb9-d6e53561bb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00012cbf-0986-4085-ab37-0c36ec4a322d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74ab554-4f8f-446c-82e9-849b40e8b520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d5d60a-8156-40db-9be4-21bd15f94df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec87db43-a369-4c3f-9b67-b28bbc4083a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d164e610-cd39-428d-bfd6-cf5740060a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78820b83-460c-4e72-9c06-f245271076a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5396de01-2c95-4955-ba4d-2d87da44a5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ff263e-d79a-40af-9845-69f03af50200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769df929-8179-405e-9aac-454938600339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c452674-9809-4f36-bb9c-3fe3abd859a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88469701-d1c1-4e4d-b090-3a7c439b9a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19faf620-76bf-4a31-8c6b-5282b77da8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c1d440-ae53-42d0-b3bb-9c40fbc5971b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99844e2a-594e-480f-bbfd-0caec92d22f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beaa4079-9d6c-422b-bc61-50b997d9e6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53ca7e0-d128-46ae-8ce0-1ba112ab7e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58ef249-38a9-4596-b872-02a6e89e5c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7246e74-1a3a-47a6-8c62-447dd45881d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f970bad-7da6-4f06-a9bf-1f2e55163a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89fdbf2-3706-45de-a082-de51320d8dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0278d7-f05d-44a7-b00a-971b54a3735e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4b6bc7-abcd-4a69-94f6-04e0052eeec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f05758-508c-44cd-b8fd-f3bbc985fa9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128e9748-c79e-42a7-8eaa-58cabca39127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb382467-60b4-415e-b7df-8523ae39a219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3c8916-fb48-481e-b73f-eb2b700340b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5245234e-1616-4c6b-90ed-59829513d46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77586170-579c-4c07-87cc-7c4d3f264664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ae3d49-c18b-494a-8560-09694770fb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5685171a-8956-4aef-b340-334c61cd246e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047581c7-6509-4bd4-aecb-a76f3ac788f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd2d0bb-de18-49eb-be21-cccec7ced4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8665a21-49e5-44c4-8e72-ee0b22b889c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6561dd-a0e6-45ad-a0bf-a812e9ff6a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8348154-0ec1-459c-be7f-c5fb4dcc2100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32dbbcd-9d8e-45fc-ad32-9eca622b9380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247b9c47-ea1f-4ba4-b248-7367d2e51a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ec6588-e7ee-4f14-bdc7-6bf86a264501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3add42-c622-4c09-9c0f-848f4502445f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02832c34-5f07-428f-a306-3a3394fb5bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f04913e-a0ad-4fcf-bd97-d2c0f226bf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3461fa7-382c-419d-b078-554df894fe42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193448cc-b0ab-4e27-8ecc-962119a013a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8012d3a7-b9a5-4398-bcbd-fcb5321bd496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df86f0d9-09c5-4a5a-9a32-35d27b645b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c00cca-421c-43de-8ddd-31723b97503f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183f4f73-b592-467a-aa94-bc6358938536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81568978-9d97-4f8a-9ab4-f32ec4627e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc8f6f9-2f05-48d6-a4b3-af5405d3f846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f942f6-0425-46b7-8bf8-a384e7c038d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c2fd89-766b-4865-86b1-03454265c8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b9ebf8-03f6-41d7-90cf-67e44b4cbc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6fd4e4-868b-4e72-9154-cf46ddd0fd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b13f98-d7bb-42ac-90b0-37fc8407d5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffe388c-70f7-4222-8f2b-52fefec26f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ed8360-3fa2-4149-8d49-f465858f2044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfc23c5-dfc7-4b28-9c4d-2a3f2b421182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b40fa6-3946-4ee0-a7bb-302f51c38c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc09a1ee-f625-406a-80fa-445049b34022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd00bde-1040-4f2f-ba08-5d21a888021a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de467288-fdf9-40be-82d9-b33e9a1ec8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de5377f-bad3-4ef9-99a8-7fd96a3f2fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5578d3-3f0c-4ddd-a70f-3834e8e45373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052c59b8-7e6f-4975-9c09-7d8285115a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e3c89a-d175-4d48-bf6b-f20216aa101e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef7994d-5ab1-419e-9b74-d064d5d0d6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bd42a5-c71f-42cf-a81c-1b1929090e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51aa10c-7d30-4718-84e4-d16fa9d99df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d37aae2-0e6f-483f-b088-c4d238c77fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075df7d1-133a-4771-b072-911b2d5b7b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e91c87b-8519-41b6-a59f-9e8b5cda5745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb37e86-b26f-42f7-88a5-5253ca4ee7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc142c1-e634-4b1d-ac75-d9ac261870d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060d130d-0707-4d03-ac67-345db36b1a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75ba7b2-8655-4d3d-9aa3-cad476b9f184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f5d148-7399-4273-8cf8-3f2e200e6e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c4a342-38ce-4ba2-8337-488d06dfdae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3397ede6-431e-40c7-b704-35745dbd60c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2afb092-f3ec-4449-a8d9-c80492232e47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db98b5f9-942a-4af0-8c92-193d7ceb7d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f87b170-6008-4643-9b62-fa7159884518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c704a1d-bbc5-4acb-b9e7-34d9f94475ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d328ef81-ca0b-4cb4-87f4-53843503daa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d9f640-ad2a-4f95-afee-908cfef96e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a18949-e2fc-412b-a140-279e5dd02b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f385f71-5bd2-43c9-8d61-cef1ea0dff02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f09500-fc46-4eed-8bf6-91522daeb439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d3289a-9f7f-47f0-a282-87de18d3574a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7ef62a-8985-49a4-ae49-07120eb94224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46ea97a-cd81-4952-ab18-005a1a7aee25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2303fe72-6674-41b4-a735-40d27d31d690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bce736-47d8-4471-9864-9affdd8f1a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a0036a-77e8-4256-897b-a486302d8a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92822cb0-676c-49ed-a105-29ebc54426c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a509f3a9-add7-40d2-9f2f-4163bbd99368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739a8d63-f70a-4c89-aaa2-2f49cda4d3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca072292-0aed-439f-ae04-46f1137f02ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d806f73c-e317-4c5b-947b-15b3a0e70cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b944ff7e-1579-4948-807b-a624d924a78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efdf759-9241-4826-8b54-b3d6dd0d6acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7852f08-48b1-467c-b4e2-4d293f610364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4de585-6fbe-49a5-93f7-4d1febede050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40ce824-9b9c-4073-8112-d5fd780129c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b44d286-fc51-4cd0-9ef4-3fafa791ad96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff8f0b0-e228-4bf0-875c-4c6f62b21934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d8b002-a492-4930-ba82-c5405b328b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c78f805-c1f6-4bc0-a84a-08353b7b5ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b01e0ec-309f-4ea4-9601-258cbb7f5b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f34467-885f-481e-9106-392441b9dff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f288c0fe-cd79-4eb5-8600-6b6bf87d710c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5dcf7a-c518-47b7-941f-4c630cb76d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b534badf-2015-4a14-a4d6-b5d8bda4e7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630297cd-9745-4bac-8c46-2a964ca797c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cea0d45-0199-4ae6-8edd-109c0ef2cb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6136f7d-6e13-4e8d-a647-6a3ee2113cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232cbc5a-c28e-43b9-9043-53bddf46b225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24ebe13-2af9-4a4c-b7e5-4649b93e0482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8872b66c-b9fe-49f9-a081-76d125f0fee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660ed8b3-9623-499e-b881-d9c5d39f4d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803c46b4-f47c-486a-b944-8d3b75cccf08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7c356b-d072-40cf-aa38-bb11c0cc7305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431bb271-3eee-4d42-820a-37c0f3af7e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d4029a-be58-4698-91ad-7dfa32c88be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed48bfc3-832d-46f1-9460-a32b7058a435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5aa621-d5b6-4989-82c2-fa4af891434e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168a714e-f40b-442a-a3b3-db35fa21bc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2564477-3fef-4b7e-b7fe-f333dae0bf4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9c6c80-afa5-44aa-ad8b-df1206c1b057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9749d1bc-ebc0-4091-ade8-4756e27e3976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be245122-9a93-4719-803e-ea2c78535793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874a73e8-0856-49ef-a424-cc26ffff660f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11a771f-4cfb-41ff-87c4-d61a6dd14e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19490169-e07b-4049-b10c-01d6cbc6fb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedfa76a-f287-4405-ba42-65ae2a683956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed119c2c-e066-45f3-a4a0-8f4705f94e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ffda61-3066-441a-8ffa-ce7f5e48c9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7137657-a65d-4a3b-b87e-578bb1f96297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bd7751-053d-495b-b5ba-ba7682b2a9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7873ed9f-0ad6-4e75-a6df-78ae10ce87cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15b3632-76d1-4feb-a55e-26165abec4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ed5455-3c05-4998-a1b9-98a1233474ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b51145-2add-4d6d-9103-d53f7b945c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d835987c-acaa-46cb-9db0-476162b605e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222ee45b-bb35-4e59-aa0c-46f2d4673cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709e1a19-f01e-4910-937e-78dab763fdd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bac81a-f4d1-426a-9660-39284360bfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f31cac-95cc-4651-8bce-86f0b85221d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd84631b-1ad3-4a67-82c9-ec1dbaa284e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d602621-d8e4-4ba6-bbfb-67d7790a4d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29e7ef2-8930-45dd-ae6a-9b03103bba03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b91c4c4-2a90-48ce-b11d-8f2c60484a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5254d08-4147-4d77-b239-01efd2d8c1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84e91e8-6053-41f7-9885-4f54f12086ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9f116b-196b-4f1e-ac4d-7c8faa3e2956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fbdf7b-ab10-4e7f-bef3-4e4dc2338da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5123c822-5d12-4571-b9eb-3216d59cdbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b7ec6d-0937-4eb5-a320-05c9affb0733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4278eef1-9998-4bea-a6c8-a75e8bd0767c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be292349-083e-401b-a53d-dfef3dba72a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909ea020-6ba0-4984-9089-7a26be795f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f944d740-3a3b-46d3-be83-6fd0b7c8ebbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22976af-343c-4765-bd52-6805ea60f3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fdb142-47dd-4ed3-b50d-2bc78eb7bc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034a6bda-f239-4cc1-beb5-e4952c741eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788274f4-0f71-47f1-8ffa-b31447954b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac3d797-6477-418b-9de8-8287947f8e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7161d04e-d2f1-4a86-b7a8-89955d9c155b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0321ef4e-0b38-4a86-ad96-f60c5cfa9356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a7c553-da8e-4bfb-a8c6-7128a8642619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.5.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6c2046-5456-4323-bc98-3a20b3d3bd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2510a18-5939-4792-82d9-a10154044be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.11.124.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1356ae7-5533-4471-bdd3-8305c4cecd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.241.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59580e3d-52c0-4a4d-8d4e-324579daac5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.118.239.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351d7dd5-4016-46c1-9cae-0ed52b99fdf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3017ae1-a052-400d-9e9e-5f5e53af8728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e504e46-c1de-4e30-88a8-b6cad969ed3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea08aa6-e966-4aa0-aae6-5415b45eaddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a66b5ed-7e25-451b-971e-e7d273f6cc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa56aa6-48b1-4507-8fb4-3887325bed4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0040f7-bd29-463b-9a64-dd153234fa1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7676c8f8-59e8-47ba-abc9-b69767ce915d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db3e781-e893-4b02-8948-bdcaf160135c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3570c815-cefb-42f1-a56e-17f566aa6164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385f7b6a-470b-426b-b392-93f52c0ac922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0821bfaf-ec22-4196-bb1c-26483b42c806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff24769-cb9b-4274-89f3-35781b349ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737434b0-5d41-41bb-b48f-6a4afad8b137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92575bb-d500-4ca1-985c-c43376c80ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74a2bf8-4c67-4575-b77a-05e2302a862c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae1d9c0-77bd-4db7-9fb4-3b29f83d7c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976389c2-8c0a-4d19-9241-5ad8c6dddbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7788a69-48c1-4625-9fb1-75db10dd9fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62f38ee-4d16-4baa-8e5f-25d78e64f2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75c5390-e5e9-42da-b630-8cf483a5954e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c75234-f09d-4a88-8ff5-53ff56c99981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae98d56-2415-4f56-b8de-69eedb890a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c093c0d-2ba3-4fce-9ba7-3f61f03d08da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcbd8d6-3cd9-4331-af50-968ae2299b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c75b34-3d3f-4ed1-8309-5dd28210da3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73f5046-02fb-48fa-8d7a-03dc8f82b51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6bb421-04f2-491c-b89c-dea3707bbb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c359c9-d7bd-4f07-89bf-0bfc2e8a6312", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46806535-45fa-4c79-81a7-5cb84ef4ac4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2acbe7-615d-407e-9947-ae8fc55aa385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a061774-e2a9-445e-b66d-aede92cfe75d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63fd095-3581-4ac1-8498-e2c3d98c676e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05130358-02e9-4cb3-a07f-330f2369e324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8b1430-ff93-4ef0-8904-4c38dd5360ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c86bb4-594a-43c6-a37b-6e67993046d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce99a01-89fa-458a-b482-8dc9907926d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd60621c-50cc-4a97-8c03-fc108e025eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebfa889-1c78-42d9-ab9c-eef2779dbd98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf267b40-c391-4f1f-9642-bd2287fc64fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ec0541-5fd3-43b5-9827-1ddd1b4e6e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344dfad3-f9e9-4ffe-98c4-f7bbf0d741c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a733c56-79b2-4cf6-a38f-33df199bcb6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361f1fc3-09dc-4bf4-a917-6c93d5d9781a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea7d2c1-3f6c-4c77-92da-ee42cd68fb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c5f96a-feee-4f8b-a78d-8734ab8c9107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b4a992-80aa-4209-b38e-8396794334d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9526a12-6697-4dc1-9a67-1a045face65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925581bb-f2b5-402a-b5e0-ff5cb63ab1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13be1a11-0877-4ca7-a437-d2d203c4e60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcfbc1f-a733-4da0-aa85-70b0820a6731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afb0b90-72d9-4194-89c9-98c08b740b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f98deb5-95d0-4235-84c2-778e3a2605d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa50faea-d1dd-4f0d-8cf3-e3ca055b7c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbae97b-e126-43ed-9797-f6e88637ebc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7446ea71-67dc-4e40-b2f3-ea831bc6e49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e1cd80-c73c-44df-9b5b-4d4c1494d0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a45ed14-89fb-4c3f-8525-9ea2d49c425c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc70540e-8c51-4bb8-bd4e-d5bd1baa920d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2070eed-5608-48be-9349-9b3cc2acc56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1173821f-5952-40f6-8640-bc5af857a232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862f14ce-1155-4ad4-acd5-0f98c0969fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e5c1ef-8fd3-4ae3-8987-601a190c1596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6dcc96-257c-49c7-b111-4735ce6e9f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a48a765-7b74-4633-8957-1df418a22e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de95070-89d7-4030-8c82-d0a80abbcfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03926db8-3b23-451e-8593-16a6f9673a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4addd53-4c1e-4067-9040-2daf5bdcdb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b79153-46e8-4d45-a016-0431fee48d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca529c02-729a-461f-b7db-273b53daa5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d7d0ab-5e23-41de-8dac-9632b8f215e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53c6658-27d9-4406-a44c-79d2e2257e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcb339a-aa66-4a80-80b3-c5cfa9019687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cfa3f3-0d80-435a-a874-9ccbc7b85e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4099f9-9cda-43cb-b723-43c3076ff65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01d85c8-b1f0-413c-bc4c-26faba745c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03195f76-3f82-4f2a-8e60-83b0bf0c0165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989e8e3d-c1de-460c-912b-8b3ad953d365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093ce066-9f11-4692-ba77-f4abbffe77fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f21339-82f0-4b44-971d-816141c08562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31035b41-22ce-4bd2-8dd0-08e72347c892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced7297c-3513-4d0c-950a-9fc688a941bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee35689-935b-4f77-8dee-dd5d95c425eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60103ea2-69d1-4770-b3bd-0886876b8990", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ee2d66-396f-425b-b855-a3525cc8191b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abaf936f-4709-4de9-8f24-2e8417e17c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9792647-da2b-4bff-a2ed-26d26a6add55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9311df-f632-4f2b-acd3-229d8d99f4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb98463-1d96-465f-9e73-aaa68ad31380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab63dee-894f-4799-92f1-e7d877de5e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8f98d7-1097-454b-9269-24165de3de3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd05846-0a43-47a5-a2d7-5dd704528034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be6f60d-c1ef-4dab-8a9d-f7b19cfc01d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2764e40-024d-42f5-a110-0feb215a00b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1169a3-e57c-4219-99ff-b1a7b5c80a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a52a00b-9b64-4b60-ae61-95ce4a1c7a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f261c61d-3ad1-43b3-9a51-0489ec614d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7024c95d-e4c0-4843-be03-50dc53c84046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e7b36c-d133-48e0-85e9-d805175da869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee920ab-7da8-497c-aba0-839805290708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13894de-6e23-448b-9969-942c12b3f0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0c4a83-b656-4391-91a6-0bdbad364439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f5757c-dded-41da-a757-e410e735b9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054bb6da-6e5d-4488-b22c-9828e89a3970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4294c2-09ec-451f-b891-a47c55029194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb1d10f-ae02-48e2-a543-cdef042b22f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a626b210-2973-4b8e-870b-3acba703f801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ed670c-03a3-43a1-acd8-801892c1ef34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c7e0dc-fda3-4774-9501-c93e930c400f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39c38d1-f658-459d-b4ea-88b8353febcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4d3d38-e93c-4121-94b3-ed314136dc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7a920c-8954-4256-98bf-fa61c52aff5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccec0be-ece1-429b-ac73-9e66c2bd311b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1ce4af-8a87-4d32-b2e0-1e65bae84a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d18ef4-61b7-4e30-a311-ccd2b6af7fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782c730b-5906-45d3-82b0-151b01ff7ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2098d3b6-c93a-4d07-8cb7-58bc65d9f19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c8c172-c3b5-4507-94d0-7b69f6aa51c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff6ec7e-5102-4b7c-b0e3-d0391324b338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3a0f0f-7f4e-42df-806e-22f368d4d264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4e85be-01ef-44e5-8f4b-debcde55a000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7bb3d6-30c1-4511-9be0-093d0efb0cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca97d38d-112b-46f0-9a49-d7fc1fd7f1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc82b42-5d1a-4dfa-8378-f255185d8ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d225007-22b5-40a7-97f6-9e8fdc15d1fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694b8f86-dbd3-4db5-a51b-6aa8e2d2c021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec7f09b-1afa-40ed-a650-102def38e5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4f4f81-e0a2-4eee-81c0-65801a34f5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c77c2f-2668-40bb-9fb0-02def89fb582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fbd778-68b4-4dd2-aa12-346b86c6e6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d240832-c709-482a-96de-b70a09cd6684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eede34e0-043b-4048-a878-32efc1bd8386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7a0fb9-e0e6-43c2-80b4-5eb6a2469e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9411e8a6-c8b1-4e5e-8bf3-ca17c63cba77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794a1427-9c7b-45df-a9c6-40598c7892e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8560e74-38be-43b9-8ccf-ca61216ef908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d95adb-6012-4ac6-a215-d9cd35d2caa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43da9db4-03f1-4d29-9a8d-455465158e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d17a70d-7a90-4bd8-ad9e-d1a8db6582f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a971f9c7-2683-49a3-82c5-3dffd043c090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678bc1f2-65d5-44b6-88bb-28b259328cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e73265-3774-4eb5-889f-9b2a831e4b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41be42f2-7443-406f-80d8-08d232c2540a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3100e98d-6ec6-4528-a571-42682c71c470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff544d2b-693a-4524-804a-b100e864b9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b276d210-91e5-4710-9500-45ae3056bdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167c57e5-faed-4602-9b3e-1b0a2588b035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f90edb0-c144-456e-8bc8-49231fce64cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5ec251-d085-43c5-aacb-446024d718df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3db1c8b-bab9-496f-8ecd-6f78ca2dfc32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5608bd16-403f-4bd1-8bdd-75063f0cb967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1fd082-ee54-4210-9b12-095f6bad9cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3348643d-c3b1-4179-b897-b3a3071b9435", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f28c9b-c99e-4f46-9056-d01e6ced3536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75ce334-2699-4d4d-9283-307c27726eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5ee95f-087a-4d73-bd13-48b48f54d718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c498d6-98e6-4af2-8247-8595d58da30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cab3626-828c-4b8c-844b-81b4fb8a7658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfd6303-4860-41be-96a9-b07a3ec0ee9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8818cd-f79f-4c5d-b370-ac66ed5a2530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a64345d-eaa2-444d-a26d-192ec6890a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa1d94a-1200-4ed0-8f81-a0d1a7a0d9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7d3525-a495-44f1-9870-d2d43b684712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7010be-5464-4b47-a3fa-9b540d0adb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325b9ad2-38c7-4745-b045-d4e36bcbdde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf90aef-e6f5-49aa-a289-c944c8991598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b68710-be51-48b1-a0e2-3b3e13cac11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0b8055-1a8e-4652-953b-0f72cd52608c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ebc08d-0d16-4e0c-a700-649300ebe251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e2ded5-d812-4778-a2f3-c3317bcc916e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220764c8-59bf-4260-b067-d32cf90000ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2424d478-830c-42c5-a5ea-ba8852cb8037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f30d9df-709c-4274-938d-a3e7ea38acb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd86c059-12e4-44f7-8ab2-9262f2db48ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039f734b-78f5-4c02-8d83-cddeb92abf1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b2b2ce-a5df-4456-818a-71cf3b543139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3022c5b4-90f0-4db0-9b17-713df704d94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c47efc3-73b1-40e0-90a3-2cf9b97c9dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6754333-cf73-4fdb-b14c-0df16e7f74de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452a9b8d-74ba-4fad-aa10-1b30cd042880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5523ca-73a4-4543-bca0-56117c2bcb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f922c3-0a83-436a-bfb4-3f59d4e537ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef26b417-0207-4d9b-8c80-c28e54efb5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391435cb-9ec8-4652-be91-41cfda1271a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bb3a3a-a16a-4270-b240-129cbfdf5522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd2f812-68ea-4726-9582-40393a7f516e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfafd024-2692-4faa-8c74-33fc0e69bb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0a58e7-d6ac-4b81-a78f-26b927a9c946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc401575-7dd7-4a66-a594-defffd5c1534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaea33e-9fbf-49f9-aa5c-9d08bd8a80ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2a5658-a392-40b0-8705-6e395224d67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424e6cd6-aa10-4d1a-85f3-dea753b715d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e186233-f854-4798-b0f3-06194e2ca012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e498849-4dcd-4118-9f55-7babd8661d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72f0b21-80d7-44ae-a0d8-d0ea368c41b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edecc0f-ad9f-48c7-baae-90d1bc4d844b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5495875-8c2a-4ede-9333-3bb1619adf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb618b1f-0e9c-41b3-b618-481a824207f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d43ddb8-bce6-48bb-9715-b982eb7786ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64479f8-db19-4375-993d-2204e5788285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c33731-a6fb-4e8b-a436-49de7fed055b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7da18f-974e-44f7-a04a-ed2e3d8b110b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a242c2-466b-4cf6-9ae6-554686af1ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8e4089-3340-4b85-93db-3f0a41ee88ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173e8977-149e-4ff2-ad9f-18f92042a266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea45c5a-5058-418e-af9f-fd7f7a982739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e89713e-10e9-4a70-8336-9a3122a160da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6338cdf8-375f-495d-866c-e1eed67909c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8f7d8d-46ea-4d1d-9f77-ba1a561ee978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5361d6f-3c9d-49f1-93c5-23b5da1e8fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4761ab71-1f72-43ef-acfc-de2c5fd35176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3717e1a0-1d97-40aa-b8fc-922187bfba2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4667a0-2cdf-4e76-9fd0-f697bbe1eea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca4af6d-9c26-4320-ab5d-6e0319d07475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723b4d3f-ddbb-4ced-bae8-2a3305e52d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5a6bed-81c1-4539-bace-3495b1c3da36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bc0d1d-6b0e-41d5-a824-a21379f55276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25243e6b-e21d-44dc-9c7d-783caf2a29f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c58e337-20a7-4129-b3de-517cd6354b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26a7001-9930-470d-b03f-d913f29b78ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2276c995-c560-4f39-a5b3-932db65ff755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2067aeb0-e096-4662-9279-82a110324d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5676a5-87b2-42dd-a1de-dbb505da9384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a276406-90d6-4513-9809-c7e7379b1583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed9d563-ebd5-4a13-982f-e465417e115e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b9c2ca-8ec2-402d-a766-da93fe4f4ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8fa26d-c309-453a-a459-acd0b42c0f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e64c21-86ad-43bb-9813-48e84beee1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c2de36-59d3-4007-812a-b8eee0f7a2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa99bd7-cb00-40d0-8a23-2e4aacb0ae7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f87246-b5da-4c14-8725-4470220c5785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ee9a1a-f589-4fe0-8c9e-6163718da105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b6ef4f-55b2-40da-b5ef-2fc4dcf065a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa02b0b-bb64-4484-aee4-90f167046e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c1fdfa-0f37-4d62-a45a-944d1014d11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4211ef1d-249b-4233-b72b-284e22e77651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcef2286-56c5-482a-9f3d-a8212e793de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c70015-b493-4854-b8a7-e646a8a49b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.168.239.76']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912fa2f7-f59b-40fb-995e-4a1f4241962b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c1ce4a-f1f0-484a-9af2-16b6f0e85900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed7dabf-1e03-4534-a42e-656c3bdeec56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ff7d5f-a5d1-41d6-b51f-ecd9441c1c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6a455b-2d8b-4891-8c74-e6e7c01fce66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d54d406-f7c1-4080-b593-58892ce602d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2018474f-a3e6-4d3e-8375-54485dd4833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bfbc03-2fb3-4aac-be3a-fb4c086754f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5fbc02-649e-448f-97ac-c05e26ffab84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.92']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04a5c75-5972-403a-8d43-0233b1c30124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57592c30-ffbe-46bf-89b0-8a4d471ac8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210642bf-98b1-4cd2-9a49-e30008b7295b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad97841b-3968-4d62-905a-0b9fb8e8a7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.180.194.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6176a8aa-3680-444c-9ebc-46a6e1213bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.181.171.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663829f0-be9f-4155-96ba-1619b3509c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77808a05-aaf9-4e10-a3ab-37d51bf4e046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.35.84']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a0e840-553e-4bca-b9fb-f9c40e4f7f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aaa13d9-3b98-400e-8dff-38b4395a74c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b386129-1dd7-4cd5-a471-37bcbda4e330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e4fb85-80da-41a3-ac5a-3533c3789d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.37.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8460e227-7d61-4d37-857f-cc338eaf3da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.37.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d8689d-a435-4c6e-a685-ccc69d29e923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.37.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e395b35-f20c-491d-928c-940075c83478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.38.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee0358e-07fb-4800-a03c-b2ae211dc213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cf8efc-c23d-43ce-b28f-d114e6709774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8628efc-b6c5-4339-81ed-634e768ea700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.39.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6f71e7-25fa-4d57-853b-93da1f204707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322b60b2-2e63-4483-a50b-95ad144479e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf9eaa3-5014-4b77-9d5d-7c600f6a8d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2583ef4-c111-4a7b-87c9-08f8b47ca07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cefc794-ebd8-4873-a823-9e23058a8ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9def3cf-8101-4067-aad3-2547e2b5d75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.43.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d686249-7098-46f2-9e54-98e84566527f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ae26fe-ec0d-47a7-abde-9a63914cd3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a62e99-ba34-4d4b-b95e-1dca9f533646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.45.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a537f75a-d9db-4f4a-af89-a4ee58b2511c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.46.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c430a3d6-c6e3-4323-b833-41f803631f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cc3f6e-6bc2-407f-a97c-233dc4c71f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbc46f1-65e7-4233-9e21-6eca6ef3c6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff84924-701e-4a5d-af50-97a03fc24350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68941c2-884e-4d3b-8df4-233e7eb93d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d9694b-dd66-4443-b6c6-43cf67874317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.235.104.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ef8fda-009f-48a5-8a80-b7a131cd10b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122e8db2-911d-43ef-853c-be0ff02c440f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b477898b-530b-46c3-a4d3-932e5df64ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e78ab5-d2d9-426a-b554-22a59a7ac9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.8.6.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be16562-02df-42c4-8213-b0dab72067b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.9.166.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbcda4f-c657-4c81-997c-c6eb70e769a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.94.104.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e286aa-5322-4650-b3b8-c94e82ee8cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.149.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e72295-a3e7-42ff-95ee-54c906305ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.152.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad242376-f2a4-435c-94f4-fd6c1ab047df", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.184.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14f40a9-cd55-472c-a1b6-7f189fe101e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.81.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec1d90d-4a11-46e6-b189-03883917f65e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.241.132.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971242e2-213c-4e7d-aead-ac0a0620035c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.168.211.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7a97f8-a805-4396-b7f6-91dd20686d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.167.214']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2b0479-de58-4ff3-a5c3-0ac5925e7091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.111.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3045ad1-76e4-41f3-9f7c-f25965c42127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.123.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d068c6a-d130-4223-b9be-de56d3063778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.171.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e8b846-e125-4089-af0d-b6fa417dc072", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.178.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761d2f8d-1353-4494-b0da-b8cb13f53223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c268c85d-9d58-41d1-a256-31ef162691d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391aed11-7ad2-41ac-8fde-0fb14a04bb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.251.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310ba7f5-0577-4b70-a833-1bfe138e65e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.57.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19a3dc3-0cde-4391-b97e-8b5b6016d1bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.64.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bdf526-4ff7-452a-87b6-32e581a47bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.122.188.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba596d5-3fbb-42e5-9f15-891d1c70aeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bb874f-c08a-4a49-8d1b-945892f310f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad259a3-9bf4-46ec-ad00-40241e881827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1236e1-40d4-41cd-a344-7dc16ddb3a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bf0798-68c1-4969-92c0-36c001773c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6ad72b-99aa-4e91-90b8-d63d6f661889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365a3f58-994e-4d80-bf6e-f5a29875c134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc5b974-a91e-4e88-8779-2baa5e1324e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501b31d1-df8f-4a1d-8eb9-b82c954304a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0ac73d-83db-4916-a053-c895160b1192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.215.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cc36b0-12c8-4cf8-8f03-8da553040392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a472995a-5431-48df-ba1f-2db276a58755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36877ef2-be1f-43f7-8604-16325561b52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae949b5-2f2b-4be6-9947-c1f315d84b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e145d7-2eeb-4020-91f6-572ff36e06bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bf7604-8a7a-4a9d-9beb-e08725606d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8940a1cf-5906-4793-a02c-d4b9c242f9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720b1fc9-101b-47fd-a372-b69ebe60939f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.33.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23d38cb-5e00-4e86-8b07-dbdee18e0708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f65abec-0644-4a2a-a470-92067b395570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12104884-ebe7-4d70-a77a-23037a3c780d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.49.246.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35aac3cb-a1df-4119-8898-d7e02e5fd56a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.249.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f82d12-f716-4f73-a690-7647670a6dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02930d4b-62b7-4570-acc9-1c291a5a4ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9660a1-5d11-4d93-b25c-af2070b30737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c4fea5-3f65-4e18-ba14-ba16d9662f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa863e97-74e0-4d01-98e1-035407d1e621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a5161b-7fa4-4d72-8686-45794c22b5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c680e89-75a5-41df-b61a-461729c6d358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75a1e8a-e726-484f-aaa8-a1335116e3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897364f8-5ae6-4582-86e9-3625a676ee22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6eb2d4-cd50-4dbc-8980-28e4ee28cc5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291c1adf-9c63-4e73-88e6-d156113f9893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9559adb4-c94c-4e37-ad46-b3294dec1892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fbb236-aeac-44ea-8484-fff5c77ac56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a132c4-6162-4818-adba-35afc83e1c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccf193b-a327-41a3-8326-d67ba23707f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714f37f7-a71f-49fd-bc82-397c8a7bee61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999c1fdb-9f99-4609-8f35-9358e0910c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3aa9465-d0ad-4655-81b4-3bb9c97733d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8c59da-b0b0-4b7a-b046-7329d4fe47da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea602983-2b64-46fc-9210-2ee1bb259ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639c05f9-09ea-4ddf-8362-072437a2dad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a442c1-7f3b-4d44-b30f-eab28321f32c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a4f819-1482-44a2-8d34-8ee568d6318f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2197e79c-815c-455d-bcec-cbdf1da06e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3ab445-d474-450e-8198-68edfb067055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd2d874-775a-4c05-9cd0-ea921f41cba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.236.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8231948b-b9b1-453d-8af6-19d33898ef49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.90.30.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13867796-29da-4896-9718-012f1613a562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.176.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7018144a-631b-46c3-a211-35f754ef7337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb1baeb-d71e-4589-95f4-c758ff38d0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44317980-363d-4951-b276-8ee6dd95edde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a58c38-0b79-45dd-b751-ec73896832e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.203.148.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fe0f59-33ef-4220-a692-a27186dd62dc", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751e322a-e574-4776-80a9-606d385262a9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d74014-21cd-4d8d-9fcc-5a6afbf897a3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e777b8c-82e3-4c24-a09f-33b19642e560", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.18.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00faa95e-774e-49e9-8820-f225f07dc7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.18.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a37b91-386a-4165-b7d1-2daee9627194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.84.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf0d9ed-2521-458d-a9f2-3f02efa503e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.84.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b86c61-67f9-4a2b-940a-8f96d1947da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.224.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1636b4-1e76-4401-a902-bbc8bd25c88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.252.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf755d1-72fc-4590-b709-0a1a49a6cb38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.252.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c4749e-dcb0-4c90-9ddd-d8cdfd6cad2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8c5762-2847-4e7b-9634-6fa43aedc062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd84b8f-acad-4d3f-9029-f6de6459a1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.120.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff04ddf-a2b2-4c50-9b9c-7d8fdda64027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.121.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db04f747-356a-4124-bb31-9b6042b13a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628dccf5-5ddc-449a-af1b-ae2b000215f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e883fe2-225a-4218-9ec1-164e2f0d012b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.205.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408934aa-c652-4383-bd16-3ec92d3d4ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.84.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732ade29-5fc6-412c-89e0-c399147fa27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3a0821-a5c0-4cec-a0b4-30aeb5e4b529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d2a62f-49b8-4c1a-8f87-d38990095547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a0379b-b770-4021-ac2c-35b358be46ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b08d989-1742-45d2-bcb8-7c5b26634ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7741a16a-ee41-45c6-9429-02c61a397795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05baa697-8e3d-4832-901f-4224f109f6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bf0656-88bc-4057-8c7a-d58f9c5739ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.56.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af97cc4-5e58-4720-b38d-a11dfbfaa286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9c47d7-f129-4589-ace2-34d93ab3fed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6994753f-c07b-43a2-97de-60fe60cd3b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f07d62-fd4d-4c76-957f-f0b7c499f5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f5dc2a-8a4c-40ce-95e9-8c350b465cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069c833c-ef75-4deb-8ddf-2fcdc7311e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b3f4b6-cb51-4a4d-817e-28bfc36c7f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d38dff-0fea-4791-9c83-7e2395c41026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eafaa2c-1007-4696-9554-1e95e25e4026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9be859e-bf1e-4bc3-b5e9-f7198168703d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58a4ef7-0714-4a9a-bf02-4ad12b657751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc57514-f8f5-40bb-9747-deebe57e515d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d2167-d416-40ba-a035-54c98d7053ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc25de5-d5c4-4f9c-bc42-5c5f40b60cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bb4eda-92c8-4e72-8647-724592b0ee5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c08e27-95c5-431e-b7e0-a7a5f89d8b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00d27fa-2ed5-44a2-b9d7-2b6773be1a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ccdb62-2ddf-489a-995d-7cfd98deda34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ecb475-f782-4558-9d61-a317650f6cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5820575e-4b3f-4eac-af24-f6d8763c9cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e1ea66-5b29-4432-bd54-a995a2013644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b39a595-97db-4b0f-a94a-43e370abac7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ea029d-8d44-4fee-ae6c-7ebe2717adf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da19466-5b2c-4f8b-a671-f5d22b78b96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf68999-3965-44e3-8760-7e2e9b2d98b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbbce89-c36f-4608-be52-1b3d124e3c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ef5022-1327-46d1-bd89-bd0d683a760c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bb0ee7-f3f9-48fa-a9f2-5c55dd28c07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdac1903-1921-434c-b93f-c94d252fdb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa00eb47-4d2a-4a4e-b8a5-c56c5ee58c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bee846-44c1-431e-9a75-8c3ee832b0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87a98f5-dec8-483a-8d03-42f3af7b3a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1af35e8-4eb6-4620-8a95-036c377d6ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e33143a-6f32-4af1-b454-43a7884500ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9919eef0-e414-4de9-94a5-3f9d4e32515b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.187.110.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570e39a5-400b-40cf-907f-daa3b2042e9e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.79.213.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4025122-f462-4a00-8b89-0137ed13362d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.89.128.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293e3344-7a63-431e-a093-9ed803eedf88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.237.232.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdb8154-3fa2-48e0-b522-f4aad88837f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.60.231.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da266fd6-1be2-420d-a49c-c0b78984f944", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.204.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebb2b51-e838-4bbd-a3d1-c5b747b579cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909f6c5a-7efb-4eaf-b02e-430c966e8202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57524375-016e-45ba-bd89-83f37bdad52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cc2f9b-fe80-4901-bff1-6ec45454ab3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0885cfe0-f989-4044-9a3e-70af5ec42da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92705e1a-07b7-42b3-89ff-f2d53aba4744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7562733a-12ff-4e79-a25d-bb5a6e3467a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8608dc-518b-41e3-b82b-98d7eea6026b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02826c6-7cf2-4d7a-b832-60debe924de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a65098-9123-4f0a-ae21-afb0bf62e738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555a3f49-7db7-4433-8212-ab5757a1c3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e19117b-7255-4ddb-8097-9fdc7bc01e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6018b1ed-2c91-448f-abd5-15127c9d3757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f37f036-48ee-4544-a86e-5eeb13c6e414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cea1ec-5b75-4cfb-9ea2-bec5864235fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.108.218.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba6b6ef-f390-42d9-a376-168ab5143935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682daa30-ee4e-4aa2-b295-9203f410ba4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2650343-da41-4009-a79a-bcd06394fe76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07395b1-f67a-4f93-9c3b-8eadddf65483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd64e9dd-a429-44dc-a066-3ca1c2176d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd124ff-d7c0-4ba3-8421-7be2a7270af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e505c5-a05a-4060-964b-7de428723f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e80af3-aac9-4a76-9981-b4791163a539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a8a654-d06e-4a07-bcb3-4c1565675615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e440d8-5606-4d44-9a12-d93d0487d128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40ddaad-9df6-4461-a09b-47ed72cfc8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42957c7-25b8-449b-9a7b-f695b1eb988a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9672cd15-dbb1-46c6-afdd-5a9c0b2f2c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a465e19-5c80-494c-ba34-fd79690519eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128f24cf-6fba-424d-a5e2-55cf4d4dcd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d48646-0c1a-46f3-a65d-9a3b51a7e173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c497b2-0ef3-4929-9730-52ecfe4e74eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914d99e4-a176-40bf-bf38-46f02107f533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd50fd1-64a9-4247-a717-638dd61d629c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2363949a-67cf-47c7-80b2-cbba6871b04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40136a0c-785c-4fba-b928-1ce50644ef2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f1df55-8352-4003-9905-246ba9e5c4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857c10ea-dca3-480d-8045-18d9cd196616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6484e9c-7ca9-4781-aaa6-0b82f7f26508", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.38.18.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ab5e1a-4055-4b73-bf7b-18da6904cbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb9b258-403e-4844-a80a-1e69622d69ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71000b39-86a7-49e6-9f5d-1525241cd652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153f3dcf-8cc9-43cd-bb85-a080d5677ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045b0a0b-25b6-4f27-a5d7-fedf2432dd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c971c08-bb2b-4475-bc0d-a8d34de0a07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda187c6-e318-458c-9b69-4d045f262b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d5bf684-fc44-4920-961b-68906c519cc4", "relationship_type": "indicates", "source_ref": "indicator--cda187c6-e318-458c-9b69-4d045f262b77", "target_ref": "vulnerability--2181e159-f0ed-43d4-bd0f-ead54d1d86d3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aab4a48-69b6-4dc8-b5a9-26ebe9119672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c8a203-12ba-4f0c-ba11-468fcbfc0dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd95fc8-116e-4e27-8ef1-df76f144baa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6cb087-381b-42dc-88e0-5ee93e1536d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c1f8fb-b898-48dc-9378-5454f427dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02949572-81cc-48d7-b682-84eaa6422e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3603e82-0888-4936-8ab0-34463fc513ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8af431-5d1e-4a30-94e2-98adaf27b7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d1211b-1d72-4112-aecb-2a82d8fed8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e46d84-ccc4-4f5f-898a-2d143495659e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a136a7-2445-4ec6-a57d-15f6a6e899c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53e22c6-22b2-4280-854c-7572e10b1a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbf6789-7054-4d91-8596-157d59159776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e163176-542b-4195-863a-d187bd905d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399807ec-49bc-4d9f-a70b-4ec9bf9a1b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b96e8f-5ae2-498c-86a5-7752d868402a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4be87c-c0fd-4fdd-b394-8094472268a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb3127f-9017-404e-9940-3451a6ba0d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34666f62-a33c-49b9-8fa5-186f7a7c2453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.130']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee3d4a0-3513-4165-9fb2-0f2e24d28017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b14bdc9-1dd2-4318-9336-9a35158cb9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e2ea15-faf9-41b6-9d1b-564b338761b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db88b1c-a24e-44e5-8626-2f9ee974382f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16da9fcf-7d2e-4558-834e-b06182a8829c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d56e82c-58ee-4bdc-a77f-2e7c4d08d410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1d6be9-f1d6-4c6a-8f87-fc114fe3f1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fb95d3-08e6-4c4e-89b7-e3f8eeb662a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f6c0d1-5269-463a-8c1d-5da5c0bcf187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5516ea3-1356-4766-9548-eaa08bf94901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.127.53.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f71191-8733-487f-b30c-72fd6ef247f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.98.102.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e9dc9e-f1db-41fe-9c03-28646723afd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.157.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d9986a-2b1c-44a0-8477-7454c1147147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.135.49.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169fe8ee-b1cb-4030-98d7-4c6a0dc49e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.155.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff0b81f-e313-4051-b9da-05bfbe513240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.204.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c9492e-8692-480b-b20d-c04711ca04b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.219.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcc7be4-6cf4-4d4f-8d74-3a8e10520c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.178.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00602eff-ab92-4370-a093-1aa5c2e4eaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.42.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea910bc0-b793-46dd-a493-ebf4ea019b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.145.56.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cacc1a1-db0e-4832-b58b-9cfeef5f7cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14983ff0-d275-424f-b329-e77632d00872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.100.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c78f40-c570-47ba-b975-9b1771f00710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e7ec00-6ae7-42b3-8890-2ec9642ff3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30440023-b0a0-4e20-9f5b-469d0ad0159b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8cd332-156e-4666-998d-92e2fced4dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdce7cb-73e1-4c9c-8f67-ac4b98c0bff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.116.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2416400-b7da-48c6-b9e5-9a06a89024a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.124.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ab91bf-b960-4b54-af34-142a34433889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21225f0d-4bd4-4ab9-ab98-1fcac602c15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.209.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77186032-d26a-4521-869d-283c31477ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d50a7ed-4316-419f-bac2-c723603b9f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.216.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a116894d-1e6c-4614-91ed-9c112b6d210c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.229.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43595b88-b6c4-421d-b627-5c0b66fe40a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94d8e76-996c-419d-aab8-7939e24cc90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.232.122']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b890fdd-3eb4-4f21-8c15-655c252ec4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43918817-621f-465e-acc7-0dbf627b9ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a440f50-23e4-4cdb-8d42-1328e96cbb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.71.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c62597-1202-4d6f-9c43-cd1784ddd9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.75.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d47d85d-eb06-4e95-8683-87ec85520860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.82.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6656985-d195-4fe1-bc30-3fdef033c25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.83.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78eb093-a528-4af4-8bba-c3e8df60005b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7456c7a-38da-4eef-ac4a-7cda551d9e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.91.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f9bf39-547b-475d-b2d2-3d15dad63a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7251031-4fda-4485-997c-ccca5c8da9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.123.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c071aad-ab97-478a-a93c-43c233239a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.187.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741c9322-e91f-45ec-90e5-ea42769de248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.13.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c1204c-001e-4e76-a368-86fd4b3de1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889124ee-9d29-4c20-8b41-34fcb623169d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.152.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b10b5f9-83fa-42f1-a3d7-47e161111ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b46ed6-f950-4c03-babc-07e23ca4a018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bac8026-34f8-4c92-a06d-911e350004c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcd6491-0fb5-4bf8-b86d-a9567549a67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.168.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecea24a2-b14c-4efc-b787-c626f49c2b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4f9762-aefe-4546-a26d-6ff9b68bd96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.2.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9291affe-4641-4add-ab05-956203bce0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.21.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84769c8-5c64-4470-ade4-2ca4e67b92eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca0557a-ac32-44ab-afb6-f69ed92bb970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.27.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d67f857-9347-46bf-b1d4-fecfc5b879cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.28.119']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637f8c26-3da0-4b68-a5b9-d5a727971bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.3.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d327ea2a-020c-49b8-9c08-07a42efba754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.3.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb87c8d-7441-4c65-a67e-95fe99f110dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705b451a-e950-42c6-ab35-30cf5c5f1346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ffa57e-2058-4513-83ed-45b42f92fd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a2d76e-fc21-4754-90af-876158f48e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a792a605-2e7c-40e0-89b2-027b4277fcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01afd22b-2090-4cd5-8e2e-d874380b8980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed81f6fd-a1a9-4dae-9190-07f3796e7b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15d6dfe-b5e1-4c74-80c9-a27cd8c21380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24647e32-ec43-41a0-86e4-0a946f4d07c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db71a1c9-56a1-43d8-8f46-827a122ee116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.254']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c759276-663a-43e0-bebc-7548317c75b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2550a1b-7083-4e13-9379-a700afa8a8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52aaebd7-2e20-4e73-af73-d099d7ef8c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd13bc2f-52d3-4823-a5bf-7b2689759d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec6428e-2831-488a-8224-7dcf0840e4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.37.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c3fb19-85b0-446f-a7e6-38e3d661907e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec937e4-4fca-45b0-83d8-7729a6a32217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0356cb8d-f201-4fbb-a4aa-4e84b4222675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4808e24-2b65-499b-8651-2479b7d4ae17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93bca55-9f1d-4d9b-b060-cdcc3627bd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab454d8-1cff-4137-9ea8-10f6b2023b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e8879e-a350-44f6-9150-8204cf0d1886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057a8cb3-577d-4a85-9e34-934d8e392f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b55d57-ce35-4ced-81aa-fa8c5eb21aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da70b507-3ffa-4222-bc1c-a7b1a2276202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807de7ab-c0a2-4ec9-86ec-a1f10ee10608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71948032-f0e8-443c-8373-26cfd9d3f1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9b7f12-b31a-4555-8daa-14f5f9398215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51684c39-d0d4-4e8b-bb19-85dd3e34be36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017ebfac-890e-496c-9763-b26c29b6c735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc540795-bad5-4907-a805-835bd6099443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac991c8-4958-4e55-a26e-f3349fb231d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96db2be4-cf19-4064-9603-8d67a29be6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e47a12b-08c4-48f3-9fac-d11a88c8cc40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910a1281-cb18-4ed5-8e2f-2c6e38976457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90a0dbb-9b91-46ad-9b24-6c18ed84d2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c02d7ef-b21f-427b-8aec-3d1d461a1853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84838469-1945-4fe0-b340-c9e1f85defc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e71c09f-96dd-4677-8f93-ceea0353d2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57627646-8e15-48dc-813a-983a9a109fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309fb3e7-775a-4206-8e21-705c63c63a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceb9631-8736-4a5d-851c-86469c51a8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe684e3e-4efa-418a-9077-4f656cfd5e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb7072e-0d32-4ebd-8b98-59756b4d0550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5704e84-f31e-4588-85cd-450a1d473d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.100']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf94869-7def-44c7-af86-631883558dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012c7f2a-9373-4658-b57f-8f760c61e34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d755c99-ae7b-4464-ba9c-864a0ea53a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb9f27f-a4a3-4775-9912-1127a41b9812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f62150-cf4e-43c4-beca-3cbee2085fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.241']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e257db2-948f-42ed-9107-b01034f10485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104396e5-cc84-40df-bd50-789be084b979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe77211-6811-4951-9c83-2e14820a4d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dad46b-7ac8-4b7b-9847-3bd28b7cfa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc67f495-6748-4f3e-be16-7a2f83ecc427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6afa500-0aaa-4879-be21-07b9ac33bb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4312cd93-6c11-4ca1-b8d5-084fdade1f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604fc9cf-24ce-4e29-9283-5d4cce7019a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055d23a5-126d-47ab-8398-994f7d35f668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57076582-6996-480c-b149-6c180323423a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa4df64-18a9-4329-8d7b-32a35587d37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb7d78d-2d7d-4f9a-827c-d34ffc4e8e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66230edd-2aa5-486d-b9bb-9a30c6cb4b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681f32fa-d263-4355-82da-4205b2e8a69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3c8e06-c364-4735-9996-3cd1b449c37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a975797-2679-4a84-9cf4-8ff6e6bd9f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd975deb-d900-4e5f-9f0b-4574651f5805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78240a8-e27c-4983-ac27-a1dab8f9fe56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dc8d2c-2cb6-44bd-a71e-f42d9645b9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecf2ffd-762f-40bf-847a-bb5c9a42c19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d87d077-43a6-4c40-b339-4570391ebb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef89bf7-f703-4e2f-9422-48eff0ac073b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8741cf1a-56a8-4971-a14d-6d28dd6a084d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c460a8-6287-4bf6-a8e4-2e85fe6502e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78422c6b-54da-4786-a377-ed9d44662b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52956e6e-b700-40dd-98df-7c7889200e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae89c838-390b-45b9-9a29-85ec7d251702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56edc87-47c6-47dd-97b5-fb85d9e90038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223750ea-6c9f-4c95-a686-8ee9ec29b729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca386b2-02a7-41ea-acbf-e4342169c576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c30175-fb8c-4cc7-9b3f-3b20e1d5ac38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdd83a1-d2de-431b-bc7d-96787aa965e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.81.160']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9884d511-8815-4616-8cca-1b0f8d115c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.84.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26754467-79bc-4afe-933e-62c3bd8c42fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.84.82']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fb09eb-430f-4300-9222-35d12df356cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.86.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b0ac84-2057-4762-be2c-9f1f2e0d59c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.87.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aee2ca1-ce5f-4fb6-9770-bef2112d67d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.88.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31768e48-fd64-4229-9130-82c85716b874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f0c58a-d253-4a49-97cb-9c538a9d9b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9060016b-807f-459b-8faa-6bf9f617d90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02fb5cb-1f11-499e-8f0b-6bb9c983cfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039b2899-24e1-4b14-b26d-78380f2f6a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfb06e6-62df-4cf8-b19b-d54552546557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92897c88-7c76-42da-99f7-2ba0ba03d20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f9b350-b207-4dd2-8887-ee9d9a86cfd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bb0e5a-73cb-4c47-9067-44467fa43f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.102.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5f43c3-36f0-4f9a-8d94-54efe05770be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.182.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc31ac5b-c858-479f-b02d-c7144ffed3db", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.236.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa673996-e9b8-43f6-99ef-51ff113238cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.237.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e82099-1c81-45a2-90fa-7b71998cdf75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b024640d-a959-485d-a546-5a779569fb20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.76.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a7dc42-d8bb-446a-93c3-5fd0186d3c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.84.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07c84a6-5bff-40d3-8846-c9eb42d01242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.96.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add86bd5-4684-4acb-9271-d77b0eae247a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.136.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55f9bb0-961e-45d3-823c-01768c8e4304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.160.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c9790f-3770-4a91-87d2-34b5124a69ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.249.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eb0cec-faf8-4172-8bcb-f727906669a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.98.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1a1d4b-ada2-4deb-b1bc-99a867b2c1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.151.14.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c848622-0ad4-4911-a9d3-cbe73e06c160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea090eb-ff97-474b-8c60-3ee9d472430a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117fa373-a50a-4074-a86c-4bd58571ae52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f214816-6d9a-4924-8988-cbdd43adf054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3136e483-41c4-47bf-b926-6b98a06616bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382d09c7-2dfa-4de0-a789-9f57e774acb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a638d6f-1402-44c6-8561-54c5106ee6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.228']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce889122-cd6d-4e33-8046-93d5680617a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2660880d-1384-4c8d-9e12-224a7dedc036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8a5623-4cd9-4ebe-96ff-2f9040ba3f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb03ec21-5ecc-426e-bbb9-4fbb580f3946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e61ddc0-edf9-4e2e-b19f-dc9924e12e21", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c053ec7-d774-40dc-afe1-e0ffc47166c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb993018-0131-4b52-86c6-21c25fba264e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39af7bd8-ea12-4e50-9e14-7b2fdad9c6b9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cfdd4f-3836-4498-bb46-b8d67deb80e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d1398c-3e85-4f08-8bfd-dec203697a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0125fd40-05cc-4f1f-8f17-bfb8df788f34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547ad9f5-e376-43c4-af0b-43a3d740b6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27969079-e09c-454a-8782-27e2e8cbc25c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.182']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3508695e-3785-4636-aeb4-985bab212315", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d6b1b1-b094-4c78-ada8-1273a24639e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6808a62e-620f-4c31-b482-0ecf54b63aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7e3051-cffb-45c4-a974-a24c96d2eca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4eaedf7-a32e-4c34-b7db-06c06cd16953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a91f7a-4811-4c01-9ee0-ebfc06a6a446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c204c87c-d545-4518-939b-649d08f1d7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.0.219.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4657d014-cd29-4269-879d-0133b4ecaacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.12.124.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a069a04f-9f31-480a-9635-8de7a8714b5a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.177.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f8e1a2-17cd-498d-96a1-ed98f25d8af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.161.239.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59441585-7580-45bf-9c53-629156f6d136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753a1abf-62ce-4d62-ae32-111765e00e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef214c4-4fcf-46f1-8f7a-b4e1fe53e8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f744eba-b641-49a1-85ba-2e55ae9ccbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.104']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617b3485-241d-4ea1-924a-2d3173e54268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.105']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b32d26-ab74-4d5d-88fd-bfbc25328523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fc7255-98b7-4c7f-82e6-07ed6530ee56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ae9a70-8fc3-4f99-980d-d91e8743a42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793305a9-47e5-41ae-9dd5-4758c79cc314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9900877-5889-4df5-8754-67945e2a65a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aca0152-bf4a-4071-bf74-6820763d2ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.111']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e69f3cc-bfab-4afb-8f70-86450e9dea6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918417fe-c10d-4296-a0f0-c25e1751e49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.113']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9fdcd5-ba2a-4075-81a8-29041c12f846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16b2931-d2dc-41d6-8132-9b4d6cea3640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88939375-e59e-4896-8e64-d2d49ecdea3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0a4eea-f032-427e-9424-0b898a34584f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.126']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27273c94-5e0c-4fbd-bbb5-9dffcb699863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def26772-f65f-4087-b75b-60475d490cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295de142-f0ef-4fba-a091-8e4b8b03a68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98ba0d2-9007-408f-ae28-6783b896b0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032c99dc-1569-492e-8757-324bfe277ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea181bf8-9441-44a3-a1d2-fb8ffedf319a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28a70e6-1c36-4afb-acad-17555ae14542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bdda9d-0795-4e9b-a3b4-4315de994927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac862941-99f9-4775-b7c5-703b00a47be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42edb0e-2d50-409c-a147-71e7b7662267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40b1c83-e328-461c-96f4-26514f58ed5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.85']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242c4a5f-0ee3-4479-9b1b-44bde3c2dcf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eddbc2-3821-4773-8a98-1c427776b44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba81695-4f84-4f26-a309-fbf9cfe73b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a251a8-2391-4bfb-b6df-48014721e004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed77d63-144f-4807-b4e6-276a297d7eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6da524-fc11-40c9-941e-a512ce43fba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4463a1db-12c5-40e4-bb7d-1e603c756de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101ee141-d0a6-475f-b133-5ac4f6a8ceb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e15b461-49eb-4dcb-88c7-f33bbda60dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.224']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e696f7b-90ed-493b-8e9a-ccba10d0de56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07a53eb-da22-49a1-906e-83f87379256d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f489c5c9-4339-45d8-b7eb-2bfc44bc8abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.232']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb61856-cd52-40d4-8932-cf2020b431be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc80a00-eef3-4b4b-9c9e-f790c949c99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e1ebbf-a556-4534-9671-d54963ac4e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.240']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500bb269-7b5e-4b0b-8856-594e458e577e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5ccb6c-1a56-45f8-97e2-a0cbe2cf5c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df973b87-3623-4f51-bf29-199ac2cc0b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20770dc-8569-487b-9dbf-313b79d0d0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.248']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcf7792-5a76-453d-8360-63036981a4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea03ea44-30c6-47d6-a50c-5804a0fffdfe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8034daa2-e2ca-4249-983e-6ef0e70da695", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.210.53.108']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d438ca7c-7ec6-4388-ae87-4145bdb7b847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.23.151.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe7ca3e-3227-4fdf-9fca-c67e57169035", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.23.173.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c913f4-eec7-43a3-9d4a-4158d9e59f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.78.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665b690e-134c-4fbf-b555-11f6c22c2667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.90.28.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34aedf9d-4707-4506-8c87-9f555b82b813", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.116.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4dd4ba-ec39-4e81-832f-909514f2e2d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.34.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dee30f-5678-41e9-aeba-07a6bd65c61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.157.185.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8a8c8a-9697-4b15-bcbe-a4aa20e3c7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.200.135.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2da81c-292e-4c9a-97ab-265448216472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.23.183.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dfba9c-e565-4da3-a382-2d2b49c77529", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.63.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee940c7-ceee-4c44-9074-88604dc17fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.246.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c86e99d-c54e-44ad-8f0b-1efa3208d510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df83d06f-f172-4c45-804f-eaa516375370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.147.222.177']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f660b9-1ff5-41f2-8de4-2b7b94c5c5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e1cfeb-2b58-4d24-82db-4f0517a6237e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.209.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c36199-6fef-4f1a-a0e7-f7bc6d1fae54", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.237.72.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ce38a3-06d2-457c-9508-bf304e67055e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.62.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1abd290-08b9-4c82-bbee-ec640aa78971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.189.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e0a5ab-b003-46fb-b0ae-3d35bfe1da9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.39.176.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76e33ad-e801-463f-baba-2e7182e23588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd7f24d-f9b7-4f82-a483-ed628c36e1b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.65.130.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23d3e69-eb76-43ba-8076-2a8de6dd98f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.46.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c07d5dc-9756-4b66-a6eb-91382db1af08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc699d78-6f02-4029-b92d-ff9f94a4bb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.128']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df2f30e-3bab-499d-98ab-d0053ba9c9f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6056d5d9-47b4-4587-89a2-4354cc852eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.187.4']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbc06e3-02fd-4ca2-887e-2850bd1efab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.115.203.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4803ed3e-ed0e-4bb4-b7ef-59baeb218567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.116.106.94']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df775f04-fa2f-4c9c-adee-26f480866793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.133.202.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca36eb2f-4612-4e4e-ac84-98e693e76681", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b005b56-b6ca-4632-97a5-bfaee797dceb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd8aa88-18d9-4a5e-a3bc-986e3c761bce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487ee108-2e2c-4697-b46c-36b6ead9c242", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abd4ae6-f6e6-478c-b252-2001b8bd87dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e94ea79-1d3f-4ab9-8b1e-b7374d898fd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478bcdf9-6312-4185-9f6d-28b46d2d462d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0303d31-bcab-43d3-b39f-7f5142c1c021", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14916a5c-02fe-4a5f-861e-5c9b4792e7ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8b010a-ac6b-475c-8411-0f18b9e38aaa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d954b79-ab61-4d93-865a-4338b0472e4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a12e200-850f-4a6a-b39b-9ab1930eeee5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3997944-2f7e-4839-a5e2-10b662293e43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50854241-1a71-4f80-adfb-8535f406e073", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7494860f-abac-420a-a43d-7c45a8e5b7f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26abdaa1-70cc-4d61-8965-d515bfdfdbde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7dc929-0aee-4c30-aa46-a64726381475", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f381242b-edf2-4038-9ba1-ff4cd4eb4bae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58befaa-658c-457d-bd15-1693ce332024", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f18af5-107e-4fc8-8868-0b39d5814f61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d071881f-9731-4bd6-a913-4e30a1ac19e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51a91f3-96a3-407f-b6b0-2d8d544eed28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a479153-5f41-4e5e-a92b-3ce98586bb3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95e2f99-d411-41ed-85e8-e861fc499e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86d57a9-c1ef-4fcd-a58e-a6f02402ff44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82456c0-8d8a-4747-839a-d6a497cfc4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ec1d3b-f43c-47b9-9bc1-b98aec3350e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0675fb4-15a1-4d73-8bd0-fe6364c49cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba4da7e-500c-4d01-906c-ebf755a24dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64f51b1-6074-47cc-b8ac-b7e7c9826175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1e8cee-9813-4d07-9d2a-01cae2cc39a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553b79a6-6b71-4e77-97ab-8d5b2ec6f6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cfd8b3-bab2-457d-a04e-87201c34c73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd1bc2f-1e69-447b-b7ab-a7733947957d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad57d8ed-ef3e-401d-8f13-262122e71f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85991486-5ad7-45e8-8083-cb8e80233755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0937d6a2-d275-42f2-8792-a7adfac8f024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ed1fd0-df18-4e03-b2bb-959cd1959b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8424bd-ebec-4aeb-b6b8-431b1d1e05ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ba19bc-2206-468b-8648-47b01e4dafde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7b25ee-29e6-4df7-a2ba-4545efa6b7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4ca428-6c0f-4c80-9a57-59b0ca7e18e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52407d7e-1ae0-46f9-9596-95e2fae3fcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9af9d67-4725-4cca-afa2-2d715bc0f5ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed81d6c-c05b-4365-8347-13f45b740f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f6ca41-4876-4274-bf1c-976746d7d852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b93f92-1a76-46f7-857d-5d1854fc0d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7ad87b-0144-4927-9445-cd64aaedecb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1500c6-11c7-400e-9cd5-c163a3a4425e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8268e95-b350-4a7b-8224-7a9d3a72a8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754eea0d-c6b3-45a7-9fcf-3555aed89461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6468c7-a970-413e-b971-d0c19492297e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e362cf-2df6-41ce-a34a-0a8170a316a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dc0f36-192a-40fe-bfb5-e9641fc2f00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4b183b-b93b-4a64-aa0b-c826af693ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cce38a8-f7d3-497d-8f7a-46c63df502bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f77fdce-eb75-4329-974c-310f3ecbb70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78eaa811-1bca-4ae0-a9a1-7e9fa97a80bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0715dc44-6a24-48b8-a8a2-19d1ddedf465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af6c20a-d4ba-447b-a760-eef583c71b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f909f5-b02a-4345-ba3d-dfeaa3745051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d841a3-6205-4445-9e8b-a3e64f0c5508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d931529-c9c0-4c06-b8c5-a6cff45fedc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df119f53-9898-48e1-9366-553c41f0eaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2662d0b8-7a22-40d2-8b9f-e47b1c33d5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4392635c-7e89-4ade-ab38-cd3ecad20fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2321f9-e99d-4c06-8c72-7d10251faba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fe5ad6-a51e-4a69-bcf2-2802d2eaa249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5941ce2-fb8d-45d6-9362-8ed8bbe89735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0049f90-12be-43b5-ab3e-687574672b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a17cd9-008f-4af0-90ba-4234e94f9bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99f175d-563e-4663-91a9-791418208061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6583c5-da20-4884-ae50-88a881ccee56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fffd3c-d4d7-45ff-b781-ff54da144df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bf8538-d785-4e57-9652-8502aed72ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e734da3d-9b6b-4f0f-a0f9-d286504f64ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a936bce-9a62-4b65-84fd-d82cb0c74960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8352a423-69dd-4765-bf03-827adb846b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45829018-5eb9-4dec-852a-9e8e463f1c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f3fe4a-abca-44bc-aa4b-a19d7f0c9bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31db3c0-4245-4f13-98fc-44a690c956af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424a4d5f-7b4a-4d22-957f-e9ea1e3ff590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3b62a8-22c0-44e4-9100-d9e14efc38ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3bb0fb-a2d7-4578-a2be-4f5bd1c2e89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671942b1-5bc3-43a4-a8b7-c0dd7fac35e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c38f35-bdef-4a84-ae50-c462ae84c84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394f76ce-5531-4167-8380-cc9cf2526da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b3a315-4432-4873-9d3e-e8c64a55f29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d72d8f3-dacd-430f-9f14-cc3c17026cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27574ab2-438a-413a-99f5-d428f826601b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f9730c-bb00-44eb-9e14-c155b3ce7896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38589cf4-7614-473d-a724-9148318d0616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44207fdb-c873-4593-82f2-772fd509a27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec680717-d063-452f-a940-f11946a36595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bb5a25-a9f4-408f-b06e-281b0ceac1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4c8597-d85e-400a-a39c-a2fb3ad49787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fcad43-7908-42b6-892d-b7a8f3ed2e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf49ed1-8bb6-42c3-80cf-52d09ef46e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c9c9ac-50f4-4ab1-bb43-b3ca763c560d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c663a74-ee9e-486f-b779-819f7543b942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac73396-d8c8-4135-82e9-70fa3d591a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76a2b32-f1c3-4d68-b5d6-0b22857bdc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed78dd13-3156-4dd1-978e-47e63cc04a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab0b292-f7c0-4b97-8705-240dd4999327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc54e5b-cba7-4c04-a4d3-c297bb4fab40", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.41']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4407998e-6df2-4ccf-a2f5-2d67f759e762", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.5.148.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0d5eaf-6f73-4042-b08e-2955dec2f409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd0b839-ce0e-4d5d-a38c-fc3a63badd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8c2a83-81c8-4a58-a536-037abf7f32c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.254.114.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d80c65-3592-4e38-a7cd-6f89159b7068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.30.206.246']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ba69fd-8383-410b-be2e-a9adddd95711", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.38.238.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f06e63-8ff6-4e30-98cc-d741cdd6c28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.234']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52136d48-efe7-446c-b460-c169a96c9e9c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bde789e-7feb-446c-8934-37589e512e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187e34e4-5746-4062-85a7-623da487db06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6fc370-eb37-4760-a7b2-f879fa059f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288842c0-732c-4d4d-85c0-704f1d4ada40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc69c57-47f8-4872-864a-72fecbe7de7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.189.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df05a0cd-f0e2-4e13-996f-eec2a752f3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e105fd2-7b26-459f-87af-8ca411245d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.124.181.192']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5eb50a-d18b-45f2-b8c2-9330424266ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.226.190.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762ab17a-7b59-4fcb-b2c0-1b03e203253b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ae9195-09fa-4d96-8812-3835c471f71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e961d814-d833-4bf2-96ce-dd7cd73f2cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723cba7b-790e-47de-a3f8-31d3e32396ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5082f6d2-c51d-4b35-bd4d-d2428e52471e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f047f3-c129-47df-9bde-308dc2841bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.8']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ddac74-6079-45fd-bdd8-c7936aae0751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5412771c-9547-4e9a-93f7-c9c70d0e6115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6630434-bc89-4cbd-959c-53a523071009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed4602e-0f4d-4f49-8006-6d0101cedf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4a64e1-47da-4c14-a6c8-c583a5943265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d237bb-5653-4fa5-912d-712ae197ad2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d2a519-4218-4b9d-a07e-5026f0d542cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7b56a0-7053-4de8-9b06-d34b107dfbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.135.73.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a522fee4-3bdc-4253-a6c9-d0a2fd197b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.198.194.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb1a7cd-2694-479f-8b22-8824d6faddc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6676f7-9986-47ac-830b-0b37c01cfcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5b8745-8fa1-42f3-8860-dbc12d84c386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1a20a7-ad0e-4b77-8dd8-368a10335a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94a8115-fb84-43eb-9358-6fc3e7a6652e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62af9f51-8fe9-4b11-b67e-ffe8ba045424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87972c9-207f-4948-b97d-49bb15b2a070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94595a04-c338-4406-a666-690424ff9912", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.82.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cc892a-5021-4d31-a5b9-15101892b241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2427e669-0627-4cc4-a738-c326531eb588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.108.118.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ed3d36-11d3-43e2-bd89-3c377a813489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.53.252']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b225002-4e45-4423-87d1-b2810fe2089f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106401ba-b951-4661-9bab-bc5cd327c1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.167.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b784f394-6d4f-40f9-b55d-6c4840229f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.145.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa6c3c7-25dc-4b5d-a66a-50eb8b15a994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.206.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8227a714-394a-460c-9b84-f54c2f0d2789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.44.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5388149-1d4b-4dae-9de7-5df806788ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73436072-8196-4243-8f79-3d430785ee08", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3916aa1e-d3ae-4541-a9d5-c9b36b4a43cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.9']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef39d41a-f468-4473-8045-27f314c27550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.132']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927b65b4-216f-4dc8-9337-b4de15556923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.134']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12558432-bda9-4635-86c4-fce46b02af90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b88a5a-783f-459a-8fd0-91c651811ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.136']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2997b99-2d59-46c6-9e06-3c50e7254a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64c4c53-4809-4b13-9824-cd8e9c5a65ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee85c966-98d2-4cd4-845c-343bd9a5af3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.142']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecac51aa-7093-41b6-bdfa-e745a5c4167a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7749da-a83f-4bf2-9377-f289f15d5c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8e9c40-8a46-4463-a5dd-6cea7b19acab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab97feb7-bec3-401c-a3d4-ad2698fbdc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a245ae0-8d9e-4608-87db-78208b934805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2fe540-5e9f-4bdc-baaa-f056b2ddec87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89631bd-6b71-4505-9253-fb9a3294efb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91a1771-fd6e-41df-b4e8-a0af4745c738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c205138d-158b-4246-9491-785615d1d9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3262bb7-f2da-40ca-a6ef-b01d5d54a8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ae90eb-36f6-4531-a7ce-ce474883f3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38b8498-4001-4aae-98a7-aad6c5ec26e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.164']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8422467b-5fd1-4b6e-b956-fe96a3786937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.165']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf9147b-d782-4d57-92ce-ddb38eaeb71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.167']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091d55ee-d32a-40ca-b3dc-4159c7b0161d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0ecff8-f812-4582-bc95-74e41456bb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619c7ff0-573d-4f19-a619-dea4c0bbd707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5796ef-8c89-45bf-ba5c-7f24f06c552a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.174']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc482ca-ffe2-44c9-8017-1f5eaa028c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.176']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4451278-8057-4b6e-ac20-8d198a8b10c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e9a18a-318e-4815-9a14-9e3585c80d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bc29dd-475e-4a21-8a1d-50bf097604e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.180']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91f2611-690e-41ff-99f0-90c53ef743c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426aeecd-f000-402f-ba36-763a77394038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.183']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4890851-b5a0-41a5-a0d2-305f37970f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.184']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776e4a6d-4ed2-4f08-9883-d2adf89b06f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec417ff2-bce7-4980-a9e2-2033df1d90af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c42ba6c-211f-4154-be3b-69ea070184df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b525348e-b6e8-420e-8584-65fa19acc83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.190']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02bdc76-dd2a-4e49-bc6f-579a94bf571d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc27c96-25b0-4253-a923-2696000aa828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d57fd56-4b64-46e4-98ea-720adaff9027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca3f28b5-c0cf-4e68-b6fa-e26e5ddcac42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec00613d-5b6a-41b2-b551-969142a5a9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63037b86-7490-41a7-8801-e11f4e92c98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f052401-dc05-4b0d-a69b-b0712c73c356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991c45e9-cc77-4053-a40c-db464ca3021a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783aac8e-c4d1-4035-a108-b8b04c67a69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3359bf-ab90-4401-93a8-50656478e76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4827bf08-bb6a-4088-a553-7d6931a43835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055137fc-0403-44bd-8c69-977cb77c4de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.152']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4604e96-8f0d-4235-ba31-2848521077ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e02a7b5-b35b-458c-b04a-694eca98e04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.154']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340ec8b2-f9ce-4386-a7be-43a2c9670b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e180c7a-ad3e-47cc-a2c4-425d1b40a637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.156']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e85806-ed7e-4a26-95ea-edfdd0de53dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.96.216']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e160c992-44ca-4158-81c4-dcd20f0d6c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.188']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e845f1c6-e890-40e7-a115-55274b3f5691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cec94e-4365-44e3-a9fd-e55401f52865", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.224.175.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceea1b03-3b00-4753-a46a-a5d287603b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.51.113.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658b4f21-8f70-4386-8ac3-91fa373339eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.188.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ef96ab-6d97-4714-985c-435c02d811c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b307ba-dda0-492d-8ebf-b6ba0bed91ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b522d40e-c898-45ef-b96d-fe9b5adf75ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c18d947-d65b-4ef6-aa3d-8f201f71e897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44df1ef5-cda7-4030-bc0c-81208df518e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e79b86-901f-4c0f-ad5f-57338abba475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fa0fc2-8a4a-470b-8365-2c0243d450b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.193.232.179']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf428316-e195-4fcd-b248-0eb55bd5befe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783f2386-9b4b-4eed-8b6f-ac17e7ea791b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eafb29f-d664-42c0-960a-c47df01e8128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807e5981-c709-4e12-a7cc-54c08966c31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e0c823-3c51-42c5-b21d-89547ee7e8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.112']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9602dc6-670e-49f1-90ae-e819b8a43847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9882f622-5502-4269-b3d2-fc3cf4b088e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.115']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e968d9-c262-4813-b252-2f600f3b6601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa09d3e3-651d-4566-a616-cfba26f13c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c4b7cc-3cd2-45b4-953d-8cdeab93d326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a777402c-963b-42ae-b650-cad62210816d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fdb257-e66c-4121-b350-2f63702c47b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16e28bc-eb45-453d-9510-1863e622b9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dc6766-e68f-48bb-bb91-df81d3805868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37fee59-16a4-4617-b87e-09c169420077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.29']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0884e8-7c31-4671-9500-37d7d84e3e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dc5603-3896-4a87-833e-a19517017343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcaba33-04d3-47fd-93f1-ec7d353d9922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b73e831-3a13-4a51-a151-7f0959cbdc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea9ca5a-f78a-4911-8b25-0a99296c44ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe291fa-7170-4e7c-a844-f44283e507cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcd5820-e39a-4193-89db-0a510dcf56fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4fa71f8-847c-43e5-b622-11a792f56ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.90.50']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b22336-d0c7-44a8-94c4-1296ee08376b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b60785-f52d-4d6e-b4cf-a77d7d19a6cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.80']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ce966e-d47a-4f20-8fbc-b7fc2ca8cc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.227.221.36']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b7b279-c95b-4b61-ab1f-d20583b2e631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930b5d49-d117-4ef7-a28d-1ae7cf73ee8d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.114']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a7f44d-275c-4e4f-a9fa-d1956ee579f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6fcdcf-b41d-42e6-ab21-af2c574bd3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1ca276-d9a8-4d12-9df0-ea72f11516c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dea191-e190-4299-909a-8494ce13aba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b802c7d-ed2e-4f8f-92cb-46988e12bf05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeebac51-217b-4c15-876f-db1c6fef32d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b2ebc5-2691-4406-8da6-a6915e288836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8878b233-f5d0-42e5-8f3a-dbfd7bd2e811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e258b1df-3b25-4239-adce-67d9cda26a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1fd901-3bf1-4bb2-a999-0630c8d8aa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e264d35-8de8-4f18-9d85-3fd72354049f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9200f3a5-0aa3-4993-abcd-e6b724e312c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ad1d6b-34ab-4f2a-9d1f-46b409336fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89059c63-d741-4894-9590-d896e1d6cd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3a1d30-42c6-4a4a-8a72-796dabbf1ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e501bf5-d693-4b9e-8a75-1ef60fbcaba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8657c8-48ce-45f7-b872-bf22fefbedb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c07af6-6899-4584-a522-e9c08a7acb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ecc06c-bfed-4ce7-9372-381532db2871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac96fe6-4ded-44f3-b116-6ee93df400df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0578fe7e-6160-4424-a0cd-397d0804ce79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546993cf-c4c7-43c8-baae-83ac0d63cbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bcb370-cba8-4fca-929b-5b3530a41ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a9e4dd-915c-46a0-80a2-55952891ed6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5e4d94-0086-4e81-9e57-60141e9fb23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce672fbd-dce6-4890-a9e2-d59f7b8ab521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67415395-ad73-4f4c-9c60-5251c3491664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc20b46-8716-4061-9d62-cf49c14a541d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07495959-3481-482b-81df-b0ca55b98b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5086a81-7cdc-4b60-bf20-1ba1561c8219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1db7eb2-1a2b-43a1-8eef-d52183bc77de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c968368-8078-474c-9fa6-a808a1f4a29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ed34f5-0576-4993-9297-5e1c057d7a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffb6b5d-1bab-4364-8f31-89dd4d5d49c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37263433-b371-4bd0-8bb0-02f147bff549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba0e522-f452-4ac3-a137-5ef5320438a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db208d84-3dc3-4d60-bfd8-90bf1a4e75f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5c78dc-4a1a-455e-8a62-87ac980b3c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ce689c-71d8-4149-99fb-8fb7083741fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f14ea0-d6bd-44f0-a442-bd184c20dc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb25d996-eefc-42d3-8749-ff86fa4c1e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a18cad-7b00-4317-93fe-bda42fbc12a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d1f524-ad33-4d05-abe9-4f31da2ee593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06f9137-2f9f-4a06-ae26-f8bbcf953846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fc75b9-135e-4687-8ea0-f500f08df5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e82358-ae49-4af4-b212-899f26032a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7895ee7b-fddc-4e1a-9b0f-efa0a92d12ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f34133-d926-4abc-9d06-f2339a45a65d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c10e93-4c1b-4ab9-b3c6-e17c2ef1d1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5998c07-eacf-4443-bf3a-5f1fc8eccab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b55f6f6-e1e6-4b4c-8bd2-a2ee2727c8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28ede46-b934-4d4e-8e84-afed59450808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6697bd-e67c-4455-9bd1-5c4dadc7dd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26d4359-ec48-4aa1-9153-bada93a44f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee215df-acb2-4f2b-b654-eb8d3b2bf7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e852d8-2ade-48d5-a1b5-d2522390197b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.138']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d84b63-a909-47a5-98a1-21c24e860f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab40d590-41a1-41d7-91bf-011aa6da6fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5070d94e-0f3b-41ee-b4fb-9d6f31f8f40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede0cc3f-a33e-4ad2-b9ee-ca57ae196338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd1a2f9-fcc9-4dad-98d7-5eea373cbdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13b508c-c33b-42ab-ad07-3eec6f20a9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbbd9cc-0808-4836-a40b-851a703b2233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae265e5-fcad-492d-9321-5033bd5b115e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a317a8-6c78-48e1-9b0d-a073e89e3cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eea3db6-984d-4961-b97d-e867b1056e37", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.162']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d09fcc-ba48-4a7b-9ef3-890256422c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed412637-771a-4212-b3c9-428c6be2eb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5b9131-8cc6-47ce-8814-8f7404c67bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb87d1a-d94d-460e-bb83-4f909543d8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff65d0ed-f374-4919-b1d6-e1d48282c5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dad0041-fe95-4831-b3ad-da8d0135ec09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e406db-e239-48e4-970f-94b5fd3fdf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20760a9d-ce2a-44af-83af-027d61892d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9aa723-6416-49df-b83f-d31563efafa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07f27c1-402c-4bea-81ff-caedb1079ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde006ab-a687-4a62-a976-a2442b874e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212dc87d-a102-430d-bf11-6558fc5035dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c94c9f-9018-40e5-95ca-5e8256f7e46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e53dee-dc31-4dea-844a-1dafb1e906db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efe11b3-88b5-4f1d-8538-244d03cea643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19752301-1678-4e85-a182-680e39d16623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53d95ad-9d6b-4b82-b758-93747ad59307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b1d0f3-3e83-473b-b045-bc9558b5c057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36e4bc9-c36c-4e9b-ad0b-618c692fa819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431c760d-8ffd-4597-bea2-fea2007a80cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6db9db-56a3-4b62-87f4-4a4540e2e6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eebe3d-1a6b-474e-bd26-89bfb6c21984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d931c6c3-1440-4759-921b-f010d7e0a0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41469fd0-ea92-4b0b-9835-e0b4b20bcd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fec75a-b656-462d-ae51-b883d2e613cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4a1bdb-5d33-44fd-8042-3a3e789ef35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529e0bb1-c596-41e2-a799-10c1be708605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80bdac4-6133-4ee8-9978-f86114c5dcd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f913fe1-afe9-40c9-9852-d6b6ce5a5aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767cd52c-2658-4bf3-acb4-66b143b5b01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367a7781-1627-4a17-bd1c-021a74757b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f42d25-c7ee-4ab2-94c8-f4ff6e93e8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b8cd7a-9122-4996-9db4-ab0f95601145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a551c6e3-415f-4571-9298-b23481c3e57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7415b712-5a03-4c52-9750-a928b5b6b7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99fb9fe-a328-41b4-b83a-eed7b54aa308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f312896c-da5d-4633-816c-95061972e363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8779b0d6-1375-411e-89ff-d975681027c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269e226c-bcc6-480f-ac53-7c650deefa0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e44f312-56c8-4fef-a675-2dd373202983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af41a1d-baed-452e-b90c-77cdc5d9c706", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.232.29.206']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7292d6e-9400-4129-92a5-84f1a2b87425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.246.14.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d91c42-599a-4681-b168-ee830c962986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.90.124.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb764284-acfc-4cf4-9d6a-d4a667e97964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d2c7d1-4749-4086-8926-8ee21216edd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.147']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67bf271-6cab-4d7b-b3ef-f3726c1f8261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.158']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d132ec3-908a-4014-b279-d5066e3305c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37097fd-11c9-4f08-abc1-4d6e6a2e0226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7635b2b-4912-4ec2-b7a9-93325661968a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.245']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b99f558-842b-4e6f-b040-da1bd18c74f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b2dc6c-fc82-4fdc-8be4-504bc477aef7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53535bb6-947c-4c31-a647-20f64f6231ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea45e5e-6f67-4db1-ae52-e47662926e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8be281-5d3f-42fe-9a88-790de56b7505", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.149']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3404d669-8120-4230-808e-b44248a98417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.232.88']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc7ad0f-1c4d-4859-b79a-1d77b1ed662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91e5f3b-e70e-44aa-ba62-2543c4b3cc71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.68.11.140']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2873ca7e-6fd4-4e71-bb93-e674138c2b29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.28']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30150a16-8e1b-48ec-acf9-e7eb6754cd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf2e792-4770-4433-9883-0a0c0a753d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966fac3a-7bb3-46cd-9991-bc97e0231926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.208.26']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d07bbe0-ef33-48d3-a42b-112417ba78f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.158.90.70']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5b4323-0567-4a52-8483-76ea6e0df6f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.158.90.73']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7f2090-b62a-4a59-b18e-5bfd395dc5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a11a5a5-7a2b-4fc6-9226-d263d13bbc2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e19e558-2342-4e98-8d6f-a5669a395817", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.229.179.81']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830a3d19-7d43-4dc1-92ce-0e53fd839078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.39.83.20']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c026f6-9bce-48b4-91a1-29e2af9e09fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.42.37.23']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabb35f4-cfd7-42d1-af73-5be045ace750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.87.39.189']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a9dcbf-e513-43d7-91ff-396a2175d375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44523f6a-2d6c-4ff7-b4dc-6aa3c3238650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d660b72-81ad-4ede-8e9c-12676d9076c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.98.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c72505-0e67-4566-a467-a2282360133a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.183.232.247']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb80233-985c-44b0-8e0f-cb3ea8c211fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758398be-8cfc-4579-8e80-9b97bb65fccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.107']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94416f1e-af21-4993-aa69-5ddc6d63a7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.110']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee50e5ab-117c-4750-9f32-92a552d00b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22edf208-5f4d-43db-bca9-7f74b3571877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0665e6ee-029f-4f9a-99f5-8fe7016305e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29f71e5-0a11-46bb-98f1-1684d554252e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75780a1b-9cfd-4f7b-b35c-0b71062968b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0130e8b8-b013-49f1-8a50-f894d848b42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.33']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe3f8bf-d70b-4128-996d-f173bdccaaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.38']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31108f0c-2095-4227-a1e5-beb21c5f9f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.250.61.10']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac92f65-8128-4827-aa85-522f371b1ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.13']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4744c4-da16-42e6-9fbd-e6d6f877c86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.96']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0281f73-a2e3-46fb-9cd5-eab902158e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.97']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b99ae4-2f2c-4788-97bc-6cdc7e36f4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.132.102']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6c2576-2683-42fb-bca9-48a372fa6fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d6cac2-f1f9-4356-86fc-34fc9c73fba1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.139.151.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c3700f-0709-4caf-8acc-f7ea8d2ead44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.155.151.16']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee312b75-af97-4696-bdee-17e2560a65bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.191.198.24']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18fb56a-a094-4fd8-9cbb-ea7aee254234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d051a13-76c9-4dd6-b6d3-9fab183d4fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.37']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14632d77-5448-44d6-8d91-adaeea056682", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14663e4e-b622-47ab-b994-434c59065534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.228.27']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f823617-89b7-4169-82ef-ebe86d2fefbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f00acf-dfda-4cf5-8f78-40000868025b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.87']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c74ea9-495f-4882-9038-6500c4357b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.72']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7883ccc0-8dd8-4996-b596-2101221472fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.200']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db44bcbf-e010-42d9-a010-f97dab3d1b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.90']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fab7d9f-bf7d-4353-b328-0c872e331c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.148']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9241d4d-5b5c-45d9-b866-914e5011cc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.107.31']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56161547-0d1f-46a1-96b2-bf62ca8d0567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216929fe-dc5b-4814-9dd8-7da0d82a5e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.95']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a6a935-d915-4b8d-9810-6aa117b8debe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.124']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fe0bdf-c4d8-42eb-8091-5044fc7a431a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.62']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d288a7-186a-47e3-986d-f63fb1fe1ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.126.40']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44773714-1d37-48e1-827a-88736c9429a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.152.236']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae16c42-d537-4a11-bba5-0d60fd0f8efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.218']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdbfcbd-0a63-4801-86ad-d3bf59665a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.30.194.103']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fca9bb8-09b8-4a8f-a0ed-3ec29da524a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.128.19']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c32c4fa-ef8b-42d8-b1a6-425cc2a9723d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.129.191']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45307187-da7b-4766-9833-a3095ed4ad78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.130.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c37cb8-2658-4054-9723-33b6d7f5ceee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.222']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f9b594-85cb-40d8-86b6-b70155d1227a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f253437-8ccb-450f-aa5c-9b5364d88ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.172']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13f3a46-a185-4788-baa3-77d883bde659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.207']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ce50e8-38e6-4aa6-afb1-2a96f427566a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.223']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f86d42-6035-45c3-8ea5-2a479f64e3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.109']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b636567d-217b-43e9-87f2-8c1ece038b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.238']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f45698-e34c-4ba9-b256-1b891788dab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.45']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ef7bfe-8eb9-4b9d-b54c-8a9c0ca2459a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.140.54']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c934301-8d5e-4ba4-bb1c-821f3dd78ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1948cd18-1422-4d65-9c54-e9a4d1958c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.133']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1e490d-3b65-449b-9b35-1651fed242f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67675b4-9c10-4e6b-a0fd-db23b61019a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.239']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66491549-38ad-4eda-8c43-15831936e349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.101.34.22']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c959c199-000f-4a7a-8b25-636751731a1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.93.233']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00049654-60d4-4003-9222-02f208678b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.11.144']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842dbab0-4397-4cc5-995a-2df3db0259a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.30.235']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05387bd0-0a78-447d-848c-7f461afaf2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.92.204.98']", "pattern_type": "stix", "valid_from": "2026-06-06T00:00:00.000Z", "valid_until": "2026-07-06T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-06-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba76f65-88e0-4a3d-8d54-50341e7cb198", "sighting_of_ref": "indicator--9bd11f3b-c21c-470c-96d8-99639dda23e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093bee55-dbad-4d5f-80ae-eb01f4b1f39a", "sighting_of_ref": "indicator--f20a130c-a7d8-4b1e-b3db-2cf00b41de1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2f5f91-88ac-4fa8-9722-35a377366aa2", "sighting_of_ref": "indicator--5828a429-8d67-4f82-8dcc-c3b7d4df076d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479dc490-cefb-486c-b9d3-b055151ac99a", "sighting_of_ref": "indicator--afcd9309-939b-42ee-9716-30b5baf77aea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2847a894-fb1b-4ab4-bc5a-ce5ca21c5fb2", "sighting_of_ref": "indicator--a99523e7-13df-4508-84dd-36bed7d67747", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a6726f-6e55-46e2-82db-04527fe7582e", "sighting_of_ref": "indicator--0e216b8f-7285-4df4-9525-c7c68518d840", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a45cbf4-e73c-4e2a-8234-6c461ccc9f8f", "sighting_of_ref": "indicator--786e51fe-ff5e-4171-bcf5-7a249c8e2fc4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d78a79e-f692-4fd5-91fd-d152c051e772", "sighting_of_ref": "indicator--5a01413c-9c32-48f3-a312-d0bab9ef1d3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7663e605-6092-4648-9316-55012ca61d64", "sighting_of_ref": "indicator--44ed7c8f-ae53-4fd7-852c-729a6fcf3b7c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f36c7b-a900-4a3c-8e43-bd013dee28eb", "sighting_of_ref": "indicator--58afe59b-7741-44d9-a726-5f1e3a5c862c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614daec5-f6a5-45f2-ade6-4c32038dc6ff", "sighting_of_ref": "indicator--8b3e2864-4506-49f1-8978-7ff61bf48bdf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a328161b-5824-49f9-854c-c4007b3c9c49", "sighting_of_ref": "indicator--ea50490d-d4a5-439d-9bc5-08e599609c81", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a2b894-f549-45a9-8995-d1c7a2258dea", "sighting_of_ref": "indicator--09e8c80a-2862-4211-8272-b101291cbfc7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c00854-41e8-4bd0-80e7-0e0b1f4c7fcf", "sighting_of_ref": "indicator--c5f4ab8c-f9da-41ff-8770-ca91b5306d26", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70af1713-fcba-4b60-9700-27a35287be04", "sighting_of_ref": "indicator--19bbfdf0-690d-47ff-947f-7b5b1a913591", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b284fac-25b3-43d0-bc2c-7a50a2483e10", "sighting_of_ref": "indicator--19bbfdf0-690d-47ff-947f-7b5b1a913591", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8ff524-156a-40c8-abe8-e6a86ad2729f", "sighting_of_ref": "indicator--19bbfdf0-690d-47ff-947f-7b5b1a913591", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6da1de-7435-437a-a37a-726749549423", "sighting_of_ref": "indicator--aa132871-49f8-418f-b1c9-44232a81d9d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f3a73e-fc54-46c1-8ca7-a8d460331849", "sighting_of_ref": "indicator--79ba853d-a738-44b2-9bce-b931d4cd1602", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0823a1cb-6c12-4dba-8b54-c8e64d312c92", "sighting_of_ref": "indicator--79ba853d-a738-44b2-9bce-b931d4cd1602", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daa67a1-21f5-4b78-8f77-b849d93e7ed7", "sighting_of_ref": "indicator--04133900-5263-4542-b24f-9fdc589e62d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae637384-7c11-4f57-8f45-2c8e5ebace5e", "sighting_of_ref": "indicator--67221980-17c0-455c-b684-b9878a0637e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ec5f32-b392-4ae9-9361-cc45c42686d4", "sighting_of_ref": "indicator--a420cd3e-9a95-471e-94d0-a423205023b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f622187a-d319-46ab-84bf-38533ba05162", "sighting_of_ref": "indicator--1b5f1295-5533-42d4-abe4-86450bd6afcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666bd97c-a36d-4694-86da-a5e581c273ce", "sighting_of_ref": "indicator--2e9bf3ff-ea50-432c-ac3a-6f73a2279de2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbba225-fa4a-427a-b2e8-80e01359fc6f", "sighting_of_ref": "indicator--3f61c458-1143-485d-918e-0b60ca3a4ddc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e5563c-08ad-4f5e-b28f-a5d668a4955f", "sighting_of_ref": "indicator--3f61c458-1143-485d-918e-0b60ca3a4ddc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0de1544-5525-4661-a5cc-c9692eb6a347", "sighting_of_ref": "indicator--5ac052dc-f806-46b5-a97e-d76cd08dcb06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36face4e-61d2-42f3-8156-9f2de37a54b8", "sighting_of_ref": "indicator--522c53f5-eea3-42c6-b5dd-2289e37ecb28", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eaff73-95d0-45b2-9ff2-087498a38cbe", "sighting_of_ref": "indicator--522c53f5-eea3-42c6-b5dd-2289e37ecb28", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017b3ee3-048a-4b61-ba4d-4bcd6a957a0b", "sighting_of_ref": "indicator--bd672d4c-ad20-4728-a3e2-ac6f2feb4585", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fb6fe3-ca4f-4640-840f-278cc199f3a9", "sighting_of_ref": "indicator--1ec20879-25ee-48ad-8223-72c632faac56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590d9eca-3a5a-404c-bc5a-8f13e74e285c", "sighting_of_ref": "indicator--1ec20879-25ee-48ad-8223-72c632faac56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d506d36-75e4-419e-a737-9646a9327000", "sighting_of_ref": "indicator--3f4390ed-f4cc-4f9f-b7c5-7f507048dd37", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29bb43b-aadd-4fc4-ae7f-f1b7494a27b1", "sighting_of_ref": "indicator--7c31283b-bd3c-48d5-a0c4-fc4254ead2a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5f5fc3-9ee9-485f-9fd7-cf0c737786c1", "sighting_of_ref": "indicator--77dad3b0-dd87-43b3-bde0-bbeda9827ea0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34ed1ea-775c-4bf0-a40d-75c23f07f156", "sighting_of_ref": "indicator--33c00b38-9dc0-4eb9-b090-6955f515c835", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a06d1b0-8d8f-4e8a-90f7-0933a812a549", "sighting_of_ref": "indicator--33c00b38-9dc0-4eb9-b090-6955f515c835", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84be1909-e746-4300-abca-0b9934876f36", "sighting_of_ref": "indicator--252839ba-1304-49d6-b909-c869ec353525", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919627e3-bb38-4980-8b19-f3bf217708d4", "sighting_of_ref": "indicator--384ca01f-1acb-4a2d-9b21-aa928a3859ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d583e00-48bb-4c2d-b19f-cd8676ba748e", "sighting_of_ref": "indicator--dc55372f-86cc-4bab-9fa6-ee3c76a1ced0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f946342a-6e28-4ff2-a693-368bad94b3d5", "sighting_of_ref": "indicator--11389f05-d48c-4faf-9ab0-eab10fb875d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dc92e3-d81d-4903-9e00-1f234153ef50", "sighting_of_ref": "indicator--14e7c72c-c523-4b01-9f16-ba6a7eb6b9ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6b902c-83f5-4045-a321-f209874fa29a", "sighting_of_ref": "indicator--14e7c72c-c523-4b01-9f16-ba6a7eb6b9ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c4e942-73b7-4a3f-aa68-25987cc9e200", "sighting_of_ref": "indicator--491b2094-6839-461a-8990-7a96bee4bb84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68996e68-2390-45ad-99a7-9aa9c4e1c4bd", "sighting_of_ref": "indicator--d93c5d41-8b65-4f27-bd22-9d1ef6403559", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93892150-39f7-4b74-aa3a-f5ce0254732c", "sighting_of_ref": "indicator--d93c5d41-8b65-4f27-bd22-9d1ef6403559", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0453dc65-649e-4fb1-80b0-e65720fad231", "sighting_of_ref": "indicator--e529a59b-62f3-41a4-99f7-912e2f5f188b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb516ac-21e0-4843-a00e-f5c9dade2a6d", "sighting_of_ref": "indicator--9fbe7d8f-add3-4d31-b6d6-c1f66006a857", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f727d6fd-4ea2-4913-9e7c-fecc8b7c6bf9", "sighting_of_ref": "indicator--4efcfb22-d4cb-4e3f-9414-5deb19872fa2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaedd6f-4103-4fa1-a3ed-65b7f8b403a9", "sighting_of_ref": "indicator--09789741-9bc8-4e0a-8855-5189cad0e987", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913a07f3-5759-4427-ab82-e82ea8aa791a", "sighting_of_ref": "indicator--5b690850-0eb9-47a4-8a8f-8b1757eacf85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137002b6-b24b-4677-ae9b-89cbcfca6d88", "sighting_of_ref": "indicator--c8152017-9ac9-4629-b610-a993e7161f12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de87309-937d-492f-ae64-cd40be8e54cd", "sighting_of_ref": "indicator--a38028dc-1899-4d83-a8c2-a92bf10b51ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d873a3-3ede-480a-ad2a-11013a3c9cfa", "sighting_of_ref": "indicator--b7ce5c69-ac20-4918-abcf-7d4030dc77d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94aa344-21da-4b97-92e3-903eba30457f", "sighting_of_ref": "indicator--beb0add7-652d-4828-be88-f67b6cb79746", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbb7340-778b-4637-bfa1-8575f423be09", "sighting_of_ref": "indicator--4053ab2c-7c98-4957-80ba-0ac36d99072e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fff32d7-2ad3-46c4-b0e0-12f77bbbf899", "sighting_of_ref": "indicator--95fefdd3-5f03-461f-b608-154a424209c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56d327b-cfa9-436d-b197-492b9b4d5057", "sighting_of_ref": "indicator--72f00cef-6773-4150-b5a1-87074e9dc418", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3023a557-7e7e-44f2-a73b-78f8be89108d", "sighting_of_ref": "indicator--23c4dcc9-9a97-4258-a5e5-b16bd3993e8a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98e2e1f-1be6-4f5b-b7b4-00fcf032edec", "sighting_of_ref": "indicator--78602eac-79ad-4d89-87c4-01fb2dbfbe73", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0242067d-17cd-4fe8-8d3d-d273a790545e", "sighting_of_ref": "indicator--17bdfda9-02cb-4a31-a321-25a84033ab4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c769e64a-6d4e-4bf0-8b37-58e77d661df0", "sighting_of_ref": "indicator--54320ddc-d3ec-4d75-bbef-4fffdadc8c1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61ffbbb-8765-4154-a9fe-e9c8855ece3c", "sighting_of_ref": "indicator--739ec6a8-7bb0-4e2f-950e-427687201a99", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb58580-0f7d-4e91-9342-977b62c55cf2", "sighting_of_ref": "indicator--d199ca87-71bf-4ce2-a76d-514a2229c8c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c8e5d-2a70-4356-964d-f8259cea4143", "sighting_of_ref": "indicator--f48c7f0c-cb1b-4ced-8d74-563e183f406e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd842bc3-2c02-40c6-981b-9aea951408be", "sighting_of_ref": "indicator--fe59315f-facc-4732-8a36-fc333b2896e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a05cf35-ef8e-4d46-8853-2a304e225bae", "sighting_of_ref": "indicator--31f131f5-0092-4934-a709-c102778c8283", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f837404-7e13-4e28-9367-245419e81615", "sighting_of_ref": "indicator--f44016c5-847b-48b1-bcd0-ce13c7009a43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2944079-1132-4268-b26f-f81d76924cb0", "sighting_of_ref": "indicator--f44016c5-847b-48b1-bcd0-ce13c7009a43", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f824c2-0b2a-4104-9488-faa258bc9a4a", "sighting_of_ref": "indicator--f44016c5-847b-48b1-bcd0-ce13c7009a43", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65471e92-f8b6-489b-8c18-b7741148e20b", "sighting_of_ref": "indicator--ee342f7e-8da0-443c-9c38-5490d97526c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c5a6ec-622c-47d1-a8ea-1f30c280fa54", "sighting_of_ref": "indicator--ee342f7e-8da0-443c-9c38-5490d97526c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ace84e8-1bf0-4796-b801-b443f3fae08b", "sighting_of_ref": "indicator--ee342f7e-8da0-443c-9c38-5490d97526c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d79d9d-41ad-4f20-a366-e4bfd9395785", "sighting_of_ref": "indicator--c6a0b60f-3a4b-4510-a2fe-c8493dff404e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db207e08-fcad-4712-b518-4a88cc850bb4", "sighting_of_ref": "indicator--f98cad49-91f9-4ead-bd6c-d07c75f78a34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047980d7-95b9-4302-b4bd-f1374ace3bdc", "sighting_of_ref": "indicator--284d589e-aa15-41f7-ba16-05bd1e88b756", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b647da-27e6-4503-a44e-851f45d4279c", "sighting_of_ref": "indicator--b1d66fce-5fe7-4ecf-bc80-3e130fe53507", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad4105c-7335-49d6-a387-a1d363145033", "sighting_of_ref": "indicator--0e39d26f-8b73-450d-bd56-7cac02ae9aa3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4b0c44-1797-4ed7-ae85-6e210b4dac01", "sighting_of_ref": "indicator--8781bb5d-795a-49fd-a81c-fe2511bb8aa6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b3ac9c-7a6b-421d-a479-ecf6ac261f17", "sighting_of_ref": "indicator--4d39f305-ac7c-4305-9155-dec2892fc12a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da50163c-28d0-4a51-b997-80108a232d63", "sighting_of_ref": "indicator--4d39f305-ac7c-4305-9155-dec2892fc12a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa89b0b-396e-449e-bf5e-f5bd677f4dc5", "sighting_of_ref": "indicator--4d39f305-ac7c-4305-9155-dec2892fc12a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f70481f-a535-4003-a1de-5783300fefa3", "sighting_of_ref": "indicator--270c9c21-9010-42ce-a275-8bd451fefc7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5aa8fea-94b5-4c33-a0f8-cbe7d2a277df", "sighting_of_ref": "indicator--8ef02e04-367e-42ed-bfaf-a287954bde6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ed03fb-2ed6-474f-9517-52e5f9507fa5", "sighting_of_ref": "indicator--8ef02e04-367e-42ed-bfaf-a287954bde6b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6354612d-6d43-4b27-8151-354f8ec21491", "sighting_of_ref": "indicator--8ef02e04-367e-42ed-bfaf-a287954bde6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd74ce61-fd48-4915-8ad7-0c9d247403d0", "sighting_of_ref": "indicator--09a53fdd-fb5f-43b0-931c-55bf854bc552", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df224a28-a88c-4726-80ef-8b0494207ab6", "sighting_of_ref": "indicator--09a53fdd-fb5f-43b0-931c-55bf854bc552", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85a0c85-f5b4-42df-b3b1-33c8a8d20944", "sighting_of_ref": "indicator--34cfde88-be08-42d3-826c-28330ba7d1eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb3224b-adb8-4d3d-85b4-c240ce19d796", "sighting_of_ref": "indicator--34cfde88-be08-42d3-826c-28330ba7d1eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9bb459-aabe-45df-8107-6186cb30e5ca", "sighting_of_ref": "indicator--34cfde88-be08-42d3-826c-28330ba7d1eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c015f59f-9f76-4b42-9ba1-c7aa600114b5", "sighting_of_ref": "indicator--c22c831e-18e2-40b2-aa4c-9ed7d5051730", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e921915e-8de6-45db-ba5f-8dfaf5d4176a", "sighting_of_ref": "indicator--c22c831e-18e2-40b2-aa4c-9ed7d5051730", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acf3dc9-63d9-489f-8418-506c45d7d882", "sighting_of_ref": "indicator--d28264ad-8306-4a89-8d54-c102d873219a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f63c34-f444-4569-ad80-29d5e9f21d2c", "sighting_of_ref": "indicator--30f3817a-721e-4e8e-ba31-40e6d13f1cb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320cfc53-a9c2-4714-b4e6-2012903e9f05", "sighting_of_ref": "indicator--54fadca8-6376-481a-a332-8fc5ddac3b94", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf10dcce-8c84-48c7-8ab4-68616cb0e358", "sighting_of_ref": "indicator--54fadca8-6376-481a-a332-8fc5ddac3b94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dccecc-af17-4fd3-88dd-a305fb667416", "sighting_of_ref": "indicator--c76f153f-ec37-480c-8b8f-d01f1e2bb9a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1753cc2f-2c3d-4786-b882-7ebf5916a89d", "sighting_of_ref": "indicator--c76f153f-ec37-480c-8b8f-d01f1e2bb9a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90742c34-d69d-4fca-b004-7116e999c909", "sighting_of_ref": "indicator--c76f153f-ec37-480c-8b8f-d01f1e2bb9a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3eb5dd-4d0f-4fd6-8bdd-f2f23e33a8d0", "sighting_of_ref": "indicator--77a64f6b-4404-45b3-82b9-535f82670c50", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ade8107-9562-4758-ab60-34a7961dffca", "sighting_of_ref": "indicator--65e093a4-6323-48b4-a81c-84d1bfd4501c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7604af-5586-4458-83dd-85bad08b64b7", "sighting_of_ref": "indicator--a33ed29b-fc2c-426f-ac1c-76b0c1e62767", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9392b4e4-8799-4d76-aaf8-2f6e2b446d33", "sighting_of_ref": "indicator--a33ed29b-fc2c-426f-ac1c-76b0c1e62767", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9428d07-a212-4769-9041-cc210b600ba8", "sighting_of_ref": "indicator--a33ed29b-fc2c-426f-ac1c-76b0c1e62767", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808bb879-b118-49e1-9a88-59f5e4c87ae3", "sighting_of_ref": "indicator--91cac632-24c2-40d6-a789-4120fa3c8def", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686ead82-95b3-4b30-a351-8c6b56e72af1", "sighting_of_ref": "indicator--91cac632-24c2-40d6-a789-4120fa3c8def", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8055af-9421-439f-9764-9c0330d26acd", "sighting_of_ref": "indicator--01a6bc2b-1167-4b88-a2df-498963f43723", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f03cf2c-7da6-444a-9350-a5185f3ae162", "sighting_of_ref": "indicator--d6f2da93-f5ad-44dc-93f8-f01dddd9593c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2889d179-2087-4159-b0ef-ffc57083eb76", "sighting_of_ref": "indicator--d6f2da93-f5ad-44dc-93f8-f01dddd9593c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca75f0df-949c-4882-8c5f-a40c904bd965", "sighting_of_ref": "indicator--d9999a56-5231-4c20-b1cd-a9ae78cd6969", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d19a3f-077d-470e-88bf-6f1d6fc28995", "sighting_of_ref": "indicator--456f4247-de26-4522-9159-be911c8c0309", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4abcfc0-7b64-4d35-be3b-2c60e3675357", "sighting_of_ref": "indicator--456f4247-de26-4522-9159-be911c8c0309", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14368648-41a6-4ba3-b9b9-8095183e94dc", "sighting_of_ref": "indicator--bb795481-7076-468b-894e-c0f4113ce1ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b76e18-8829-4fe9-b608-9a500481c0b3", "sighting_of_ref": "indicator--bb795481-7076-468b-894e-c0f4113ce1ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cf70ec-0bbb-412b-b400-01bb1c074e15", "sighting_of_ref": "indicator--26db6e59-18fc-4467-81f7-c91d62b9260a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d9bb4f-6cda-4d29-b7c3-811c430af530", "sighting_of_ref": "indicator--26db6e59-18fc-4467-81f7-c91d62b9260a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9871856-a365-446a-a359-490772bcc90c", "sighting_of_ref": "indicator--26db6e59-18fc-4467-81f7-c91d62b9260a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ef1b55-0b9d-41cb-b4ca-b13685a4a770", "sighting_of_ref": "indicator--2e684c55-bad7-43bf-8271-c48db65cd998", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816d5073-8fdd-4c46-b710-eefc76c6cba9", "sighting_of_ref": "indicator--ad7363de-5496-4b88-a898-c687ee37c84e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cabd45-5138-4e71-bd7f-00ab636795b6", "sighting_of_ref": "indicator--43b8fc4f-5423-41d0-b609-37465842a2bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e462ee-4f6a-42c4-8021-3c45d321e9c8", "sighting_of_ref": "indicator--43b8fc4f-5423-41d0-b609-37465842a2bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c79c16-d84b-4da9-bd62-654c7f4d1419", "sighting_of_ref": "indicator--43b8fc4f-5423-41d0-b609-37465842a2bd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9f6a66-ecde-424d-a268-19bc27078753", "sighting_of_ref": "indicator--afa8cc06-0c34-4116-9a21-255077941371", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6b6a73-1796-48a0-8bf7-64f005826e63", "sighting_of_ref": "indicator--9b243128-4bb8-493e-b782-9dc583827c87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f50e979-54de-4f9c-a9bf-18e92ee1a02b", "sighting_of_ref": "indicator--86532bac-8864-4724-aba0-c2b4c9d68c65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9d75ed-d0b6-4607-82f9-ed92c27a3b5a", "sighting_of_ref": "indicator--9791fc05-d397-4c00-ab2c-dc38eedcbabc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2773406c-14d9-4460-bc50-54579c5af9cd", "sighting_of_ref": "indicator--499fe558-64e4-45e1-9170-ae0e89feadbe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8006d714-3cc8-4690-a250-e2c029e80b0b", "sighting_of_ref": "indicator--751b4724-7b30-45ce-99d2-f6160ada1cff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a011331-d026-4931-842e-a549cc16f34c", "sighting_of_ref": "indicator--dc8372ea-4778-47d0-b41e-ddb134b96474", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8ce32d-5189-487b-beed-9264b4b069b4", "sighting_of_ref": "indicator--c17186fb-c61e-4b5f-b36b-f4be32e970c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e561a8fa-3546-4c0f-bfa7-7e1003230199", "sighting_of_ref": "indicator--c17186fb-c61e-4b5f-b36b-f4be32e970c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbcc66e-0dbe-489c-9530-fae7f5ab276e", "sighting_of_ref": "indicator--901f6b11-d4aa-4208-864e-04ea7bfd027b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6445ebbf-0410-46b0-9424-558256d3be85", "sighting_of_ref": "indicator--477bcf33-78fb-4085-931d-13443e5f8de9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bea13e-5daf-4e2b-a80e-403b1bb627c0", "sighting_of_ref": "indicator--4bf5f045-6206-4159-ba1d-630bb6995560", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076607b9-85a6-4969-b70e-b4c7ab9ca578", "sighting_of_ref": "indicator--4bf5f045-6206-4159-ba1d-630bb6995560", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1087204-b23a-44a0-80f7-1071ef13099a", "sighting_of_ref": "indicator--822af9d7-fd56-48f2-b119-ebdda3a97d9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688facfb-2cb7-469d-a680-72f0e308e9eb", "sighting_of_ref": "indicator--32a3eb4d-0c31-4e0d-bafa-2ac600f75d42", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c988d84b-868e-41f6-b6d6-a30c2cae97ce", "sighting_of_ref": "indicator--7fb7cda2-7da9-4149-b2b2-6a26e862b43c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42ce69a-2639-4216-a504-4aab97d76cff", "sighting_of_ref": "indicator--2fa72608-8bea-474d-8e68-a3ddf79bb1bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0eb4a48-d895-4e85-878f-54915d6e96ab", "sighting_of_ref": "indicator--a064817a-411d-48f2-b89d-29daac4951cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f5a573-6705-4f53-a66b-a12fca004a71", "sighting_of_ref": "indicator--ed7a4f55-1f44-4911-8fda-c27595803ec0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26267b05-06d5-474b-89a8-66ee7fcd06ac", "sighting_of_ref": "indicator--3348404c-c763-4346-ab8d-67ba55656977", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a251953e-4db3-47af-9216-679e489bf1de", "sighting_of_ref": "indicator--d5b86814-5fe6-4602-b01f-833f4f79bb6e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0260702-ec3c-48a8-961b-d3210610ebb1", "sighting_of_ref": "indicator--4b993fe5-ef02-4761-95ea-c4a0e5be3f2b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b604b9-bab5-4589-9eb5-6ad3f01f6164", "sighting_of_ref": "indicator--4b993fe5-ef02-4761-95ea-c4a0e5be3f2b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329de525-593d-4328-9d54-eae4b9a1a88f", "sighting_of_ref": "indicator--81e0f5df-dd77-4838-a1c3-ab6fce860bd6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c2f09e-056d-4824-b6a0-799ef9beea92", "sighting_of_ref": "indicator--e4338541-035a-40b1-8cbd-0470d113a496", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5517afc6-63b8-43f9-bc37-25a769a8bfeb", "sighting_of_ref": "indicator--67627509-3f45-4b0c-a14c-b0c5594de8ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261ef9b5-10b0-46a8-8506-ec438bd4d150", "sighting_of_ref": "indicator--67627509-3f45-4b0c-a14c-b0c5594de8ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0190de53-6a3f-477d-b3ad-8c81facb4c0b", "sighting_of_ref": "indicator--67627509-3f45-4b0c-a14c-b0c5594de8ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c850959-6bc2-4238-932d-67ecfcc0437b", "sighting_of_ref": "indicator--1dafa7ea-bf30-42aa-b258-174ef973df4b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad64179e-369f-4e85-b729-0c1e3bc24648", "sighting_of_ref": "indicator--b2ed896e-3676-45be-8232-f15495ce3707", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba197a0-f303-4716-95f3-2dcf7743080d", "sighting_of_ref": "indicator--b2ed896e-3676-45be-8232-f15495ce3707", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d84993-c2ba-4209-bb68-7481666175a9", "sighting_of_ref": "indicator--e9d76dfc-14d9-44ea-afcb-005c0aaf3fb4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830fb057-595e-4ccd-920d-7385977a5636", "sighting_of_ref": "indicator--e9d76dfc-14d9-44ea-afcb-005c0aaf3fb4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f3b4d5-8be0-4639-8a1f-28327261d2d4", "sighting_of_ref": "indicator--6f5356dc-a976-4167-9658-9e338777edb6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf07bed-f3f2-4ea8-8767-0b92b034051c", "sighting_of_ref": "indicator--1328bc8f-10e7-4ea8-81b6-a0ea0dd6b3f7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9206e326-939b-43d0-88c7-e87c9a0ad4f2", "sighting_of_ref": "indicator--1328bc8f-10e7-4ea8-81b6-a0ea0dd6b3f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd682be-449d-4bd2-8148-a5987dc7ca77", "sighting_of_ref": "indicator--62bc6330-27a8-4d0a-89ed-c0683bb6cf82", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8e3139-9664-4e5d-b4ba-39e0fa9b3357", "sighting_of_ref": "indicator--3bd5d910-2d5e-4a7b-9a99-1a256dc37b70", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917cffdd-4f5c-4cb0-a53a-5c43e4322fec", "sighting_of_ref": "indicator--a842e18b-4dff-4b30-bb89-586d26aa50d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae37403f-a26e-4fa8-9280-304b812ef6a4", "sighting_of_ref": "indicator--a842e18b-4dff-4b30-bb89-586d26aa50d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb1599b-9985-428d-8e1c-7242c80d3751", "sighting_of_ref": "indicator--3832d667-abcd-41cb-bfdc-2afef51e016b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fe7f23-3e14-4547-8e78-1ef6a0365030", "sighting_of_ref": "indicator--3832d667-abcd-41cb-bfdc-2afef51e016b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa1fe5a-5ad0-49d2-aef3-a5d1823b8c34", "sighting_of_ref": "indicator--3832d667-abcd-41cb-bfdc-2afef51e016b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3974e11-0fc7-4d03-b8fb-c8bd6da4e8ee", "sighting_of_ref": "indicator--b6da9c4c-b088-4692-b5fc-9e750363a8d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da4a8d1-fffa-421d-9229-73338b60e639", "sighting_of_ref": "indicator--51e57882-8697-4f55-947f-601f9fb06495", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e81ae8-f4f2-45ef-9e06-06cc82df9350", "sighting_of_ref": "indicator--694648db-334a-44a3-8128-fed8b170f395", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edba9e8-ced2-4ac2-8b9d-7e9fd1b3536c", "sighting_of_ref": "indicator--beb4ed66-503f-464c-b66d-e6577473faac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1eb265d-3d7d-44f1-9683-a3a30242edb0", "sighting_of_ref": "indicator--beb4ed66-503f-464c-b66d-e6577473faac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7ee12f-66b2-4c39-9a14-14ad421b8c39", "sighting_of_ref": "indicator--beb4ed66-503f-464c-b66d-e6577473faac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e8e62a-9a74-45e0-94c0-5d50984ebff7", "sighting_of_ref": "indicator--7c4ba246-abf0-4a54-b1a1-e69dbd252796", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2681a62-8e46-4bb0-a92d-cb01f0b3356e", "sighting_of_ref": "indicator--7c4ba246-abf0-4a54-b1a1-e69dbd252796", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad79677-8f62-461a-aae3-2d04f50495a6", "sighting_of_ref": "indicator--7c4ba246-abf0-4a54-b1a1-e69dbd252796", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d5171e-479e-4bd6-b25e-8da9157bed3b", "sighting_of_ref": "indicator--68bc0e72-f196-456a-a54e-6ee7186f550c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ee79b8-1fce-4bde-a110-d1941a41cf1d", "sighting_of_ref": "indicator--88f3c018-f609-46cc-abfa-8da6e40de8f5", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a599793-56d1-4eb8-857c-cb6928258b41", "sighting_of_ref": "indicator--348a6180-a060-468f-82c3-b5eee930b38c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d475a19b-613e-4d6b-9e3c-fd7a2d504313", "sighting_of_ref": "indicator--9ab9e9fd-5d75-479c-be77-df5b81ab2f49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c032da15-d9d8-415f-857f-b3411e0e9430", "sighting_of_ref": "indicator--9ab9e9fd-5d75-479c-be77-df5b81ab2f49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c86ba4d-6de7-45e9-9d1a-0b09763328f4", "sighting_of_ref": "indicator--9ab9e9fd-5d75-479c-be77-df5b81ab2f49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b32132-16b9-4299-b32d-95b576bbdd6a", "sighting_of_ref": "indicator--ca600aa7-5679-4ca9-a10d-d122f48de6a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13744d40-0ac8-4823-a47d-8d3931437ad8", "sighting_of_ref": "indicator--ca600aa7-5679-4ca9-a10d-d122f48de6a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90434ca-9edd-448c-9c05-7806366b747a", "sighting_of_ref": "indicator--84b17978-6b35-4458-b3ed-624fd4bea29d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ec31df-d948-42b6-81cf-b7b287321f61", "sighting_of_ref": "indicator--84b17978-6b35-4458-b3ed-624fd4bea29d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbc88cc-477a-465a-a9a5-3ac37e9c3322", "sighting_of_ref": "indicator--84b17978-6b35-4458-b3ed-624fd4bea29d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1273d3-e0fa-463d-a5de-b558b7c40297", "sighting_of_ref": "indicator--03fce1e8-aa37-4b46-a421-5293e64e897a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84745945-1821-44b2-bc8d-6763d64e0bf9", "sighting_of_ref": "indicator--62ca2cce-83f8-405f-ac28-530cd002ea97", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbc35d5-a0e6-428a-accc-8523f63faa67", "sighting_of_ref": "indicator--62ca2cce-83f8-405f-ac28-530cd002ea97", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42f9bc4-ec21-4968-b580-71e95df639f6", "sighting_of_ref": "indicator--40a1ab3b-2bec-4a99-b3c6-193e878ac955", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a2cca5-ff02-4dd0-be81-f7b3593ceebb", "sighting_of_ref": "indicator--40a1ab3b-2bec-4a99-b3c6-193e878ac955", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3dd232-20f1-491f-b9d3-0f5e2ba433dc", "sighting_of_ref": "indicator--9c9f6ae5-64ff-4492-91fb-7a106da85770", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9617c92d-3624-49ab-8cd1-61f21e785bdf", "sighting_of_ref": "indicator--9c9f6ae5-64ff-4492-91fb-7a106da85770", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c2e82f-10da-4312-989d-ded211e4da98", "sighting_of_ref": "indicator--3cddb0da-bf1f-4545-84ee-b8a5171a433a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d65a950-ef85-40d5-9660-42cebfd88dec", "sighting_of_ref": "indicator--1913aad4-9809-472e-ab43-de4156936737", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8498ce1-d369-4434-8fba-4c57105102cf", "sighting_of_ref": "indicator--02adcbeb-d8d0-4b7c-b4a4-553b94036ae0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6cc84d-324e-46c3-87dd-f8f89ce33be6", "sighting_of_ref": "indicator--02adcbeb-d8d0-4b7c-b4a4-553b94036ae0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf66bdd-123b-4795-b84a-ca1f7bba24f0", "sighting_of_ref": "indicator--209bed91-6b0c-4193-8c4a-3e118f4e07d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ec1c5b-0dad-4fbb-b7df-9bab0e9508e1", "sighting_of_ref": "indicator--7427e039-d42a-4501-8467-57f3aef6db53", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0a9e19-9fcc-48be-a82f-2fc2941db0d0", "sighting_of_ref": "indicator--7427e039-d42a-4501-8467-57f3aef6db53", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a6ad85-cd4f-4877-ac34-db97d8a21213", "sighting_of_ref": "indicator--59fc895c-ec08-480f-ac71-f1731653cf74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5540dd9-cc7f-4cf8-af81-3e65fe96b7ac", "sighting_of_ref": "indicator--59fc895c-ec08-480f-ac71-f1731653cf74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784616af-b693-4be7-8032-73624b99d998", "sighting_of_ref": "indicator--4b220222-fbcf-45f7-97a8-75eba9f1ebf7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b73e23d-4bc4-46b7-ad94-0230e7b220b1", "sighting_of_ref": "indicator--4b220222-fbcf-45f7-97a8-75eba9f1ebf7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da10869-98b4-4ab9-927f-265c45299af6", "sighting_of_ref": "indicator--f95c8199-3b12-47c8-a4ef-ce5a8930d395", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bb3e9c-9624-418a-a368-a63cb11c974d", "sighting_of_ref": "indicator--49391004-3018-480f-9b8a-c652404ff585", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062899b4-c547-4d19-9e7e-554b67ce0825", "sighting_of_ref": "indicator--7d8210f2-3b36-407a-b3d4-e1b212e83167", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc0fbf8-a34c-41fc-be7c-045664a7accc", "sighting_of_ref": "indicator--9becdfe7-7dc1-4baf-9360-6c81e1532646", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81308ed2-b484-4a04-87f5-330c0609a368", "sighting_of_ref": "indicator--9becdfe7-7dc1-4baf-9360-6c81e1532646", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366489b7-abee-42e8-98de-65de4f2e78c2", "sighting_of_ref": "indicator--53768978-7d33-4b2b-b02f-a1df423abccd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a93e81-b33b-4f7f-ac8e-39d4e29919a8", "sighting_of_ref": "indicator--53768978-7d33-4b2b-b02f-a1df423abccd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2f3268-4c61-4b1e-a682-5dd25c6b8b7d", "sighting_of_ref": "indicator--07547a5f-4f8e-4f18-83c1-661230bcdf89", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e5bd4a-ac97-491b-b1db-47b1e22d94d0", "sighting_of_ref": "indicator--96c2942e-6260-45aa-81d3-3035cb04088f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a82be6-15c8-4bdd-a5ff-4d9d492260b1", "sighting_of_ref": "indicator--09d3d5d7-0949-4275-8b5a-b36b8a6760c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decd4f6b-6ec6-4668-a63f-77746ed4c9c7", "sighting_of_ref": "indicator--4b83840a-461e-4522-8927-7af7ff1fa8ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2ad1a5-5810-4dc4-96f3-b7efb2cc4567", "sighting_of_ref": "indicator--d03be26a-b4c2-44e1-b99d-b806bcde5bec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22daaba1-2be8-4d41-9cc8-6b622a3c7d2e", "sighting_of_ref": "indicator--163975c7-0ad9-4666-9d08-1796f97544d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd22ec6d-f761-464f-828d-80bde4e0f6b6", "sighting_of_ref": "indicator--81449d01-25e4-45d2-ab91-fc2ef6dcce7e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdba95d-5202-4039-a5fb-ec8eba1159b1", "sighting_of_ref": "indicator--b6e7296f-cb74-40db-912d-92c86d798d33", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12672bbb-de6c-4b23-b7bc-29e8edb486b2", "sighting_of_ref": "indicator--cf7a3bc1-9e39-423f-9f1f-5cd923dd2055", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e67cb8-ef4e-4e39-912e-4c521ef7f0db", "sighting_of_ref": "indicator--6ea3adbd-9de1-446b-8d58-c1239a24721e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93a2ee7-f03e-4867-bc25-cd6b547e80a1", "sighting_of_ref": "indicator--0df955cd-7e65-4528-88b0-57e6f2d0515f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23512750-4ad0-4e55-9c1e-561db6c85bf4", "sighting_of_ref": "indicator--fb37b9df-01d0-44ca-ade9-eb12414a9d5e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5875e606-0c3b-42f2-981e-832704f6c724", "sighting_of_ref": "indicator--a25acbda-edc1-4243-9ee9-8b95fb2cae19", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6433fed-9a50-4a8a-ad75-0c41cb993feb", "sighting_of_ref": "indicator--ad7140d1-5e88-4faf-8327-6d3368c2fb7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0632d9d7-29c7-4861-adce-4e59f048e9c3", "sighting_of_ref": "indicator--c0202fb1-5d1d-4fb8-be28-23041c6068da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c63191e-4e43-4a92-a746-55e60265e1ff", "sighting_of_ref": "indicator--c5bd581b-0839-4e13-8d0e-7daab0a04333", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053f2f73-8e02-46d3-89af-68246e3587cb", "sighting_of_ref": "indicator--c5bd581b-0839-4e13-8d0e-7daab0a04333", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e52a499-71cc-4046-8871-4b3e3eb1304a", "sighting_of_ref": "indicator--28d3cb61-ce4e-4f8d-a63d-8334a5f8958d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26edbf7-156b-4fc6-bc83-852478ad88ae", "sighting_of_ref": "indicator--28d3cb61-ce4e-4f8d-a63d-8334a5f8958d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b6914f-5613-486e-9bd1-61362dbb2f28", "sighting_of_ref": "indicator--0d0b05a7-0874-4248-bd33-5c2040667adb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1c5d58-6cb5-46cf-96ea-8c3e66f8ad86", "sighting_of_ref": "indicator--ae6b9e76-e5e4-4196-a895-f8015f77945b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432d8f7a-6bbd-4d20-b3c4-6f38479ce69d", "sighting_of_ref": "indicator--75b24245-4d94-4d6e-a037-2dfceb4db9bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e85d414-afd5-40e8-ae98-b35184351ba0", "sighting_of_ref": "indicator--75b24245-4d94-4d6e-a037-2dfceb4db9bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160ace52-726b-4732-9aad-dbce7fa32fec", "sighting_of_ref": "indicator--c033aa0c-8d66-4b20-92ca-d1bd73f915f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ef908-3852-4327-a5ef-2d6d1be9aae8", "sighting_of_ref": "indicator--dff36e09-6ae2-4a4a-a343-823f6ec8aebf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86eb6ec-cb7a-430f-8375-b079bc121b58", "sighting_of_ref": "indicator--6f032d66-9553-406e-9594-dfaf572559e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7f0dcb-f9ce-4438-b8f9-7237a1487d99", "sighting_of_ref": "indicator--20a98025-f857-438f-b17f-29439d3d79c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee8c18d-00e1-4456-ad33-36a5364c0afd", "sighting_of_ref": "indicator--ac128ddc-93dc-450b-bb2a-56e665e2d68b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb85ff0-0672-461f-ba52-7fb96f0d4522", "sighting_of_ref": "indicator--122c33e2-027a-4591-99de-ecb5bd44e10e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd12e9cb-b261-4f26-a4a2-aaceaa5f6d24", "sighting_of_ref": "indicator--122c33e2-027a-4591-99de-ecb5bd44e10e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253b4773-a1d9-4892-8c25-cd42bef04135", "sighting_of_ref": "indicator--cd0fead6-fed9-4866-a34e-8aadf177399f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a28600-81a9-45c1-a4f9-2d365e5a4385", "sighting_of_ref": "indicator--0c5d7e39-cc03-4798-a54a-e1e723c9c8fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecfb796-27f3-46ee-88b2-999afe24e031", "sighting_of_ref": "indicator--3263da7f-b70a-4b5f-82e7-b47bd8872075", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3837ffe-ca54-498e-b206-f1dd3326f51e", "sighting_of_ref": "indicator--520c563e-0823-43ea-8761-283e248a7287", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe336cb-648a-41d0-91b8-415db4ba89df", "sighting_of_ref": "indicator--9f6efd21-ca1b-4c72-96e1-4c34d58ce0d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec2a931-a2ae-4baf-b97d-a8fe2e5be422", "sighting_of_ref": "indicator--9f6efd21-ca1b-4c72-96e1-4c34d58ce0d3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb5d034-db23-4423-a8da-2720f368a704", "sighting_of_ref": "indicator--9f6efd21-ca1b-4c72-96e1-4c34d58ce0d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f8581-500c-40fe-9c6c-de3000601d80", "sighting_of_ref": "indicator--c256fe66-23e2-4ca0-9998-39e0ff281cda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e672da57-16e1-423d-b290-0b3e6c095aea", "sighting_of_ref": "indicator--59362ce7-1009-492d-8a3d-5d5d9a0756d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6528bc99-06ef-4512-a0fd-17d70f1671f3", "sighting_of_ref": "indicator--504ee191-9c2f-4a2a-8c1f-afedd5c7d86e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226d429c-c1c5-4243-bf21-657bf5834636", "sighting_of_ref": "indicator--3713a35c-9fbb-4f6e-9928-bcba0f013317", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb607539-ab2b-4ef1-aafc-1af28e03d861", "sighting_of_ref": "indicator--228b9890-367a-4eca-b582-6d657dca03fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f8a086-c663-425d-80c8-c646b2506bf8", "sighting_of_ref": "indicator--228b9890-367a-4eca-b582-6d657dca03fd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f5c3fc-84b2-4971-ade9-23d0e0a1612c", "sighting_of_ref": "indicator--4213b062-7c60-40b4-ae30-51613a2cdb61", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1422b2ac-fc6a-4245-ad67-4cff85f1eb95", "sighting_of_ref": "indicator--6e1526c7-2001-49a6-9d2a-8e2a23a340ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a82cbfb-5922-4463-bfb9-2a97baeb2cec", "sighting_of_ref": "indicator--927aaf6b-e2a6-43c0-9517-f022b94edc8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b1f4ad-3b12-4722-af5e-6f76724a6e1b", "sighting_of_ref": "indicator--927aaf6b-e2a6-43c0-9517-f022b94edc8b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ad277f-5067-4f71-8ca0-145a9ef4d3c5", "sighting_of_ref": "indicator--3237d42e-bc38-45e4-9aea-b9e575218bfb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41132a1c-846f-4cba-ba2f-a46cf1280988", "sighting_of_ref": "indicator--64035667-e5a8-49af-a5f6-7b6fd1bca317", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485e6ac7-b46c-406b-aaf9-821a13be6a7b", "sighting_of_ref": "indicator--f66beb28-40ae-47d5-afc2-b4ecfe178ea3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c200e4-792a-401f-8838-6d3e563c8300", "sighting_of_ref": "indicator--e995479b-82c0-4e98-a692-b6d75cb0fe3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383e14a7-77fc-4583-905a-47b464d2c7b8", "sighting_of_ref": "indicator--52e3f479-0126-4eb1-9a34-29d0fd537a0b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410fe8d6-ef49-4f96-8d0f-138af38dec12", "sighting_of_ref": "indicator--9eb6e6cc-decd-4cfe-bbcf-0f13c958d834", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0fb4718-8598-4e6c-9a52-30f30f166de0", "sighting_of_ref": "indicator--c3a6e023-c712-4ae1-a926-973001952567", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddc55ce-20d3-42bd-9e03-1a431d0b760f", "sighting_of_ref": "indicator--c3a6e023-c712-4ae1-a926-973001952567", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ee84ce-43dd-4bfa-ac17-87a9ab055021", "sighting_of_ref": "indicator--54daf64f-8012-463a-ad72-b40e6186cc8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679b7a64-d864-4e73-872a-bb11309e9df0", "sighting_of_ref": "indicator--db7a6637-a470-49c4-a33e-97018c4d1b29", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cb11e6-d9e2-46c7-aa67-093064b5ec21", "sighting_of_ref": "indicator--47a88b2e-413c-4fe1-ba37-0deedcf80fb6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d14c6cd-5c74-49fc-842b-cf5daa9cdc74", "sighting_of_ref": "indicator--c9151a07-76eb-4cd6-92ed-6c56fa097810", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407298c6-fd6f-4f93-b215-e84ce9763a04", "sighting_of_ref": "indicator--c9151a07-76eb-4cd6-92ed-6c56fa097810", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1ef8ba-5238-4746-a59a-755a3e46577d", "sighting_of_ref": "indicator--1feb961b-4f8a-4967-b0d8-6f5b16340428", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87709305-c9dd-486d-9191-011965655f10", "sighting_of_ref": "indicator--d3487a66-a129-4213-a178-6a5eccfc0fb3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713596d8-efc9-4a5e-a054-044b471877a3", "sighting_of_ref": "indicator--f9ac3cab-9e7d-4e11-9315-1dc0b1696300", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5181a8a6-b9da-4be2-aa73-811a693a4dbc", "sighting_of_ref": "indicator--4c7f3866-6a45-4565-aec7-68c0272760a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca84eb4-1807-4483-9540-e81d9e0b6c36", "sighting_of_ref": "indicator--4c7f3866-6a45-4565-aec7-68c0272760a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd74f399-359e-4933-a062-68d14e86219b", "sighting_of_ref": "indicator--4c7f3866-6a45-4565-aec7-68c0272760a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81ad44d-4f70-4ed9-9c0f-1024d8c6ad61", "sighting_of_ref": "indicator--62aca557-4b20-4993-8cf5-9468075153cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c04645-e0ff-4b3d-9313-66ea815cd833", "sighting_of_ref": "indicator--bb596563-6dd8-40d2-bb56-bf7624e5afea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b243e80-7f41-46aa-b902-98e21de43204", "sighting_of_ref": "indicator--53c4f028-560f-4b1d-8b63-0f8019364a73", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99e39f9-9c84-4399-9acc-c74f1920ff0c", "sighting_of_ref": "indicator--043f5cdf-04e0-4c02-aad2-e1f7ef614ec9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce9a080-9497-48f1-b2d3-c104e1e53a87", "sighting_of_ref": "indicator--043f5cdf-04e0-4c02-aad2-e1f7ef614ec9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60a09ea-8d83-4702-b735-ee1336c2c29b", "sighting_of_ref": "indicator--64dca7e7-e29d-4d32-adc9-49e456ec92e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45942ee3-407c-41f0-9edc-2e541ed7c532", "sighting_of_ref": "indicator--64dca7e7-e29d-4d32-adc9-49e456ec92e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f097b7b-0433-4515-92bf-ab1f5a897a50", "sighting_of_ref": "indicator--a3b5a9eb-647f-464b-acd3-7089d5acd0ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bf275a-af96-4fd9-bd15-2d55022c2a6b", "sighting_of_ref": "indicator--a3b5a9eb-647f-464b-acd3-7089d5acd0ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1608670c-aa65-4d15-9244-9cd33eedcdb6", "sighting_of_ref": "indicator--0bb70f34-98b3-4946-97c9-7bcefc80f589", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b138b6e3-c653-4eee-9f72-3c97d0732527", "sighting_of_ref": "indicator--83804e43-9c70-4e1b-8865-99aea0832129", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a4de1a-6a8a-4872-8a7c-f76faebc5dbf", "sighting_of_ref": "indicator--83804e43-9c70-4e1b-8865-99aea0832129", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe5688d-a133-4781-90d4-493f09873dd7", "sighting_of_ref": "indicator--a0d1dccc-f0d1-4f5e-848d-8b82171c9907", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d880d7fe-9683-42ab-b0c8-5f2dc9ec8480", "sighting_of_ref": "indicator--a0d1dccc-f0d1-4f5e-848d-8b82171c9907", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4c99c7-bb57-44f4-b1a6-367f13ca0421", "sighting_of_ref": "indicator--a0d1dccc-f0d1-4f5e-848d-8b82171c9907", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62f41a2-c672-4828-8b91-a946384d4c3c", "sighting_of_ref": "indicator--04c71645-9d55-439d-a3c5-36e64fa1cc8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bd1e71-fdb0-4afa-ad7d-60147105405c", "sighting_of_ref": "indicator--04c71645-9d55-439d-a3c5-36e64fa1cc8a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdfcf81-bc36-487b-911a-5c455500afe4", "sighting_of_ref": "indicator--db78cfcb-90ac-4428-a6d7-1e9ff2b5bd75", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbd9dd1-3679-4e3e-925a-3c7b933f32f1", "sighting_of_ref": "indicator--fa03e76c-0288-476e-a02d-7d5bf187440d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93767829-82e2-47c7-a3f4-12b5c8cc64e1", "sighting_of_ref": "indicator--383a7a93-b9c1-4791-8b65-21b1d782367a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea54370e-ed5d-4fc0-946f-dd60f09fcfb9", "sighting_of_ref": "indicator--6e1a8716-1606-47a7-9f5f-1426f1b8018f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7745b1b9-c0df-4f42-b011-dce3bfbe303c", "sighting_of_ref": "indicator--53f6db1b-879b-4c13-bc5d-ddb1d0c0d11c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2523a3f-6bd9-4023-bfd3-a572364567a6", "sighting_of_ref": "indicator--74a78ad8-1ef1-4cc9-bae5-3947a0feaae3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99421c2d-c279-4378-ab14-4faf8ea56a51", "sighting_of_ref": "indicator--74a78ad8-1ef1-4cc9-bae5-3947a0feaae3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bef260-cd3a-4bd5-9901-b843ece05bef", "sighting_of_ref": "indicator--165f7acb-6606-4fab-8c6b-fff5fabb8e27", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25f016f-e2c1-4093-b240-902077ce75fc", "sighting_of_ref": "indicator--30cf1750-ff6c-4273-bd16-b4ff0911630b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7164a849-eac9-4a56-9320-9a82438e59f9", "sighting_of_ref": "indicator--490dae04-f4c0-4357-a3f4-ae70f1acf538", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996cdc37-1c65-4f18-891b-ec1ef217c13c", "sighting_of_ref": "indicator--06239025-49a6-49cd-8813-1616c892d605", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c848ded5-25ad-4372-83e5-219c0c01037a", "sighting_of_ref": "indicator--06239025-49a6-49cd-8813-1616c892d605", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e13c813-66e5-45c6-966d-b7bdd182bf25", "sighting_of_ref": "indicator--b2612bf1-e2dd-4e28-9af6-dcc13cf617be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072db9b5-08e9-4316-b7b2-d598619a302f", "sighting_of_ref": "indicator--b2612bf1-e2dd-4e28-9af6-dcc13cf617be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499dd7c1-c333-45e2-bc7c-48757fdbb939", "sighting_of_ref": "indicator--60dec13d-f51e-4565-8996-88d32e38c81d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591a6c49-bd1b-406f-a1c1-8f61f56ff6fd", "sighting_of_ref": "indicator--60dec13d-f51e-4565-8996-88d32e38c81d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5d31a7-2cda-485c-ab85-6fca85632359", "sighting_of_ref": "indicator--d49f3d60-797d-44d4-b367-7067f5dd92bc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa29e581-edff-4158-8b12-99e75c791646", "sighting_of_ref": "indicator--d49f3d60-797d-44d4-b367-7067f5dd92bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0e1ab0-568b-416f-a764-fbd4a4dd26f7", "sighting_of_ref": "indicator--fa3045bd-dccd-4cb7-a811-9c553ce3479a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3628ca-b682-40c1-9417-0da240db2d73", "sighting_of_ref": "indicator--fa3045bd-dccd-4cb7-a811-9c553ce3479a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a61cc4-91b7-4bd5-aefd-04fb84d06473", "sighting_of_ref": "indicator--2292f8db-531e-4585-92eb-ad70c5fff411", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb6bf4c-da3c-4c04-8039-f28feb1936e9", "sighting_of_ref": "indicator--03b6e6c5-1591-4567-873f-2eff817404d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c89efd-1d40-43c5-9ff1-878bc05bcd99", "sighting_of_ref": "indicator--f5f81620-643b-4820-b89a-c4fdf62ab5ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634739aa-5562-4dbe-8566-39c34475c5a2", "sighting_of_ref": "indicator--32cf434a-3284-447d-b227-996fba385b69", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ec8ab5-c904-4155-961a-429d51884853", "sighting_of_ref": "indicator--ed389a98-8a14-4241-987e-30db55e0db3f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d52197f-3ce9-4b50-ac13-334ef7a29e7b", "sighting_of_ref": "indicator--ed389a98-8a14-4241-987e-30db55e0db3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7733836-419b-454f-b9f9-ce4d2c526262", "sighting_of_ref": "indicator--b464d542-97ca-4ad4-80a0-78625b3243b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3ae849-ddf6-4adc-b411-93103a0b49ac", "sighting_of_ref": "indicator--cf36260e-d239-46d8-b8d0-8f69be035ca7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d1fbd0-1bf1-4a04-9d56-574855aca7a4", "sighting_of_ref": "indicator--cf36260e-d239-46d8-b8d0-8f69be035ca7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08438864-dab8-43eb-b0d0-a9442638c23e", "sighting_of_ref": "indicator--369375b7-285a-42e6-8509-92aad73e4035", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d83cf7b-8b3b-4888-8017-2a0692570257", "sighting_of_ref": "indicator--369375b7-285a-42e6-8509-92aad73e4035", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ae16e5-56ee-473d-8e7d-bf782608bcec", "sighting_of_ref": "indicator--dbda61e3-7451-492e-a796-79341651607a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baf1050-fe33-47f1-af80-a9133fc92389", "sighting_of_ref": "indicator--dbda61e3-7451-492e-a796-79341651607a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7621ee-bfb1-46ad-88e0-4de901d01418", "sighting_of_ref": "indicator--92cf8e27-1cc0-488f-9d92-ad73b220cd91", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913e441b-1df8-4a91-a9b1-71774c3242d2", "sighting_of_ref": "indicator--92cf8e27-1cc0-488f-9d92-ad73b220cd91", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095080ce-c2e2-408f-9fc5-c8802aa2b487", "sighting_of_ref": "indicator--32e46e40-7c14-4b97-a3a4-f3eefca98c7c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8263f29a-b08f-4b89-8d4b-a7de17b1294a", "sighting_of_ref": "indicator--32e46e40-7c14-4b97-a3a4-f3eefca98c7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30eb0dae-6341-49a0-9034-d3cef583a55c", "sighting_of_ref": "indicator--99b4b3f8-f59c-4875-83ec-1acd82dcf31b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37bfe6-fbd9-44f5-8be6-0b9e8b2a64da", "sighting_of_ref": "indicator--99b4b3f8-f59c-4875-83ec-1acd82dcf31b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ffe536-6b03-45a0-9cfc-0301647e2d49", "sighting_of_ref": "indicator--8acccae1-70ff-4745-9d59-12ad5f5ce16d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7803b72-461c-4e1d-885c-7c174ae8ed48", "sighting_of_ref": "indicator--8acccae1-70ff-4745-9d59-12ad5f5ce16d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4ab3a3-72eb-4f33-a0f1-0571af4e2074", "sighting_of_ref": "indicator--e095b103-c42b-4eaa-9949-fbb3da21305e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4d7840-89a2-41a4-9015-c224d6f03367", "sighting_of_ref": "indicator--e095b103-c42b-4eaa-9949-fbb3da21305e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e877e30c-f596-49ee-b5e3-c2fd01782085", "sighting_of_ref": "indicator--49115ba5-a04f-48b6-b01a-089ee8b9cb2b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43519ff-f258-4f78-8cdd-0a1b79b39fcf", "sighting_of_ref": "indicator--49115ba5-a04f-48b6-b01a-089ee8b9cb2b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ccd747-8237-42a7-b056-454575207782", "sighting_of_ref": "indicator--e8ba8fe9-1174-44fb-bbbf-59a44529340e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d1abd3-d31e-44e0-9cc6-7e8327368e66", "sighting_of_ref": "indicator--aa175982-1bff-45ab-8eca-b5e28cdf4816", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3d70a7-c5e1-4622-9e83-d896e285bd3c", "sighting_of_ref": "indicator--481f42c8-cd1e-4c1f-99dd-d9eef90a2533", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b243de5-4de2-4aab-9a67-8e14a0f06a65", "sighting_of_ref": "indicator--dd7807e5-e318-43d2-ad8c-4e607536749e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc30bf3-214e-42cf-b999-6fdccd18deb6", "sighting_of_ref": "indicator--021545b2-68ef-4fbd-9788-ccaa9aecb373", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dac1c51-eae1-46aa-98b1-47c8332cc958", "sighting_of_ref": "indicator--a4dbb77e-a532-4373-b7e9-b7bcd4d11135", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f320d6-93a8-4d03-a010-0a8f79d6ada7", "sighting_of_ref": "indicator--d6269aa8-2498-4778-bcdb-66b24f131951", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d68578-a2a0-4008-a237-0007db9869a0", "sighting_of_ref": "indicator--8b97b1f7-d849-412c-a858-86ec854d9d61", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5140b390-f57e-42c1-8f5b-d853b944a7eb", "sighting_of_ref": "indicator--417f9a39-83ac-4e6f-b846-32118856a74c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabd6a1e-8de8-40cf-987e-38b2c5cd6262", "sighting_of_ref": "indicator--25953ff5-7df6-40c1-97c3-7f77bb7d9adc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77920ded-54fd-482c-be15-b188007597db", "sighting_of_ref": "indicator--331b694f-80e2-4cec-a304-ea4630fbd80f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ee9c06-388a-420c-b8af-4dea02b3f6bc", "sighting_of_ref": "indicator--fd146865-e695-4c9d-afcf-7e6172f59243", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39217ced-ccff-4f2e-83d7-475ceb3a6303", "sighting_of_ref": "indicator--da32e032-63de-4d36-b589-e6ad034b184b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4209e89c-b8d5-405e-9207-d15cb2e04d9f", "sighting_of_ref": "indicator--ab6b84f4-0d98-4449-a364-bcff9e8a8fe9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccced6c-a10f-4c3e-b45b-f22d3eb16890", "sighting_of_ref": "indicator--fe6c4999-88d8-4961-a9f3-0e44db8ac9a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed1000d-de66-458d-a27a-714fc2c85be8", "sighting_of_ref": "indicator--04100a43-d7c0-4f69-8f91-f040484708ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0011dd86-a4a8-4037-a924-a02e5ae78c2d", "sighting_of_ref": "indicator--5fa88dd7-2ba6-496d-953a-515ae1e45e6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffdc9d5-59e3-482e-8ad4-bee441ae1938", "sighting_of_ref": "indicator--54182a58-2ae2-4e8b-86f3-072a9ad3527b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f40a36-1b32-4d33-9884-57897a22ff46", "sighting_of_ref": "indicator--6b51b56c-86c9-450c-ac2f-45622ed64c13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b12e58a-29cd-4736-af6c-2bb0b35e87d9", "sighting_of_ref": "indicator--c982788a-564d-4913-9023-f1629052d4f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a46fc8-557e-43c8-9682-8a7a98593828", "sighting_of_ref": "indicator--7c36fbf0-3190-4f3e-9908-10189a6852a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7fece3-e4e5-4ebe-a1ac-de349fff6473", "sighting_of_ref": "indicator--14366c13-95de-43ea-8fb9-15c4ba15192e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c6ea0e-1919-4d09-8cc4-9a38226cefba", "sighting_of_ref": "indicator--9124efc6-4eb3-419e-9992-702e0d093ba6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57508862-86bc-4bc0-9a58-bceb15347029", "sighting_of_ref": "indicator--3f2a05ab-036a-4cff-9954-e5818ef41d1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9c0d6b-3571-4052-8fd7-4b45f9a8e984", "sighting_of_ref": "indicator--82deac81-1b7a-498e-afb7-beb380159d66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc60778e-f375-43e2-bcb5-40152e6a5225", "sighting_of_ref": "indicator--19b0a997-51d8-40a7-b922-68a9c2a22cb5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c54daa-cd78-4fa7-917d-285ef244890b", "sighting_of_ref": "indicator--b3fda2ef-b1e2-460d-bb6c-5ba96a441db2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac719844-98f0-4af2-8ba0-0b6078a9aeb1", "sighting_of_ref": "indicator--37910608-0a0a-4605-9077-33150599a24d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6caf1c29-5755-408d-b4bc-060d8e9e2ba4", "sighting_of_ref": "indicator--8f8f4324-2692-401d-ada0-6569b11993eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e385939b-f4da-491e-9303-d8843f3d04b5", "sighting_of_ref": "indicator--73e562a5-4bc6-4669-ad12-7cf7aa482c89", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acb7b31-a4c2-48d7-8ff4-25c56d77fd91", "sighting_of_ref": "indicator--c1ae75a4-de47-43f4-857b-a08e74f991ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9deac8-4af7-4dc1-b285-16be80901568", "sighting_of_ref": "indicator--583caac6-1b9a-44ba-9718-35959b7b6f0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782e1faa-9070-452c-b29a-6af1a8f7f5a9", "sighting_of_ref": "indicator--d7c79b9f-abe2-4ac4-b247-8718570ecad7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef040093-2385-4ae0-8a04-ddec9f5ec169", "sighting_of_ref": "indicator--c5d3d84e-ea28-463e-95dd-3fa6932937c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f8df19-5255-4919-b0a1-83479727f7f3", "sighting_of_ref": "indicator--e859d386-2de4-4367-ab91-f382c2be839e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a915d42-3fb6-4994-88dd-e926b1c97b9a", "sighting_of_ref": "indicator--08437c3e-7527-40c0-96f4-a3ff07735a9c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53fb2ef-f2b5-4c91-b806-805212516a36", "sighting_of_ref": "indicator--08437c3e-7527-40c0-96f4-a3ff07735a9c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf6cbd5-d493-46ed-b0f6-680901e26da6", "sighting_of_ref": "indicator--80dca7ac-89aa-4b26-b317-53fe57714626", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7622f79c-67dc-44fd-96c3-e84353eb326c", "sighting_of_ref": "indicator--c5cf2ae4-0100-4bfc-bf97-f68ebbc75004", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c381bc1f-a256-4e24-b930-c71ac91c6efe", "sighting_of_ref": "indicator--c5cf2ae4-0100-4bfc-bf97-f68ebbc75004", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4dcbf4a-eb1f-44d1-825c-ba7041014fbc", "sighting_of_ref": "indicator--2e082214-7dc8-4d67-ba8e-808864ea852c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d19db6-6daa-453b-bf0f-3055ab31b79e", "sighting_of_ref": "indicator--2e082214-7dc8-4d67-ba8e-808864ea852c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9da6e1a-7891-4d5f-9e9b-ddd4853d02c0", "sighting_of_ref": "indicator--add86fa5-6e32-4caf-bd77-2f634563f7be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee96c480-082c-4315-9f7f-e2c4e26cc001", "sighting_of_ref": "indicator--48f3d44c-4f26-4e82-bd91-920b5e5382e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3008f77-69b1-4779-b612-93338b83c91d", "sighting_of_ref": "indicator--46b3baaa-62ab-42ed-8332-b715aa19e1bb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efd6d50-c0be-40e1-a58a-a519d7cab8d4", "sighting_of_ref": "indicator--46b3baaa-62ab-42ed-8332-b715aa19e1bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2f7901-1513-4ab3-afe1-46c248c6c645", "sighting_of_ref": "indicator--46b3baaa-62ab-42ed-8332-b715aa19e1bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6a614a-c6ff-4c08-9a34-30fd52747bee", "sighting_of_ref": "indicator--052f44c3-b686-4292-8252-e15b3322ae1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f019929-ac34-45f8-8e5a-23ce5737ef96", "sighting_of_ref": "indicator--9df7d82d-0d04-4c21-8f93-416b6cc2fb0d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cfc3fb-5bd2-4b5d-802a-c371291eb83a", "sighting_of_ref": "indicator--2d070349-f8b8-42ec-a778-15abc3381ba8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98046e6f-17f2-4a28-9695-c194a536b4e1", "sighting_of_ref": "indicator--bc35676e-2e09-4c57-a7a1-db388a7dfd8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c77f479-8bac-486d-a662-f743583d0fde", "sighting_of_ref": "indicator--bc35676e-2e09-4c57-a7a1-db388a7dfd8f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96306d0a-ed23-48a8-9c69-381253677772", "sighting_of_ref": "indicator--77469921-cd28-4ee7-b1f2-7987cddfa2e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b8ee6c-55fe-4a23-81e1-0a5e0695d3b0", "sighting_of_ref": "indicator--77469921-cd28-4ee7-b1f2-7987cddfa2e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bde7400-4ecc-4c6d-b475-fac6f9c63856", "sighting_of_ref": "indicator--d59a935c-839f-4770-9f5e-042658774e7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba23ba5b-2807-4a2a-9e58-94c17abec607", "sighting_of_ref": "indicator--d59a935c-839f-4770-9f5e-042658774e7f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c18648-c60f-44db-9c01-e90d928fbb28", "sighting_of_ref": "indicator--d59a935c-839f-4770-9f5e-042658774e7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f653fa60-1584-46dc-b380-3fffc8d02d09", "sighting_of_ref": "indicator--5021db52-5fa2-40ca-a94b-7c4212856632", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55915ace-3af3-48a8-918f-e35cdf238276", "sighting_of_ref": "indicator--e9e163e0-f225-4fcc-b60d-f0fb85306793", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695951da-7973-441b-b174-f2e625c5d0ef", "sighting_of_ref": "indicator--553da46a-c91f-4276-95bb-af4584a5c6a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ecce88-605d-4fe7-a1f3-0f87330790ee", "sighting_of_ref": "indicator--a923f7ca-24a5-4606-84ff-dea91608a8d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bb41cf-2304-4791-aeeb-989632e8ad18", "sighting_of_ref": "indicator--793e6eb3-43eb-4ad7-8014-292cc83a19a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df908fb-dc80-4a83-9b1a-956423069367", "sighting_of_ref": "indicator--8a8e45d3-cc6a-4062-9399-f41fca680181", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba849d79-8cb7-47f3-b5b1-4588b8ba9992", "sighting_of_ref": "indicator--8a8e45d3-cc6a-4062-9399-f41fca680181", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeb1dd3-b76a-4632-96f3-bd5ac1a2e8d4", "sighting_of_ref": "indicator--03236b46-9108-47cb-9cc5-59c8b51b80a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99c0843-643e-4924-8ad1-189ccca30775", "sighting_of_ref": "indicator--8010f448-da3d-4ef3-9da9-f264dcda9a0a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78267479-5f27-415e-96e7-971dccba8e82", "sighting_of_ref": "indicator--9f87b88c-d80d-458e-a027-afa4ced07bde", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4268000-a5a1-4ad5-bad9-87023f82bd23", "sighting_of_ref": "indicator--d61d151c-5692-4ac5-9f9e-b05cdb4d6b27", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8368a636-acd7-474d-be26-4e7735f84559", "sighting_of_ref": "indicator--d61d151c-5692-4ac5-9f9e-b05cdb4d6b27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8390100b-0e24-4b65-9b90-7e030059e1df", "sighting_of_ref": "indicator--ff778afe-580d-4daa-86b1-3f180993b965", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ebfc42-e1cd-4e3f-8352-f7d852d7ecaa", "sighting_of_ref": "indicator--e8800453-3a8b-4905-b4be-72031ce01891", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3babaf36-89a9-499f-87f1-9ee6cc6604e8", "sighting_of_ref": "indicator--81eeeaf7-d80a-495a-b016-da7c36e7f73a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f17095-2bea-44de-863d-c5d006f4e012", "sighting_of_ref": "indicator--81eeeaf7-d80a-495a-b016-da7c36e7f73a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e29ab1-605f-44f6-a0cf-11c2650a4263", "sighting_of_ref": "indicator--d4f6595b-53f4-47df-82a1-cba4e21d4029", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634a4b8b-8784-4062-b868-1b7c62f5e25f", "sighting_of_ref": "indicator--a0bc1dbc-4f79-4df3-9f40-225f404bca83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d8c6c7-55dd-4dc7-97ee-e6b7136bc93b", "sighting_of_ref": "indicator--a0bc1dbc-4f79-4df3-9f40-225f404bca83", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3968dfcc-d478-475c-bd5e-5cb7a45cfc13", "sighting_of_ref": "indicator--a0bc1dbc-4f79-4df3-9f40-225f404bca83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d91e3e-586b-468f-a986-87f63c358766", "sighting_of_ref": "indicator--b5f20bdd-4b78-4e61-b0b2-22dc11c90fdd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c480b17-88ce-4269-b279-c21b7ff1de53", "sighting_of_ref": "indicator--b5f20bdd-4b78-4e61-b0b2-22dc11c90fdd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967cb726-d011-4715-8013-da043dad6cf1", "sighting_of_ref": "indicator--5db4182d-cfaa-465e-b396-6961e3cbacb1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f39e4b-7cea-4a37-8158-fea568f012e8", "sighting_of_ref": "indicator--0bb9db27-7355-443c-bdd7-8d964235e32b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dee5e4-1a8c-41bc-a7a4-75a99c967599", "sighting_of_ref": "indicator--c7b601ca-f6d9-4cee-bad7-61150274a5e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738d8120-b5e7-43ad-b95e-c63e17159ab4", "sighting_of_ref": "indicator--c7b601ca-f6d9-4cee-bad7-61150274a5e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad88241e-6802-4043-902e-068ea980996b", "sighting_of_ref": "indicator--27f8bd28-3c46-44a4-98bc-2636d7c3a6b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3692de-d34a-4f56-9acc-163465998010", "sighting_of_ref": "indicator--27f8bd28-3c46-44a4-98bc-2636d7c3a6b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bece76-05d9-4d0b-904d-ec1cd629a215", "sighting_of_ref": "indicator--625613f3-f58d-4a43-a05a-59507440ac25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af3b45e-dccc-44ef-8299-a005a88c522e", "sighting_of_ref": "indicator--3ec95833-cecb-4465-bca0-402b8ac0721e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451dbb91-0869-47b6-8557-19bbdaf4f7e4", "sighting_of_ref": "indicator--3ec95833-cecb-4465-bca0-402b8ac0721e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed99bd4b-d195-40d7-b579-e2714192cf60", "sighting_of_ref": "indicator--49ebe37b-acd3-4092-9a0e-e9e5919a4ae6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bf5204-200a-491c-bd8c-957c04672ad9", "sighting_of_ref": "indicator--dda69409-0ef8-407d-8450-a8856d916dd1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12224339-348d-4116-88ca-1eb388685c15", "sighting_of_ref": "indicator--6a53c455-9010-41dd-8a41-e8419e9a9361", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b272a9aa-197b-4722-a620-56324ce4aadf", "sighting_of_ref": "indicator--6a53c455-9010-41dd-8a41-e8419e9a9361", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8656a42-df15-476c-95ec-dea47f0de54c", "sighting_of_ref": "indicator--2c7841e2-bcd6-43ba-a7b1-d96192876575", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4237469f-860c-4735-b1fc-207129cf5c52", "sighting_of_ref": "indicator--6d85f4c4-cb7f-4ac8-a355-ed34ec3e318f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3134dd7e-e00d-480a-a51b-976a0baca131", "sighting_of_ref": "indicator--3b4716ea-2bb3-4763-a83d-0a0a53ccdeb2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada66d38-ec19-47ec-809c-378e740f3e68", "sighting_of_ref": "indicator--d2ef1dc3-5466-49ac-8331-e05483ac3494", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5268e224-f266-4682-83e6-cb0f31c6fc9c", "sighting_of_ref": "indicator--d9768c00-46c0-49da-8050-9bdd09742542", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f776582b-e5a1-428a-8d19-7bc46de8bbba", "sighting_of_ref": "indicator--3d010762-429c-44bf-8777-f6a83708c3ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad47b834-4dc8-4bce-83a1-a31570e5747b", "sighting_of_ref": "indicator--b21ca754-d35a-41d6-8010-0c1af1295b54", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc36266c-01a3-4c76-8066-6f050e5fd006", "sighting_of_ref": "indicator--b21ca754-d35a-41d6-8010-0c1af1295b54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79922378-272b-4afc-904c-b7bdd75e9233", "sighting_of_ref": "indicator--61b00d2b-631e-46b0-a396-6d244d9c007e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c14c02b-060a-4eda-8cda-e9f82fd17842", "sighting_of_ref": "indicator--61b00d2b-631e-46b0-a396-6d244d9c007e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49798739-cffc-4318-856a-8960f463f9c2", "sighting_of_ref": "indicator--61b00d2b-631e-46b0-a396-6d244d9c007e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e549a410-a13d-4236-8876-a04723a79fd7", "sighting_of_ref": "indicator--21bbb99b-4f54-4b10-a98c-86afa5d99e84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a3e968-a896-4cc9-92f9-c61737ce5990", "sighting_of_ref": "indicator--21bbb99b-4f54-4b10-a98c-86afa5d99e84", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f760b7c6-87a7-43fe-b5ef-58521b066e67", "sighting_of_ref": "indicator--21bbb99b-4f54-4b10-a98c-86afa5d99e84", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b18197-62b7-4e61-81f8-11deda417683", "sighting_of_ref": "indicator--4418a075-99d8-468c-9ebd-f4ff22b8f44e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7964d6ed-67b2-46fb-8c1e-ce7bd493220f", "sighting_of_ref": "indicator--4418a075-99d8-468c-9ebd-f4ff22b8f44e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ce423b-2b9e-492a-86cb-c796009b6644", "sighting_of_ref": "indicator--4418a075-99d8-468c-9ebd-f4ff22b8f44e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176032e0-0263-418c-90d9-2511b20ca481", "sighting_of_ref": "indicator--f6342c94-0689-4102-b174-9dd5d6ce7548", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27cee7f-7879-4e49-98cf-e18581068ed0", "sighting_of_ref": "indicator--f6342c94-0689-4102-b174-9dd5d6ce7548", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48441b4-886a-4784-90fb-5a7d2d993558", "sighting_of_ref": "indicator--437c0d2e-ae97-4b2e-baca-35c5db98c5fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def61141-17bb-4b16-acbe-99206ecb4534", "sighting_of_ref": "indicator--a554c14b-e5dc-4724-8f44-6d4452de99c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab992c4b-2e0f-40bc-b042-f2913538f642", "sighting_of_ref": "indicator--5ea2217d-478e-4910-806d-600dc3abc969", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6fa49a-eadc-4e2f-ab63-c868f1a4b3ce", "sighting_of_ref": "indicator--5ea2217d-478e-4910-806d-600dc3abc969", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8fedfb-7d34-4df2-aa3a-9541800f7c97", "sighting_of_ref": "indicator--431406e1-cf4a-4de2-a895-c38e68b1ab2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d257da28-4264-43b4-bc6b-62224940eed1", "sighting_of_ref": "indicator--419ef0e2-0219-470f-ad54-a528d78a0972", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a083845-5bf0-446c-81ce-519f8b834ed2", "sighting_of_ref": "indicator--6e9401d2-87e2-4b2b-b5e9-8de714d0df36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d8bb42-320f-45ae-ae2d-4ef1ccc19a95", "sighting_of_ref": "indicator--ab8d2fb4-7104-48d4-9f1b-d35a1d5ecf22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5dd464-d285-4b56-984b-7845dcaa05bc", "sighting_of_ref": "indicator--4b36b6ab-6533-4935-8e7b-41c7c4a05801", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfcf7d5-e0ae-4a02-9d92-6c805312ee61", "sighting_of_ref": "indicator--4e803820-74bb-40f0-9bf7-4817d2cb2733", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d392e4-9d9f-4a09-b6c7-0bdc84298336", "sighting_of_ref": "indicator--54a32d41-54cf-4918-b25c-b2ae44de0b58", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028963e0-942e-4cc2-8e62-f6e8df971965", "sighting_of_ref": "indicator--54a32d41-54cf-4918-b25c-b2ae44de0b58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af43c07-3697-4d32-ad75-61db6967254e", "sighting_of_ref": "indicator--c194e3db-01ee-4c63-bc06-a58d27a409b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b564ef-e8f9-43ce-8a95-7fac59eea73d", "sighting_of_ref": "indicator--3de64a89-e2e5-4da8-ba48-391340e91952", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f2280a-dd01-4978-a267-07ff258631ef", "sighting_of_ref": "indicator--1561c602-f0c2-4a29-8694-9109bf155ca4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89da2efd-b76f-4d00-9209-4415a561c2bb", "sighting_of_ref": "indicator--8cf6df95-3213-43e0-aea6-a71248441439", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a6bc08-de72-43ed-9825-cf85e9107e68", "sighting_of_ref": "indicator--8cf6df95-3213-43e0-aea6-a71248441439", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d79de83-b039-4d06-8087-fa31f595ee33", "sighting_of_ref": "indicator--ec8f7d9a-c1ca-4c35-8c8d-fd1eeaad6e27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5af4251-d7a9-45a2-8001-5a111959b043", "sighting_of_ref": "indicator--ec8f7d9a-c1ca-4c35-8c8d-fd1eeaad6e27", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59a36e6-5ec6-4df7-a181-10741f9dd5f7", "sighting_of_ref": "indicator--719b94ed-10e7-4908-8361-7a5430d18b43", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d07119-f7b5-48c6-96de-38a9c709ecc3", "sighting_of_ref": "indicator--58d53edc-c7f2-4297-9d45-5ab8db0e217b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f1cd31-9763-422c-9213-62dab5baf449", "sighting_of_ref": "indicator--370ea772-ffd0-4ef1-8fd4-6ec951d7d010", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaf37cc-e84d-4266-8296-5152a87859a3", "sighting_of_ref": "indicator--b85db31f-6334-4623-b507-94639f35bd41", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fd7ddd-86f4-4a5e-b6c0-3129755be241", "sighting_of_ref": "indicator--6b280ca2-a030-4ce8-b9b1-2333addbbe9f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d89ce8-3529-4a33-a226-2b3a7204d2b2", "sighting_of_ref": "indicator--41d22b4b-770f-4919-beb5-cf95071d71fc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c77fcff-a92d-4a2e-b5e6-9e73ec4377b1", "sighting_of_ref": "indicator--785a2248-a141-49e3-8fdd-ad7d2287aaaa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53dccf9-6736-43b0-ba71-bac1c1d53749", "sighting_of_ref": "indicator--8bcd7269-df93-4d1d-9909-99206e4f5647", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e93988a-1bb0-4ff3-9ec9-47137f688162", "sighting_of_ref": "indicator--08045bba-bf73-412f-94a5-b5dd6a6d0296", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eaf73bf-218f-4763-914d-b8f22a97b42a", "sighting_of_ref": "indicator--194d91c1-449a-4ede-acc6-15c486683880", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44292554-5597-49c3-8bb4-df0de4f66fad", "sighting_of_ref": "indicator--194d91c1-449a-4ede-acc6-15c486683880", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adeefe68-d043-4167-adda-aac953bf6f4f", "sighting_of_ref": "indicator--0175e00d-10b9-446b-9696-c7198ed00f7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c21675-2d45-425c-83f3-40b0bf820ced", "sighting_of_ref": "indicator--ee13a3c5-9dff-4601-9f6f-9dd11e13892c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c60235c-cea6-41c9-8740-3da1b350fd7d", "sighting_of_ref": "indicator--6926d07f-38cb-48f1-b0ad-5454e1acc061", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae3b1d9-16a0-4f39-a5e3-fd926d2838e1", "sighting_of_ref": "indicator--bb0b7e9e-f73f-4e22-963a-2e49a135bb16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb4c243-f09d-441d-8af2-36f3f08bddde", "sighting_of_ref": "indicator--de5c5a22-d930-4b9f-88c9-1a02cafa41fc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098d1ac3-87d9-437f-a4b8-1689c6084a52", "sighting_of_ref": "indicator--4c24140d-bbe2-44c9-8b2e-7a3143f88e13", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661cd433-dc49-4ea1-9e37-dd5b9b4bd444", "sighting_of_ref": "indicator--600f06a1-d629-4c87-a0a7-1c3e80d9cc8c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e291320-333b-47fe-bf4e-9e10ac83bfb1", "sighting_of_ref": "indicator--153192e5-6971-4c96-a49e-466a35b1686d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e14508-8311-4dbb-b2dd-f8460c23ddf9", "sighting_of_ref": "indicator--6cebbaf8-ee5d-4d21-a9df-e3d3ec01c68f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691b1f86-8f80-4362-a68f-972e85336b53", "sighting_of_ref": "indicator--a4853a42-9e4e-43ac-8775-b39de6afca65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab4b2f3-565e-434c-b27d-d93354157f09", "sighting_of_ref": "indicator--b2b465dc-903e-4fd0-a6ba-efec1895e772", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe36fc77-87cc-41cc-a816-079d3eb37d5a", "sighting_of_ref": "indicator--eeb90955-182e-40d0-9c42-34020025cf58", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857a6172-712d-423c-900d-a7f486f7d0e4", "sighting_of_ref": "indicator--c2f92045-9810-4912-ad7a-af583508547e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bcb578-38d0-42a5-8864-2bd45dbb4b49", "sighting_of_ref": "indicator--f92663d9-be43-4210-8869-085b849bfe9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34718bd-036f-474d-ae02-3a7e0b02d5fa", "sighting_of_ref": "indicator--7e49ec69-520d-4710-97a3-babb93201fb2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaec6ace-537c-4f54-a607-cdf7a86523ea", "sighting_of_ref": "indicator--7e49ec69-520d-4710-97a3-babb93201fb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9629b5-1223-4b5f-9df5-4659063e36e2", "sighting_of_ref": "indicator--277291c3-a2ee-4344-877a-731082f73eb1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c52b32-67c2-496e-92d6-7ce91fea7bc5", "sighting_of_ref": "indicator--c05271b1-6a4d-4733-ad2f-a1f13ef88f70", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6586807c-cc1b-4acb-b92b-33b5f2e1f9af", "sighting_of_ref": "indicator--a1e593ee-6084-4ccb-9163-bb0e75d19aed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87849eb0-6b59-40b6-b11b-5773bb6d7238", "sighting_of_ref": "indicator--e9d23703-7960-4650-9ccd-695879dea77b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3884b095-a351-4fc6-a41a-a3f11478a550", "sighting_of_ref": "indicator--80f8d6b7-ce4f-4d1b-a187-5c8237a62192", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c997dd64-6b0e-4375-8f56-a84d0374ca05", "sighting_of_ref": "indicator--80f8d6b7-ce4f-4d1b-a187-5c8237a62192", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d441467-2042-4970-b34d-61ea5cd01581", "sighting_of_ref": "indicator--09452309-8160-472a-bd74-a9d352da97e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0295d78-0565-4899-91ba-6496eb86ce90", "sighting_of_ref": "indicator--09452309-8160-472a-bd74-a9d352da97e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5912319-fea7-492c-83f6-7d34947ce994", "sighting_of_ref": "indicator--08343b44-ec9f-4d4e-bad3-eb047cc0b9c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa07b93-5ffd-4206-b23e-da13bb8a1d8f", "sighting_of_ref": "indicator--bb98927b-6518-4a7f-9fca-fbc82de871da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27810fa-a993-47c8-873d-10004c8d92f6", "sighting_of_ref": "indicator--bb98927b-6518-4a7f-9fca-fbc82de871da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cc849f-29e6-43af-988f-a9504141ef56", "sighting_of_ref": "indicator--ce98de48-a1ba-4a93-ac58-f47d56b73385", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f10c10-5769-43fb-8cc0-49129f34ca69", "sighting_of_ref": "indicator--50c0f86a-b40a-4853-8522-b52be544d46d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d24d5a4-4f46-4a86-803c-fcae00da63e9", "sighting_of_ref": "indicator--71ff480d-d4f4-447b-ad42-10b3e3e4695c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c63eef-e7cc-4ca0-a742-f11636c3afb4", "sighting_of_ref": "indicator--71ff480d-d4f4-447b-ad42-10b3e3e4695c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd45a0e-586f-49fe-833b-6113799cb21b", "sighting_of_ref": "indicator--71ff480d-d4f4-447b-ad42-10b3e3e4695c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd54eba-9663-43c1-bae5-d07054478899", "sighting_of_ref": "indicator--a0716351-13b1-4888-a480-02d28190b6c5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d33c747-be9a-4015-b13b-c8735d54bb09", "sighting_of_ref": "indicator--72057cd1-d635-4f24-beb4-39eb466c063e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a57bb6-79f1-4756-af76-cb0af7544cf5", "sighting_of_ref": "indicator--26e2e016-f875-4731-a502-503260ea81d4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca966b59-0a76-4e67-9702-113a5c86a88d", "sighting_of_ref": "indicator--c7611494-4dc8-4a1b-bd1e-363446d93804", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc28ed53-c3e7-43f5-ae23-502b568c68a9", "sighting_of_ref": "indicator--c7611494-4dc8-4a1b-bd1e-363446d93804", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42468c3b-e068-4afd-90b6-ebc3d81e5150", "sighting_of_ref": "indicator--c7611494-4dc8-4a1b-bd1e-363446d93804", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fdb8fd-107d-43ba-83cf-00aba41ea916", "sighting_of_ref": "indicator--9e57029d-8cc8-4530-8efb-cbe39b1997bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc4cfda-4e69-4fb3-bb44-b83103677dfb", "sighting_of_ref": "indicator--9e57029d-8cc8-4530-8efb-cbe39b1997bf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814745d7-c263-492b-b766-10957f21b490", "sighting_of_ref": "indicator--99dee922-b506-45e3-b61c-ec454bcd5075", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d977879-798f-470f-ac31-20d3e599a98c", "sighting_of_ref": "indicator--502d422d-588a-40ab-b511-ee5aea435dfc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb657de-f866-46a9-9b1c-ef55ab46128b", "sighting_of_ref": "indicator--502d422d-588a-40ab-b511-ee5aea435dfc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63c3aaa-6e08-43a5-911b-783492740b4d", "sighting_of_ref": "indicator--502d422d-588a-40ab-b511-ee5aea435dfc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b035a729-3ef6-4068-8ef0-7c0684567536", "sighting_of_ref": "indicator--b11ffbed-35f2-4033-96d3-99574c8355fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df864b0-8d6b-489d-bf99-7ec2a8ce9f3e", "sighting_of_ref": "indicator--b11ffbed-35f2-4033-96d3-99574c8355fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6e1732-74f6-41b4-a959-9130165b0593", "sighting_of_ref": "indicator--b11ffbed-35f2-4033-96d3-99574c8355fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90efd130-e128-4042-8f65-371b0f7fda03", "sighting_of_ref": "indicator--7403e34d-4b25-4de0-b45b-fd63e06b4a48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3939080d-cc09-44ca-8207-f7ea32a0337c", "sighting_of_ref": "indicator--d63d22b9-8729-4279-97cc-d5794efe3321", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eca3c59-56e6-4f6d-8495-762d1ebf7a5d", "sighting_of_ref": "indicator--0cb051a3-0b20-4ffc-9902-7ade196a4937", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f124a1-0239-47aa-a6a0-41170d1c5fa5", "sighting_of_ref": "indicator--0977649d-d785-4958-ab87-535914ba2e50", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c94f9be-8485-4693-a8e3-399309d85a79", "sighting_of_ref": "indicator--8800977a-2e12-4d5f-b132-be34231de9fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3124543c-94c4-4971-a0b3-88a37d070386", "sighting_of_ref": "indicator--8800977a-2e12-4d5f-b132-be34231de9fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340f8463-2b0a-4a59-8799-e665bfb66b8c", "sighting_of_ref": "indicator--7676b954-0a2b-4390-b574-dddc41096745", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04a2ad2-4d71-48b4-bde6-914945a10f5b", "sighting_of_ref": "indicator--61488ca1-5799-4d66-a286-e3800d7f2d76", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb0117d-7e2f-4ecf-bfc1-603ab40ef7e1", "sighting_of_ref": "indicator--688251a1-52d4-49b5-897e-993a5fb8cf27", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08eb036a-421c-46a3-bc73-04d75254f06a", "sighting_of_ref": "indicator--688251a1-52d4-49b5-897e-993a5fb8cf27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fc967b-4ef7-45ea-823c-38ccf11ad7c1", "sighting_of_ref": "indicator--85f03683-04d2-4e5a-b81a-76196cb16995", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268c4e5a-e662-41a6-94d9-39ca1b59a44c", "sighting_of_ref": "indicator--85f03683-04d2-4e5a-b81a-76196cb16995", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d32f1a5-7f72-4d21-b525-0cbec1419714", "sighting_of_ref": "indicator--85f03683-04d2-4e5a-b81a-76196cb16995", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9314d7d4-f374-494d-bcdd-0bad0e7d7669", "sighting_of_ref": "indicator--1dbe1f03-342a-4bc0-bf64-cbdea78f18db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a385d4d0-c4b2-4c02-9fd6-5d82f762d9e4", "sighting_of_ref": "indicator--1dbe1f03-342a-4bc0-bf64-cbdea78f18db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc3a84c-ad03-4b59-987d-32e777b887c3", "sighting_of_ref": "indicator--c446362e-9688-4c2d-9146-f6c4adaaf3b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c95a77-4502-4370-940f-e551a13426d4", "sighting_of_ref": "indicator--311c328c-7dfc-4e2d-b64a-9e727ee86093", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6b6d49-86a2-4d26-92cc-0068ae901891", "sighting_of_ref": "indicator--5e279f7c-991d-4ac9-ac7b-d085da2f0890", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5badd04c-a3ed-4e6b-988b-b1101ce108d2", "sighting_of_ref": "indicator--5e279f7c-991d-4ac9-ac7b-d085da2f0890", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb773874-69f0-4ca1-bd72-c3c238ad1803", "sighting_of_ref": "indicator--5e279f7c-991d-4ac9-ac7b-d085da2f0890", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30540000-7232-4ff5-8c46-794269da868e", "sighting_of_ref": "indicator--01fd496a-199b-4307-b890-161eae51c622", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39392886-03fb-4742-a64b-8ef7b544d7fa", "sighting_of_ref": "indicator--01fd496a-199b-4307-b890-161eae51c622", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34281f3-77b6-4829-8df3-1271afa8456d", "sighting_of_ref": "indicator--01fd496a-199b-4307-b890-161eae51c622", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5156bc-0555-4e6e-9dcb-fcbab40d70c5", "sighting_of_ref": "indicator--180435fd-8064-43a2-88a9-16e7405504fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fb72f8-0399-401e-ab0e-8a6a7f6511b4", "sighting_of_ref": "indicator--64749ad1-5a8b-44f8-a204-59d124909538", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5eb12e-a29b-4918-b076-7bff30c6078f", "sighting_of_ref": "indicator--7f0818b5-a932-433f-8cdc-88a8aa4f4230", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6015d3e5-3eb1-4e8f-8775-8cd8f0413551", "sighting_of_ref": "indicator--f47e642c-80c2-46b7-aa7c-5ec0082658cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3a000f-2aa5-47f3-b2ff-660ffb214c87", "sighting_of_ref": "indicator--f47e642c-80c2-46b7-aa7c-5ec0082658cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c274dd2-9b9d-4b11-a1cd-fcc829e16dfc", "sighting_of_ref": "indicator--6bad8e1d-b032-49f0-adca-8d0265eda744", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee077b9-4442-4871-bbb7-5c214b3da036", "sighting_of_ref": "indicator--fd377142-230c-4682-8776-4e965a0212b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8160b70e-4c8f-422d-aa77-2be9d5c30120", "sighting_of_ref": "indicator--677e2461-04f7-447d-8bf4-62f4b44778f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aeabc3-3d15-41ee-bb6a-46f48af53ffc", "sighting_of_ref": "indicator--677e2461-04f7-447d-8bf4-62f4b44778f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5036c37d-92a6-4fce-92e3-456b4c0c2113", "sighting_of_ref": "indicator--5ddaa732-7b78-40e2-8e00-0d256de6612c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e326b3-e6b0-439d-9660-ebd78d207fa4", "sighting_of_ref": "indicator--c2a049cb-d88d-44b0-9978-98e15695f65d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e749a53-784c-4f17-b26d-9b8009a9647a", "sighting_of_ref": "indicator--c2a049cb-d88d-44b0-9978-98e15695f65d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f613f6-b792-4641-82d5-6aa657412f0b", "sighting_of_ref": "indicator--505011b9-5bae-4e4c-98ad-fa9116e59bb6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1551582d-c4dc-4b22-996d-33096f12baf0", "sighting_of_ref": "indicator--b44ebf9a-a43c-4d34-835f-410bf7b41db2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc416404-6e67-4427-98d1-2fd1108db36e", "sighting_of_ref": "indicator--b44ebf9a-a43c-4d34-835f-410bf7b41db2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4287fb-0360-48bf-8174-50805c56d32d", "sighting_of_ref": "indicator--b44ebf9a-a43c-4d34-835f-410bf7b41db2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a920a1e8-cdd4-424a-be11-22b77ddb46e8", "sighting_of_ref": "indicator--7bd17a52-1738-4cae-a4f9-5da9d5183c3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2dd58d-1f62-4d8c-afa4-05ee6a5f4764", "sighting_of_ref": "indicator--48cac907-24b8-4213-9cd5-a6dc30998556", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4065f7-aef0-40f1-9385-472e7952b33f", "sighting_of_ref": "indicator--48cac907-24b8-4213-9cd5-a6dc30998556", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a369b6-c5ff-4d8a-8cc4-8732328bdc0d", "sighting_of_ref": "indicator--3dcce028-e0ea-4047-8498-d534423fa6a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f42b157-bc32-49a7-a452-a598bccba7e9", "sighting_of_ref": "indicator--3dcce028-e0ea-4047-8498-d534423fa6a4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c796869-9fb3-465f-8aad-5e6a6b719e20", "sighting_of_ref": "indicator--3dcce028-e0ea-4047-8498-d534423fa6a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197c74a4-72c7-47d9-8516-ae04a19dc63b", "sighting_of_ref": "indicator--ae17334d-2808-4a85-a2b1-0b3d032823b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5fab20-3ce7-4802-8bfb-87dde3db650e", "sighting_of_ref": "indicator--afd35bd2-0247-4c3a-958b-f1a01144c335", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53399c0-9312-4281-a556-370e025ba7ee", "sighting_of_ref": "indicator--dfc5a311-417c-4e85-a80e-7a7ec98eacc0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4b1e3b-839b-4cc2-8e96-6cb8c7aa5238", "sighting_of_ref": "indicator--dfc5a311-417c-4e85-a80e-7a7ec98eacc0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ee10fa-dde8-452f-b7bc-64b7d81d0525", "sighting_of_ref": "indicator--f31b96d3-bef2-4506-94eb-a045e670b5b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e645200-f7ad-4d9c-8123-82d622f39023", "sighting_of_ref": "indicator--f31b96d3-bef2-4506-94eb-a045e670b5b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cf9a12-d97c-4745-8204-ffff68e6e435", "sighting_of_ref": "indicator--51308e8e-4fe9-4820-8c13-4a4ccb1aec28", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a586f5-00f1-47f0-a056-24caed31ce8a", "sighting_of_ref": "indicator--51308e8e-4fe9-4820-8c13-4a4ccb1aec28", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c210c5f-03ca-43e0-b202-29f94f10743e", "sighting_of_ref": "indicator--51308e8e-4fe9-4820-8c13-4a4ccb1aec28", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edcd2ba-8820-429c-9701-050c529a54b7", "sighting_of_ref": "indicator--e5ea8c94-8b40-4a61-9432-84e9611e6b07", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5177d9fc-7e3d-4112-898a-39dcd707bb53", "sighting_of_ref": "indicator--fc4e90d4-201b-4c55-96ab-319e612e7015", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc6b4e8-c52e-4607-8dc6-8e7bc76b7e92", "sighting_of_ref": "indicator--428f0cb6-8dfc-4493-bced-8544c2110b92", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baa2ddc-9fd0-4cb6-b47b-a3ed827ab828", "sighting_of_ref": "indicator--b1558c38-1f2a-4576-9a57-73c67badec68", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771c93b5-a9fb-4742-8321-6763e703d65f", "sighting_of_ref": "indicator--b1558c38-1f2a-4576-9a57-73c67badec68", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d23d60-746d-4b2a-a762-1e989795923f", "sighting_of_ref": "indicator--37bdbf1c-6cba-4aec-9629-3af99972a00f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f8a1d8-6a71-4e12-99d4-c79cdc49283a", "sighting_of_ref": "indicator--d7967af6-ef78-45eb-95bf-631974a0bf6b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e353c2a-a130-4405-a112-f312f727db3e", "sighting_of_ref": "indicator--d7967af6-ef78-45eb-95bf-631974a0bf6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc74ced6-aa46-4353-b341-80450c351a98", "sighting_of_ref": "indicator--4be2d112-7107-479d-8af1-e65916f5b6bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e0c0ba-8e96-4bc8-b380-f1c2b4d0659a", "sighting_of_ref": "indicator--25cb3b6d-eff5-4488-8fbd-7ca9400ea09a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acff877-f2e7-40b9-9f03-c7161529d1df", "sighting_of_ref": "indicator--b5ff8c5f-787a-4a7f-a440-e9561620842c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f9b357-94e6-4bf8-9a2d-fcff473eb584", "sighting_of_ref": "indicator--1075fd29-b2ef-45c0-a899-811c15a6fe3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441f249f-24ff-4bf0-8e30-1f9abc1e1258", "sighting_of_ref": "indicator--1075fd29-b2ef-45c0-a899-811c15a6fe3e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6748972a-0971-48c8-9182-3472f8c7d343", "sighting_of_ref": "indicator--c26bbc38-3f57-44c4-8bb9-a361114faa63", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6752f0-b26d-4366-8ab6-c0ada4d6a603", "sighting_of_ref": "indicator--ac8f697c-5505-4d50-9289-e98e42f9cdff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9661ed8-b6e0-4d47-a52e-bb1a084df4e8", "sighting_of_ref": "indicator--ac8f697c-5505-4d50-9289-e98e42f9cdff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689e2085-edda-493a-9b45-91d308cf5f16", "sighting_of_ref": "indicator--ac8f697c-5505-4d50-9289-e98e42f9cdff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97508797-d7fe-4a4e-ae78-1283f0741492", "sighting_of_ref": "indicator--e98a08ef-5765-41ae-809b-8e0cb41a7f1d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3365d1-edd3-41aa-a17c-b78367999675", "sighting_of_ref": "indicator--e98a08ef-5765-41ae-809b-8e0cb41a7f1d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7a4fd7-c5d0-4325-94d6-75b9d1ec7d46", "sighting_of_ref": "indicator--38001131-b379-4fdb-936d-7979db31bec8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9a6fd2-4e41-4a16-b29c-96a57b8c303f", "sighting_of_ref": "indicator--38001131-b379-4fdb-936d-7979db31bec8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6abd192-e488-45f2-bf41-046becb82cca", "sighting_of_ref": "indicator--38001131-b379-4fdb-936d-7979db31bec8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b98326b-298a-4bea-a664-456012e6b501", "sighting_of_ref": "indicator--7bdeb67e-c1cd-4ce9-8c66-b66a7d61043a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9cb9f0-30cc-4f71-8905-403270c95088", "sighting_of_ref": "indicator--7bdeb67e-c1cd-4ce9-8c66-b66a7d61043a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f58a07-cf0e-4996-ac51-d4c8a5ac1eb1", "sighting_of_ref": "indicator--0888cc54-a74e-4dbe-a328-b4d13a214747", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d195079-27d5-4f73-abd9-6dc38b5ba0cc", "sighting_of_ref": "indicator--15e4f536-1988-45e6-bf9e-15270adba45f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e6067f-185e-4eb7-b635-88d79c3655f1", "sighting_of_ref": "indicator--15e4f536-1988-45e6-bf9e-15270adba45f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452a205e-f1a4-4fbc-a511-562378fa0374", "sighting_of_ref": "indicator--315dfd03-bcea-4f06-ae17-b10e9fc4ddcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d567f8-a3b0-4458-b2f6-c84ba0973a16", "sighting_of_ref": "indicator--80841795-4590-41e6-b023-378253a4ee1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92401ba3-d0b2-4204-a1dd-ca156b86bc62", "sighting_of_ref": "indicator--c6786e79-699b-4416-90f8-caaaf5e61db5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584ab0a0-8e2e-437d-928c-ac1371067abf", "sighting_of_ref": "indicator--41e6fa55-b065-4b68-8180-28889b1b2f36", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9c81a9-72f4-475d-b54c-030423f8be59", "sighting_of_ref": "indicator--2387a3ed-9fc5-44e9-a6d6-03ddc11c8cb9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d621de1a-6fcf-4e69-957e-7d55f105aa54", "sighting_of_ref": "indicator--df135f34-c507-4b06-8e79-1c8d891f3b06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7468aa3a-aaee-48c6-90ad-85777daefff5", "sighting_of_ref": "indicator--97d5a330-b9a4-4c84-a09b-e562cd604b3a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac8cd66-d8ba-4da5-b636-841026e42d39", "sighting_of_ref": "indicator--0d0e6f88-965c-477b-8db8-9ab85c79682d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fa0918-821d-4362-95bd-708eb7a488f9", "sighting_of_ref": "indicator--357266cf-e79c-4903-bb9f-42f8aae61986", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5124bb-566b-409c-b7c8-9ac277ba89f7", "sighting_of_ref": "indicator--b0b1c568-0f18-4713-b61f-91be64abedff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76d330a-9b5b-46cd-b470-314c2d375ffe", "sighting_of_ref": "indicator--25ec88e4-ee12-404b-819c-fc4548568ae4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f78c2bd-d281-4949-852c-d24dd128ef0d", "sighting_of_ref": "indicator--88986c3c-c68c-46f8-907e-70c25cb67ae1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1822f16d-f169-4f97-994f-1b571e0b01d1", "sighting_of_ref": "indicator--afe740dc-b2f6-43f7-a5d3-8d908329a1cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aac4211-f279-47ac-94a2-30d6921a162f", "sighting_of_ref": "indicator--04048124-4179-4ea9-85d1-ff18a874ae77", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1869893-a7ab-4eed-80e1-a4b21ed4236e", "sighting_of_ref": "indicator--04048124-4179-4ea9-85d1-ff18a874ae77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f94640-98fd-4eab-a933-04e5f69eefbb", "sighting_of_ref": "indicator--94f65494-b683-4caa-81e6-efc218930c43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26df2041-5d08-497b-af8c-686cb64861f1", "sighting_of_ref": "indicator--94f65494-b683-4caa-81e6-efc218930c43", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5147f6d3-91b5-4f27-8b16-c155d76a2f45", "sighting_of_ref": "indicator--ac9206a2-3019-443e-b133-7802bba68638", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0677510-9cd2-466f-98b5-60a2d41a24fd", "sighting_of_ref": "indicator--ac9206a2-3019-443e-b133-7802bba68638", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6667d04b-26c1-44db-a931-cb2c62d3b8ee", "sighting_of_ref": "indicator--6a6b6f02-ef19-40d2-82cd-0f1f8ed40797", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008f8609-950a-49d1-8115-33a50f098436", "sighting_of_ref": "indicator--cfbb7d88-aa83-4d02-9eb3-5ae3013fd4d3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2aee091-4dd2-4038-acb8-7d4119896e45", "sighting_of_ref": "indicator--cfbb7d88-aa83-4d02-9eb3-5ae3013fd4d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360d5ccf-f3db-404e-ae70-bc1ced13dd7c", "sighting_of_ref": "indicator--fd97c678-2f38-4de8-989a-d5bd25a59436", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31196c3-46a6-485a-98bb-0ed2a72823aa", "sighting_of_ref": "indicator--fd97c678-2f38-4de8-989a-d5bd25a59436", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6e0bf8-3aa8-48bc-955b-6f8775698a48", "sighting_of_ref": "indicator--fe43ee8f-6dbb-4db8-8828-7d9c39466687", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b691b22e-9841-442b-9615-4d2a3c0145c2", "sighting_of_ref": "indicator--fe43ee8f-6dbb-4db8-8828-7d9c39466687", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19aad6b0-9802-4923-921a-5d0428de511c", "sighting_of_ref": "indicator--fe43ee8f-6dbb-4db8-8828-7d9c39466687", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30214ab3-f302-4484-a2d7-50ec2a406c7f", "sighting_of_ref": "indicator--4f62e66d-bf35-4db8-a6d2-fbd5a545572d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b325cf02-3011-4679-a737-387ac4552de1", "sighting_of_ref": "indicator--b843d4e7-e2ce-483e-bea4-152b85c5d951", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58b4567-7176-4080-b8a1-317199b0536e", "sighting_of_ref": "indicator--b843d4e7-e2ce-483e-bea4-152b85c5d951", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9706640b-517c-4fbe-94e2-bcd5ac7620e8", "sighting_of_ref": "indicator--ca3294b0-f17a-4759-973d-fa4efa60f458", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb935f3a-b1e2-4eb7-b238-b294d0cbe86a", "sighting_of_ref": "indicator--ca3294b0-f17a-4759-973d-fa4efa60f458", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb58baf8-7b2d-49e2-8531-e13d25cee0d9", "sighting_of_ref": "indicator--cc337ad8-47ad-41ed-9b31-aac7311e5c1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d237d3d-b123-496c-adee-c39fbe27a938", "sighting_of_ref": "indicator--cc337ad8-47ad-41ed-9b31-aac7311e5c1b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c024e8-5786-45ba-a9cb-7de5023e76e3", "sighting_of_ref": "indicator--cc337ad8-47ad-41ed-9b31-aac7311e5c1b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40d3a66-0062-4618-a86d-ca4ebd4c4981", "sighting_of_ref": "indicator--93c792af-41fc-4af6-b1c6-d662d136951b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760b1de7-04ac-44d6-91a5-b923250f35d7", "sighting_of_ref": "indicator--508b5821-eb9f-4b5b-96b5-da0f5a03f27d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0e07f5-d571-4ce0-aad7-d5bf6f999d05", "sighting_of_ref": "indicator--a32134ac-009c-4677-a799-c6c7bd3fa0f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b71331-112d-41e1-afab-ad6adb2cccbc", "sighting_of_ref": "indicator--327a57eb-553e-4740-a86a-6bc4ef52e830", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab371dc-4385-4c6c-97fb-bf1ed75b76f5", "sighting_of_ref": "indicator--9bed8215-3441-4301-8598-90d937eef615", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0de3d69-119f-4267-ae69-855998ecbdf0", "sighting_of_ref": "indicator--12a2d97e-cfd5-4d90-8eb7-60348815db03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa59691c-b388-4aa3-834b-b1cbeffc5ab0", "sighting_of_ref": "indicator--779b76c5-0f5d-41e6-a25b-46fceddcc1cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794f0e67-606b-4652-a574-8882b3b68e56", "sighting_of_ref": "indicator--5aa727eb-9731-40a0-b58f-0d29bb27b4d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a919c44f-79d9-4332-8d68-ebe472f02f6b", "sighting_of_ref": "indicator--392d0ba8-867d-4576-b5b4-575530e51f59", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f010cd0e-5ba5-49b1-aea1-092b7a175174", "sighting_of_ref": "indicator--9c54a0a5-238d-4ce0-9e4f-08bdb76cf792", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a389b29-c8eb-4bbd-bcb9-7ace04474897", "sighting_of_ref": "indicator--e69b9770-2edc-464f-8992-1f385e9bf3bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62f6463-4688-41a3-969c-5cfc4adfb6de", "sighting_of_ref": "indicator--fee52efd-bc9d-4f54-a1a2-d5d82e2cc2bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e98fc67-322d-4a46-b889-911c9fca7aeb", "sighting_of_ref": "indicator--dbc552ad-28ff-4e87-b8d2-5d8fe796e833", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41733bff-8d63-43a8-b37a-f69dbc8e758d", "sighting_of_ref": "indicator--a2167157-673f-4d6a-b00b-cf9d6bb6ea5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18346674-85e8-4637-aec6-f5e4e9274549", "sighting_of_ref": "indicator--c85cbbee-0dbd-42aa-9fea-7d6fbc4ab06a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9e7eff-7070-418e-9068-2e7483b2bd59", "sighting_of_ref": "indicator--f966c742-c5ae-4595-a285-c5f780ea8209", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb23db6-476b-415e-b7c9-2cb7c87e2ea6", "sighting_of_ref": "indicator--ab80f9ef-bd8d-476c-9e89-65ed39e2b66a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09aebc2-ee74-4161-b582-2d614443807d", "sighting_of_ref": "indicator--d0385b93-52cb-4a71-992c-96cdf2317cd3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49afcae8-e118-42c7-a56f-230b70870a2d", "sighting_of_ref": "indicator--e5a96d1b-be89-4678-80e5-0e2c47be3f02", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744a0e19-f8db-4dcd-b5be-1861a617bda2", "sighting_of_ref": "indicator--d487d354-9808-4bfe-acba-2a62964e19ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75009ea-af4a-4053-8e63-5ed4263a240a", "sighting_of_ref": "indicator--2d703c28-cf1f-4f0e-92fe-f7268ab783fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7ed6ea-88e3-4ad6-896a-4629d9cb93c6", "sighting_of_ref": "indicator--90afd50e-db15-48d3-bacb-c835b25bb2b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df0f0ec-380c-4bc0-bc89-6c84e6b219aa", "sighting_of_ref": "indicator--780e1390-fac3-42a9-b90f-d663c17f23ba", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb6e925-26bb-4159-8a44-4e28e00ebdf7", "sighting_of_ref": "indicator--575d87eb-9e93-479a-b153-227eb50d4e97", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54110a7-f3b6-4d9b-844e-3e4f15bb37ff", "sighting_of_ref": "indicator--e4d0a231-e23c-4584-9ce0-94bd8e5b7141", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdddf7a-f244-4722-a085-e443cd658cb6", "sighting_of_ref": "indicator--e4d0a231-e23c-4584-9ce0-94bd8e5b7141", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a925c3f6-5b4f-4946-95a9-7c295b61dbbc", "sighting_of_ref": "indicator--b737fde5-0ebe-435a-9190-df9bd6240cc6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2d3a3a-5622-45c8-99d0-821340629cee", "sighting_of_ref": "indicator--467d5da8-c76d-4f5c-8d59-863b68928a59", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442502b2-749f-4d89-b9cd-24ebe2a6d027", "sighting_of_ref": "indicator--a21d49a0-0a23-4f48-8c62-27c7a0084f84", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a661ad-cb15-431f-acff-a8a96b864693", "sighting_of_ref": "indicator--ce9698c5-7556-4bdf-b854-f3707d850681", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214646ce-3385-4a8b-9363-55eb96c209f8", "sighting_of_ref": "indicator--91541f85-f6ad-453b-b4fc-337f26cbeb1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cc06e2-6447-43af-beb9-90c7453f339d", "sighting_of_ref": "indicator--c381c73a-fd74-4058-8146-f583b6891b69", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4504ef67-be77-486f-8dd3-d4151653f5f3", "sighting_of_ref": "indicator--0692b7e9-f3b8-4b58-a3d2-b48bdd0224b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297820f3-cb95-4783-882f-4867b008c686", "sighting_of_ref": "indicator--c5f871f1-97e9-4c74-b692-490d9ca97bba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52f9f32-8954-4833-91d8-6be1d67d527f", "sighting_of_ref": "indicator--ae9d8881-9110-4888-8b51-9b234aa73db0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97c76df-91e0-4b5d-8eed-a8155576e1b6", "sighting_of_ref": "indicator--ae9d8881-9110-4888-8b51-9b234aa73db0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0fc8e7-a452-41a1-9e0d-7ea3ae6ba7b7", "sighting_of_ref": "indicator--10a692f0-3457-4f72-b630-7f60cd48f6c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf829ce-9883-472e-bc55-1f0df8a4e18c", "sighting_of_ref": "indicator--be7a5196-4706-4ab8-aa61-c691816d2bc8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6724aeb7-9d9a-4a17-9278-2513ae7bbef7", "sighting_of_ref": "indicator--bc7045ea-b757-4980-92e8-e243e3d8bd61", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817b8594-1745-444a-be32-5e0bd945eb75", "sighting_of_ref": "indicator--d25eee15-682d-4843-aab2-f563d7ed9be2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66865cf-0c6b-4520-84bb-4655d5285268", "sighting_of_ref": "indicator--3250c22e-2b7d-46ec-b351-7cdcd7565cc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28d955f-3b96-4485-868a-c3e368e1dfa4", "sighting_of_ref": "indicator--c8e33243-411a-4067-8566-b69389b1dbcc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d96dd27-966d-49ce-9b00-e5b3c9cb930b", "sighting_of_ref": "indicator--563bc90c-44d3-4f8a-965f-1d4ccca47564", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf2f2f1-c966-4edc-942c-7323e5c484ec", "sighting_of_ref": "indicator--82e6479a-fb63-4b4e-9107-80e5abccf4c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7192fa-f314-47dc-a8c0-9eafbe75ba3e", "sighting_of_ref": "indicator--e8665837-1e10-4b5c-ba30-acb807ba2fd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82140a05-dc7f-4b31-bc55-deb2acde5066", "sighting_of_ref": "indicator--35f38831-ba77-4914-90eb-90d97e861a37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4457aff3-4bb0-40d0-a55b-398d02281e14", "sighting_of_ref": "indicator--e9878ec1-1213-4734-baad-dcda15f74be2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dca37b5-620b-45ec-a7dd-a53b427f5beb", "sighting_of_ref": "indicator--2f2b466f-80be-4c89-814c-a97ccec647bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbba67a7-35f5-430f-a493-a5d6be07263a", "sighting_of_ref": "indicator--ff84eed6-b16a-44ba-9425-f7651563d0cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23afe00-941a-46ac-889a-f0709ab6cc06", "sighting_of_ref": "indicator--578b8476-7f6d-46b9-8ae6-d3b881bfa137", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f026f7-07d0-462d-8ef3-95cbdfcd557c", "sighting_of_ref": "indicator--80b5cdb4-8ed1-4bcf-8ebc-f69fc2b8dcee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c8298d-fc47-4f40-9369-d850fc062ec4", "sighting_of_ref": "indicator--2105fd23-33fd-4f44-a7ae-cc747d0ac822", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e21281c-aece-4453-8a92-6c2de49ea1fd", "sighting_of_ref": "indicator--d4328f4c-6f3a-449f-98ca-7707b9872dcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946b201e-d065-4bc2-a12f-9c88bb365e3b", "sighting_of_ref": "indicator--f022eb02-8013-45a1-a645-4c48cbbad0c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a723a39-7cf8-4994-a847-0bc70bce7c52", "sighting_of_ref": "indicator--5f680aaf-5cb5-420c-a702-9401e5be2c16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc128d5-2509-44f6-9f3f-18a309c96122", "sighting_of_ref": "indicator--9e624203-9410-452d-a032-dafe492eacaa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6dc11c-2eb6-4fa2-8917-13e7f18996bc", "sighting_of_ref": "indicator--d53200f5-18e8-4d71-babf-c2c7981fc264", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6730c558-b922-4eb5-a93a-4dc7ee5375dd", "sighting_of_ref": "indicator--90b981dc-370d-4314-ae42-7cf678d355b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62774288-aba4-4564-b153-dd04c900f506", "sighting_of_ref": "indicator--1b88261f-7c94-486d-9271-84e933d51ac1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7208287-70a9-429d-8577-7720d5268335", "sighting_of_ref": "indicator--54dbcdb9-ea98-4589-9138-6c2fe2bed3cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb5b1c4-a53b-4858-98c7-aa87c6b7d78d", "sighting_of_ref": "indicator--53489ff6-7ef9-43a4-ae3c-93fa6e3e0c83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d231dc-c4c9-4296-89bf-e7bf4ed1a29d", "sighting_of_ref": "indicator--7356593b-de05-4e7f-882e-b20f86ee1e9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efeedb3-a80c-40e6-8ce8-ad1534988796", "sighting_of_ref": "indicator--1fbd6537-56fd-4d5e-a172-5a298b97ce0b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47613065-1b84-4453-bb78-8f13d9c05bac", "sighting_of_ref": "indicator--2f169e1e-015a-4e77-8d51-050ef2850950", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca26689-a8c9-4f33-a08f-b8e9881b9889", "sighting_of_ref": "indicator--d4a431ab-2a55-47b3-87c2-b08485d356fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33414cc5-d041-4216-ad7c-df420d9a99e5", "sighting_of_ref": "indicator--49951f66-fa14-4800-8640-0b6549cc7c59", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3240b9-d77b-4e60-85f6-e75c03756872", "sighting_of_ref": "indicator--4eee7a25-d684-4b7b-817e-fcd79a2d84e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4b79bf-1e8d-40b8-984f-840b4a1b034d", "sighting_of_ref": "indicator--cc45e083-28f7-47e0-a4e8-ca46840487d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4d16f2-57c0-42eb-8dee-11f08ca71591", "sighting_of_ref": "indicator--dbb82495-09dd-4d1b-80d0-0092c751ab68", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac3feed-6073-4fdc-ab34-fbac8148b803", "sighting_of_ref": "indicator--a220b092-3cfa-44c1-9cce-193d258a0c1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf03897-7b25-4b97-8ea5-b7f0332bd139", "sighting_of_ref": "indicator--5a88e5a3-548d-40af-9929-5ebe3db2b4fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c6c07d-6ca0-40ba-b2b1-60bf196a852b", "sighting_of_ref": "indicator--53deadd7-dac1-481c-9d3e-42bcd6d3a213", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d14bed-98ca-4857-9c27-6b6e469ae1e5", "sighting_of_ref": "indicator--5e034515-5953-4f65-a8b2-1448b940c719", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78912f55-73a8-4847-a8a7-9a2f3c21c4fd", "sighting_of_ref": "indicator--4b693cf0-4a40-4c12-856a-e21b9e0e92b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d453d4fb-c2b2-455c-bf87-ac6b971340c9", "sighting_of_ref": "indicator--a6cf3bbf-6cdd-496e-822b-9c3b5f98875a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6eb122-c6a6-47ea-ae48-24d7b7be393c", "sighting_of_ref": "indicator--beceff6c-d3a1-46a7-83ad-1bdaaa0bb587", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58823f7-f38b-47eb-8497-0290ce4c07b7", "sighting_of_ref": "indicator--ffcbee5f-3c8d-4530-9860-e442ecf4df45", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d42ac98-2c33-410a-828a-1acaeb59f3bf", "sighting_of_ref": "indicator--e1beb70d-71e1-43aa-a3f2-8f257cf2ae3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cdc5d3-e668-497a-91a2-d458bed3ec99", "sighting_of_ref": "indicator--8b156cc9-05a4-4c14-a243-45a58d5dd4e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4055ed35-9b04-41fb-b3ca-3a09a1b2400f", "sighting_of_ref": "indicator--b69a4ccb-b4b4-4d65-8d76-d8c590fbdd14", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e56e705-91a5-424f-b831-94ae0a052bcd", "sighting_of_ref": "indicator--353c3503-5c86-4bd1-a934-6a153e9fcad8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53d7dae-ae89-4113-835d-f0253657afd0", "sighting_of_ref": "indicator--199dae63-0de8-4064-b225-b811f6cc422b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2293d682-7e0d-409f-b069-9dfad0c367d7", "sighting_of_ref": "indicator--199dae63-0de8-4064-b225-b811f6cc422b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca11627-f8b9-4526-8342-878f6919b903", "sighting_of_ref": "indicator--8733adb5-ffcc-4098-9e8c-7fc1a95d0e27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274ca4b4-cbf6-4331-a8c0-a26e1eb94b48", "sighting_of_ref": "indicator--8733adb5-ffcc-4098-9e8c-7fc1a95d0e27", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adc6d7c-108e-41e0-a840-8303c7becfdb", "sighting_of_ref": "indicator--8587afa3-d826-4975-b017-f6126f4149c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce3d4eb-c643-4e04-8c3c-6ccf71b8d420", "sighting_of_ref": "indicator--2f1c9028-84e6-485d-b4e5-29aee5535501", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6405b6e8-11bf-4534-af43-d3d1f37918c4", "sighting_of_ref": "indicator--2f1c9028-84e6-485d-b4e5-29aee5535501", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc815b5e-bbdd-4ce4-b19d-bdef1db8cff6", "sighting_of_ref": "indicator--2f1c9028-84e6-485d-b4e5-29aee5535501", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eedc0cf-1557-4a37-a99a-8e47d41aab54", "sighting_of_ref": "indicator--79df583d-1e8e-4af3-909d-917315df44d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de6a770-87d8-4b82-998e-306f1ea8c407", "sighting_of_ref": "indicator--84699848-5e27-4bcb-b128-4de93c268f45", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f584954d-a122-4fc8-836c-68c1a83d4ec7", "sighting_of_ref": "indicator--6c062101-caac-43a2-acb2-6bf4a8520628", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f73ea7-1ee1-4fc8-8918-641f5d3b9641", "sighting_of_ref": "indicator--5b7e99e4-fcc5-43eb-9474-c9c17ba75834", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4838c897-e66e-4120-a8ae-cccc0042ccb5", "sighting_of_ref": "indicator--5b7e99e4-fcc5-43eb-9474-c9c17ba75834", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d884c41-4986-4d46-9b1e-bbf20271a4f7", "sighting_of_ref": "indicator--95a5f507-b696-4ca6-aa05-8ddd4df4b00d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cb8e8a-9ba6-4b71-9563-d010086dde08", "sighting_of_ref": "indicator--2616d65e-856b-490b-ae8c-2baa43bd4639", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd17ffbe-ba81-4fa7-a3dc-f9ce7995c190", "sighting_of_ref": "indicator--82beca9e-dff1-4856-a459-9ba0d4b442ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937589a7-c8cd-4e24-ad8e-b1d77ab8da34", "sighting_of_ref": "indicator--e9228567-83ed-4dfa-b2f2-353c7ef587f9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d84081-aa6d-48c0-9b5a-29a87657a1ef", "sighting_of_ref": "indicator--8030e08b-3b0f-4886-8602-7229c70d0585", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7f49d6-3bf7-4f85-b2b1-9a429e1a335b", "sighting_of_ref": "indicator--3e9da8bf-9b93-4cc8-a33c-37516fcd42fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7620f5f-a16a-49db-8156-1b5395fd4085", "sighting_of_ref": "indicator--f137a991-1499-4c33-8fa7-0a4f820eecfc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b917bda8-3e4c-4900-94f7-b599de812805", "sighting_of_ref": "indicator--9928d05d-7f11-458b-9058-eb7e82dd6474", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9b051c-1432-4da1-b66b-e55a614a0c4b", "sighting_of_ref": "indicator--9928d05d-7f11-458b-9058-eb7e82dd6474", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd8ee2a-0dd5-40ac-986b-41f1f408b4fe", "sighting_of_ref": "indicator--9928d05d-7f11-458b-9058-eb7e82dd6474", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6b63a8-3d2e-45be-8b54-7d901859feab", "sighting_of_ref": "indicator--96e89686-6501-49c7-b2e4-f0d80b621ee4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b73cee-1448-4202-8492-7b7e241342d6", "sighting_of_ref": "indicator--0eb96249-f380-490e-b5cf-74c5c86b3317", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbf8601-5a15-4730-888b-527e04f062cf", "sighting_of_ref": "indicator--286e659c-f495-4233-8728-a1b7d5b950f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370db374-1090-4c15-a58f-db9d2baa8442", "sighting_of_ref": "indicator--5981190d-c81f-40aa-b77f-a7e3257b8d58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b55c2b-9a55-4cc2-b25b-25d7687c969f", "sighting_of_ref": "indicator--c8c064cb-d918-491a-a043-5cb342bac409", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9920a17-d3fa-423d-b5ba-409901a42950", "sighting_of_ref": "indicator--655ac1e2-2d95-4fb7-aa2d-d3d7886feef7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c251fa41-fed9-4313-85c8-9cfd51370fba", "sighting_of_ref": "indicator--41ec82a4-b989-4466-b226-f0064560c20c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09413d6-4456-4ba1-9cf3-b855b7e83fed", "sighting_of_ref": "indicator--b36c4154-0897-4c84-81a8-1062816e5b3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287914c5-ff68-41f5-8fd4-69379575cc69", "sighting_of_ref": "indicator--77c3c25f-eb61-464a-b37f-a1f1aa42b913", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8ba45d-f95c-4433-947c-a29b2f7be105", "sighting_of_ref": "indicator--33e6c3c1-664c-44e0-bc62-4fee42605c47", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8759cff1-3eeb-47a5-9c31-c6aed6657748", "sighting_of_ref": "indicator--ab9f265a-cd44-4472-be6c-30162b9ab338", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b22a43-9e25-4022-afef-ef56a25725c3", "sighting_of_ref": "indicator--57799948-ebd8-4588-9a21-a88495194cde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9310abdb-3c87-4e50-82fe-cd61e8a9f305", "sighting_of_ref": "indicator--385d0713-bfe4-4c0d-9499-32f6c8d3e3cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce86ada1-a31a-4f40-a8bc-a74403b15125", "sighting_of_ref": "indicator--4a116083-4d5c-4f91-a10a-b4c7926e2209", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c1b07c-dafc-4f1c-9c96-4812ba480159", "sighting_of_ref": "indicator--a092dfd2-dbf8-4821-9a16-f8b4d549fe89", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80457b3a-ba9f-4927-8d46-f14d2a41c178", "sighting_of_ref": "indicator--c7fcd6c3-8bee-4129-b808-b981ecc6dfd1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1693a61-1ce1-4e8b-a1f0-cfe9e1b13093", "sighting_of_ref": "indicator--f8f35411-5a17-4a13-bbd7-26899f85bc7b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b00e5f1-c866-4a5a-b902-bcb9e4d0906b", "sighting_of_ref": "indicator--321698b4-10a0-435e-ae8a-20e074f92377", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494fc10b-f9b8-4d76-89d4-8ba8ffa1323a", "sighting_of_ref": "indicator--0b5bd1f9-81dc-4097-ae9e-3e0ea717d165", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a9c65a-a2b1-4103-b214-02a540c4b35d", "sighting_of_ref": "indicator--0b5bd1f9-81dc-4097-ae9e-3e0ea717d165", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97d5d18-33fb-4742-a3c1-41faf5918d04", "sighting_of_ref": "indicator--0b5bd1f9-81dc-4097-ae9e-3e0ea717d165", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93852220-93cd-42db-a65c-2587be872369", "sighting_of_ref": "indicator--596469b7-5c80-4f18-965f-44d0723b1520", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29cfa41-fe8a-46b7-b496-7e23f126da6f", "sighting_of_ref": "indicator--dc35f2b8-32fa-43ff-8828-11239aa45346", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40cbd0f-c45a-494b-82eb-9a06bc1af85e", "sighting_of_ref": "indicator--4aff04f0-60a6-42c9-ac93-e5c81d4faaec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a151dd38-066a-4b70-8a32-b221a46ab24f", "sighting_of_ref": "indicator--883622f5-2411-4fbd-8d34-24b1e39bfb35", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb98552-7fde-4270-ab91-285d90422c75", "sighting_of_ref": "indicator--02a0130a-2fe6-4f5f-82b1-9385a0fae0db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b88b26-ca93-4c55-a695-f1c4b89245de", "sighting_of_ref": "indicator--02a0130a-2fe6-4f5f-82b1-9385a0fae0db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871c6e2c-5360-4165-9237-2503c2dc7858", "sighting_of_ref": "indicator--3ba22223-46fc-4592-8c93-936f6fa99a46", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b5885a-2ce4-49d0-aee9-42ee95a444fb", "sighting_of_ref": "indicator--e948e017-319b-491d-952d-c044f0c67178", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c639248-2d1d-4adc-8dba-a3e53ba4ab74", "sighting_of_ref": "indicator--e948e017-319b-491d-952d-c044f0c67178", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a917aa-5ff0-491d-b308-247526984040", "sighting_of_ref": "indicator--e948e017-319b-491d-952d-c044f0c67178", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538ba747-57f2-498b-98d0-4362833aca6e", "sighting_of_ref": "indicator--ac6fd390-27ef-404e-a57c-32c2e1404cb6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead73268-938f-4599-bc67-2221159ea663", "sighting_of_ref": "indicator--ac6fd390-27ef-404e-a57c-32c2e1404cb6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ab7102-7b28-490b-99e8-ebb3328659d5", "sighting_of_ref": "indicator--7f5f0901-564c-4c4b-b5dc-3fb7f6883ea9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75a01a0-218d-4cf5-ba78-fd436277da0e", "sighting_of_ref": "indicator--deca3fb9-c4c1-4661-8351-4053078d9e85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128fe370-4538-45dc-b5a5-7e6bad62e52b", "sighting_of_ref": "indicator--fa1de00a-a3a7-44a4-94fa-738ef1537e82", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6ce4b2-47d1-4c72-932a-322e5e816d39", "sighting_of_ref": "indicator--fa1de00a-a3a7-44a4-94fa-738ef1537e82", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18317f31-1933-4bea-b2c3-997fc2dbbd61", "sighting_of_ref": "indicator--fa1de00a-a3a7-44a4-94fa-738ef1537e82", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69702e08-5f18-4e01-9945-485c5eb9b598", "sighting_of_ref": "indicator--1f2a9fb5-f3d1-4a56-b68a-c3e89d48abd5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ccbd4a-7c59-40ff-908d-9f25f2bd6907", "sighting_of_ref": "indicator--757940cf-c275-436f-b561-daafb9f27896", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05044740-d509-4311-a4d7-b18d69f942d0", "sighting_of_ref": "indicator--757940cf-c275-436f-b561-daafb9f27896", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66a9a93-fdcb-462a-a18b-1d7655f6b8a1", "sighting_of_ref": "indicator--45a73d5b-7d22-4a6d-a849-210ba76ff185", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970e95f2-94c7-4e87-a734-fe3697f9aecd", "sighting_of_ref": "indicator--73bb827e-4b99-429b-8cd3-c284b0c4c05c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff14153-817e-42bf-8189-e5f24b027961", "sighting_of_ref": "indicator--0512b987-a132-4363-a9ba-22205baee485", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b017b4-63c7-4282-8f6f-0370854b2441", "sighting_of_ref": "indicator--0512b987-a132-4363-a9ba-22205baee485", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09859978-33d5-4140-b226-76c3b1557272", "sighting_of_ref": "indicator--0512b987-a132-4363-a9ba-22205baee485", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd12d8f3-2955-4124-8c86-43919bbb5341", "sighting_of_ref": "indicator--ebd25740-da88-4a47-8d51-1e527bc18b21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad19bd5-833f-425c-a09b-aba6ec5b2e59", "sighting_of_ref": "indicator--c6f6af6a-858c-4fdd-939e-3cb40fadcd5d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea10b3f2-a5df-4393-8531-7aa5316a00a5", "sighting_of_ref": "indicator--a565d707-5599-419c-a3fc-d59655ee8b31", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dee48ec-ba2c-474c-83ab-97d09a89dffa", "sighting_of_ref": "indicator--a565d707-5599-419c-a3fc-d59655ee8b31", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25395135-46ef-4d85-a46b-2473cebef82a", "sighting_of_ref": "indicator--b6abc8bd-3104-42b9-95f0-d75ea89027d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f780b0-e2e6-404c-ab4c-e2392b0fe805", "sighting_of_ref": "indicator--b6abc8bd-3104-42b9-95f0-d75ea89027d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d5ec24-ec84-4281-87dd-93a60fe33d75", "sighting_of_ref": "indicator--68d28821-e820-4ffd-a6ab-c4b98aa81c4a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99aa962e-929c-43da-b0fe-fdb013f20741", "sighting_of_ref": "indicator--68d28821-e820-4ffd-a6ab-c4b98aa81c4a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d19245-a9d7-462a-ae43-11cdc1676913", "sighting_of_ref": "indicator--78c25a71-1810-48b6-83fb-4833cba97b72", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1a1813-a76b-45e2-9a1e-3cbfb5c20eda", "sighting_of_ref": "indicator--77d38473-967c-4d30-b216-011422ee2157", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4652de46-438e-4b47-a14e-08ce261a1557", "sighting_of_ref": "indicator--77d38473-967c-4d30-b216-011422ee2157", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac3184a-e901-49a5-90dc-cd0c5d9f8562", "sighting_of_ref": "indicator--33e49e42-7e46-4c4c-b90f-d5ed4441cff7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31105219-cc7a-411b-ac13-5c3bf5610d1e", "sighting_of_ref": "indicator--7c42f81c-0ee4-4abb-b5fc-4844b91ce155", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa73e2c2-6204-4c7d-bd65-badba1e2a1fd", "sighting_of_ref": "indicator--7c42f81c-0ee4-4abb-b5fc-4844b91ce155", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1c9d94-2920-4ab5-adb7-2349b347a905", "sighting_of_ref": "indicator--7c42f81c-0ee4-4abb-b5fc-4844b91ce155", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e8dadd-2923-4774-a655-7bce110b3dc2", "sighting_of_ref": "indicator--7fea0230-4a11-4c74-88ad-f4db18144b48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e15e30-f5a0-4ece-8b08-e577d72654b8", "sighting_of_ref": "indicator--7fea0230-4a11-4c74-88ad-f4db18144b48", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b2158e-8450-49b1-bda6-4c20c577e17b", "sighting_of_ref": "indicator--d96b11d1-7c81-4fed-950c-343a4a54460c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b16afa0-e01c-4d36-8df3-ff097c1f1687", "sighting_of_ref": "indicator--d96b11d1-7c81-4fed-950c-343a4a54460c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b902c7-0519-47e5-a173-17927a2f4991", "sighting_of_ref": "indicator--2e597290-7c3a-40d7-8431-167372ebf0ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d624d2-dd33-410c-a0d1-1e05e7a939be", "sighting_of_ref": "indicator--77f41f89-1a8c-47d8-81a1-5a03582d068c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fda126-df6b-4772-add9-f4fcc7a60f4b", "sighting_of_ref": "indicator--77f41f89-1a8c-47d8-81a1-5a03582d068c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f149506-32c7-4662-ac04-ac9126a1dacb", "sighting_of_ref": "indicator--77f41f89-1a8c-47d8-81a1-5a03582d068c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e4378-b2d4-49af-acaa-4bd4c228f93c", "sighting_of_ref": "indicator--8acd1d28-b9ef-47c1-bacf-5928588c0c3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd577a32-5686-4bfb-b816-09060a12849c", "sighting_of_ref": "indicator--6d172b87-5763-4180-839c-1cb2de1544d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c390bd1-d49d-4b4d-a13c-9df2bdef3194", "sighting_of_ref": "indicator--6d172b87-5763-4180-839c-1cb2de1544d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e129b599-1768-4fd3-b80d-559d35890388", "sighting_of_ref": "indicator--9b346f32-155c-46ce-9f01-220cc6b5c1be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114a4780-ef23-4c44-af34-766347a9db93", "sighting_of_ref": "indicator--be42348c-bf82-4a57-a169-768dc736680e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d97401-ac86-491a-bf8c-6986bfd509be", "sighting_of_ref": "indicator--7311c07d-c609-4d52-9f81-7ef349b77e4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa263003-9248-4925-9a13-6fd3e5f795fb", "sighting_of_ref": "indicator--7311c07d-c609-4d52-9f81-7ef349b77e4c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb7de73-41c2-4754-967c-da3bfe9fea5f", "sighting_of_ref": "indicator--bc46dd6b-d280-45ae-84e1-5ac7031dd676", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e4c08d-7d55-48a5-b872-c12edc0d5280", "sighting_of_ref": "indicator--bc46dd6b-d280-45ae-84e1-5ac7031dd676", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa770a41-9086-4a62-b06f-d30bb4cee987", "sighting_of_ref": "indicator--527c1d53-260b-42f8-9ebd-f252a0e2e604", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e80c99-496c-4e05-a8c0-ddca6dcf7b14", "sighting_of_ref": "indicator--527c1d53-260b-42f8-9ebd-f252a0e2e604", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a359251-50dc-4b7a-af5b-be8e9a3ab8ca", "sighting_of_ref": "indicator--527c1d53-260b-42f8-9ebd-f252a0e2e604", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcec292d-10f1-4ad1-a302-4bf4cdf9cbb5", "sighting_of_ref": "indicator--e826e31e-627c-4908-9b48-2b78b667f180", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7d1a31-daab-415b-b946-875fa74e19bb", "sighting_of_ref": "indicator--e826e31e-627c-4908-9b48-2b78b667f180", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd9146d-f3c9-41ed-beff-bf1de79ae322", "sighting_of_ref": "indicator--e826e31e-627c-4908-9b48-2b78b667f180", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ff5ea2-0321-458e-a749-4a7a532c25ab", "sighting_of_ref": "indicator--627208d6-d1fe-4b19-88f0-28cf4dd01353", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baa5521-5cf8-4bae-ab23-f798a3f24a19", "sighting_of_ref": "indicator--46f2bf81-b73e-4cf0-b8c6-602efedad9f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f662f4-82d0-4d46-b63f-299b3ac4875a", "sighting_of_ref": "indicator--9ae77114-3da6-4fd6-9c95-d0c5d04806fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568d2ea3-f095-4eb6-884f-f5947da6693a", "sighting_of_ref": "indicator--9ae77114-3da6-4fd6-9c95-d0c5d04806fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386e6bd3-92a0-42cb-a537-5d2e4993a571", "sighting_of_ref": "indicator--9ae77114-3da6-4fd6-9c95-d0c5d04806fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabd74c2-9baa-4d59-8528-99199f63a3c8", "sighting_of_ref": "indicator--bb06de65-6f5a-4f70-9774-973560800a0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9861d08e-3e09-4b32-aee2-d6a9cc2630dd", "sighting_of_ref": "indicator--bb06de65-6f5a-4f70-9774-973560800a0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56a2b31-0749-4b9c-b742-ac7a1ea00d07", "sighting_of_ref": "indicator--bb06de65-6f5a-4f70-9774-973560800a0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adf71df-e6c7-4b81-b34e-b3ce67dcb7cd", "sighting_of_ref": "indicator--34af8d3e-f8ae-451a-96a5-7310ae8fa8ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbafb74-4258-414f-99d5-c15829019b29", "sighting_of_ref": "indicator--34af8d3e-f8ae-451a-96a5-7310ae8fa8ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a9365c-3a24-4bfc-978b-8683f89b478f", "sighting_of_ref": "indicator--34af8d3e-f8ae-451a-96a5-7310ae8fa8ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ee887d-0466-453b-a3ba-eb8cf09693b2", "sighting_of_ref": "indicator--fa1a3af7-ba24-4c09-a5bf-f5fa1051cfe6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2912bd5a-0cf7-49dc-90dc-1587ebead28e", "sighting_of_ref": "indicator--88980481-159c-40db-9b0a-5d66099e63a0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b608f3c7-0d23-4d55-8e09-4f8dd8a377fa", "sighting_of_ref": "indicator--88980481-159c-40db-9b0a-5d66099e63a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5a9374-5953-44e2-b755-957ffd67167b", "sighting_of_ref": "indicator--88980481-159c-40db-9b0a-5d66099e63a0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b050a7b5-f2a8-43eb-a10e-c51ce4710c65", "sighting_of_ref": "indicator--be30e5da-22ec-4ec2-a507-c5b27cf67e4e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3dd14c-35a5-478a-b6cf-ef95de9a6a2b", "sighting_of_ref": "indicator--a213cec2-40ae-463e-9de6-08f2f3fc24ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61716f2f-75c7-4d99-9dea-3da675deb35c", "sighting_of_ref": "indicator--5c7cee2e-8108-462f-9805-56ea674f1113", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cfb2f2-b7cb-43f1-98b4-2436cc0a9a7f", "sighting_of_ref": "indicator--a63f1c4a-6724-4d81-8bff-1fedba476864", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d0e667-820a-4264-b0cc-7d072be26f05", "sighting_of_ref": "indicator--d713921a-5ecf-4130-92d3-d83ea1a608b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7d408c-6590-4514-a0a9-3c8412519098", "sighting_of_ref": "indicator--d713921a-5ecf-4130-92d3-d83ea1a608b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd8a8a6-5d02-41d8-bac9-a9462585c15c", "sighting_of_ref": "indicator--72a284f5-4e1c-4495-888b-7054520b8a1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb430617-79d4-4064-a1e4-13f822690d1b", "sighting_of_ref": "indicator--e530e21f-8c39-476d-b579-ccc738cbdcb6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a426b120-2211-46f0-a0e2-40d917508313", "sighting_of_ref": "indicator--9e0542e7-544a-4b1d-815f-a53c7ef2d759", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24066ed-85a9-40e3-aba5-18216e8356e8", "sighting_of_ref": "indicator--9e0542e7-544a-4b1d-815f-a53c7ef2d759", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b19979-c29e-428a-9c25-9681fa1572ee", "sighting_of_ref": "indicator--13a44710-8077-4ae1-be7e-0a7f7b8bca1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef04ebb-ae21-4b21-9bef-5843499e5381", "sighting_of_ref": "indicator--0ec38fe1-3f50-40c9-b8e4-c9f37e05dd3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be0699d-273d-4321-8ab0-bd3dca7d8667", "sighting_of_ref": "indicator--9e427d45-d847-4132-b3ed-13a98934d7ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7750f7-ed13-4855-897c-7b174b7f4a97", "sighting_of_ref": "indicator--bb0bf0f2-8633-4583-89b3-4aa506d148bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51ca901-0c8b-43f3-b686-5a23fb224b94", "sighting_of_ref": "indicator--ac347a35-f43c-4aa4-983a-ffd5ab79bd3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c82406-976e-4947-aa14-6bdeacc3713b", "sighting_of_ref": "indicator--247a5f10-7dbf-4db2-b60c-fd8eb5ff879c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0606a532-28a2-4f13-85d0-8e5bc4ed5590", "sighting_of_ref": "indicator--27c21f65-1731-4a57-807f-aae52cacf6b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf03aff-8169-4884-988a-01fb083f3912", "sighting_of_ref": "indicator--27c21f65-1731-4a57-807f-aae52cacf6b9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdad87fa-c1c7-45ab-863e-4f3575424532", "sighting_of_ref": "indicator--8a23fb78-a890-4b4d-9a51-41f485fe5801", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a05aef8-960a-4ba5-876f-9baf5bcce5a8", "sighting_of_ref": "indicator--e5dbf64f-e1ab-4977-971b-5f029bde561d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ff1499-c684-448c-b32a-59b5951a2a18", "sighting_of_ref": "indicator--e5dbf64f-e1ab-4977-971b-5f029bde561d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403e11ca-3067-4a31-821f-e2580eadcf50", "sighting_of_ref": "indicator--e5dbf64f-e1ab-4977-971b-5f029bde561d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24835235-6b6b-4e2a-85b0-57d227a20228", "sighting_of_ref": "indicator--6b9480d0-ae3e-4511-9d8c-37d4d28c067a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da08e9cb-d9ba-464f-9c2c-93ada6cd3bc7", "sighting_of_ref": "indicator--6b9480d0-ae3e-4511-9d8c-37d4d28c067a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aba2515-dc37-4910-a44e-1724aad945b5", "sighting_of_ref": "indicator--6b9480d0-ae3e-4511-9d8c-37d4d28c067a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7613cdc-6194-4e3c-b7cd-efd6aa871b84", "sighting_of_ref": "indicator--20603b13-6b7a-49dc-8aa1-775589a9de44", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e7b86e-2d16-4058-9ee2-9469fc0fea5f", "sighting_of_ref": "indicator--20603b13-6b7a-49dc-8aa1-775589a9de44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952f21e9-3429-4e5f-a234-f9fd67e72212", "sighting_of_ref": "indicator--f234fc39-2072-4dcd-95c9-a79fa1230814", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e1ddda-49ec-48f0-81e3-c52150fda6c1", "sighting_of_ref": "indicator--f234fc39-2072-4dcd-95c9-a79fa1230814", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38da9b49-773d-4c81-9e13-9449cf54b051", "sighting_of_ref": "indicator--83e6a332-0145-4ead-ad9f-29dce9669985", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccddc14e-2336-4e49-860a-f8d3d3f776d8", "sighting_of_ref": "indicator--83e6a332-0145-4ead-ad9f-29dce9669985", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ce39eb-adc6-470f-be0b-0f6443d8c8c0", "sighting_of_ref": "indicator--392b57a7-cb26-4f01-8e98-323614fc5a03", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42948b95-c70a-4315-978f-075e0186a952", "sighting_of_ref": "indicator--a8f717e8-ac89-4c2c-9563-e1118462f46a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80099f81-ea11-457a-b813-8b789124aad0", "sighting_of_ref": "indicator--a8f717e8-ac89-4c2c-9563-e1118462f46a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b1536-0bab-446d-9989-aca0220e50d4", "sighting_of_ref": "indicator--caec80cc-8063-4b74-ad71-ec2fe9cac700", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec73b30-e993-4007-8b5e-16b0cf15ac45", "sighting_of_ref": "indicator--caec80cc-8063-4b74-ad71-ec2fe9cac700", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736c2d6f-d815-41ed-8952-84567923c467", "sighting_of_ref": "indicator--a833457b-dabf-4057-a755-0ea5f8059f7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82679d21-a94a-4aad-b490-8eb9ce82d18c", "sighting_of_ref": "indicator--7a111321-9e9f-48bc-b10a-6c1eb8d45c1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300c797f-f89d-461c-8305-6dff3b120281", "sighting_of_ref": "indicator--8e80e4b0-8f14-4dd3-a573-351c3778b656", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a287c77-09d8-4ad7-b397-506e19c9461a", "sighting_of_ref": "indicator--f55e4f2b-c472-4781-b082-2a565639f845", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573a2f69-7f45-4877-9f5c-b7c807764f6c", "sighting_of_ref": "indicator--2498d361-c7df-41bb-a6a8-0734aef59ef0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476260a4-6310-407a-b0fe-1db7e7ef666a", "sighting_of_ref": "indicator--62cb2c36-5ef7-44de-abbc-edbdc09c95a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9680724-e1ff-4438-ae5f-b7cadfa7fa17", "sighting_of_ref": "indicator--68ec48f4-6132-450a-a7f5-83065cb22a7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5d0d78-8441-47a1-878d-79cc7bbf6e37", "sighting_of_ref": "indicator--a8cf5a28-2980-40c5-a026-e8531c2d5367", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebaf1e25-e8ea-46e7-9402-db95330657e8", "sighting_of_ref": "indicator--ab6e80ce-2df4-4ca3-b4da-4551ccd9e42a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b4e270-ab2a-4171-98cf-0084dddc9e0d", "sighting_of_ref": "indicator--7f6334bf-e4b8-42ae-989b-4ac19ed5448f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2fb1b3-ab29-4d6a-9452-35456edc52ae", "sighting_of_ref": "indicator--11e1c5bc-f697-4d65-99f7-bb5a540f7787", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40eedd14-8cec-4389-abf6-201d02eba1ff", "sighting_of_ref": "indicator--1e0e707d-c751-4cdf-ae48-c18c5f4e7e4b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d92bd3-de18-4365-a7a6-faa97b3ce036", "sighting_of_ref": "indicator--1223a7f0-b130-4aa2-9161-7b145530584c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552086a5-e1b1-464b-9cfa-cc67d4676fb5", "sighting_of_ref": "indicator--64bcc211-9836-4533-8956-d60ce4c901d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0950da-2d96-454d-a774-a66a7924ef6f", "sighting_of_ref": "indicator--2e0bcf6d-e109-42e9-93d6-59cefc4f1b62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bcd99a-b625-479b-8b10-bc2aa128d41c", "sighting_of_ref": "indicator--405eef13-8287-49fe-bf84-579544893a28", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdc8b07-0dfd-4994-8174-11efa7c85695", "sighting_of_ref": "indicator--41761363-9f97-4813-ad7e-1123e8310d58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1c8131-cd6d-4942-9de1-6e2b0c6052fa", "sighting_of_ref": "indicator--1efcca9b-ce1a-4956-a851-2472eb621794", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b44862-2aa4-4c89-b64d-ff7689ab7d64", "sighting_of_ref": "indicator--7005a8b9-151d-4cf5-98a6-ca457c94ff86", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3afe8b-59ae-4fd8-811b-d400632329a8", "sighting_of_ref": "indicator--00ff9cbe-1cd8-4bc4-aab2-b04edfb1f5c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace2eca5-6d22-46f0-9fbf-5720d9dae33b", "sighting_of_ref": "indicator--00ff9cbe-1cd8-4bc4-aab2-b04edfb1f5c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c2b3af-21ba-4a7e-b6c9-34f4ef37def9", "sighting_of_ref": "indicator--5f5432ba-9b12-4cb5-9f4d-fa413a8013e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc63a14-c755-45cd-b6b8-a497a483f4f6", "sighting_of_ref": "indicator--5f5432ba-9b12-4cb5-9f4d-fa413a8013e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec114ef-8e3c-4b4a-802b-fe674021bbbb", "sighting_of_ref": "indicator--261f550f-74f3-482c-98d0-0ce3b3183bf2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e27a36f-0b6f-4fe9-aca2-e73baeaba3ab", "sighting_of_ref": "indicator--2cb587e0-838c-439c-8dc8-a81e627eecb8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e329d24f-b68c-49e7-a152-4181ef863284", "sighting_of_ref": "indicator--6d49f32c-cd1e-48d3-97cc-5a6cce7495b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f06abe5-8e24-47bf-9fb3-b7a5555f92d9", "sighting_of_ref": "indicator--6d49f32c-cd1e-48d3-97cc-5a6cce7495b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c52ce1-e1cf-4019-91af-fb1d62fb1eac", "sighting_of_ref": "indicator--27d94f52-f127-49a2-956d-53378906cf77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e32c7c1-a63e-481b-b227-6028d185b608", "sighting_of_ref": "indicator--3f7c14e8-ead1-4c7d-b19c-82de134efc11", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b14a69-ae1c-49f7-aa69-29148f52434f", "sighting_of_ref": "indicator--3f7c14e8-ead1-4c7d-b19c-82de134efc11", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b085c827-8810-4380-b27e-47ecee116306", "sighting_of_ref": "indicator--6e62e265-cc2e-439b-b189-2886f67f0c8c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5f0a5e-886d-4e0c-99cb-437b8c64e15d", "sighting_of_ref": "indicator--645c12a0-00fe-4c3e-ab40-a524097701c3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1731c402-cfd4-4d94-91a3-1e4db6db415a", "sighting_of_ref": "indicator--135af04f-c85e-4872-979c-34933ae1527d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0833aee-78c2-4b4d-bf7a-46dc219455df", "sighting_of_ref": "indicator--1c012fdf-1333-4757-b940-0c8a3b497f88", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8de4212-106f-4b3c-9aed-40438641a89e", "sighting_of_ref": "indicator--74233a70-45aa-4bf2-901a-d1cee83485a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262265ec-5d11-40b1-83fe-10309c8f2b67", "sighting_of_ref": "indicator--3d5014a8-3cd3-483f-a408-ba4bb0eb237d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce98f5e-4949-48a5-b2c9-3e8ddef641c7", "sighting_of_ref": "indicator--36a1cb44-cc1d-4972-bc14-ab8a892515b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2da6118-2ed2-4009-b4ba-6fb8f202f7e2", "sighting_of_ref": "indicator--42f36cbf-3623-43cd-88f0-6e168d634851", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65a1682-fec5-4bfb-9798-eba2b50d6c69", "sighting_of_ref": "indicator--8c5a58d6-39c9-449e-adc0-8a0b496e0929", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fdcbbc-489d-4bba-a32c-164778e4f4b9", "sighting_of_ref": "indicator--96611b06-5917-4173-9b29-15ff9c618720", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb86ff73-b018-4208-9fe7-8bb04d110e50", "sighting_of_ref": "indicator--53b43912-ac02-4bb9-aff1-5d5bb2432ed3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff3e264-eaff-4cb2-92d9-e7d2da8f7993", "sighting_of_ref": "indicator--96ea277f-a6f6-483e-ad7b-ce268304a74e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6352f6d-9f57-4a65-88ad-0128ea97668f", "sighting_of_ref": "indicator--1619c228-3061-4e2b-af24-9783767f4236", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb7a2ea-1c9f-4f32-9af1-94b577302173", "sighting_of_ref": "indicator--3c68089a-e529-4875-8ef1-1b5e67836158", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d12ab77-09a0-44db-b4ab-4ef66a26d5d7", "sighting_of_ref": "indicator--8aae4fc7-8768-4d89-a37d-9ffbd4e3f5c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ff3de3-7d3b-410b-b18b-a383e233b3cc", "sighting_of_ref": "indicator--76fa83ca-197f-4c00-8479-08d29fe5c981", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cacd91-0afb-4882-8d90-6de1f04a0045", "sighting_of_ref": "indicator--8a6eec84-fd9d-4f25-86ab-210f5cf6249c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe95bacc-4408-4518-80ae-81e7d2908923", "sighting_of_ref": "indicator--a46a0d41-9624-4a4c-8ed0-a1392ec9f8b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864b33af-26d8-4be1-9bed-e28725535048", "sighting_of_ref": "indicator--9afa970f-27fc-4093-9950-72115288c0e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97552c1b-7bf4-41d1-9013-22304d5dfdb4", "sighting_of_ref": "indicator--141c3ad0-5ccd-4abc-97c4-031d1de1874d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f31655f-b870-43ed-8636-8ba74636caab", "sighting_of_ref": "indicator--d5013fd7-02e9-4b13-806a-fae3e478f379", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c9ee9f-3141-4866-aa8d-c6bddaa70c12", "sighting_of_ref": "indicator--fd9df1f7-825c-43af-8b45-c0aa3ed26959", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d3ccfc-1ac3-4790-ba8e-d7bb1ae472d4", "sighting_of_ref": "indicator--69d44dcf-16b1-4747-b3fe-db381ce4e40f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db41ba5-9d35-4846-af1a-85b194b34eb0", "sighting_of_ref": "indicator--14425430-294d-4bc1-97b8-717b96032ac5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d22156b-c3ab-45fc-b463-a101d01017db", "sighting_of_ref": "indicator--e81b338b-425d-4611-bdfc-ba0c55b3f69e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bab0903-f7aa-4d76-9a56-fcf45f7eab07", "sighting_of_ref": "indicator--a9bf2aa2-45bb-4b3f-b063-556625ea1e8a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e237b57-bb01-4f0a-9041-6886ccb279b9", "sighting_of_ref": "indicator--ade2dff8-14b3-4605-84f9-88b010529004", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1951ab-0d0e-4ec5-8505-45b286024dd0", "sighting_of_ref": "indicator--49d3822f-d7a8-4978-aa88-bd23b4abf1b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe823f6-ba03-4cb9-8d61-f7d5e7c672b6", "sighting_of_ref": "indicator--e615afff-8e2c-46ae-b168-02dce9428590", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d082e6-800a-4655-986b-e7400d1d4c34", "sighting_of_ref": "indicator--e2ee0a3c-8ac7-4d70-9dfc-63f6e1dec1cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d84e81f-7630-43ee-a6d1-97ba4c94b6c5", "sighting_of_ref": "indicator--630fb1b4-a5e9-47f3-a726-b454fbb8c251", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0673cab-2a36-4494-97e8-a5c04997d4c2", "sighting_of_ref": "indicator--a234e842-508a-4215-ab3f-511d90783b15", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4279ea-363d-4c33-b718-b0c6cf67645f", "sighting_of_ref": "indicator--5823b6cc-5d76-448f-b980-a8f9a9c80356", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592280fd-7675-4f4b-a6c0-c6a56dbc7c6e", "sighting_of_ref": "indicator--65f22e68-30d0-4c2e-a8ef-9665507a161b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9c539b-5925-44cf-8450-a63175ed399d", "sighting_of_ref": "indicator--d0d18a0c-971a-467f-a07c-b1405e86a193", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f5e4a7-e1de-40b9-a3e9-e1fc5d0ed2ac", "sighting_of_ref": "indicator--51f3a919-06e0-4408-8e9e-594f0fdaf372", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed48b00e-5b62-46cd-86fb-305aff6bfa4d", "sighting_of_ref": "indicator--20832b83-0865-4e65-857c-5fdb36b6668a", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0b7dd0-9062-4de5-bb81-ad2ebcf8fdf3", "sighting_of_ref": "indicator--a55268e9-b0f8-4304-a606-45af9c6aa2eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a72fa08-33e2-42d8-9b36-3196b02d6c35", "sighting_of_ref": "indicator--26a4e8b9-9abf-46ef-8e62-98676240cbed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab17861-655b-4052-8891-c9cabaefc635", "sighting_of_ref": "indicator--c75147e1-d517-4243-bf52-2c1d381eb355", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db4eb6d-22f5-4685-8865-4e03081d7b1e", "sighting_of_ref": "indicator--27e59884-e55d-4d72-9726-38911fee920e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c2e863-2990-4cd3-95b4-c0c8be4ef938", "sighting_of_ref": "indicator--afb98a4b-927a-4d1c-8217-a53a63b2d244", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f268b3-8302-40bd-ba8f-7a030d25b53f", "sighting_of_ref": "indicator--848ca72e-d7eb-4e03-bdaa-929510657b73", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154913ca-d9da-4667-b04c-515c2049cbcf", "sighting_of_ref": "indicator--30a01406-dfcd-455b-92b5-e646b55322fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6422d9f6-a13b-4528-935a-b80eea1498b1", "sighting_of_ref": "indicator--30a01406-dfcd-455b-92b5-e646b55322fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41591551-eec2-43b2-8425-83e2c71cc146", "sighting_of_ref": "indicator--f6dccefa-17c1-4b43-820d-fbc8b8e7020d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1c6867-b23a-43f7-bfb8-6ed23d6cd5ab", "sighting_of_ref": "indicator--0ba514cc-0d31-4181-8d12-67a934665b46", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197121fa-6cf0-4172-916f-798c8e4b7116", "sighting_of_ref": "indicator--0ba514cc-0d31-4181-8d12-67a934665b46", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523976ae-18fc-4f3a-a366-b8c2bd6764f7", "sighting_of_ref": "indicator--0ba514cc-0d31-4181-8d12-67a934665b46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4959cf-d9de-4036-9e24-da314912d1e0", "sighting_of_ref": "indicator--08ead9cd-2e0d-45ea-a49d-c89539721aee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13265419-8e82-411e-8416-0ef562de5993", "sighting_of_ref": "indicator--e546c9ad-8383-4128-b699-1a2cd0d24c31", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d500542d-07ab-430f-bab7-38395313fca5", "sighting_of_ref": "indicator--e546c9ad-8383-4128-b699-1a2cd0d24c31", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9872be-6187-44c5-a1c6-4bc307a661a4", "sighting_of_ref": "indicator--e546c9ad-8383-4128-b699-1a2cd0d24c31", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0417b353-6952-4506-a741-8ea71bc69acc", "sighting_of_ref": "indicator--7f9cbfe7-85b6-4b54-85b4-7f21ea07658a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b8f01e-534f-4d32-aba8-06e7a94f8af9", "sighting_of_ref": "indicator--7f9cbfe7-85b6-4b54-85b4-7f21ea07658a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f631aff9-b45d-4222-816c-7105d286c549", "sighting_of_ref": "indicator--a3a9b8ed-cda9-482c-b61a-fe9c3a14d12c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d3d1e7-353a-451c-870a-9a21a449f31c", "sighting_of_ref": "indicator--a3a9b8ed-cda9-482c-b61a-fe9c3a14d12c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae5ccee-6be0-4d92-987c-4e7c15e887aa", "sighting_of_ref": "indicator--bfa18693-9c79-4480-9b80-6403e9627856", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c535f4f-1caf-40b3-ba97-19db86b8df32", "sighting_of_ref": "indicator--70e3b3bf-fb90-47db-832d-12a9817c20cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379ff026-16e6-4cd7-a465-71061827be3e", "sighting_of_ref": "indicator--70e3b3bf-fb90-47db-832d-12a9817c20cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779bb224-40d7-4a4c-8a46-b281af4f88ac", "sighting_of_ref": "indicator--70e3b3bf-fb90-47db-832d-12a9817c20cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563e3b20-b01f-4a65-919f-8d667281acea", "sighting_of_ref": "indicator--d9579da4-4623-48bc-853a-4286037735f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a00258-1b8e-4548-b386-9ba6900c9a70", "sighting_of_ref": "indicator--d9579da4-4623-48bc-853a-4286037735f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c4a486-0ea0-44bb-a0e4-b8324a57182b", "sighting_of_ref": "indicator--d9579da4-4623-48bc-853a-4286037735f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bcafe2-8f93-4c75-b586-5fee62228205", "sighting_of_ref": "indicator--2985f8c8-f5e0-4aa2-aed7-a238c1a7c7e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b135a0f5-cd6c-4f09-bd76-56030ddc15f6", "sighting_of_ref": "indicator--2985f8c8-f5e0-4aa2-aed7-a238c1a7c7e8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586231ea-7da7-453f-a05e-83697abbafb5", "sighting_of_ref": "indicator--1d2783a2-98a4-4210-80a8-0bfb03f48906", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba63a0a-6382-465c-ac3d-8cd5a2d6f07c", "sighting_of_ref": "indicator--e2fcdc93-0f5c-4886-85ef-eda8f69731e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951fa156-c7f1-4de1-9cd5-6a08e2bc7656", "sighting_of_ref": "indicator--e2fcdc93-0f5c-4886-85ef-eda8f69731e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45d0c4b-ca12-4052-99fb-71f998254d02", "sighting_of_ref": "indicator--e2fcdc93-0f5c-4886-85ef-eda8f69731e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108b8d7c-768a-46c1-884d-c86124dabba7", "sighting_of_ref": "indicator--68c4c82e-e3df-4537-9de2-33e45298f85c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67226f6-0508-4676-a602-72f32e815401", "sighting_of_ref": "indicator--2c061c17-5112-4088-9d46-610ad769db5f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8635d22d-2829-4584-a1ed-d554318beeb3", "sighting_of_ref": "indicator--2c061c17-5112-4088-9d46-610ad769db5f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9732b8-d43f-4137-8c2b-0071664cb11d", "sighting_of_ref": "indicator--2c061c17-5112-4088-9d46-610ad769db5f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9b4005-805a-4a89-9260-94f3f5718530", "sighting_of_ref": "indicator--067e8c5f-ec80-4aa2-9479-ab6b66416610", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0538d6-0810-4531-89bb-3cb69491e98d", "sighting_of_ref": "indicator--067e8c5f-ec80-4aa2-9479-ab6b66416610", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534e30e6-b2ce-4c59-8b5c-3055f8ea428c", "sighting_of_ref": "indicator--f6cf7206-4b70-4483-bb5a-8d321741e0c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2075671-721a-49b1-813f-dd248b84f412", "sighting_of_ref": "indicator--8c2c74d5-42f2-46d3-a651-3b6577cc75f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4df0e1-2073-4cca-bbf7-04fa25253544", "sighting_of_ref": "indicator--dae64f9e-c813-435f-b03a-618dfea5233c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414dbc8f-b533-4c10-8b34-784015d9388f", "sighting_of_ref": "indicator--9a7ca24d-dc7e-4e49-8941-f07b49fd8ee7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d87e45b-ff2f-4431-a970-6437feb40ded", "sighting_of_ref": "indicator--50cd4f8e-a797-4976-b7be-acd42cc5b039", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d10f0f-c577-4e64-92ae-11b4700aa295", "sighting_of_ref": "indicator--90f2b1ad-d946-4661-9cb3-0bff1eae428c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add35426-c8eb-4448-bc4a-0b1b162b7d3c", "sighting_of_ref": "indicator--382fb552-fc05-4fc0-b870-464cd22ceb70", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51332095-adf0-4775-b65e-76d188bbb559", "sighting_of_ref": "indicator--3256f750-7c75-40c0-ba47-e20dd19199da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30316fc1-e4d9-411b-bb46-d6e6ee6bc140", "sighting_of_ref": "indicator--adca030b-38c6-4f83-807f-fdd592b8ad27", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21fa523-d5e5-4902-9cae-78fc522f30c6", "sighting_of_ref": "indicator--7b2e7d8a-b251-4d4b-9fb9-46f7e1ebf783", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71285b4-f941-4066-9866-7444f333e5f9", "sighting_of_ref": "indicator--edf54707-6e29-4d0d-88ce-8785d146a230", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27ede54-a712-43ee-9006-8dcad1f40ca1", "sighting_of_ref": "indicator--186d9765-9f3b-4bc6-8ea8-a7e61c20b44a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b50d134-b3eb-45d3-b214-6cc695192fac", "sighting_of_ref": "indicator--86a5f428-f1a7-4eea-9002-c12ed831308c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfb6121-3c17-4e0c-9e11-8ca4c8afda18", "sighting_of_ref": "indicator--17312715-1c03-46d9-9f70-616094de6188", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e8ab9f-2959-453f-b015-feea63ea5d0a", "sighting_of_ref": "indicator--17312715-1c03-46d9-9f70-616094de6188", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b619b5d4-eca2-45d3-ba83-f60ec385de45", "sighting_of_ref": "indicator--17312715-1c03-46d9-9f70-616094de6188", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab1d059-90ea-44df-a246-ec3e26999fe1", "sighting_of_ref": "indicator--1f4d32b3-7005-4452-a2b2-2bc99e15bd3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba055311-6c52-42b3-9671-b4f0d3a3e754", "sighting_of_ref": "indicator--c6f63e83-0d61-47c5-97d9-4a72957ee7f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670297bb-da42-4441-8881-e21741d56849", "sighting_of_ref": "indicator--952fc68e-7852-4911-bde0-efe0eb2b61e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aec53d6-1a6e-43cd-ba42-aec8f89c2e6c", "sighting_of_ref": "indicator--e9bb5326-fc33-41d9-b8e4-6b0fa19a97a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f073b1-5259-461f-bab0-1dfd31d5f310", "sighting_of_ref": "indicator--e9bb5326-fc33-41d9-b8e4-6b0fa19a97a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313727f8-5d1d-467f-ba91-daa15b43fbe0", "sighting_of_ref": "indicator--e9bb5326-fc33-41d9-b8e4-6b0fa19a97a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243ea604-141a-41a1-b1fa-5ac50c9dda1c", "sighting_of_ref": "indicator--a0ca44fd-f8fd-4fc2-bf70-a53008493106", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5fac49-5246-49da-8fd1-d39cc73ac1f9", "sighting_of_ref": "indicator--67337d94-afc5-4269-ae52-7f275b13356b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee2512e-2000-4bf2-91ee-b980bf2f3c78", "sighting_of_ref": "indicator--261d3ff7-c879-4b55-b45a-3c0112731c51", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bd71f7-001e-4d54-a0ca-8e313de2b5bb", "sighting_of_ref": "indicator--261d3ff7-c879-4b55-b45a-3c0112731c51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f4c3dc-fe7c-46ec-9347-522895bf955f", "sighting_of_ref": "indicator--261d3ff7-c879-4b55-b45a-3c0112731c51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b44fb6-dce9-4f22-a7ec-95a0b0ae0e14", "sighting_of_ref": "indicator--d5db6d77-cc5f-4568-be01-c6f8d3edd548", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2185228-9b2e-4739-9f26-5499cc46d482", "sighting_of_ref": "indicator--d5db6d77-cc5f-4568-be01-c6f8d3edd548", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a17749-9a36-4e6c-adf4-3a1e6d12976f", "sighting_of_ref": "indicator--d5db6d77-cc5f-4568-be01-c6f8d3edd548", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8e6c6b-0430-44e2-9a56-24a63d4d5859", "sighting_of_ref": "indicator--b73a098c-ec4b-49e7-ad07-f09aa68e0871", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc09bda-9466-41c6-90fe-c2f41519e926", "sighting_of_ref": "indicator--b73a098c-ec4b-49e7-ad07-f09aa68e0871", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289efb5b-7fdf-4f62-8aa7-46d615eb4d63", "sighting_of_ref": "indicator--b73a098c-ec4b-49e7-ad07-f09aa68e0871", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9f342f-6119-456e-a723-2b52224a311f", "sighting_of_ref": "indicator--0cece8f4-1736-41ea-8a70-5c872f2a5b9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9faa0240-8007-4b6c-a6b8-e09ef4412fa3", "sighting_of_ref": "indicator--0cece8f4-1736-41ea-8a70-5c872f2a5b9b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9565eaa7-7f97-40c6-89ef-30a93cb2d43b", "sighting_of_ref": "indicator--0cece8f4-1736-41ea-8a70-5c872f2a5b9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ea26ec-94a3-4715-8c1c-207c76b98132", "sighting_of_ref": "indicator--64c002a9-0d77-4a07-aaf8-e2347c0af504", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dd56b9-7b84-40de-8d02-fed9f3672f13", "sighting_of_ref": "indicator--64c002a9-0d77-4a07-aaf8-e2347c0af504", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800499c1-be4d-475b-bc44-367b3536f199", "sighting_of_ref": "indicator--64c002a9-0d77-4a07-aaf8-e2347c0af504", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9348cfcb-c53d-44d5-a15e-5b9ae9fecf02", "sighting_of_ref": "indicator--de721f69-169c-4d57-9877-5e4939a84c07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da935a51-169d-4b66-a19f-b2229cc1ae09", "sighting_of_ref": "indicator--de721f69-169c-4d57-9877-5e4939a84c07", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a8649d-65a3-48dc-aa01-d17c1103a181", "sighting_of_ref": "indicator--de721f69-169c-4d57-9877-5e4939a84c07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b528657-134b-4d44-9dbd-4436fee04b2a", "sighting_of_ref": "indicator--b5ca03d5-d30d-42a5-8c1b-9705c5a0a027", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a9f159-d491-4fa8-81b1-69c175f1ca96", "sighting_of_ref": "indicator--b5ca03d5-d30d-42a5-8c1b-9705c5a0a027", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3c982a-b2c4-4d18-aea1-7ae258e9f9bd", "sighting_of_ref": "indicator--b5ca03d5-d30d-42a5-8c1b-9705c5a0a027", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1544bf1e-3ae4-4c15-9573-8ddb57152daa", "sighting_of_ref": "indicator--0e82cf8e-6058-4d06-bef8-690962976fe7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d0423a-45e0-472b-bee9-dd7534d137ee", "sighting_of_ref": "indicator--801088c9-3988-42d7-aa0c-e24513f8c7ed", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede4e468-ae31-49c0-9dd6-1f55992ad55f", "sighting_of_ref": "indicator--f91c92d3-82f9-4451-8140-d8e316d4cb57", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7374c382-5eda-4e8b-b1f1-22a495be7e43", "sighting_of_ref": "indicator--f91c92d3-82f9-4451-8140-d8e316d4cb57", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d5d6fb-c6c6-4028-9800-86e1a50fd561", "sighting_of_ref": "indicator--eaafcbde-2061-42e2-ab1c-e323dae83495", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fedb81-ffbb-4602-923a-848edafa19fe", "sighting_of_ref": "indicator--c8e0de72-91b2-466f-b988-cb66c1352900", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90aa4e22-34df-45c5-82b7-ce643e09b2c6", "sighting_of_ref": "indicator--b5a939ca-fcf0-4ed5-9e5a-b132af24b22b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cea1095-c14d-4088-9c4f-d14de90fe660", "sighting_of_ref": "indicator--bb5627b6-e5bf-4522-acac-e5684e994a97", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0481c3b0-4cab-4126-a05f-57eb16fe1947", "sighting_of_ref": "indicator--f69233f8-2965-4b12-b236-c9bd21354936", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1653e1-c7a4-4794-945c-f9dda271c6a2", "sighting_of_ref": "indicator--6ce1820c-8b6a-4a87-988c-d65c5fac1fca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbfdf03-529b-4991-839e-eb092404c777", "sighting_of_ref": "indicator--2a5cff7d-2005-442a-a0cd-aa71d1e87328", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4c4623-78f9-4511-881a-e672a8ff0b79", "sighting_of_ref": "indicator--7c1b5e55-138d-4234-a6c7-b4dee34b1caa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975781b6-6b03-4d9b-b84c-f8fa6ad4b616", "sighting_of_ref": "indicator--9b78ac2c-ceb9-4f22-9dc9-26f2a136c0c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69996325-d565-4634-b7c9-d8280eca8966", "sighting_of_ref": "indicator--80fae822-a215-4e6c-bf2a-53dbbfa2cca1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35972fbc-f437-4dbf-ada5-dd18e911ea9f", "sighting_of_ref": "indicator--bc97ffb8-3c2a-4852-8065-30268d1553a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de6bb03-e88c-4d2b-a824-4f6f29ba034d", "sighting_of_ref": "indicator--28664b6d-0bde-4fb6-8eee-68966502b57a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fba2e6a-5e6d-414a-858b-f6480980fadc", "sighting_of_ref": "indicator--bd9108f8-06d1-42f9-b4f3-b80b7dd42373", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04531d45-7d81-492f-aad4-80900516ef46", "sighting_of_ref": "indicator--3cace55e-7eb1-49f4-97e0-26c6ea4cd9ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd221bf-d0b2-4535-b996-ebeb91c0a227", "sighting_of_ref": "indicator--f77247a3-9292-4d33-a8e0-ac49917d9199", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8594c3-8acd-463e-81ea-55a0c94b0c98", "sighting_of_ref": "indicator--5a227cff-d016-420b-a928-c090c5ccff9f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f89242e-2d46-4ab0-b1e6-5d8292cbe33d", "sighting_of_ref": "indicator--73900b48-31d9-457c-ab0f-120c4096c9cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae9d7cb-0ced-4b75-8f80-1ea4b7d98a1b", "sighting_of_ref": "indicator--73900b48-31d9-457c-ab0f-120c4096c9cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8584075-c10e-430d-afdf-d92f631429cc", "sighting_of_ref": "indicator--c03cb3d8-d14a-4f84-85f6-51a068a47c85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4284cbfe-8306-4bbd-a210-2c044bbfb60b", "sighting_of_ref": "indicator--b276d16f-e396-4408-b31f-4f8fd2dd1e10", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7873304b-1582-4723-9861-1679dc57af17", "sighting_of_ref": "indicator--31bba972-f551-4c09-9f66-f307ab2425b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75dca3bf-c786-4009-b7b2-6afd423312ee", "sighting_of_ref": "indicator--e7bf4e4c-5772-4442-9fef-7841e6484c1b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28375ffb-5b5d-4c5d-88bf-f4ebb2e74052", "sighting_of_ref": "indicator--c2400425-7dd2-4314-a6cd-0da826627a24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791b8981-7fa9-496a-96d7-81d17a4ce55c", "sighting_of_ref": "indicator--8dfb522f-7fbc-453c-afc1-f347179ffe66", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96e0864-c2f4-4698-82b1-3895ff86281e", "sighting_of_ref": "indicator--8dfb522f-7fbc-453c-afc1-f347179ffe66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c1e855-b0bd-4f38-abac-f3b24460f287", "sighting_of_ref": "indicator--b630079e-897c-4e3d-b5b2-43598a4ebc18", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f8f372-7184-46c5-98c6-0e61fe5f7c9a", "sighting_of_ref": "indicator--b630079e-897c-4e3d-b5b2-43598a4ebc18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2523b0e1-a11e-4385-95ff-bda0859b800c", "sighting_of_ref": "indicator--9278953f-89de-4dc5-b153-c3d16e9a7b3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfa7958-cfd7-4ced-9276-4a3516c751d7", "sighting_of_ref": "indicator--6a145a1d-7f38-4eeb-af19-9607bfdefd9f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27741c68-fb6a-46f4-9590-7d26f5de3e7c", "sighting_of_ref": "indicator--d96b7989-a221-4385-b308-9bc537ab2151", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43433584-188e-4217-8ad3-8db4670191c8", "sighting_of_ref": "indicator--b8a14ed5-1441-4a2f-a395-caf01ca4dd7f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1b676c-88d5-4d05-97f2-7819801b2448", "sighting_of_ref": "indicator--d5857a66-8bba-4d50-b3b0-649af255b51a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553bed86-343e-46af-a9b2-ac617f3c206d", "sighting_of_ref": "indicator--d5857a66-8bba-4d50-b3b0-649af255b51a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f71503-22c9-44ae-a97d-1fbaf09b5563", "sighting_of_ref": "indicator--d75795ed-e336-4d14-8ff5-f7251be73042", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314d69b7-389d-495c-bc20-c98c05291e64", "sighting_of_ref": "indicator--e1f9cbe9-47d5-4668-8196-6f7bbbc9f79e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6eda13c-1994-4b1a-bcc6-7a07bbe70b1a", "sighting_of_ref": "indicator--124879b5-692c-4c83-b096-554cef551ce0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecebf2a-f2e5-498d-ac04-42d27e7fe731", "sighting_of_ref": "indicator--776b53c2-bdeb-42f5-ab7d-00c5658b069c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b64ab8-2e69-45c7-86fe-eda5c5c5809b", "sighting_of_ref": "indicator--76fe5f9b-dcab-4e19-a60e-a40601783ce5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957725ef-1df5-44c5-8ee7-74e201169b74", "sighting_of_ref": "indicator--680d5d76-7835-432c-b938-2ec2626ef2c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1e74c4-736a-47b1-ab7f-93efecd91749", "sighting_of_ref": "indicator--774625bd-02c2-4bb4-be20-c10f56ed0142", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a22c44-183a-4fbd-bedb-5a1ef5b6829b", "sighting_of_ref": "indicator--525a6a3f-a4b6-4ddf-9756-df26d278cdaa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc958ca-8199-4680-9052-b22fa49746e9", "sighting_of_ref": "indicator--4b1347f6-7b31-417d-b2fa-c6cd0380414d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38843ce-d32c-40f0-9bbd-6fcd1b6c009a", "sighting_of_ref": "indicator--07470003-3c85-468d-ba93-6d62da5425a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661afa3d-4f95-45ed-832f-dbc6c337390b", "sighting_of_ref": "indicator--1f6997c0-f698-433f-a027-f6ebfcc84303", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d39d134-e927-421c-a397-6f1fa5906f41", "sighting_of_ref": "indicator--ef12c606-8c72-4ce5-8f18-680f27bb9432", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dec536-9473-4f2a-b7cd-97eddac38cde", "sighting_of_ref": "indicator--728cb246-5f4f-463b-ae8d-6d201bde9d7b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd6ca12-1921-4edc-b296-9ced815b200a", "sighting_of_ref": "indicator--41825585-d77b-410a-a082-10cf64eed77b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73af6021-cb47-4ee9-90f9-315f35a2f13e", "sighting_of_ref": "indicator--19c4dd11-5574-4c48-92d5-df488e6a001c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b96cde-63bd-4069-a149-25d0bdebf841", "sighting_of_ref": "indicator--0f6f2117-3724-4f02-8e6b-f82901dc9017", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384e906b-a8cf-48d3-8766-60433e18e392", "sighting_of_ref": "indicator--0f6f2117-3724-4f02-8e6b-f82901dc9017", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa397658-4c6d-467c-81dc-89f8620b1ed1", "sighting_of_ref": "indicator--a08187ea-ee07-4ce0-8752-13529328c440", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d336fd7d-b6d0-44a9-9051-8fc6517d4909", "sighting_of_ref": "indicator--a08187ea-ee07-4ce0-8752-13529328c440", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df406b8-95fa-4081-878e-47c397a10ac9", "sighting_of_ref": "indicator--a08187ea-ee07-4ce0-8752-13529328c440", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e9e557-d50f-4787-b2bb-a119a2f59d95", "sighting_of_ref": "indicator--1356cda5-8ebf-4ba0-b790-034b10a65833", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffb8088-9ef7-4b7f-a471-e85b0f61bf35", "sighting_of_ref": "indicator--1356cda5-8ebf-4ba0-b790-034b10a65833", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20b88cb-dfba-433f-81f7-8a1e16f2e7ab", "sighting_of_ref": "indicator--1356cda5-8ebf-4ba0-b790-034b10a65833", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d34780-cc5d-49e5-a0fd-91c5cb3a2cc4", "sighting_of_ref": "indicator--7aa93d9e-75aa-48e1-b4ed-f5838e1af7ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf675179-c89a-454d-ad6c-95e1cadd64f9", "sighting_of_ref": "indicator--fed3eac8-cb4e-45f2-b372-d4ee6d17e2c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdfa13c-23a3-4b1d-b441-9d8e9a161c1d", "sighting_of_ref": "indicator--b1c153e7-5303-4361-9fb1-0fd13e72d6d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed09c4a-81c0-487b-ae84-9e51056d31c9", "sighting_of_ref": "indicator--51c52c24-f00b-47c5-8d2b-3eeeb5a84d2c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830a000d-7065-40ad-a5b6-5fe96cf8b6c9", "sighting_of_ref": "indicator--ce6b261b-6e31-4ec6-9dcc-0b0d3fea8fb9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8031b365-91a6-4c5f-a785-8877b9ef7755", "sighting_of_ref": "indicator--9209fb0c-229f-401c-81a2-2bfbf51a9b68", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6150f591-81e5-429e-9419-9f78731b37ae", "sighting_of_ref": "indicator--33a13529-ea8c-49a7-a8af-b4cd60f8cff2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d998d81f-8c2a-4b87-aa95-0ce3070d656e", "sighting_of_ref": "indicator--36e538ff-3734-43c9-8b47-1cdbbfff8b22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b0ae7f-3864-4d5a-a40b-bcea59b020f1", "sighting_of_ref": "indicator--af9936d5-173e-47a3-91fa-c5d5923ee4b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368fe697-86fb-4d57-8e41-0df9c1f893c4", "sighting_of_ref": "indicator--392ad431-dffe-4265-858a-854f3ac973e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1792d902-930b-4f16-8e67-a5af28e4a19e", "sighting_of_ref": "indicator--92075470-a4d7-48e2-9085-2c26aae97da6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05860e0-2d2a-460e-b931-ca1eb9b5c803", "sighting_of_ref": "indicator--f3388098-35d0-4083-bc5c-18e9833485c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2df3c3-c0e3-47ee-95da-3e294b7648ab", "sighting_of_ref": "indicator--4d0e8330-206d-4637-99b6-0eac8df85b88", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac6b945-2d84-4c8d-a417-b6b20f6e9383", "sighting_of_ref": "indicator--f1b2c841-6b5f-4631-9a1e-13ae4ec84774", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840ec0f1-8c0e-4906-a30f-3a8c4b54b320", "sighting_of_ref": "indicator--f1b2c841-6b5f-4631-9a1e-13ae4ec84774", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792d7a62-710b-4cd6-9429-c0e9419415df", "sighting_of_ref": "indicator--8a46f1bd-7546-4ca9-aef0-c37b12db35d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f859d4c-4222-4bbe-9431-741f21a0ead7", "sighting_of_ref": "indicator--c25963ac-b7a6-4702-9300-1ea81e8b2cd4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a13c83-c853-4c9f-b3ca-055a242df8cf", "sighting_of_ref": "indicator--01b51740-d71f-4d01-8fd5-843408c243eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b011b81-8b85-4b4a-b349-f6b23576ebaa", "sighting_of_ref": "indicator--b3888491-efc9-4f37-926b-17996db63bb5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f22f80-3550-4a2f-a19e-a93184eebf05", "sighting_of_ref": "indicator--9c7615c6-6ee7-4a57-bffe-17ecb2672878", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044e143d-d588-4816-9e2f-87ba9d6ab0bd", "sighting_of_ref": "indicator--f32c9e82-922b-4994-982a-00020281fad6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a596482-0688-42ad-b20a-7b12944d2ddc", "sighting_of_ref": "indicator--f58875f4-ed10-4f7c-80c3-3b607956286f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17475f75-85a1-41ec-b090-8ae2f18e4281", "sighting_of_ref": "indicator--9948eeb2-42aa-40d7-bd5b-4e445ce4d504", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb10414f-d8f4-4132-8ea7-e99fe7e100c9", "sighting_of_ref": "indicator--729573bc-ddc2-465c-9668-f5f7fdb9a1d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e343f021-44c5-4dce-a781-dee8fcd86fa3", "sighting_of_ref": "indicator--3ce06534-1ee9-4287-8ab2-1d188a7777ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05ab2f1-7403-4a92-b57d-3b0b5e4ea5f4", "sighting_of_ref": "indicator--3ce06534-1ee9-4287-8ab2-1d188a7777ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7492b7-1d96-4e19-9c73-d2aee6ebb19c", "sighting_of_ref": "indicator--3169b775-8ce5-48cd-a810-2d8183a5b742", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1240dd3b-97d1-4d27-8b81-c6202141587b", "sighting_of_ref": "indicator--bcbf2baa-abf3-49a3-8ef2-192d532fac70", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9e78dd-abc0-4266-82aa-f4be74327bf1", "sighting_of_ref": "indicator--164b371b-6362-400d-b596-6f455670e168", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e271433-ffa7-432d-9f2a-325576817724", "sighting_of_ref": "indicator--df9d4fe9-f673-4603-be9e-3930516a9a67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0af651d-f02f-4f71-8131-11902c4a0d44", "sighting_of_ref": "indicator--80d85988-b3ab-4fd4-b9ff-dcbff2c5576f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2771acb4-eb43-4d6a-a05e-9213bd953971", "sighting_of_ref": "indicator--f4cf5a0a-89ff-4d14-89fc-8992a3b66175", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4845b4-396e-4064-ad39-c70f2147ca50", "sighting_of_ref": "indicator--a8cebe95-7025-45f4-9703-59154feea4ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7027a53-ddbc-4d40-b730-e9a75bd427b5", "sighting_of_ref": "indicator--f279b808-5fa6-4737-a5f7-9bc93e291330", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414ded55-bcc8-4a55-ad84-802b33e45450", "sighting_of_ref": "indicator--65bcee73-64e7-4c8f-adff-b25895b96780", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d486dd-a799-4d97-8049-cb5549350e32", "sighting_of_ref": "indicator--b6b51229-5213-4dfe-91b4-fca4ce625c81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d09e75e-14a1-4fbf-9f30-ad79137e2a7b", "sighting_of_ref": "indicator--c4d849f2-d512-4a69-97ea-0ab5cc75fb0f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa2efa0-46c6-4d6e-b166-add286ada2f1", "sighting_of_ref": "indicator--c4d849f2-d512-4a69-97ea-0ab5cc75fb0f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d654b8c9-d97b-466a-87f8-57d3f2bfc5bd", "sighting_of_ref": "indicator--c4d849f2-d512-4a69-97ea-0ab5cc75fb0f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ba10f5-053c-4ab4-b234-4fd45b461afc", "sighting_of_ref": "indicator--f0b0c911-f6e2-43c7-817e-7a96b5b468e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2821591-d896-4afa-a77b-2f1e327ef7dd", "sighting_of_ref": "indicator--05649e94-e5a8-45eb-9ab2-b5f0a802a7cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0553d149-e8df-44de-bc6e-9741e4c74e19", "sighting_of_ref": "indicator--ffc52fb1-f055-47d2-a259-6a94f35489a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc728cc1-0637-4985-b4df-c07b4e2a5ed1", "sighting_of_ref": "indicator--f406bbd1-0319-4f23-bc10-ec4adb47d1cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7e301b-8da3-4bcb-95bb-87f888a33488", "sighting_of_ref": "indicator--fe17059e-7d4b-494e-9066-4e0c841d3869", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54869ab-78e2-45da-85b7-8d87b3ced6cd", "sighting_of_ref": "indicator--fe17059e-7d4b-494e-9066-4e0c841d3869", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1177c0e-1fbd-4d60-80d1-ab40ad25d38c", "sighting_of_ref": "indicator--a4b3b87a-761a-46d3-83da-639c15ddb650", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c348b5b6-2ca5-4614-aaee-38cb9cd814b1", "sighting_of_ref": "indicator--a4b3b87a-761a-46d3-83da-639c15ddb650", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6a9484-a70c-40c7-91b2-541ee61df348", "sighting_of_ref": "indicator--fd04270c-559c-4602-8783-ea11d944e26b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3258cd-99fc-4bfd-a30b-49bc5e5aece3", "sighting_of_ref": "indicator--ed0b3b5b-7267-45e8-ae32-2dae26ef1322", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1ac89f-abae-4ce0-a48c-bcf88d2ef4f1", "sighting_of_ref": "indicator--ed0b3b5b-7267-45e8-ae32-2dae26ef1322", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e9dc2e-bedc-4f55-807b-71602daedd38", "sighting_of_ref": "indicator--9539f37e-9340-45c1-b0d5-94beb408a917", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58131131-b093-4956-bd43-5284208813ad", "sighting_of_ref": "indicator--a977e71a-15ba-47f1-a9d4-d339d1cfae29", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5248f1e-9701-4917-bd9c-3cf5b99d8e87", "sighting_of_ref": "indicator--0a9f5acc-079e-4c97-a14e-802b8def0eef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecfdce1-16df-43ba-b9da-d4468877f17b", "sighting_of_ref": "indicator--feed5391-d0e9-4d27-9729-ac8f97590d19", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a663d78-0acf-4cd9-85ac-83454564b5f9", "sighting_of_ref": "indicator--e279581b-32d0-44d8-af02-5741faec178d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7a42d1-c2ef-4a96-a228-53fbf431fcb7", "sighting_of_ref": "indicator--cac2ad11-3128-42c9-b0da-cb03a95cd06e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8a28f7-26c8-43a5-be02-734957084556", "sighting_of_ref": "indicator--751e4f26-c37e-4ddd-bf82-0b601061d4b5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c318c6c4-d38d-403c-a6e4-b05e1d01252d", "sighting_of_ref": "indicator--1da52acf-a766-4b04-be85-ab76e5c41df2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a5f549-0772-4ec1-8afc-10f0d2b24614", "sighting_of_ref": "indicator--98a4c569-b285-453d-9100-2d49ed8e7ffc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab65ab32-7d79-44ac-9cf5-e78573068f6f", "sighting_of_ref": "indicator--fec74bf8-8a76-4ffe-930a-524e0b4b0910", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b49334-840c-4585-b32e-eba8f99bc038", "sighting_of_ref": "indicator--35553a12-9d84-4c7d-bf66-027ea424bc8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aac3e65-baf0-4526-80df-67ac381f0af2", "sighting_of_ref": "indicator--cea5e99f-2881-44de-9abf-151f2e889dde", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594a1bda-5114-4b6a-9e73-63812522c032", "sighting_of_ref": "indicator--dcd05dda-a258-49f8-be9a-6fb201714f1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d16266a-8046-48b9-9e64-7128be3d2e06", "sighting_of_ref": "indicator--5f8d605c-5a09-4f21-9bc2-4fbc9d29d901", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe014efa-0163-4ef3-ada3-6e1143112b01", "sighting_of_ref": "indicator--5f8d605c-5a09-4f21-9bc2-4fbc9d29d901", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1525ac23-b77f-4c4f-9135-132b6f675e36", "sighting_of_ref": "indicator--087b6d9b-d75b-411a-8b6a-180f7394c220", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49970be2-f851-49e3-8997-93e608359a48", "sighting_of_ref": "indicator--007955f2-5595-41a8-889c-0aebdc530b2b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aabb22a-23a3-4f59-a0e3-49e596e5f382", "sighting_of_ref": "indicator--3017eada-12e8-4cb6-88a1-6f0c5e868385", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14179c2-3da7-4562-8be1-7c741c354d7a", "sighting_of_ref": "indicator--5611f76d-8856-492d-8d9e-2a0909196e6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7193ffe8-5aa4-4d6c-89d0-e5c59d1fe6d5", "sighting_of_ref": "indicator--4461bd04-bdbc-40e2-b223-017fbf1d0fe9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37dc3bd-7e42-4c71-960f-8b70598c85aa", "sighting_of_ref": "indicator--ef7e9e4b-3da9-48ab-b631-2d2599810fd2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e516bf0-c0ac-4df3-af4a-2907e5da5580", "sighting_of_ref": "indicator--ef7e9e4b-3da9-48ab-b631-2d2599810fd2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ff2dde-1069-4905-b418-06338978dc10", "sighting_of_ref": "indicator--69391fb8-0da0-4927-956f-a3dc442d1eaa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fbe6df-8504-4c5d-ae0e-065f7c7f6772", "sighting_of_ref": "indicator--83b50203-12a1-419a-8623-98cbd330ec3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db145280-486b-476d-8b31-8fe5f92fc16a", "sighting_of_ref": "indicator--7f5cdc44-a86c-4509-9057-2b151813e66c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d113f3eb-0118-437e-ae3f-eb78a79b964e", "sighting_of_ref": "indicator--e2ed874f-fc80-4b6b-9be4-a88548397a45", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c2384c-7bb0-4e52-9b8e-d574f886db78", "sighting_of_ref": "indicator--87cf8a0b-c668-4445-9aba-6bd8e34bb50d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd8f4f9-abb3-425e-ac18-709059e1c6e2", "sighting_of_ref": "indicator--70e6a60f-7af9-45ce-a3ab-1be2383ad26a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efa4c81-6546-479e-a551-2dfcae61b19d", "sighting_of_ref": "indicator--8ff32b4e-f86f-4e41-94cc-4343739e87b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5981714-50ca-4bbd-aa1d-ce48e35bb4c6", "sighting_of_ref": "indicator--2f14d0b1-bdf5-42dd-b641-1623ef279bb8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e93558-2370-4c29-abfd-de89a065c20b", "sighting_of_ref": "indicator--23f08ac6-75a0-4c9c-b443-4e2275cf8642", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c1c1f3-c5e9-4040-8426-27f12f819ddf", "sighting_of_ref": "indicator--23f08ac6-75a0-4c9c-b443-4e2275cf8642", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce88ff3-d3d1-4c85-b905-9412d192d0fa", "sighting_of_ref": "indicator--ce776d9f-9cb7-4901-b1fe-852c76c28ec2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9656ca7-c896-4676-a33d-428fa2f279e2", "sighting_of_ref": "indicator--2252d127-dacb-457e-9461-5f1fb18dc746", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea69ec39-ae6c-4df6-b06f-d87848d147b3", "sighting_of_ref": "indicator--ae67fbcf-d82a-4ffc-86a3-8b208b23eedb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b795f9-b70c-4b22-b4fd-738f7bf05192", "sighting_of_ref": "indicator--156ced10-276a-441a-9d02-8f40bb322688", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1077e213-3e29-444d-9087-df569228cbac", "sighting_of_ref": "indicator--0b156cce-67fe-4645-b4f4-909b884777bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88709c94-bac9-4f18-a440-a585b9b08064", "sighting_of_ref": "indicator--70bb3b16-666a-4e0f-a8c5-78fe5a4a0cd4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d919fbc3-92da-4653-b06d-6dc46ba6bcb4", "sighting_of_ref": "indicator--1fef792b-a0bc-40e9-8948-13a2b896a238", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b461373-df00-487c-ad8f-f20af4190bf9", "sighting_of_ref": "indicator--1fef792b-a0bc-40e9-8948-13a2b896a238", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8307497-933a-4074-aa7e-116b9936e5c8", "sighting_of_ref": "indicator--658e1df9-c2a8-481f-a190-428423759d3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d99b797-f3d0-44cf-9d4e-54fe77e1483b", "sighting_of_ref": "indicator--9f2f34c7-1f0c-4d46-b282-d2c281b1fdd5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a615438f-00a1-4f98-92ab-62bbb8200a06", "sighting_of_ref": "indicator--74a3fea4-faf8-4c6d-bbda-d1cb903b12c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d7e8f0-5908-4cd4-85f4-174a3176c90f", "sighting_of_ref": "indicator--03b2e062-8f60-47df-be22-63aa976655af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8220aa5-1e21-49d7-bffc-8463705143d8", "sighting_of_ref": "indicator--79811144-c75e-411c-a7ea-fd9dfc2eb2d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc0ce61-ab13-483c-a697-03cb759df601", "sighting_of_ref": "indicator--79811144-c75e-411c-a7ea-fd9dfc2eb2d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df241b0-fdf9-438c-8db1-b8da7ebe1625", "sighting_of_ref": "indicator--19d3b65c-60de-450e-8cac-904159e91228", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae26526-8615-4b86-9f9e-eb5aba9320da", "sighting_of_ref": "indicator--455e061b-63e1-4267-875f-c66e1a1da0e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053c063e-abfb-43aa-a28d-4637cb58d2b8", "sighting_of_ref": "indicator--455e061b-63e1-4267-875f-c66e1a1da0e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47939f7-0f0a-469c-8f6d-d892e20b93f8", "sighting_of_ref": "indicator--0c883531-e91c-4c69-b910-5ab446c19959", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c132589-a8a0-44b5-ad88-1e91db078b7b", "sighting_of_ref": "indicator--a8f8f8e2-ef79-4be9-827e-1b82432298ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f2e25d-cb70-4515-ab49-afc044d65756", "sighting_of_ref": "indicator--aed1a124-252c-44f1-a410-c6cb62aa1511", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65d0d2d-5062-4dff-a5fc-b15fd15128a2", "sighting_of_ref": "indicator--5d77e082-7e5b-403a-baed-2c95dbe2bb8d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225da3e7-7a6e-4e14-847b-cd41731cbef3", "sighting_of_ref": "indicator--5d77e082-7e5b-403a-baed-2c95dbe2bb8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdbd585-9e83-44b6-a9db-6f45e3cf5814", "sighting_of_ref": "indicator--e4abbfd9-78ba-4400-962c-92b0e6c6239f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b94fdbc-9f75-4042-9bf9-f2ab4e354180", "sighting_of_ref": "indicator--e4abbfd9-78ba-4400-962c-92b0e6c6239f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c877bf8c-1c33-4073-be3e-7e09eababe72", "sighting_of_ref": "indicator--e4abbfd9-78ba-4400-962c-92b0e6c6239f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4180f736-a911-47ab-b762-342b2cd2fcc5", "sighting_of_ref": "indicator--139536de-6284-4c3b-99d0-d030f3070750", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f298b914-09e8-4b3a-9b85-bcb9317d54b5", "sighting_of_ref": "indicator--1c1d45f8-14bf-44a7-996c-63757015c7fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6083122-814e-40e2-a375-829957dbef79", "sighting_of_ref": "indicator--5b02c449-c296-4bb8-833b-0a9397d87357", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672500e7-c8c9-4484-b0b0-b648694b9bff", "sighting_of_ref": "indicator--f2b86a20-9ef3-4dc6-9fdc-a5944bcda959", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23692489-6815-4740-bf1f-fb88aa9364b2", "sighting_of_ref": "indicator--f2b86a20-9ef3-4dc6-9fdc-a5944bcda959", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06be704-c78d-445d-ac89-d264f1c0405e", "sighting_of_ref": "indicator--6fdf1e7f-be87-4cf5-b7b3-0700200daa49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c327df9-90f2-451e-ac64-e561c9c850fa", "sighting_of_ref": "indicator--6fdf1e7f-be87-4cf5-b7b3-0700200daa49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de60cb5-c338-4fb3-b62a-99abc37d31bd", "sighting_of_ref": "indicator--6fdf1e7f-be87-4cf5-b7b3-0700200daa49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13ab6ca-4a69-4fd7-9807-a385b817d4ce", "sighting_of_ref": "indicator--269f5bfa-c473-4aea-86d9-cb2207b9b498", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbf8151-f664-4dda-b014-d18b8f3a9113", "sighting_of_ref": "indicator--095bff6e-255c-45ba-b51f-5ba051987e45", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39102e0-8e8a-4608-bd40-0ca0951b147e", "sighting_of_ref": "indicator--64190f27-3c74-4c6a-a5af-7c000dae5166", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a93efb-8b31-4b87-b64d-71b3513ede87", "sighting_of_ref": "indicator--6d5e85cc-5cc2-4d03-aa4a-fb4defa7df05", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ac6882-fe9a-4cdd-af0d-937f813dea40", "sighting_of_ref": "indicator--6d5e85cc-5cc2-4d03-aa4a-fb4defa7df05", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2c46ad-cd97-4993-a6a8-91e6e6fbc811", "sighting_of_ref": "indicator--6d5e85cc-5cc2-4d03-aa4a-fb4defa7df05", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d30a32-4e71-4917-b25e-aeae3df6e41a", "sighting_of_ref": "indicator--49dd8aba-91de-4514-ba2b-ffd56ae5b5df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07736cf-132d-4cb4-9718-eca18d12d5a3", "sighting_of_ref": "indicator--49dd8aba-91de-4514-ba2b-ffd56ae5b5df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8de439-87e6-4e28-85f8-3295755c8f90", "sighting_of_ref": "indicator--49dd8aba-91de-4514-ba2b-ffd56ae5b5df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b39e1c-26bb-417e-8fdc-44b2c14321ee", "sighting_of_ref": "indicator--945e03c3-0afa-415f-bee5-6fd143a0e957", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7bd7ea-9dd9-423b-8ee1-5b4f8f01cb31", "sighting_of_ref": "indicator--945e03c3-0afa-415f-bee5-6fd143a0e957", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eeafe9-838c-4bdd-9b59-cb8777bea582", "sighting_of_ref": "indicator--945e03c3-0afa-415f-bee5-6fd143a0e957", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce5803b-ead6-4739-bc19-3b7f61ca68ed", "sighting_of_ref": "indicator--beacea12-8c6e-43ed-9649-17d01490c2fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beba0640-c742-4a4d-8e22-5010703fce1d", "sighting_of_ref": "indicator--57f91ec3-8173-4ef8-85e3-abe03817c3fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e966f2dd-dfc6-48fc-8dbe-bb4d08fdbd3e", "sighting_of_ref": "indicator--db21ce40-2528-4d77-8a14-29e248ef293f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c66ca5-de5f-4142-9c04-236138b21986", "sighting_of_ref": "indicator--9375b26a-1c7d-4b7b-987f-609c2f4d1a2b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733b1e63-3907-4658-bcdd-687b833f513f", "sighting_of_ref": "indicator--ca5d2a30-14bf-4696-a72a-76dd14a39c5d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29213fc6-f9bc-495d-aba6-d09391ad436e", "sighting_of_ref": "indicator--75a4ec19-4390-477d-98db-10803258f33e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac38cc49-6bf6-491a-874b-5fdc5965bba4", "sighting_of_ref": "indicator--b60ba4aa-0399-4f8c-8a45-b448f91843db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fb81cc-90cc-46ad-8f40-54b0e0df95fc", "sighting_of_ref": "indicator--b60ba4aa-0399-4f8c-8a45-b448f91843db", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37216009-fc16-4d9e-a73e-cf46281e7491", "sighting_of_ref": "indicator--b60ba4aa-0399-4f8c-8a45-b448f91843db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f5cbe1-880e-4444-82af-5b06983fc049", "sighting_of_ref": "indicator--6ab41d7d-a1d3-494f-b6aa-b9e14f25fd18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438d562f-7890-42de-b500-cd7ca26e9867", "sighting_of_ref": "indicator--657f63ef-2fb6-4de9-84b5-3b5e171558fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09f744f-e9f3-4c92-998f-19715bc8f389", "sighting_of_ref": "indicator--67a339db-2137-42b5-b702-6de2ff21da90", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1666cb-0f55-41ec-83bf-12b4db4796e9", "sighting_of_ref": "indicator--fc7cb0e4-7077-42b4-9908-dfb7423a72cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f44efc6-e269-4c31-90ce-1c58f2af4508", "sighting_of_ref": "indicator--c2c96878-ff1f-4705-a6af-7ba5c19b1d6f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8e5600-c612-4218-8c6b-4a03a26893e0", "sighting_of_ref": "indicator--82cc68ab-c5be-4528-b76c-5402352edb40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb034c6-9a13-46b9-b2e9-c06aece62ac1", "sighting_of_ref": "indicator--606bfd6a-a8c4-4864-a20c-55c7b9cec97e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e219559a-659f-41ec-82b7-f29cdb7f80e6", "sighting_of_ref": "indicator--606bfd6a-a8c4-4864-a20c-55c7b9cec97e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922ee3cc-c399-42cb-920b-b579578484b6", "sighting_of_ref": "indicator--606bfd6a-a8c4-4864-a20c-55c7b9cec97e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7143cdc7-b1c3-4c07-ba8a-672bb44a5e41", "sighting_of_ref": "indicator--e824b103-ec8e-48ab-96dd-71ef487b3685", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db394304-b40e-4f20-90df-e28997997a23", "sighting_of_ref": "indicator--e824b103-ec8e-48ab-96dd-71ef487b3685", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9870a8c-6265-4188-ad07-e41b73050729", "sighting_of_ref": "indicator--e824b103-ec8e-48ab-96dd-71ef487b3685", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e15b61-d2f7-494f-a03d-3027dae53fed", "sighting_of_ref": "indicator--1c02d7c1-5832-4776-bb79-92c3918c8a4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82440cd6-771c-440f-8735-6c7172e43155", "sighting_of_ref": "indicator--1c02d7c1-5832-4776-bb79-92c3918c8a4e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac12681-66a6-4378-8e6b-790ca9351657", "sighting_of_ref": "indicator--1c02d7c1-5832-4776-bb79-92c3918c8a4e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffc71fc-1f05-4a2a-84b5-f6825d6c857c", "sighting_of_ref": "indicator--b4292bb8-44c9-40ae-9e9e-76f0648de75e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67031db-7336-43c1-aed7-79124aa4ba11", "sighting_of_ref": "indicator--1eb417bd-98e1-4f36-a0d5-a7e96f961d5b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65240b2-0164-4e5f-b779-86759b4ee132", "sighting_of_ref": "indicator--1d003290-f3f0-4acc-bf01-31f005c37c28", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88fa42d-e644-4f76-85d6-396c6ea9bd43", "sighting_of_ref": "indicator--9ea44aea-e6b9-4593-ac4f-dca794136bab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df28e02-5d83-4b86-93b6-3c8cc300fd2d", "sighting_of_ref": "indicator--bf26ca97-280c-4b40-83cf-6366f47623c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd209f0a-dd06-4dee-a6b1-1ea0df50551c", "sighting_of_ref": "indicator--bf26ca97-280c-4b40-83cf-6366f47623c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e2190d-7123-4e20-ab34-bd6814aaecc0", "sighting_of_ref": "indicator--577a4137-f811-4fcf-9f86-cc0cd4d065f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d711eb94-4aac-4b3e-a630-ded12b6a369b", "sighting_of_ref": "indicator--9c48a1e6-9551-4e27-8523-b5be189e30f5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4831c6-8354-43a2-99a4-9bea2b9c13e1", "sighting_of_ref": "indicator--9c48a1e6-9551-4e27-8523-b5be189e30f5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037b5f55-b453-409f-b260-0339a8e7d91a", "sighting_of_ref": "indicator--9c48a1e6-9551-4e27-8523-b5be189e30f5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811fe684-5c3c-4545-ae08-bc6d95fc45bc", "sighting_of_ref": "indicator--2c8dbe45-ed48-49df-b98c-7f3850197edd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192e355f-6307-4026-98eb-a5b893816906", "sighting_of_ref": "indicator--62394c8a-9d3e-4138-aab1-ed3bf61c9415", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707caa0e-6d17-46f1-975f-47dd6b4fb5c4", "sighting_of_ref": "indicator--a6a66e5d-4d7c-486b-b3b6-41ec671c3403", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7a76c7-ebc1-455e-a527-017266956378", "sighting_of_ref": "indicator--a6a66e5d-4d7c-486b-b3b6-41ec671c3403", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2f6b86-67ce-4658-b4fc-809278a8cc8e", "sighting_of_ref": "indicator--a2b40181-8607-4aac-8fc0-602799514b4a", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f54ccb-cb06-4b6d-bb89-56a0d257ac25", "sighting_of_ref": "indicator--6d6c6fde-2344-43a0-aa3e-31bf80191369", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00a3fb4-646c-43d1-beb9-8c23916af6fd", "sighting_of_ref": "indicator--6d6c6fde-2344-43a0-aa3e-31bf80191369", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6188645-7dee-4666-9d21-9f38c6f919da", "sighting_of_ref": "indicator--6c33b17c-0d40-4727-b88f-16a8aeeb999b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a36ee7-e442-4588-9210-ef48945842d7", "sighting_of_ref": "indicator--112a6626-777d-491d-9bbc-e30ea2c6f2fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2d71e6-88b1-4eec-8da0-272541f3cc1d", "sighting_of_ref": "indicator--829536f1-5582-4908-83db-be8abdb4fe8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e89ae0-d198-4fc6-88cb-d3da99c6194c", "sighting_of_ref": "indicator--14e154c6-b184-4d0a-872c-81d6f4babd44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8508c922-7592-4dc1-b36e-583ef6c9f358", "sighting_of_ref": "indicator--14e154c6-b184-4d0a-872c-81d6f4babd44", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c770ff43-1b13-406a-9791-242a30b72572", "sighting_of_ref": "indicator--0691e980-01e7-4381-955f-55cdae7fe39a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efecde09-1637-42cb-be17-5ec6babc8c80", "sighting_of_ref": "indicator--9c78f061-e9f2-4717-a2c1-65c4a8b1c80e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553176f1-a36a-44a4-b579-378cdd4c4da7", "sighting_of_ref": "indicator--2301f8f0-f393-47e0-b2be-9ce2725ec887", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73d703e-98ca-442a-bd74-937e8c945fc4", "sighting_of_ref": "indicator--377520a1-e70d-478c-8c94-f22ac832792c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d7e1f7-9838-48f5-be04-c723fe0cf16f", "sighting_of_ref": "indicator--9f62e71d-b9c8-40b9-bd22-8820d0e5cdab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3845867f-fde6-4827-b8e0-fc20847fa04a", "sighting_of_ref": "indicator--75f61292-b542-40de-a114-9bf6dd8d1e9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d59bd4-349b-4d5e-ba95-2583fa3d5dc3", "sighting_of_ref": "indicator--a3472440-4b9a-4ce0-b279-66526630e167", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa71176f-055a-4d78-b984-964904d608d1", "sighting_of_ref": "indicator--1c166747-e3ff-41e0-8b9a-35f93d33373d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354694eb-b014-419e-92cd-23c34fbd076f", "sighting_of_ref": "indicator--4f590568-dc79-4cd7-9525-abc90679bdad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709e2a16-5b99-4b06-8494-329449859c2b", "sighting_of_ref": "indicator--b946468a-3597-4583-8c06-4b6fb8ea1a12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d3357b-70bf-4bc3-8b5d-7855308a41e9", "sighting_of_ref": "indicator--b6a533a6-cbb3-496c-996f-10d6360e2bb8", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c7a1be-1047-4c99-9650-9bcff91747c7", "sighting_of_ref": "indicator--ea205b24-8f07-4bbf-83d4-9aa680dbd7f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b18b61-9d8d-4a5b-ab8e-344a226adbb0", "sighting_of_ref": "indicator--717b5da7-0dd7-4437-959a-acf6f7e7943e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbf382b-1864-4331-8fb6-9be57f4e0d38", "sighting_of_ref": "indicator--b18d1199-d9ce-4297-84bf-494b65c26ad6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb28143-cafb-4c3a-9c95-13c90bb60fed", "sighting_of_ref": "indicator--a54e7540-723f-4164-b828-fff09d11d7bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f380c46e-7ef3-4567-a393-2c4c77ce1d44", "sighting_of_ref": "indicator--3ede2099-90ca-46ca-af39-a8ce6446a207", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e0e63f-e122-4274-989e-27ade0d95f14", "sighting_of_ref": "indicator--3ede2099-90ca-46ca-af39-a8ce6446a207", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1efd9e7-b61b-46e4-a132-9af779d1cef1", "sighting_of_ref": "indicator--644c345b-c564-40e9-80eb-8efcdc80d104", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c944cf-70c6-48f9-8d74-838838674c0d", "sighting_of_ref": "indicator--54c31e13-125a-4004-b84c-915905c103e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4708ce9-1d1c-4987-8220-e0cb14b8e3ba", "sighting_of_ref": "indicator--8227c1ea-6776-4b05-ad1e-0857ef081f3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c7c73f-b188-492a-b403-00b15bfa85c3", "sighting_of_ref": "indicator--0bb8ae8d-b369-4bbc-a6a8-6b4a15ca5dd3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137b990a-87a1-41ac-a44a-0391b6773066", "sighting_of_ref": "indicator--f63b90c5-7deb-4b16-96e2-81d08817fc9f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5539a10d-6e9f-4185-89c5-1f692eeab90c", "sighting_of_ref": "indicator--025331d2-eb95-42bc-a348-ccb948cae681", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9afca1-4873-4812-89e6-4b0d3caa23c5", "sighting_of_ref": "indicator--0ddd140b-ccd3-476b-aea2-b2192506bcde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1eeca84-fd09-4579-8633-beec12991f25", "sighting_of_ref": "indicator--43d9dc61-4836-41b8-9c52-3a9df54c49ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6948f069-0b36-491d-856d-648cbf6e47a9", "sighting_of_ref": "indicator--2a9e3a95-7b7f-4011-9b40-ff3f63dc0900", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1624b837-1ce5-4c7f-be18-2164f25cb4bc", "sighting_of_ref": "indicator--7c9e5e73-01af-4fd1-82d3-d6b0fbff1479", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5781bd7d-f521-45ec-9964-713754dc8083", "sighting_of_ref": "indicator--7c9e5e73-01af-4fd1-82d3-d6b0fbff1479", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a7ae19-4bfe-4b6a-a97f-e990b5986989", "sighting_of_ref": "indicator--e7a160d4-90aa-4ff3-aa37-b1d1f4759062", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18ee314-f547-43ed-8ff9-91822a6e9145", "sighting_of_ref": "indicator--1a23ea75-c139-4ee2-bba9-ba2f47c09c8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc0d34f-4767-4c34-8e89-622508d8a9ce", "sighting_of_ref": "indicator--23e8f5b7-78fe-416f-875f-25c12254161a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dad121b-46f1-44fb-99de-d0401f64500c", "sighting_of_ref": "indicator--23e8f5b7-78fe-416f-875f-25c12254161a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f5ef5b-6325-4e9c-92a9-7db21a951c74", "sighting_of_ref": "indicator--191edd86-ed1d-48f8-89ea-a1fbf5d9e2b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a149274d-fa8d-4ce3-b0dc-aa80de6dc301", "sighting_of_ref": "indicator--4ab6b932-97f6-45cd-a258-4ee1ba427376", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da8835a-3812-4c41-a1ac-de5097ae2204", "sighting_of_ref": "indicator--07e5be50-201b-4b11-b2a8-651eef3c1699", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f0f815-7bce-472d-b30e-50d3eb4b68b6", "sighting_of_ref": "indicator--e8338a38-87b1-43e5-882d-d4d4ada53ed3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec25125-650f-425a-8a31-a6ffe67cdaf6", "sighting_of_ref": "indicator--7618773a-c4b6-4400-8180-8706c850f631", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9707611c-6862-43ec-bff8-4e19e8b40e52", "sighting_of_ref": "indicator--16d16239-07b3-4854-a2dd-2b969b7c70be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2273b1b1-8634-4f06-b5cd-7565cc0273ab", "sighting_of_ref": "indicator--16d16239-07b3-4854-a2dd-2b969b7c70be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9d81f7-37a4-4ef2-8552-cc548320af22", "sighting_of_ref": "indicator--16d16239-07b3-4854-a2dd-2b969b7c70be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ec5862-2cbc-473c-ab49-56bddd1d7841", "sighting_of_ref": "indicator--9b78306f-81bd-4632-88b6-d04013e6dc33", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a1eaea-8d28-46dd-9f4e-2cbc0c8607fe", "sighting_of_ref": "indicator--6b1d1a24-f2d2-43c0-afd1-e05ee03f3365", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3415404-1de7-47bb-aac7-87a77e4a90c9", "sighting_of_ref": "indicator--5089852d-8d2c-426c-b89a-ea367bd36a5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae66e80-a72f-4049-bfcd-3b584a0a9fb4", "sighting_of_ref": "indicator--46fb7f14-6e81-42d9-b4f1-fa70379da833", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c98f89c-3528-47cf-bb58-529efbe61afc", "sighting_of_ref": "indicator--a54c3071-71b0-40fb-9c59-5869885120d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace952f6-4e5e-4792-a642-a20e12f3441a", "sighting_of_ref": "indicator--8bae3708-d5b5-4bb0-8dcf-d3bcf0af97aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7a6f7d-a35d-4f81-8e4d-774bc1f86fac", "sighting_of_ref": "indicator--8bae3708-d5b5-4bb0-8dcf-d3bcf0af97aa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35296f75-93bf-4dcf-bf15-3c059b5bd1b5", "sighting_of_ref": "indicator--8bae3708-d5b5-4bb0-8dcf-d3bcf0af97aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8db39a-2c60-4d0e-957e-5255dfba8890", "sighting_of_ref": "indicator--84931955-de1d-4357-ba6f-42a68887193b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7588c2-e84d-44a5-b90d-5da6755978f9", "sighting_of_ref": "indicator--84931955-de1d-4357-ba6f-42a68887193b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8b94d2-9afc-43da-9bf7-be7497f0b703", "sighting_of_ref": "indicator--4ef50023-b422-4e49-b690-276a9cdb2a0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017bdd3c-c614-4150-9503-fec96a510145", "sighting_of_ref": "indicator--19bfe672-6a3e-43bd-9815-d84c2c70ef5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d927f9b-ff03-49e4-ba27-64bf11521060", "sighting_of_ref": "indicator--19bfe672-6a3e-43bd-9815-d84c2c70ef5d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b186b32-6ace-43c9-9dbc-8a544e64734a", "sighting_of_ref": "indicator--19bfe672-6a3e-43bd-9815-d84c2c70ef5d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf275af-afbc-44dd-91a2-2c1ebc65417d", "sighting_of_ref": "indicator--c5a6d027-26b1-4da5-86f4-2074cf59dc80", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaba85c3-9f90-4fa9-b990-e8e3a1a6f25f", "sighting_of_ref": "indicator--da8b9fc8-5d26-4516-9ea6-437b120c5814", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f9158a-eb2a-4551-871d-7e418c979765", "sighting_of_ref": "indicator--4cdee7ac-4c39-489d-8fc2-b1bd846aff83", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192ab525-5d67-4c1d-b584-04e20aa94d84", "sighting_of_ref": "indicator--4cdee7ac-4c39-489d-8fc2-b1bd846aff83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2376ed4-4f03-42e5-8958-3931de624b20", "sighting_of_ref": "indicator--330bf636-ce1f-43b6-a95f-519723297434", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f24fb5-df67-46c8-b670-a703334ec784", "sighting_of_ref": "indicator--347030eb-f0bf-42d0-a47b-3373b9a8e693", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e46f3a2-f9bf-4514-b7fd-06a0715c3ab9", "sighting_of_ref": "indicator--e09d44ae-8b0c-45fc-8118-9695a23ca1e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abafc2fc-21b8-49af-a4a8-5febbb9e8ea0", "sighting_of_ref": "indicator--b94e69e9-9e82-49eb-9957-678588645ac6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e572fa-c1fb-43f3-a0b4-5acd60084ed5", "sighting_of_ref": "indicator--b94e69e9-9e82-49eb-9957-678588645ac6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0571a9ac-7fd4-4672-a77e-8ed0c1f08ea8", "sighting_of_ref": "indicator--b94e69e9-9e82-49eb-9957-678588645ac6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f519a06d-8c34-40f0-bd5f-2b08cff51096", "sighting_of_ref": "indicator--41f31145-ef1d-4f7a-890d-d77a7bdd8f29", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fc3f07-6eb3-48f7-97a0-c2c3033ff9b4", "sighting_of_ref": "indicator--07d9feb2-9fd6-47f5-b3f2-70c333900f29", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd5018e-998f-4f95-960d-da2fc42a2333", "sighting_of_ref": "indicator--624f3c8f-b2a8-4525-89c7-2493fe6a881e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a7a035-8cd1-4880-ba6b-002443ef8192", "sighting_of_ref": "indicator--624f3c8f-b2a8-4525-89c7-2493fe6a881e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f909afd4-951b-49ad-9eb8-b8f5a07f30de", "sighting_of_ref": "indicator--95e1d98a-119f-4ec8-8975-9b369a9c2e88", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c98b50-645a-4268-a464-3d1830a1abb4", "sighting_of_ref": "indicator--b19e8cdc-d7d2-41ff-8285-d63d39279141", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c792a5-ab00-4a5e-8a33-4444801f9f2e", "sighting_of_ref": "indicator--a4f15fae-3513-4f6c-a1e5-10e01ced41ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e1788f-f9f2-46ca-903e-4aa7e534956e", "sighting_of_ref": "indicator--eca14ce6-5845-4b0d-bce4-08058cbc138b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70932860-de54-4a54-bab8-8c0ed513c881", "sighting_of_ref": "indicator--cdfc55fa-d422-451d-8762-772afa8e05c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd8a147-a885-4905-a27a-85425e0002e7", "sighting_of_ref": "indicator--0fd1da60-e9f3-4794-9395-d0497f4e41a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60212fc5-e825-429a-a491-9555903adbe6", "sighting_of_ref": "indicator--0fd1da60-e9f3-4794-9395-d0497f4e41a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c2e123-be34-4c8a-abf6-0a38e505ede4", "sighting_of_ref": "indicator--b23c4c56-6ce9-4a22-8a4a-fd851f1be8ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8b4d6b-50c8-46ea-89fb-70c01952813d", "sighting_of_ref": "indicator--dc78536e-dcbb-4ce4-a938-59a57d982f63", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75161692-daf4-44d1-a92a-deb089073bef", "sighting_of_ref": "indicator--dc78536e-dcbb-4ce4-a938-59a57d982f63", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdefd3a7-6100-4013-9331-c9ddb8cd0a12", "sighting_of_ref": "indicator--dc78536e-dcbb-4ce4-a938-59a57d982f63", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29edac0f-3205-4a88-8a6f-7924bd08c103", "sighting_of_ref": "indicator--c1a28b95-a591-4d72-8ad8-76ebed190102", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c39a46-ea2a-4f81-8a7e-25620643bd72", "sighting_of_ref": "indicator--54e1b1ad-0d32-4961-a75b-aacc0b567b2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2901c2-4495-4580-a57d-93f8e46626cc", "sighting_of_ref": "indicator--8c3ac080-3aad-482c-a854-453bef8350b8", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2058475c-cd9b-48a7-9af2-7a7c26cc4161", "sighting_of_ref": "indicator--d3f97a87-7481-43e5-add5-cf059f198057", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94bb13d-9c4d-4af7-978e-cc3d90fe5eba", "sighting_of_ref": "indicator--972fa05b-c1ed-439c-95f6-19855b017ae7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ea0a74-2638-40d2-95d7-e32fcfca2727", "sighting_of_ref": "indicator--a431e458-8370-40d0-acc7-62ab0ecc16b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c9c6f3-3b7e-4416-bdec-be30814602fe", "sighting_of_ref": "indicator--2cb09bda-97c0-4a86-8559-58e0ae8e5b60", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7475087-b782-403c-8efd-4a97ce867da6", "sighting_of_ref": "indicator--2cb09bda-97c0-4a86-8559-58e0ae8e5b60", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cfa01b-85b2-4a7c-b3ab-b161c7438a01", "sighting_of_ref": "indicator--bcdbf3e4-c211-4137-8a6a-9959200e79c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792b09c5-2140-4d99-a942-1d1cdba6f9bf", "sighting_of_ref": "indicator--dd4c4f51-940d-4ba4-af93-89420d36e293", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f865faf-f8fe-42d7-8c70-0c047b9bd817", "sighting_of_ref": "indicator--ea19598e-8c3c-48d4-80fc-23583b57892d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae93fdc8-e39f-420e-87aa-b1c8ac982c00", "sighting_of_ref": "indicator--efb5aa3a-9f06-4ce4-88e5-cba101f9fd89", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b875d778-39e8-41f3-9047-aed15a907df4", "sighting_of_ref": "indicator--efb5aa3a-9f06-4ce4-88e5-cba101f9fd89", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05278116-b732-4fe3-ab88-b20eb5341133", "sighting_of_ref": "indicator--efb5aa3a-9f06-4ce4-88e5-cba101f9fd89", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e5bafd-7820-4e2a-b104-f2bc602a263c", "sighting_of_ref": "indicator--67f42a55-a696-4bc5-b08b-b381e1203462", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de3f2fa-03da-4042-9c0d-d3f94d8b00ee", "sighting_of_ref": "indicator--67f42a55-a696-4bc5-b08b-b381e1203462", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed03647-6c08-490c-a9e0-7e5eee675212", "sighting_of_ref": "indicator--67f42a55-a696-4bc5-b08b-b381e1203462", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fd0383-6098-46db-b1d2-c7d4246d92f0", "sighting_of_ref": "indicator--2723f420-bd19-46fd-af1c-36388aaa5c01", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c078e5e9-3ad4-4aa7-b68a-b506ed899c68", "sighting_of_ref": "indicator--2723f420-bd19-46fd-af1c-36388aaa5c01", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a14841d-f037-4bb1-a466-73fa18695060", "sighting_of_ref": "indicator--2723f420-bd19-46fd-af1c-36388aaa5c01", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29428850-ce0f-4693-9136-4f030c384768", "sighting_of_ref": "indicator--94175f49-dcae-457b-bc74-86be36520b84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d887a99b-88c4-4200-b873-12235bb4b113", "sighting_of_ref": "indicator--94175f49-dcae-457b-bc74-86be36520b84", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fabb35-0077-43b2-b067-0885b9a0a16c", "sighting_of_ref": "indicator--94175f49-dcae-457b-bc74-86be36520b84", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324fe66c-061c-4ea9-8c4f-05dd0751f4fa", "sighting_of_ref": "indicator--05cf9c93-927b-44c9-a6ff-a24142f786c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0c6277-bf96-4f54-b7b5-eee65868d64e", "sighting_of_ref": "indicator--05cf9c93-927b-44c9-a6ff-a24142f786c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66db6fe-ddb4-459c-8c98-b81ebb9911ac", "sighting_of_ref": "indicator--05cf9c93-927b-44c9-a6ff-a24142f786c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1431b77-3ec0-46cb-bb53-0edb2a8fb3ed", "sighting_of_ref": "indicator--bbc253a9-d8eb-4174-94eb-76356d6143f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0c9920-6c5e-4e65-9cd5-93ae49f4b94f", "sighting_of_ref": "indicator--bbc253a9-d8eb-4174-94eb-76356d6143f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1daac03-8e1b-495e-be8e-fc8c8979d179", "sighting_of_ref": "indicator--bbc253a9-d8eb-4174-94eb-76356d6143f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aaa242-caf3-4182-8133-de714dd269f3", "sighting_of_ref": "indicator--f44b0392-cdf3-43b8-bf4b-fc249387fb8d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f56265-109e-4459-92b1-e303d0252676", "sighting_of_ref": "indicator--f44b0392-cdf3-43b8-bf4b-fc249387fb8d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddff63c-7aad-4ca7-9598-b828ce581c48", "sighting_of_ref": "indicator--f44b0392-cdf3-43b8-bf4b-fc249387fb8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694eb90f-fa2f-4a78-aedb-0cc1a8d7546a", "sighting_of_ref": "indicator--fbe771a9-7cbb-492e-9014-2e27ec3e881b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74108cd0-2e12-4cba-a55a-818ed5fcf567", "sighting_of_ref": "indicator--fbe771a9-7cbb-492e-9014-2e27ec3e881b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4154cb0f-da19-4942-b73c-dbdd2259b138", "sighting_of_ref": "indicator--fbe771a9-7cbb-492e-9014-2e27ec3e881b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d54f4f-716c-4ab4-ae1e-e25597668052", "sighting_of_ref": "indicator--3af56d03-f8d7-4e83-9468-4a7622c3d1a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023e749a-11dc-4642-b005-20bac2c5389f", "sighting_of_ref": "indicator--3af56d03-f8d7-4e83-9468-4a7622c3d1a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b8aa45-7d05-4e97-845c-fed0cd378d70", "sighting_of_ref": "indicator--dd0ac574-f7ea-4a8d-8697-812e0ed0cd1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35eb9fac-2534-461f-84eb-41122ca9a0b3", "sighting_of_ref": "indicator--dd0ac574-f7ea-4a8d-8697-812e0ed0cd1c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73690c00-3aae-440e-a2ce-5fbc4bb0f99a", "sighting_of_ref": "indicator--dd0ac574-f7ea-4a8d-8697-812e0ed0cd1c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d01dba-7c59-4df2-b43d-42809714a807", "sighting_of_ref": "indicator--5b189d0b-a605-4d42-b2d6-296c68ef07f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8550efc2-2e97-41a2-b72a-6c2d32ccab16", "sighting_of_ref": "indicator--5b189d0b-a605-4d42-b2d6-296c68ef07f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e379d9-e67e-471b-a5b2-5b565406ec72", "sighting_of_ref": "indicator--5b189d0b-a605-4d42-b2d6-296c68ef07f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d0f6b4-0ccb-43ba-9714-46f7854c661c", "sighting_of_ref": "indicator--7ffc90bb-e560-49ec-b1fb-836a6c9a12d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f687360-6213-4a00-87dd-6aa916d6f999", "sighting_of_ref": "indicator--7ffc90bb-e560-49ec-b1fb-836a6c9a12d9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b56cea5-9878-4ce6-8b1c-a663cce7f085", "sighting_of_ref": "indicator--7ffc90bb-e560-49ec-b1fb-836a6c9a12d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3ff108-21ee-4f23-849b-66ed29f7e8c4", "sighting_of_ref": "indicator--14bd3c48-0600-4996-9a05-1ba3d48a17be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabeb594-3594-4793-a4dc-4708b9f023cf", "sighting_of_ref": "indicator--14bd3c48-0600-4996-9a05-1ba3d48a17be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ebbb23-63ae-4282-aae0-24cfb06e85d7", "sighting_of_ref": "indicator--14bd3c48-0600-4996-9a05-1ba3d48a17be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f1a55d-ef4e-4927-bbe0-c154171584fe", "sighting_of_ref": "indicator--513ded66-f3dd-4096-8d57-b5cf0ff75047", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a80ad5-0905-4242-8da8-93c9eebbdf1a", "sighting_of_ref": "indicator--513ded66-f3dd-4096-8d57-b5cf0ff75047", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc72fea-0b77-4d97-ad27-e4fa0fc58dce", "sighting_of_ref": "indicator--513ded66-f3dd-4096-8d57-b5cf0ff75047", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9050bf25-75c3-4bf4-9772-2b3db8b03269", "sighting_of_ref": "indicator--15d92fdc-7aa4-45f9-8871-095ed514a6b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29860e68-f1ff-43ac-ab9e-a242c4adc894", "sighting_of_ref": "indicator--15d92fdc-7aa4-45f9-8871-095ed514a6b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ddde64-3876-42a6-b9bf-562b92dc1902", "sighting_of_ref": "indicator--15d92fdc-7aa4-45f9-8871-095ed514a6b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069180ef-1856-4399-a66c-3fc9d9626433", "sighting_of_ref": "indicator--c3a7e117-e4c5-4846-b293-b72b34a0730d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e9f832-de6b-4eab-bd8c-869446702ac8", "sighting_of_ref": "indicator--c3a7e117-e4c5-4846-b293-b72b34a0730d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d12e74f-0de7-4eeb-a9c9-62f5774f443d", "sighting_of_ref": "indicator--c3a7e117-e4c5-4846-b293-b72b34a0730d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4243c2-b6a6-496b-9c57-bcee288623c3", "sighting_of_ref": "indicator--97ccc3fd-3f89-4fdf-a59d-0a441359c0af", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8a5b4e-5f68-46d0-b78e-f14eb9fd5ed3", "sighting_of_ref": "indicator--97ccc3fd-3f89-4fdf-a59d-0a441359c0af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70466483-5391-4574-a658-cfcde0eefb51", "sighting_of_ref": "indicator--97ccc3fd-3f89-4fdf-a59d-0a441359c0af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4040e834-7379-4193-83a3-dc9572dec517", "sighting_of_ref": "indicator--c94971df-07c7-492b-b06a-63c907a6156e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a336a28-1a67-457f-9e7f-e2743a46744f", "sighting_of_ref": "indicator--c94971df-07c7-492b-b06a-63c907a6156e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ba806c-25cf-4833-a9e8-cdfc47e0dc00", "sighting_of_ref": "indicator--c94971df-07c7-492b-b06a-63c907a6156e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dc9cfb-3a66-4581-aee3-980d9d084119", "sighting_of_ref": "indicator--fb013ecf-08c3-431f-aa1c-6cfa5cae319b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e6b242-789a-4191-a9ae-3830914bab03", "sighting_of_ref": "indicator--fb013ecf-08c3-431f-aa1c-6cfa5cae319b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbafd66-b43c-4ea9-b025-455f79edc949", "sighting_of_ref": "indicator--bfce1a95-0f44-4d81-8992-957b4268ec99", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b30777-9a80-4ed2-93c6-e4c6286296f7", "sighting_of_ref": "indicator--bfce1a95-0f44-4d81-8992-957b4268ec99", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108e4c8a-4e56-4848-bbdb-7acf11a65811", "sighting_of_ref": "indicator--bfce1a95-0f44-4d81-8992-957b4268ec99", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0061b645-a066-4929-84b2-8924b9104cc3", "sighting_of_ref": "indicator--97319baf-07b6-473b-9810-914da89ebe0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a212b96a-1720-4a45-932e-a14b5d40fd94", "sighting_of_ref": "indicator--97319baf-07b6-473b-9810-914da89ebe0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3498e070-aaa2-45ae-8238-e3a4bae1546e", "sighting_of_ref": "indicator--97319baf-07b6-473b-9810-914da89ebe0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b239f9-3d4b-413c-9a29-1872d59acf6a", "sighting_of_ref": "indicator--fcc58dee-05f3-4202-a1f8-6664110219b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735d8944-8d05-4e3b-bbfa-e83f55f956f8", "sighting_of_ref": "indicator--12953213-65a2-4ca9-a8f7-b0c64412d500", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5d2c13-4fbd-46a2-b728-9edb287892fd", "sighting_of_ref": "indicator--5403c5fc-b46d-4f16-99fa-6b2f8943eedb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8ab5ce-5870-4f34-8009-0536490c0561", "sighting_of_ref": "indicator--2d8a7cd4-c68b-4b45-8e46-d555bef3ab5a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8be981-7a62-4091-8388-4f2e39631d26", "sighting_of_ref": "indicator--56a073a3-9e94-4eb6-9e4d-8c63034947b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84b4172-c263-4530-bb09-f780ed19423b", "sighting_of_ref": "indicator--5040b39c-dc41-4741-90df-23aa558d4485", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4d4258-ef52-4e17-a0db-ef3aaa69d5e7", "sighting_of_ref": "indicator--5040b39c-dc41-4741-90df-23aa558d4485", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20b6785-72ef-4e57-90a6-53cfc069fbba", "sighting_of_ref": "indicator--08affa73-603d-48d3-a0e8-d0f838abc861", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee8a5a1-ede1-43f3-8228-76aa862e22d7", "sighting_of_ref": "indicator--08affa73-603d-48d3-a0e8-d0f838abc861", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a9505f-88ea-4a9b-ab9b-4adfa0e72b3f", "sighting_of_ref": "indicator--08affa73-603d-48d3-a0e8-d0f838abc861", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7c448f-57ea-4c75-abf2-dcaf76651aa2", "sighting_of_ref": "indicator--93b827db-e79e-4d21-8715-122e2f4cf90b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67c6de5-44bf-40a6-ae1a-79f68455d2c5", "sighting_of_ref": "indicator--93b827db-e79e-4d21-8715-122e2f4cf90b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc0e4f1-bc98-4107-998b-2bd5f5eb54a4", "sighting_of_ref": "indicator--93b827db-e79e-4d21-8715-122e2f4cf90b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca495281-70d1-4950-b85c-c3a8abf27a74", "sighting_of_ref": "indicator--281f30fc-2ff9-43bc-a895-dfef153ff6b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004c9f4c-baca-4050-932c-c6592d98f801", "sighting_of_ref": "indicator--281f30fc-2ff9-43bc-a895-dfef153ff6b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def2069e-89cf-4eb3-af7f-8d9944b09f03", "sighting_of_ref": "indicator--7418c3d4-d109-4446-9ee2-dada30a4b253", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0506576-cb87-44a0-be36-d6aefeb538bf", "sighting_of_ref": "indicator--bcf87c04-b790-4bd4-8a95-7a3a21a4562e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da478e81-ce4f-4306-9560-cdeed2256bf9", "sighting_of_ref": "indicator--bd6ebfc9-1227-4bc3-8ca9-c7837418296f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936e7dd2-4e79-497d-ae55-b4875b92a3ae", "sighting_of_ref": "indicator--bd6ebfc9-1227-4bc3-8ca9-c7837418296f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa67351a-9f40-43d0-ac47-8e6f02ac2b51", "sighting_of_ref": "indicator--bd6ebfc9-1227-4bc3-8ca9-c7837418296f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dff0871-6e4f-4c8e-97e0-8bd62dfddbb4", "sighting_of_ref": "indicator--12b613c6-f1b8-4a2c-addc-70fe8e792551", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a88194d-c216-49a4-a640-a80c12841ac4", "sighting_of_ref": "indicator--9649fd23-ad50-4d10-b874-25d56ba40ab0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83523f1-2ab9-4d55-b5fa-d86363710238", "sighting_of_ref": "indicator--46d3bc72-74d0-43ee-8ecf-3fab0525666a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf759475-c5cc-4671-80e0-66b5b3f60758", "sighting_of_ref": "indicator--ff4767f3-abfd-4149-a43a-1d1ae5b0a9c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71adb771-0f6d-4174-b969-d41dddb526d7", "sighting_of_ref": "indicator--982e9ea4-d861-4839-bc73-75a249aab8f5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80005f4-646e-47e4-a424-957741e68018", "sighting_of_ref": "indicator--144c41d9-8564-4f3e-8ed3-e846335e2bd2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0262c676-dc09-4f0f-972e-33170d09e19e", "sighting_of_ref": "indicator--144c41d9-8564-4f3e-8ed3-e846335e2bd2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fcb936-d861-4fe7-893e-b00208aaf518", "sighting_of_ref": "indicator--144c41d9-8564-4f3e-8ed3-e846335e2bd2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efbe184-ed44-4c04-aff3-21e86efe17eb", "sighting_of_ref": "indicator--4e955d52-38f4-4253-bc40-be3fe7109207", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15917c9-544e-4afb-af65-476a4056ec3e", "sighting_of_ref": "indicator--8c2ef03e-853c-4136-8e2c-e2298882f4ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c920e43b-2282-483b-92a5-51b8e58fa9ae", "sighting_of_ref": "indicator--8c2ef03e-853c-4136-8e2c-e2298882f4ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfedf62-34e5-467c-8772-0d6efe710140", "sighting_of_ref": "indicator--54a53465-2fb3-430f-a2ea-3e20a43c9c0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1853bce8-7c47-47a8-84a0-1e6f98df8403", "sighting_of_ref": "indicator--adf3401a-6fcc-4b85-9000-037f2915cdaa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fe34cf-8ad3-462a-a846-051bdb11ba50", "sighting_of_ref": "indicator--3e3f735d-f289-41de-8599-359bcb5be972", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5226625b-4524-4ca4-86f3-8867cffc29f2", "sighting_of_ref": "indicator--bee0df59-fa77-46f3-86ab-2075f847c580", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b493064c-b92e-4e3b-b998-784b60f294f8", "sighting_of_ref": "indicator--e86f799b-d746-4168-9c0b-660ee5ad8872", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d38b806-b530-43a3-8053-b208ac221120", "sighting_of_ref": "indicator--e86f799b-d746-4168-9c0b-660ee5ad8872", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba80175-5ac0-4988-bd60-383b9f4ed648", "sighting_of_ref": "indicator--e86f799b-d746-4168-9c0b-660ee5ad8872", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bd110f-149e-4bfe-af4f-67aacd809a64", "sighting_of_ref": "indicator--1b3af63e-c58c-4b13-bf2a-229064de78d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352a5a05-f8e8-41b5-88d6-f696b989be07", "sighting_of_ref": "indicator--1b3af63e-c58c-4b13-bf2a-229064de78d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8c7fb2-11ae-4f2c-842f-e7d148ecf145", "sighting_of_ref": "indicator--1b3af63e-c58c-4b13-bf2a-229064de78d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faad7892-858e-4d0a-b363-a8d897f9bcd3", "sighting_of_ref": "indicator--f4f257db-2367-4547-9137-3590ac75d8ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b08c15-6e12-4f47-acae-a469b5c03b5e", "sighting_of_ref": "indicator--f4f257db-2367-4547-9137-3590ac75d8ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1904cca-d576-4da6-994b-e36ef5d0eeab", "sighting_of_ref": "indicator--f4f257db-2367-4547-9137-3590ac75d8ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3831b287-e2f4-4dc7-a2cc-6f1fc45a75c9", "sighting_of_ref": "indicator--eeb2e336-ba7e-4895-91a9-eb36fc980095", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56121715-18e8-4765-a5e1-14dd965d71af", "sighting_of_ref": "indicator--df33bf8d-6c21-4afd-a016-f44c70beb443", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4bf9d6-29d2-45ef-b04e-3eb19ab2a261", "sighting_of_ref": "indicator--94f69169-4c91-440b-953a-cf44804ae5a1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55837e67-80a4-4dc3-a6c2-e8be050c9de1", "sighting_of_ref": "indicator--7c4da53a-9bcd-4493-99d9-c0d19c83fc89", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8946123-b30b-4139-b126-371437aa7437", "sighting_of_ref": "indicator--dfd5d39c-ab80-46eb-88f3-72eb5150acf2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a99bbd-c399-4184-8d19-3b4cd5b76c03", "sighting_of_ref": "indicator--8b5ce8fd-f15f-402f-bdd1-bc91f531a1db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1c70bc-5297-4618-a85c-da3e4e0b5a87", "sighting_of_ref": "indicator--e17c1cc6-08c4-495d-8901-3369847d70b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df5ccf2-d466-40ba-8d77-4fd7e0cf1695", "sighting_of_ref": "indicator--f53a3843-28bd-4675-82d1-6708fa24d91f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc3eca4-c8ea-44d0-8966-29b7943c5293", "sighting_of_ref": "indicator--11cafa87-7592-4334-a471-23f8b2c0682e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b866d1-595b-4745-b9e6-cf5207ece532", "sighting_of_ref": "indicator--11cafa87-7592-4334-a471-23f8b2c0682e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a722fb69-da3c-488d-bddf-0cc6190e3392", "sighting_of_ref": "indicator--2106f769-9a02-44e2-8a9d-0440fea07242", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b326faf0-5758-488a-b1df-03744e795f36", "sighting_of_ref": "indicator--a16da140-12d0-428d-9231-3e0382c8912a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594b8a23-4562-4197-8cee-b5e200d78773", "sighting_of_ref": "indicator--e941cbf5-f14f-4d62-b2ea-fec665c2ce5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c2e1b8-e3c5-430d-8bb6-0b9aa9d08fba", "sighting_of_ref": "indicator--ab4bef81-191a-4927-a610-649745971bc0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7244293-ffd1-4c86-bb20-6e95f20eace0", "sighting_of_ref": "indicator--32f4c951-f230-47ce-848f-c90266e96e34", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389ee9be-cc2e-42bd-94a3-32606ec2ee0c", "sighting_of_ref": "indicator--32f4c951-f230-47ce-848f-c90266e96e34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c153fdb1-ec26-433f-b2d0-b33a53c01542", "sighting_of_ref": "indicator--13f86110-e295-402c-801e-72df41e41056", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f3e282-d7cc-4856-a6f0-ac3c38998ab4", "sighting_of_ref": "indicator--7c825e9d-7a3a-4559-86b3-88ac24877e95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9803c40c-f9df-43f9-a689-087dccbb2d87", "sighting_of_ref": "indicator--7c825e9d-7a3a-4559-86b3-88ac24877e95", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55aa844b-b700-4206-87c1-90494d541c73", "sighting_of_ref": "indicator--2d85a8a0-ea91-4656-950e-437324cc868a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27bab46f-76b6-4176-9900-09f34e1de986", "sighting_of_ref": "indicator--afc20a18-8948-4edb-820c-5e3e7a06d5ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57c67b6-f13e-4ea4-a21f-ee34189cd3e2", "sighting_of_ref": "indicator--afc20a18-8948-4edb-820c-5e3e7a06d5ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4db142-cd04-4e94-b1ec-ccf3b295f0b6", "sighting_of_ref": "indicator--6593c1aa-1827-40bf-bebf-7ad6c2593e17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03512063-4c1b-4c89-9732-bc968953746f", "sighting_of_ref": "indicator--6593c1aa-1827-40bf-bebf-7ad6c2593e17", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd10095-43d6-4c40-924a-2cae300115a1", "sighting_of_ref": "indicator--57e6be5c-d13e-46e1-8e4b-1f7f35c7d1ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf41f399-418e-4eea-8f72-eef68c08d26b", "sighting_of_ref": "indicator--16851c0e-8085-47b2-91d3-65f5c2424de1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7031b84b-1163-4f2b-b07e-74c867b5f314", "sighting_of_ref": "indicator--199ea143-0a08-4bf1-bab3-839f36bbd008", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94757ccf-801f-4ce2-ac19-0a2d643966c9", "sighting_of_ref": "indicator--199ea143-0a08-4bf1-bab3-839f36bbd008", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bf70bb-ebb3-49b1-b1cb-5ee66e464f0b", "sighting_of_ref": "indicator--a1baae52-4893-48bf-a009-8bc6aa6fee42", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ca7e4b-970e-4257-8600-a6e2325d413d", "sighting_of_ref": "indicator--c12dbecc-8442-4f22-b267-1acc9e5bf6e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95615060-6888-429f-88e0-78b6fd68a278", "sighting_of_ref": "indicator--c12dbecc-8442-4f22-b267-1acc9e5bf6e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3070e432-3bce-4786-bb07-9901e3c1fde3", "sighting_of_ref": "indicator--c12dbecc-8442-4f22-b267-1acc9e5bf6e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0799ee16-0487-4594-a32f-e4fdae6496af", "sighting_of_ref": "indicator--18707a3c-c4fd-4205-964d-8b0adb073988", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebd2f61-33ab-4a0e-9251-4e9ad05a9d4d", "sighting_of_ref": "indicator--7ebf72b2-d275-4b7d-8dbc-613bb8c8d12c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a15f49-fd9d-469c-965e-0394b73c0e4d", "sighting_of_ref": "indicator--7ebf72b2-d275-4b7d-8dbc-613bb8c8d12c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8900af42-9491-4889-916a-47778534a1d3", "sighting_of_ref": "indicator--7ebf72b2-d275-4b7d-8dbc-613bb8c8d12c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee72a20-2e30-4f68-9e62-e3a3872a4d68", "sighting_of_ref": "indicator--19f11f68-c380-4923-b15a-1f6b8d84eeac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b348d8-b2a8-4084-838c-b51784c07c2f", "sighting_of_ref": "indicator--fc9722dd-be85-465e-a1b8-df329ea4ff7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6ea0c2-bee4-40bc-a53e-deeedd39a4bb", "sighting_of_ref": "indicator--f70a05a9-77d0-4bba-9352-bbb2b49ee682", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f8121b-bad4-400d-97b9-2474a2561884", "sighting_of_ref": "indicator--341946e8-719e-46fa-a14e-0c5c1a7399bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cc10ad-4c72-4a69-b7f5-31c8c90c837d", "sighting_of_ref": "indicator--8bddbf28-0882-432a-97f4-def6adfb6924", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afee2cf-d8f9-46cb-ba14-4ce4817a9303", "sighting_of_ref": "indicator--8bddbf28-0882-432a-97f4-def6adfb6924", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4ed701-ae9a-4573-9a04-f5f2cb5c8412", "sighting_of_ref": "indicator--8bddbf28-0882-432a-97f4-def6adfb6924", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6400e78-4cb9-416e-9156-3b1ce4c9bd87", "sighting_of_ref": "indicator--da7ac340-e194-4b0b-9eaf-e870baf8809c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725e5fbc-52dd-4565-bbf7-36b3be56374f", "sighting_of_ref": "indicator--f3e2d3ff-a464-417d-9254-bf6f349496db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b7e75b-6982-4fa8-bf9c-537f44c111ad", "sighting_of_ref": "indicator--7f140285-f351-4853-a060-d3cf3ecc8303", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7220d330-1b53-4c7c-8eb2-f1ef8dfbede0", "sighting_of_ref": "indicator--7f140285-f351-4853-a060-d3cf3ecc8303", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee68f7a2-7635-47e8-b842-ea76ddc16db7", "sighting_of_ref": "indicator--7f140285-f351-4853-a060-d3cf3ecc8303", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059c0d54-3aed-4d5f-9ca5-e35114815053", "sighting_of_ref": "indicator--6072d509-ec45-4454-ac62-cd632a87185f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d707a7-af90-4f22-ad71-fe36c8257e9d", "sighting_of_ref": "indicator--6154ed30-2014-4231-93aa-ba7a8332591a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e33e22f-faf4-4100-90c7-3570ca5cd7a2", "sighting_of_ref": "indicator--6154ed30-2014-4231-93aa-ba7a8332591a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648caa91-9172-4bec-a9e4-b5eca87aee2f", "sighting_of_ref": "indicator--7c198344-2f64-45f5-973b-f889efe67166", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731958d1-efeb-4b8f-a2db-eb73bc01e2e6", "sighting_of_ref": "indicator--7c198344-2f64-45f5-973b-f889efe67166", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42cac7e-e012-42ac-9697-280759d7501d", "sighting_of_ref": "indicator--b08e6dc8-d8e8-46ce-80a1-21fe7431d8d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a506984c-228c-4ec9-abdd-57696adbeaa9", "sighting_of_ref": "indicator--b08e6dc8-d8e8-46ce-80a1-21fe7431d8d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b804e5b-7c62-422d-b823-d21f6a865b1c", "sighting_of_ref": "indicator--59d83989-3e24-46bb-a1ef-a046b3098ec9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2ace9b-734f-4b1d-a770-ee5f09c36e27", "sighting_of_ref": "indicator--59d83989-3e24-46bb-a1ef-a046b3098ec9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188f56d3-9891-4bc9-b859-8804575b8927", "sighting_of_ref": "indicator--59d83989-3e24-46bb-a1ef-a046b3098ec9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d977139d-8613-4e56-bf58-964bebf93ad7", "sighting_of_ref": "indicator--6412d0ee-abf0-43df-9bea-28bdfc528a4b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6107d6e-4805-4774-9f57-1dcee52837ae", "sighting_of_ref": "indicator--f284c6a0-6a9c-47b9-b18c-92ca5fbd953a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50963608-439d-452e-8e70-48a8fecc0fe0", "sighting_of_ref": "indicator--ecbce55e-6891-46f6-ab6f-5a219f8165c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1e098d-1273-4420-b890-467988a3e202", "sighting_of_ref": "indicator--ba964c03-2c38-4c88-8bfe-b092054f6f36", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fc396e-2e90-43e8-98bd-e744e9679042", "sighting_of_ref": "indicator--09e925fb-4c8b-451c-9a9e-61ba8b0dcb07", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3130b886-da7d-44c0-a797-6a10b983056b", "sighting_of_ref": "indicator--09e925fb-4c8b-451c-9a9e-61ba8b0dcb07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3631fb-a77e-4984-ae8d-89d742b49346", "sighting_of_ref": "indicator--938aa2ba-feaa-436a-b6dd-08bd1e3d7f39", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd00257-13f4-4b24-a039-dc25d0a9213d", "sighting_of_ref": "indicator--4fd2e382-552d-46ff-93a5-7f56135b3cb4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c8900b-7ef2-439e-b315-abea84e2aa7a", "sighting_of_ref": "indicator--4fd2e382-552d-46ff-93a5-7f56135b3cb4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0195bda1-e21d-44d9-a93a-9740945682e3", "sighting_of_ref": "indicator--84f8117e-2150-47b1-a9dc-34a5a1486f36", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95edce98-3255-4cce-8c93-64f509fa04c4", "sighting_of_ref": "indicator--84f8117e-2150-47b1-a9dc-34a5a1486f36", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ef8b40-df1a-419b-a37b-0fdf03a15794", "sighting_of_ref": "indicator--f95c6aa8-816f-484e-9582-d4ccfdaf9523", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9afa61f-b709-4240-b01b-64969aeeaf73", "sighting_of_ref": "indicator--f95c6aa8-816f-484e-9582-d4ccfdaf9523", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38c2e4f-8703-415b-8509-d8d3a48e3e68", "sighting_of_ref": "indicator--f95c6aa8-816f-484e-9582-d4ccfdaf9523", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab8b808-c498-46bb-bdc2-071eeaad2037", "sighting_of_ref": "indicator--96586ca0-8719-428c-9d98-0c0606451c2e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cfe7ec-dd0f-4175-a046-1382504c6d71", "sighting_of_ref": "indicator--e3bd9dba-f3f7-4296-8b47-c8477f45f394", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8ac580-1252-4f89-8faf-de3e9fa02773", "sighting_of_ref": "indicator--e3bd9dba-f3f7-4296-8b47-c8477f45f394", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62318656-1056-4e6f-bcb3-b747838ac298", "sighting_of_ref": "indicator--e3bd9dba-f3f7-4296-8b47-c8477f45f394", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4c1b2f-a9d8-41f9-b98d-fe2c4e4bb9f6", "sighting_of_ref": "indicator--24e641a0-9745-4994-9cdd-f77583843a88", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c28b5ca-b24c-4814-9ded-b5988cb8fa55", "sighting_of_ref": "indicator--24e641a0-9745-4994-9cdd-f77583843a88", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8191dd-1378-4141-b2b3-3f500888e5e0", "sighting_of_ref": "indicator--90447711-8a02-4b61-9012-2f1f6b2b95c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c5a16b-c0ca-456b-8af2-91784945e6d7", "sighting_of_ref": "indicator--a2909318-fbc9-4720-a828-9c2ff2da3a63", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84878ac8-6bd2-4d4e-9b99-2ffba52bbc62", "sighting_of_ref": "indicator--2ed04ee3-f2ad-45f1-be86-4604024f9c54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e319bc7-171f-4852-ad0b-e6de1fad735a", "sighting_of_ref": "indicator--0f1fc3cc-e747-4770-b681-d8e79feaa31e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586ced0c-4797-4a52-ade8-e6e63feaf85d", "sighting_of_ref": "indicator--0f1fc3cc-e747-4770-b681-d8e79feaa31e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdfe97a-34bf-4ad4-a765-e7ed10e5809b", "sighting_of_ref": "indicator--a0c84427-589d-40c7-8340-6837144777ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2126ecda-3656-4fe5-ab46-132779987a5f", "sighting_of_ref": "indicator--a0c84427-589d-40c7-8340-6837144777ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a51720-9ebe-47fd-b2ee-aaffc0a49036", "sighting_of_ref": "indicator--fc617cce-7144-4cba-957a-7af3e2440090", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e984a3ff-f7e8-483b-853b-43c1459535c0", "sighting_of_ref": "indicator--62df1e74-49ca-43ca-9c02-d644f64fe4aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2abd195-9ba8-41a9-b73b-eef38f2f7219", "sighting_of_ref": "indicator--62df1e74-49ca-43ca-9c02-d644f64fe4aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054e517e-f009-4dee-a60d-c09e9cda462c", "sighting_of_ref": "indicator--c84e55ab-fc0d-4d49-ae64-4e0b97117788", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29714752-1cad-4984-a6bb-17735a2dd5f2", "sighting_of_ref": "indicator--a1ee9ad6-297c-4e6d-838d-ace9a1f117f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d32778e-18b2-4fe7-9ce1-65f755491441", "sighting_of_ref": "indicator--1559b4a6-a67d-4488-903c-cb5f156487a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb1c9ba-1199-4850-9377-12e98b8e6caa", "sighting_of_ref": "indicator--42efe0eb-e685-4fac-a6b8-0b3658162dba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae58278-1711-4a49-9cdc-d3ce395e7b0e", "sighting_of_ref": "indicator--42efe0eb-e685-4fac-a6b8-0b3658162dba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d083d17e-e75c-4c3c-85e2-d231d48f54c5", "sighting_of_ref": "indicator--6fd09097-dbd7-4067-a35a-a1467a383d25", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d025cd-afa4-4113-b01d-501397413528", "sighting_of_ref": "indicator--4df13c0c-2745-404b-9885-1dbca7f0645e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8658dd4e-f07f-463a-a8d7-eca888c47000", "sighting_of_ref": "indicator--ba61ffb9-4a10-424d-8701-29616ca2c26b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2779a7-0ee7-459e-9e7e-7fc11335c4fa", "sighting_of_ref": "indicator--e646301c-cb5a-48fe-9317-e4284a23010a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1b2edf-d23f-4f98-93c4-42371e53562d", "sighting_of_ref": "indicator--01c6daa1-d2f5-48c4-bf7a-ea3d29778afb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3578e731-8247-48b1-882b-a841a7da56fa", "sighting_of_ref": "indicator--c343eec9-c49e-44dc-aa76-611db3d666fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85bce26-ac32-48c5-8581-f15e64b76570", "sighting_of_ref": "indicator--c343eec9-c49e-44dc-aa76-611db3d666fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ed00b9-34b0-42a8-a113-458c81d7b903", "sighting_of_ref": "indicator--c3f9500c-91ec-4cd9-b4f9-07a3331baa00", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc5d287-6858-4654-87fd-b0509ecb628b", "sighting_of_ref": "indicator--64eb2c2b-069f-47ee-b1a1-47bb62e5ab19", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535f0bbd-7f74-45a3-9a9d-48459dd39b64", "sighting_of_ref": "indicator--64eb2c2b-069f-47ee-b1a1-47bb62e5ab19", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02a2e87-1e65-4354-b04a-5d976d1e4dd0", "sighting_of_ref": "indicator--feb23af3-7bf6-47b5-ab1e-bb1235dd7a36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d565cc-ffb2-45ab-941e-27a398b15ab8", "sighting_of_ref": "indicator--d99059c0-e4aa-4377-a761-e00b38d76b8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84448b44-1f99-4314-b2c1-eb3e1409f25d", "sighting_of_ref": "indicator--d99059c0-e4aa-4377-a761-e00b38d76b8f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e8635e-745d-4982-9988-a0b05d48a366", "sighting_of_ref": "indicator--63b49df4-6288-4587-b6a6-412728e39ad5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0cae29-11d3-486d-b8ef-fedcfc1a526e", "sighting_of_ref": "indicator--63b49df4-6288-4587-b6a6-412728e39ad5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acc28fb-6645-4da3-8f93-96aa2fa6ea8f", "sighting_of_ref": "indicator--63b49df4-6288-4587-b6a6-412728e39ad5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2c5000-3d26-4417-85a1-1cadcb9904fb", "sighting_of_ref": "indicator--470c1249-613f-440e-877b-73b154fb694d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce82c63-5fb1-49aa-842e-db9927944218", "sighting_of_ref": "indicator--e89eae51-2eb2-4523-b1db-d35df4ce73a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a4e829-ba38-41ca-b80b-aeccd69e11bf", "sighting_of_ref": "indicator--e89eae51-2eb2-4523-b1db-d35df4ce73a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f481dd4-6e48-444c-82ae-107050839a7c", "sighting_of_ref": "indicator--44eed116-aa0a-4e02-bd2c-6fa8a19634d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47400985-13b6-4b46-819f-d34dd5ad4b3a", "sighting_of_ref": "indicator--928e7be4-274a-4636-bd42-75ad96ec625e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a667ec4-f94f-4276-9a22-50dab6f4a429", "sighting_of_ref": "indicator--928e7be4-274a-4636-bd42-75ad96ec625e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59503f33-aa89-4ea8-9042-fef2481c086c", "sighting_of_ref": "indicator--c0e6489b-197e-4589-b13f-0ece8632ded4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24994b4b-19b6-46bc-a467-cfc02b49df7c", "sighting_of_ref": "indicator--3a88a511-2d63-47ab-bf3c-8458f018fe16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638e2f02-3c19-4015-9bef-1435431d1e8e", "sighting_of_ref": "indicator--d6cfec77-dfac-4c68-b160-cb559a4bcdf2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16bf2fb-4c7f-4901-8ccb-1aeee619359d", "sighting_of_ref": "indicator--d6cfec77-dfac-4c68-b160-cb559a4bcdf2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76fcd60-f8c5-462f-9e95-789aa3d65a9e", "sighting_of_ref": "indicator--95758bcd-394a-4bf8-9aef-d80b1ec811c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20517de8-5681-4081-a864-15ca94758a7b", "sighting_of_ref": "indicator--95758bcd-394a-4bf8-9aef-d80b1ec811c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a78022a-271b-4608-ace9-f7fbb90287a4", "sighting_of_ref": "indicator--3a74e815-ee44-4cfd-b83e-900762ca8f44", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7895021-de7d-4d8b-b305-779f6f39d084", "sighting_of_ref": "indicator--3a74e815-ee44-4cfd-b83e-900762ca8f44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f3951c-38e8-40a9-82c0-5f17f198429c", "sighting_of_ref": "indicator--bd9ddb64-0cb0-42e0-962f-76d165d5b29f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51be6833-7ae4-441b-bfed-bc92b226b33e", "sighting_of_ref": "indicator--ec154adb-d748-4f14-8397-10120f2e837c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ff4410-e4ff-42f1-ab94-e5924cdd87c4", "sighting_of_ref": "indicator--ec154adb-d748-4f14-8397-10120f2e837c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8d1508-38fd-46ae-8f47-c60df741ee25", "sighting_of_ref": "indicator--2e87a685-54bc-49a4-b0bc-0204889c51f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8a63da-639c-4c20-94cf-21e27fc0e358", "sighting_of_ref": "indicator--2e87a685-54bc-49a4-b0bc-0204889c51f3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c753440-9f37-4cf2-a532-9efdd4c580bb", "sighting_of_ref": "indicator--4ce5bab2-4b69-4618-9a24-21673657e58d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dace7ce2-1099-4244-aa8b-35ce092d3b9e", "sighting_of_ref": "indicator--4ce5bab2-4b69-4618-9a24-21673657e58d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41282f6-b200-424c-b4db-99d51a890e54", "sighting_of_ref": "indicator--71b37fe8-cf3a-41fc-a025-bc928b8eb4d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5101061b-3ad5-43f4-88f3-9b6d44e0a4c6", "sighting_of_ref": "indicator--71b37fe8-cf3a-41fc-a025-bc928b8eb4d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e9dd4d-0ae9-47b4-9e02-2163acfe12a5", "sighting_of_ref": "indicator--7b6f335a-7547-4b6a-b481-32f21ebb1a65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d85604-d91b-41c8-9b7e-544ea403e1e8", "sighting_of_ref": "indicator--8eedadad-3556-4f7a-92c0-8bb655d6a556", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6c9915-9c9a-4a6d-9dca-fef9a0d0a95d", "sighting_of_ref": "indicator--8eedadad-3556-4f7a-92c0-8bb655d6a556", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68057efc-f40c-461e-86d3-af5c5052550d", "sighting_of_ref": "indicator--d15b77d1-80e2-4cd2-89cf-9d588e85e8e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11155f22-ae2a-43f9-8c0f-ed1120d1691a", "sighting_of_ref": "indicator--d15b77d1-80e2-4cd2-89cf-9d588e85e8e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7978601-a8f7-4340-a36e-b2d3574a9a03", "sighting_of_ref": "indicator--1813caf1-ccf8-40a3-9c90-f056acd047eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce27b38-d1c0-4d22-a172-4ada641e93eb", "sighting_of_ref": "indicator--1813caf1-ccf8-40a3-9c90-f056acd047eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e8e176-7f7e-4724-8f1b-f45b2a498983", "sighting_of_ref": "indicator--35f1b965-26b0-4163-93e2-03648b41e53d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3c63f1-4208-4cb9-97ee-cbdeb3f3ac47", "sighting_of_ref": "indicator--35f1b965-26b0-4163-93e2-03648b41e53d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d988aaf-b968-4e09-9555-c5e1068f4f5d", "sighting_of_ref": "indicator--2104f166-714b-4398-83e6-c0ebf931a3c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb91a92-52ca-4462-8aa5-6eb6cc7e0704", "sighting_of_ref": "indicator--2104f166-714b-4398-83e6-c0ebf931a3c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62a584a-81e0-4918-9526-63a1062372fa", "sighting_of_ref": "indicator--2104f166-714b-4398-83e6-c0ebf931a3c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d83854-9d86-4aa5-9d87-14383e874d20", "sighting_of_ref": "indicator--699f390d-4866-4b89-a711-a5a47cb51902", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ac7afb-95ae-43cb-82bf-89003f1766f2", "sighting_of_ref": "indicator--699f390d-4866-4b89-a711-a5a47cb51902", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832ad655-5c9e-4947-861e-b1b578d3af68", "sighting_of_ref": "indicator--699f390d-4866-4b89-a711-a5a47cb51902", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc088c27-0f79-465f-be3a-750f9981722e", "sighting_of_ref": "indicator--4a1af8d4-32af-406c-bda1-562cbec31a9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2088186-2348-4a67-ab30-4ebf23899464", "sighting_of_ref": "indicator--4a1af8d4-32af-406c-bda1-562cbec31a9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7703587e-3a64-4785-bfe5-7a8bffa6703a", "sighting_of_ref": "indicator--378e44a2-aa55-4186-ae28-32a374f50eb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd4eab3-63af-4ea7-a52b-ae9581a71800", "sighting_of_ref": "indicator--378e44a2-aa55-4186-ae28-32a374f50eb0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e4d14a-f82c-40d1-9be8-f627d0dc8f2f", "sighting_of_ref": "indicator--6436b6e5-6c8e-42b4-9109-7b475eb0eee0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7925e30-0cdb-4edc-8a00-024c86a17f1a", "sighting_of_ref": "indicator--f5e9916d-8cc6-425f-a414-d0a0187eaed6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b98a79-1fe8-4e17-b3a5-d9c694998d3c", "sighting_of_ref": "indicator--f5e9916d-8cc6-425f-a414-d0a0187eaed6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0408f9-0eaf-403a-b5dd-bcfd43b9199d", "sighting_of_ref": "indicator--b319f7b6-dd45-4d1b-bf6f-9140e7520fae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78ca2fe-c9f6-4501-af53-b5f45fd73b7d", "sighting_of_ref": "indicator--ca3aa93b-cbce-4265-a377-b52825d6b4a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7d6e86-d145-4f7f-8ee2-2e6076b441f5", "sighting_of_ref": "indicator--1ad4a91c-b00d-4a1f-a63c-6d503e065255", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2ca4fa-65f2-4142-b3fa-10b7d6685c31", "sighting_of_ref": "indicator--1ad4a91c-b00d-4a1f-a63c-6d503e065255", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d528e006-8199-4629-9f00-8f96a860c567", "sighting_of_ref": "indicator--b0e3158d-fa5f-4322-bcf1-b8f9d7db7ea5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6e4b90-3367-4dec-acb5-0355047d7fb4", "sighting_of_ref": "indicator--141c4a73-f5d2-4701-b18a-3c437dd2c08b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7261e6a8-13d1-4960-8c77-299b23267d0e", "sighting_of_ref": "indicator--141c4a73-f5d2-4701-b18a-3c437dd2c08b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b599e04-b362-415b-91a3-13cacc6c6cc3", "sighting_of_ref": "indicator--141c4a73-f5d2-4701-b18a-3c437dd2c08b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc35886-eea9-4cab-b7f7-ccf548b3aab9", "sighting_of_ref": "indicator--b755572f-d14d-45a0-b4dc-a045b2abbb92", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18a6d80-658e-4225-b426-35a0966f5f02", "sighting_of_ref": "indicator--b755572f-d14d-45a0-b4dc-a045b2abbb92", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83463f4a-8a05-4f03-a885-fd7372dc7e71", "sighting_of_ref": "indicator--b755572f-d14d-45a0-b4dc-a045b2abbb92", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7d4c03-e9d2-435a-b6b3-19ebe5c3c3a3", "sighting_of_ref": "indicator--c6ec8a1a-2231-415c-8d1d-608c8d9ebb6a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883bdcd8-d30f-4c73-bb67-805abd845602", "sighting_of_ref": "indicator--c6ec8a1a-2231-415c-8d1d-608c8d9ebb6a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1bdb35-5999-43b9-8abe-d553940a4b0b", "sighting_of_ref": "indicator--74f6df6b-9774-4d38-a602-ac98ef6cd1c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0c1989-410a-4465-a089-daff5e3c15db", "sighting_of_ref": "indicator--74f6df6b-9774-4d38-a602-ac98ef6cd1c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b379cc-78f4-4195-ac93-d635e3a7532e", "sighting_of_ref": "indicator--7c98316d-4b3f-4bc5-babe-f54f9902a227", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d6239d-d724-4e22-aabf-ccced0e708a4", "sighting_of_ref": "indicator--8c6511ee-1247-4f3c-b9a8-06bf1079f56f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6df66d-f04a-4d8c-839b-5351a64ea3b3", "sighting_of_ref": "indicator--8c6511ee-1247-4f3c-b9a8-06bf1079f56f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b22d6bc-0c58-464c-9b49-d75f7bec87af", "sighting_of_ref": "indicator--77ac4176-0beb-4437-aa91-23ac7be0abb8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac411d25-cf04-4850-8410-5e717d9ffdce", "sighting_of_ref": "indicator--77ac4176-0beb-4437-aa91-23ac7be0abb8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bf4f94-daaf-4875-b909-179b077fa661", "sighting_of_ref": "indicator--f01e9259-aed4-4486-b41d-088dc150725c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08e77ae-1134-4276-bcce-e1fa5f46dc96", "sighting_of_ref": "indicator--18d60e02-d48a-4e7d-b6e9-9c6c1dd8e2c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74792365-f2ac-45b3-842e-13b50334a64b", "sighting_of_ref": "indicator--18d60e02-d48a-4e7d-b6e9-9c6c1dd8e2c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d1f043-1afd-4be7-a128-6710eb8c68ae", "sighting_of_ref": "indicator--18d60e02-d48a-4e7d-b6e9-9c6c1dd8e2c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393750b3-9c70-46fe-a930-1da7624ebcf5", "sighting_of_ref": "indicator--39b052b4-5d71-48ce-b3f9-0fd04ce8b00b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3801be1-1434-4a32-be61-8f5d5bbc937e", "sighting_of_ref": "indicator--39b052b4-5d71-48ce-b3f9-0fd04ce8b00b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57b2131-665f-4f49-a28f-cd8c27a68721", "sighting_of_ref": "indicator--2ed09f69-4138-4c03-a113-614b40dbab78", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b714e571-85a0-499f-871a-1e5467f8dc1e", "sighting_of_ref": "indicator--2ed09f69-4138-4c03-a113-614b40dbab78", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ba00d9-ee41-43ad-b068-b51872f63a45", "sighting_of_ref": "indicator--68accf04-3bcb-4d62-9353-fd389004f3ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d57a37-9b81-4557-99c2-f60748f5a3ff", "sighting_of_ref": "indicator--68accf04-3bcb-4d62-9353-fd389004f3ce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e213e2f0-a368-4214-b40b-f5eea89b266d", "sighting_of_ref": "indicator--49940c00-62c3-4066-a922-fb91da05a98f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d4c495-75e3-4d9f-85dd-eaad4e8be0eb", "sighting_of_ref": "indicator--49940c00-62c3-4066-a922-fb91da05a98f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0ae934-9d4d-4c55-95f0-0548bd215f38", "sighting_of_ref": "indicator--c91482c9-134d-4032-987b-34cf681a0603", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a23e890-925d-445a-af18-3fedd1aabb9c", "sighting_of_ref": "indicator--c91482c9-134d-4032-987b-34cf681a0603", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09a5c14-7af7-42e5-bab5-cfef525630c7", "sighting_of_ref": "indicator--46fce9c5-bda8-4ffc-b01e-88b6559941e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6dfd89-3809-4b49-8a83-cfe7b9d2104d", "sighting_of_ref": "indicator--cf8e4aa3-49a8-4587-91f0-763f2ad636c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221098d1-1e15-4bad-a1fe-3e9b858eafb5", "sighting_of_ref": "indicator--cf8e4aa3-49a8-4587-91f0-763f2ad636c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd8df9b-6e55-4a5b-a156-f0babbe47754", "sighting_of_ref": "indicator--e06c8f10-6a18-4da1-91e7-a75e75a7acdc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30eee306-e491-4801-bf88-ec8d430c613a", "sighting_of_ref": "indicator--1bf58ccd-5a70-4a14-a68d-e7b51f559ac5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977c60f7-79a0-4ce8-9411-889952ab0872", "sighting_of_ref": "indicator--beb0c9ce-c34b-453f-b8dd-2fb6bf093671", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9f4c83-f997-4bcf-9713-9c319b770712", "sighting_of_ref": "indicator--beb0c9ce-c34b-453f-b8dd-2fb6bf093671", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47efc541-58d8-471a-b0c1-0635f7060054", "sighting_of_ref": "indicator--beb0c9ce-c34b-453f-b8dd-2fb6bf093671", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49929033-e218-4817-94a7-d5029737d678", "sighting_of_ref": "indicator--068bfdb3-3715-4b44-885c-9334a70e1595", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa037c8-51bc-47c0-bc09-e2b5030288ab", "sighting_of_ref": "indicator--890c6e2d-74e0-49dd-8cdb-4e4294bc457d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362d14d3-d6a5-49b1-86ec-774e6cbd3e82", "sighting_of_ref": "indicator--114c7edc-c47b-4c48-94fd-8ed3756b5655", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c20359-6fc7-4fc8-af40-dd24b41ce067", "sighting_of_ref": "indicator--114c7edc-c47b-4c48-94fd-8ed3756b5655", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34788441-c690-4241-b67b-c536702660dc", "sighting_of_ref": "indicator--4ce2d6d2-5b7b-41b5-9f26-68c39f88a422", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0f2017-2286-4da4-87d4-808c8d908de2", "sighting_of_ref": "indicator--4ce2d6d2-5b7b-41b5-9f26-68c39f88a422", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acc757a-20c0-4627-a48c-4335c1fbbe7e", "sighting_of_ref": "indicator--1c3d7df4-3f8e-4444-a378-ab5b69c37df6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0be970-3af1-4fc4-adbc-bff826ebef08", "sighting_of_ref": "indicator--1c3d7df4-3f8e-4444-a378-ab5b69c37df6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0eee1fd-42b4-40e2-8205-ef0b4bb3a94e", "sighting_of_ref": "indicator--1b2c12b7-c9e6-4c13-a578-fafc59402626", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9144ec39-4d87-4d42-895f-ee16661c3755", "sighting_of_ref": "indicator--1b2c12b7-c9e6-4c13-a578-fafc59402626", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7af1ae-d330-43d9-88ce-6d80517557c6", "sighting_of_ref": "indicator--1b2c12b7-c9e6-4c13-a578-fafc59402626", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9d4343-6ab7-4301-9e25-10ec1af29cc6", "sighting_of_ref": "indicator--82b9ff78-c6cb-4cfd-b61b-34f67b53f7a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfece3cf-4f5e-4adc-8fbc-8fd1d9efac42", "sighting_of_ref": "indicator--82b9ff78-c6cb-4cfd-b61b-34f67b53f7a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26f2151-8a08-4f06-96b2-b0a3840aa9c6", "sighting_of_ref": "indicator--b927eae6-ae43-4229-a4d9-bdfe6965f5c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf0d0ba-2fe4-41c8-aaf2-2cc45f21c495", "sighting_of_ref": "indicator--67caa1d9-6006-4afb-9c07-6cfb240049fc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f70e828-5721-482a-b2f3-2dedb1f29924", "sighting_of_ref": "indicator--28147004-66c2-4f50-9f2e-73a98b7aa904", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d456e4d-194d-48dc-8fec-81e2484e6c63", "sighting_of_ref": "indicator--75274561-ed81-40e5-9382-2ee47570925a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1da6d4-eead-418b-af41-b355c21b2015", "sighting_of_ref": "indicator--0ac30673-d0bb-41da-a2df-dfb13cd01541", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075035ed-11d9-4e6e-828c-f2bb64b6b0e3", "sighting_of_ref": "indicator--c0dd6b84-f976-40aa-8416-24e258896901", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5333c4-df4d-4025-a88f-c2c9a05e184d", "sighting_of_ref": "indicator--21822dfc-771c-4d63-941b-7f9ab5d4def0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbd0536-5f48-4fb6-93e4-b6ecee6fee65", "sighting_of_ref": "indicator--21822dfc-771c-4d63-941b-7f9ab5d4def0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1e54d7-5d6e-4cb1-aef2-9215a66aa404", "sighting_of_ref": "indicator--61359d8e-d5d6-4c06-ba05-6527505d2ab6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a26394b-ae68-475c-beca-c4f50aea6fa6", "sighting_of_ref": "indicator--61359d8e-d5d6-4c06-ba05-6527505d2ab6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c14e28-ca98-4fc1-9bc8-4eb2f11781d6", "sighting_of_ref": "indicator--cd9c4739-fe1a-4db4-a22d-dc2549f53857", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483cde79-6b2f-4b1d-817d-7daea8161f3f", "sighting_of_ref": "indicator--17dd2c2c-2988-4796-877d-d97e487af7ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e261b7-2dd9-4a19-a957-e396003f73d0", "sighting_of_ref": "indicator--17dd2c2c-2988-4796-877d-d97e487af7ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e16e5a-d9cf-435e-b3a2-bc9e1549e4e7", "sighting_of_ref": "indicator--17dd2c2c-2988-4796-877d-d97e487af7ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf02ddbf-ccea-4a14-99a0-b09fff50a424", "sighting_of_ref": "indicator--17dd2c2c-2988-4796-877d-d97e487af7ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b384e1e5-d71a-4394-bb5f-5bdac61a207d", "sighting_of_ref": "indicator--2c69e525-d4eb-4d1d-9ad6-194af8321a78", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a121be-130f-4e9b-90c4-fbd6feac0c1b", "sighting_of_ref": "indicator--22b045f3-7c1a-45d6-ab6b-62bea42ce6c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c30574-4d8c-497d-8157-34ac22371fc3", "sighting_of_ref": "indicator--7c0e441e-144a-4e51-a5a5-6bb572e0e572", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d2e3ca-246f-4a94-b80e-be908faf798f", "sighting_of_ref": "indicator--7ac0265e-83f3-4a87-8daa-8a53d50f7baa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa79232-e09c-4227-a33a-31b013afbb23", "sighting_of_ref": "indicator--7ac0265e-83f3-4a87-8daa-8a53d50f7baa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d16537-4cb0-4e11-b47b-64e5baaf2604", "sighting_of_ref": "indicator--565f6c28-8196-47da-84e1-36dce93a191c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30bcd2a6-747a-49d0-9797-2b93e0b82a1a", "sighting_of_ref": "indicator--26bf6eec-0c01-4110-aa65-a4915214ee10", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd61c35-9beb-4431-8b5c-ed03301e5234", "sighting_of_ref": "indicator--15d4c4b5-e7c4-4461-8364-921955673056", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eef71d6-a7e2-4b55-b88e-976615ff378b", "sighting_of_ref": "indicator--15d4c4b5-e7c4-4461-8364-921955673056", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdefad45-17a5-4051-a9e1-578040511311", "sighting_of_ref": "indicator--c421d540-04ff-4ea0-83c1-0c423efb59dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f41a91-9d23-4d3a-847a-5b37dceaf813", "sighting_of_ref": "indicator--8bb6742f-2f2b-4c62-a1c7-24f140e51ea3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624562b0-4ded-4e69-a4d5-0373f5a54c65", "sighting_of_ref": "indicator--8bb6742f-2f2b-4c62-a1c7-24f140e51ea3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472519e8-840e-4096-a4a0-5e91b0488d58", "sighting_of_ref": "indicator--d30d2f16-bee6-4a65-9aa6-801f7dc99dc2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a1c28c-372f-4d09-b442-a6492b0e8105", "sighting_of_ref": "indicator--d30d2f16-bee6-4a65-9aa6-801f7dc99dc2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f676587-15da-4034-9118-2d4cddd6f085", "sighting_of_ref": "indicator--d30d2f16-bee6-4a65-9aa6-801f7dc99dc2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8364cef-3f0f-40b1-b5e8-f6e79d7fe748", "sighting_of_ref": "indicator--deccddf3-c4b1-48c8-b53e-f42dacdfc574", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196046f0-2345-4318-8034-ad806fa91428", "sighting_of_ref": "indicator--e5755767-3aa4-4470-be01-8771e37bb2ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413def26-ab1d-4eba-9ba0-ca1d93fa4413", "sighting_of_ref": "indicator--659f33c3-8515-43ec-bb17-ee296ce4871a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5d3d93-1ef1-45be-b089-cd2450182f00", "sighting_of_ref": "indicator--659f33c3-8515-43ec-bb17-ee296ce4871a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82970d5-c010-49ca-bfa6-a23c920c051d", "sighting_of_ref": "indicator--03d563b3-810b-4e9d-9d21-f3af0e0e2539", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36792ca0-55f9-4164-a48c-e1847a86a563", "sighting_of_ref": "indicator--03d563b3-810b-4e9d-9d21-f3af0e0e2539", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606d0126-dd57-4e1a-a0a4-75d9e157543b", "sighting_of_ref": "indicator--03d563b3-810b-4e9d-9d21-f3af0e0e2539", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2022e90e-4912-45e8-887b-768f70c2d89e", "sighting_of_ref": "indicator--2ed2d8d8-1396-42b4-b240-7bbd34add42a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481273dd-83f5-4fef-98f8-c9643c1ef5b4", "sighting_of_ref": "indicator--2ed2d8d8-1396-42b4-b240-7bbd34add42a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47ece2c-4b1b-4341-ba96-af3898f8270e", "sighting_of_ref": "indicator--2ed2d8d8-1396-42b4-b240-7bbd34add42a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afb3324-b3c2-40b4-9d0d-188fa7b83a9d", "sighting_of_ref": "indicator--b0747b6a-5835-40c7-ae9f-113979752a5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a47a3f-1650-48f8-ba31-9cd56a029110", "sighting_of_ref": "indicator--b0747b6a-5835-40c7-ae9f-113979752a5a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b35eef-925c-4486-845a-6ce8e7d577af", "sighting_of_ref": "indicator--b0747b6a-5835-40c7-ae9f-113979752a5a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05662208-b387-47a5-8fb7-b1bd99033fe4", "sighting_of_ref": "indicator--16e43509-8636-4e02-8c7e-e21e83580164", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefc8c48-0f5b-4ca9-9be6-052f4349fbcb", "sighting_of_ref": "indicator--16e43509-8636-4e02-8c7e-e21e83580164", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f1e1cd-82d4-4643-944b-c703d16e4eee", "sighting_of_ref": "indicator--16e43509-8636-4e02-8c7e-e21e83580164", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99f1b19-0459-4199-85f2-af53c00de6c1", "sighting_of_ref": "indicator--3d659447-e9e0-4fe8-a36e-09cee4ff70de", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec0edaf-2f64-4a3f-8939-3d6a1e19ec56", "sighting_of_ref": "indicator--3d659447-e9e0-4fe8-a36e-09cee4ff70de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6007ab9-6de1-4c98-bba7-5d24ba7a5f10", "sighting_of_ref": "indicator--3d659447-e9e0-4fe8-a36e-09cee4ff70de", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ee43b7-be6f-4e45-b0f6-ec18db18e722", "sighting_of_ref": "indicator--1dc1aa42-8c2b-43dd-9cb1-73e901c1479a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444732bf-570c-475f-b423-d50e19504d36", "sighting_of_ref": "indicator--1dc1aa42-8c2b-43dd-9cb1-73e901c1479a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9d7865-be94-4791-951e-2707607ad394", "sighting_of_ref": "indicator--1dc1aa42-8c2b-43dd-9cb1-73e901c1479a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4a2140-4336-4945-98a3-a57e1f31ce67", "sighting_of_ref": "indicator--85f8c55f-19e8-4d9c-86eb-dfaeb09b765f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e99372-0cb2-4a07-8a38-a735aab2aff6", "sighting_of_ref": "indicator--85f8c55f-19e8-4d9c-86eb-dfaeb09b765f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8e47cf-fd57-4047-82c1-ec7bb429781b", "sighting_of_ref": "indicator--85f8c55f-19e8-4d9c-86eb-dfaeb09b765f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8838a5da-1a6f-49db-917f-370eb42179b6", "sighting_of_ref": "indicator--82edbdf3-7703-40a1-95b0-5d3401e8071e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12681f8-369f-4a4a-a9ab-1ac8970cb8b3", "sighting_of_ref": "indicator--82edbdf3-7703-40a1-95b0-5d3401e8071e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2c87e2-f3b6-4d4b-afc4-06faef524d43", "sighting_of_ref": "indicator--82943b29-4f9c-41ef-a449-7799cffda384", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd0356a-9444-4139-a2a9-60e1750562ee", "sighting_of_ref": "indicator--c93314cc-7062-4e25-824a-9ee6b1276125", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112dea7f-4687-4320-a001-417c1a1f622b", "sighting_of_ref": "indicator--425d3944-d058-4c48-ad22-6fe4d49384fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5014cf16-9d37-498f-b94a-1b63acc69cc8", "sighting_of_ref": "indicator--425d3944-d058-4c48-ad22-6fe4d49384fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82ce6c4-ac2c-48f5-bbdc-c5b99472f1e8", "sighting_of_ref": "indicator--425d3944-d058-4c48-ad22-6fe4d49384fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca33075d-72e1-4177-864c-23b2b7bf1b45", "sighting_of_ref": "indicator--0a68c244-1732-4d8b-9e40-173d9fa516b0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adad9535-77c6-41d5-a608-5169b81f8401", "sighting_of_ref": "indicator--0a68c244-1732-4d8b-9e40-173d9fa516b0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec7f93b-087c-41fa-a731-4ca533bd1f84", "sighting_of_ref": "indicator--80ab410f-7388-4821-8cd1-1f8ef190f664", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483428b9-8c4e-4808-b3f6-15a1aa7f40d4", "sighting_of_ref": "indicator--943f4c60-6a35-480c-92ca-7947eadf409b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cf08a8-193b-401d-a525-2b849c54ba8c", "sighting_of_ref": "indicator--943f4c60-6a35-480c-92ca-7947eadf409b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0eaffd-214f-48de-9d68-249a3494c3b9", "sighting_of_ref": "indicator--24c6f3c2-04c4-4bb5-b1e7-357a91667ad2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516eb596-70c3-4456-ba2b-728b347c57db", "sighting_of_ref": "indicator--24c6f3c2-04c4-4bb5-b1e7-357a91667ad2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2082c46b-efcb-48cc-9701-2dceddd1cd41", "sighting_of_ref": "indicator--24c6f3c2-04c4-4bb5-b1e7-357a91667ad2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95562120-2e22-491a-a0e4-20d60810dca5", "sighting_of_ref": "indicator--c5d78cf2-1191-49f0-a762-e2c071a19cce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b91fca-c820-4516-8e65-aa04a8d9a374", "sighting_of_ref": "indicator--c5d78cf2-1191-49f0-a762-e2c071a19cce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d2c25e-892f-420f-b332-1574b1600277", "sighting_of_ref": "indicator--0bd42109-88c7-4c3e-8d1d-54e53785a0e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ba46ee-5594-4a24-acf2-64ab46e4d92d", "sighting_of_ref": "indicator--9775cd55-7b3a-409c-8cb6-d57682536c6d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b71b7fa-bc1b-4e18-9530-15276c5e2355", "sighting_of_ref": "indicator--9775cd55-7b3a-409c-8cb6-d57682536c6d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884179f0-9884-4645-9311-38d345d7f496", "sighting_of_ref": "indicator--ac508a65-e1f1-4435-a7b0-126b087455d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103e56d3-1eb2-47b9-8f1b-b63ac2e76f84", "sighting_of_ref": "indicator--ac508a65-e1f1-4435-a7b0-126b087455d5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66752947-d604-49d4-be88-91401ee6af60", "sighting_of_ref": "indicator--ac508a65-e1f1-4435-a7b0-126b087455d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dd70e7-b3fc-4b52-bfd6-c30b5f9231cd", "sighting_of_ref": "indicator--4865906a-348d-4094-afb0-f4b1dee247e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d227be8b-175e-4412-8ec3-4b1bee2c55cd", "sighting_of_ref": "indicator--4865906a-348d-4094-afb0-f4b1dee247e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c682ef-e6d8-4e4b-8886-0a00e5176190", "sighting_of_ref": "indicator--0a8e8fc2-8a04-41d8-8217-ea63b1f3361c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f29898-9ec4-471e-a40c-5fd0d676623b", "sighting_of_ref": "indicator--11b5b829-09c6-4254-80bd-b2b7bff0d50b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee6b54a-e335-462f-9728-fc240884eff7", "sighting_of_ref": "indicator--11b5b829-09c6-4254-80bd-b2b7bff0d50b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38487b6e-2957-4dcd-a2ec-44e02c9b36a2", "sighting_of_ref": "indicator--dfd7fc4c-5696-43f9-b8dc-805b7424545c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298b68ac-cc4b-4e05-9d23-001ac37d1a88", "sighting_of_ref": "indicator--1189f9d9-ee38-416c-8de0-9ca24a21dfe6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e350b8a0-6c57-40bb-8696-ea21fb514519", "sighting_of_ref": "indicator--1189f9d9-ee38-416c-8de0-9ca24a21dfe6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e056867-b239-46a1-8028-557b3d49e996", "sighting_of_ref": "indicator--1189f9d9-ee38-416c-8de0-9ca24a21dfe6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2f89bb-f872-4872-94fe-46c02b488011", "sighting_of_ref": "indicator--68b43f67-6d7f-407f-bb24-0b4802e537e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b994ec7-a62d-41a6-bcb0-fe1f0a4ddebf", "sighting_of_ref": "indicator--68b43f67-6d7f-407f-bb24-0b4802e537e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b552d8d-e148-4588-8818-cd27ec775de2", "sighting_of_ref": "indicator--532b11de-698d-41dc-a30d-292df1531fe6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32e9d49-dacc-4ef5-9832-d6c62c10e444", "sighting_of_ref": "indicator--532b11de-698d-41dc-a30d-292df1531fe6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21fb635-6513-4c1a-bb7e-fba03d6f41a7", "sighting_of_ref": "indicator--036980fc-4d62-4058-baaf-cbea405f97a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c34b1ff-2359-4031-b1ad-723f76451509", "sighting_of_ref": "indicator--77678167-0992-4a50-b33c-ccdd100f9af0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dda9c8c-66cf-4e1d-85a2-ccfe211d2327", "sighting_of_ref": "indicator--77678167-0992-4a50-b33c-ccdd100f9af0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291d4b34-7183-4a24-b5df-ce52b3e4f6a2", "sighting_of_ref": "indicator--a54e102d-f4df-4e32-b0e9-2c5e6b452975", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3366949a-6eb3-43bc-a469-2fe73ae6ba4f", "sighting_of_ref": "indicator--a54e102d-f4df-4e32-b0e9-2c5e6b452975", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9703d157-85eb-41ee-bacc-c09fefa8894a", "sighting_of_ref": "indicator--85d44e12-5b48-47ac-bdb3-772937cad0a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afc12ef-ea8e-44db-9912-38f00043cfbc", "sighting_of_ref": "indicator--85d44e12-5b48-47ac-bdb3-772937cad0a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757a7409-253e-46a8-bb69-3b10a7b60f7f", "sighting_of_ref": "indicator--67b1c29b-01d4-41c2-82b8-a555a3379f66", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9156bb1-16f9-4d52-b57d-cad8b2c3a2db", "sighting_of_ref": "indicator--67b1c29b-01d4-41c2-82b8-a555a3379f66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3d3d9d-5dc7-4fbb-934b-8f37e35fa214", "sighting_of_ref": "indicator--67b1c29b-01d4-41c2-82b8-a555a3379f66", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8dd60c-0d97-41a8-83e9-cd44e5bc914a", "sighting_of_ref": "indicator--9f9157e8-1ac9-4923-8061-13aa4add5398", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3657d8cc-ee00-445b-8e9b-17c18d813372", "sighting_of_ref": "indicator--9f9157e8-1ac9-4923-8061-13aa4add5398", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f247ab8c-cf36-453f-8eae-513bb345ddb9", "sighting_of_ref": "indicator--9cbb4ccf-4605-4481-9f64-296e7bc14080", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7dd7b5-3829-4acd-ad45-7b0c9f743e93", "sighting_of_ref": "indicator--9cbb4ccf-4605-4481-9f64-296e7bc14080", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d3095f-74fd-4154-871e-dc91b0a7a364", "sighting_of_ref": "indicator--9ecfde25-9acd-4ea4-8916-3557b18aad2a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31ad92a-dd3b-45c1-9a82-f809946f2be7", "sighting_of_ref": "indicator--34420f41-7f80-4ca0-a0df-389dd0abd290", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2329befe-673e-47b5-ad5e-3c69e77ae58b", "sighting_of_ref": "indicator--34420f41-7f80-4ca0-a0df-389dd0abd290", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7919cce0-ec8e-4e7d-b314-a5c671d80241", "sighting_of_ref": "indicator--1ab19367-53ef-40d4-88da-a00b715dfb01", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c23846-a09f-4ad4-b0ed-34a0cc10c642", "sighting_of_ref": "indicator--1ab19367-53ef-40d4-88da-a00b715dfb01", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d08b04a-dbae-4e62-8f12-d6469f3ff35a", "sighting_of_ref": "indicator--1ab19367-53ef-40d4-88da-a00b715dfb01", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93300cfb-c1cc-4ab3-8c11-7f8ac882aa2c", "sighting_of_ref": "indicator--57377b43-8da8-49b3-96b3-d5ca7c89c9e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f69844-42ac-4714-9a45-532e6b8832e5", "sighting_of_ref": "indicator--7760ea31-9d04-4037-9005-8f80cdb4fba4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d46b3c-19d7-4a6b-9bad-2563c9843b84", "sighting_of_ref": "indicator--7760ea31-9d04-4037-9005-8f80cdb4fba4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473cc8c8-0eef-4ee1-be15-9ecf1c344a45", "sighting_of_ref": "indicator--ffe1cbc4-b7a1-482b-95d4-2c2157a9ccc1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca07eca-d256-4252-9967-eb75ba45c619", "sighting_of_ref": "indicator--ffe1cbc4-b7a1-482b-95d4-2c2157a9ccc1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7ebe54-069a-407f-915b-c13696e1e40a", "sighting_of_ref": "indicator--e19ca0bf-7920-4c91-9676-ba63fd354902", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ba2b70-15d1-4062-b6a4-99f840396be1", "sighting_of_ref": "indicator--a96227f5-da06-428f-94e7-f46c2404c93d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dd2dec-d52d-44d8-8c3c-db14e3442ba9", "sighting_of_ref": "indicator--a96227f5-da06-428f-94e7-f46c2404c93d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6203de-c520-4dff-a211-27313163abb7", "sighting_of_ref": "indicator--b7c5e535-1bb6-4451-8db4-b8defb8a9b56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6186a4-79c4-4349-963e-e6367f985d0d", "sighting_of_ref": "indicator--b7c5e535-1bb6-4451-8db4-b8defb8a9b56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78fb0b5-07c5-4003-b2d3-fbe4ad4771f9", "sighting_of_ref": "indicator--6a3ef95b-9edd-439f-99a2-2f87e3df9c2e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649bcea5-98ac-493d-ba21-5c437eb8882c", "sighting_of_ref": "indicator--e9069a0b-3b67-436b-b87f-0dcf6b85067c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adb19f7-44fb-47ff-85e3-81a43a00a0e4", "sighting_of_ref": "indicator--e9069a0b-3b67-436b-b87f-0dcf6b85067c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95ddad2-c91e-4eac-9ead-4eb699fea603", "sighting_of_ref": "indicator--a7e69fb2-1af5-4874-9e3e-9479f7a6eba8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfece398-9335-497b-a43f-24d83f073b46", "sighting_of_ref": "indicator--3ade6303-ba09-45de-871c-111f3a390b4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec898711-3f63-4ea2-ab29-26544ec1c886", "sighting_of_ref": "indicator--e71c87f5-a41d-42a8-84c7-bda35d206132", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbed409b-2036-4e83-9314-37b5b6c73a29", "sighting_of_ref": "indicator--6a19a5ac-7bb9-491a-9c96-6fd9ee5d460f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99613f9e-a3e4-48b5-b356-163b6e302aa4", "sighting_of_ref": "indicator--136d1102-8d7f-49da-a3bc-5401867f563d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c144ead6-590f-4e96-b153-c5d9e377115a", "sighting_of_ref": "indicator--136d1102-8d7f-49da-a3bc-5401867f563d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3c15b4-a8df-4ad4-b4af-c72706b7e296", "sighting_of_ref": "indicator--136d1102-8d7f-49da-a3bc-5401867f563d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec896a81-24aa-41bf-9b1e-3d4bd3daf1ee", "sighting_of_ref": "indicator--6734de2e-a953-4a24-b6b7-7f376a950dfe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3f45fc-f8f5-4fd7-9dd8-36f2a60a64e9", "sighting_of_ref": "indicator--d5f5726e-f8ee-46d8-bd94-ad0e14666eb2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca1e945-029f-4a95-b828-116cb1f050ae", "sighting_of_ref": "indicator--d5f5726e-f8ee-46d8-bd94-ad0e14666eb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114e4e03-cb79-45d9-92a8-3599f6c15549", "sighting_of_ref": "indicator--944ef799-21d3-4e91-a2f6-c2eda8c9a31b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8f66fc-7b40-4c80-a18c-0490a8bcc61c", "sighting_of_ref": "indicator--944ef799-21d3-4e91-a2f6-c2eda8c9a31b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa12092-4870-4f22-bab9-88a222118696", "sighting_of_ref": "indicator--944ef799-21d3-4e91-a2f6-c2eda8c9a31b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e214570-c352-4c81-8734-d56dfb3e6b71", "sighting_of_ref": "indicator--eec6cc05-f7bd-472a-87c6-94e18febf39b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cbe308-f881-4ddf-a7b6-1f81b9f4ddca", "sighting_of_ref": "indicator--699364aa-99df-4cf6-9058-8c2fccd51654", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3ffa2e-3a9e-49e8-9573-9a17922b6eb5", "sighting_of_ref": "indicator--fd315cae-e819-440e-84e6-00d5899f9d5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c9d2b6-d54e-45c7-bc0b-f161e46eb70f", "sighting_of_ref": "indicator--fd315cae-e819-440e-84e6-00d5899f9d5d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c97497-0f50-424b-8bc2-9b05d2dce9c9", "sighting_of_ref": "indicator--fd315cae-e819-440e-84e6-00d5899f9d5d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971544a6-95e6-453d-95b3-870e0ddc1bca", "sighting_of_ref": "indicator--bc5fac29-2278-4ae7-be02-dba154e52f08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6151fe8-7ea0-4433-9401-652dc7d8c2e2", "sighting_of_ref": "indicator--bc5fac29-2278-4ae7-be02-dba154e52f08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb962b8f-73ab-461d-9bf0-ca101f122b82", "sighting_of_ref": "indicator--bc5fac29-2278-4ae7-be02-dba154e52f08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51405c45-9a3c-4d5c-bef2-95dac833108a", "sighting_of_ref": "indicator--1b9053fe-08d2-4222-b0f2-69e7eb8ae274", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75427927-1557-4487-89f9-e390f6e3cc52", "sighting_of_ref": "indicator--1b9053fe-08d2-4222-b0f2-69e7eb8ae274", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e7cf62-999f-40b8-9b8a-c4d1bd445ebd", "sighting_of_ref": "indicator--cbad62c7-54ca-40aa-96e4-022096d0be5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6187903d-ecd6-4444-ae15-8d861fd78438", "sighting_of_ref": "indicator--cbad62c7-54ca-40aa-96e4-022096d0be5b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecca7402-c175-4325-8e1b-130c8aa7c026", "sighting_of_ref": "indicator--0754df71-ddda-4435-8701-4a6076064c30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e16265-f89c-4793-8511-e31fa0cf8493", "sighting_of_ref": "indicator--0754df71-ddda-4435-8701-4a6076064c30", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9fc913-4a70-414a-8a85-6cdc49721eee", "sighting_of_ref": "indicator--11b061a1-fa60-4fc7-be41-250c7618859d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63b04dd-b9a6-4b23-b961-6a7825ad9f25", "sighting_of_ref": "indicator--11b061a1-fa60-4fc7-be41-250c7618859d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed06ddb3-a50b-4bd0-936d-22cc98cd6697", "sighting_of_ref": "indicator--11b061a1-fa60-4fc7-be41-250c7618859d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4b09f7-d876-4ad3-895f-4c1fe9e37dc0", "sighting_of_ref": "indicator--eda1df21-b20f-4374-87eb-427b608c62f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ea600b-b70f-4901-b02b-116ae2db98ca", "sighting_of_ref": "indicator--6cb9a4a8-401b-445d-9fb2-030dc3dfb001", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62576a31-32c8-4068-a474-c8e3f08e4bd8", "sighting_of_ref": "indicator--6cb9a4a8-401b-445d-9fb2-030dc3dfb001", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a8538d-26f5-4a24-abc3-5fc1f3c3f5e5", "sighting_of_ref": "indicator--0f6d26b6-7154-45f9-ab33-b8d427448073", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f94619-1e15-4cf5-aa93-62b5d99ed4e4", "sighting_of_ref": "indicator--0f6d26b6-7154-45f9-ab33-b8d427448073", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef163a5e-bd9d-447c-956f-08a40ee3c9eb", "sighting_of_ref": "indicator--40f016a7-ec64-46b9-960c-5e9d3ab34ef8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab0efec-7ec2-498d-a261-7f041e3355dd", "sighting_of_ref": "indicator--40f016a7-ec64-46b9-960c-5e9d3ab34ef8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271722cd-f1ce-4008-a545-b581405505e4", "sighting_of_ref": "indicator--37b635e9-bef8-4c2e-9f35-4018e64c81d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75eb059d-4498-4035-aa32-e6cba52affb5", "sighting_of_ref": "indicator--37b635e9-bef8-4c2e-9f35-4018e64c81d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58048c93-b632-4909-a398-b57172bbe639", "sighting_of_ref": "indicator--3eb02b97-dfb8-43ca-aff4-ab1931856b25", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdfb0bb-aa5a-48b7-807b-68c3ef9f64b4", "sighting_of_ref": "indicator--3eb02b97-dfb8-43ca-aff4-ab1931856b25", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfbaa36-de42-4e54-b0ad-4112932750dc", "sighting_of_ref": "indicator--d5c71d8d-80d2-400b-9513-cc4b743917ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acddf11a-b2ee-46f6-945e-598fdc1d119c", "sighting_of_ref": "indicator--5858f00c-ef0b-44f7-877b-f50a92b22a12", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e29f20f-6458-44ea-8cdc-661658ddcb00", "sighting_of_ref": "indicator--5858f00c-ef0b-44f7-877b-f50a92b22a12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ec01db-d0d8-4150-af10-baedb059c8a7", "sighting_of_ref": "indicator--82ef00e6-845a-45a7-abcc-0e80cbc17593", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3b3e33-aa0b-4006-80bc-75d004479afd", "sighting_of_ref": "indicator--82ef00e6-845a-45a7-abcc-0e80cbc17593", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0794a80-c2f7-47dd-aa14-4a3768d058c4", "sighting_of_ref": "indicator--82ef00e6-845a-45a7-abcc-0e80cbc17593", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652e5ddb-73c6-4786-b392-72a92fee8f33", "sighting_of_ref": "indicator--11e12acc-f419-4c72-a9f7-f88a3ae7c0fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f3b684-69ce-4da8-ab8d-c50a75007ddf", "sighting_of_ref": "indicator--07b4528f-5b31-43ed-abf5-19afc408e9a1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3a15c1-5005-4405-a773-06e819e04f76", "sighting_of_ref": "indicator--f94a18f4-046b-48e5-9a4f-5c9022090fab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac4998b-8010-424e-b0b6-3a8923f996b8", "sighting_of_ref": "indicator--f94a18f4-046b-48e5-9a4f-5c9022090fab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bc5c4f-c0ae-458a-8a49-90c42a11b25f", "sighting_of_ref": "indicator--c0ca1b57-d597-4876-8753-ecf37e10aca0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed8545d-0e48-4d71-922e-d640de9d142f", "sighting_of_ref": "indicator--c0ca1b57-d597-4876-8753-ecf37e10aca0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccd1695-cdd8-4ed1-b638-1f4288f080b2", "sighting_of_ref": "indicator--d52b8ec2-1bdf-4c4e-a077-213c48e0e079", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38937a02-5252-4140-aa87-3ca07b109bd0", "sighting_of_ref": "indicator--39d13986-5caf-479c-94d1-19ac55acbcde", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abb7405-631e-4f9a-bf9c-107d34f694b6", "sighting_of_ref": "indicator--3c36a14b-662f-4d2a-b7f0-be8b952e009c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f13a58e-58c6-4cb9-9317-c622d1b6dd1e", "sighting_of_ref": "indicator--516e51f8-1a2f-42e2-9e18-e9712b41b3f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c1fa87-0da3-4734-b6e0-3bfd85a3300b", "sighting_of_ref": "indicator--516e51f8-1a2f-42e2-9e18-e9712b41b3f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0741c8f0-7eae-4107-a6b7-37cc1e99051a", "sighting_of_ref": "indicator--88834390-707c-4179-bef2-94f230a6a0c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c277f8-54e4-4386-9d16-99f5a3a601ce", "sighting_of_ref": "indicator--10e78fd8-1756-4fb2-b281-9f3e313d69b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df749f9d-7b96-4ca1-a28d-038433adea40", "sighting_of_ref": "indicator--10e78fd8-1756-4fb2-b281-9f3e313d69b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e655533a-9560-420c-9ead-9a29ecae7aa6", "sighting_of_ref": "indicator--de4674d4-e392-4875-b3aa-f9bd1c49191a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c160f7-8130-44e0-a03a-5ebaf2e28154", "sighting_of_ref": "indicator--de4674d4-e392-4875-b3aa-f9bd1c49191a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8674b111-0ce7-4c8f-b91e-7b0c498d7038", "sighting_of_ref": "indicator--3b022c6b-aeb3-4a9d-bd9c-237dc4020bf5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3448507a-2fdc-434a-a677-19040ad2e1bb", "sighting_of_ref": "indicator--7832895b-5ced-4102-91bf-9ad010b0fac8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99901a1-36d0-42ea-a05e-26a62999c81e", "sighting_of_ref": "indicator--7832895b-5ced-4102-91bf-9ad010b0fac8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5884448-2449-43d3-a087-6ef9b57d296c", "sighting_of_ref": "indicator--c8e2c025-6ce5-4b39-b47a-2ad635836744", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bea1dd7-643b-40c3-ad00-96e2dad7e532", "sighting_of_ref": "indicator--c8e2c025-6ce5-4b39-b47a-2ad635836744", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d45631e-5d2b-4a2e-9d13-8b72def31a85", "sighting_of_ref": "indicator--c97c6b93-4387-4867-a285-9891e2e66088", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53788ab8-c914-465e-bd3e-aa1b05ba278b", "sighting_of_ref": "indicator--c97c6b93-4387-4867-a285-9891e2e66088", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b668cd1f-b7a1-4bb6-849c-112c8ecc4379", "sighting_of_ref": "indicator--41ad3358-03c5-49d2-96d4-73b43d5f9e3d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0656db4-1292-4bc2-b0f7-3d4c5c8e5e70", "sighting_of_ref": "indicator--41ad3358-03c5-49d2-96d4-73b43d5f9e3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e06261a-3f82-4e3d-ae4c-ecbe606abc19", "sighting_of_ref": "indicator--6c2e59fb-1d72-4fa7-b5c5-186b81d825dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2a88ce-8147-47c0-8b5b-daba261dbc76", "sighting_of_ref": "indicator--cb5e6b95-810f-462f-8c92-06fd62431e3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15744a8-f192-41f3-ad7e-c36abbbf4d9b", "sighting_of_ref": "indicator--cb5e6b95-810f-462f-8c92-06fd62431e3f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb4f4a0-a071-4b11-9ceb-7af593739d97", "sighting_of_ref": "indicator--2c4ac54a-819d-4c10-a9e4-0772284d1c83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4457e3-2bc0-4fcb-add5-ce6fc63a8f74", "sighting_of_ref": "indicator--9e29683d-9b95-495a-8a5a-ff84205bc88e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d721f9-33e6-45e7-bee6-67683e4043a9", "sighting_of_ref": "indicator--9e29683d-9b95-495a-8a5a-ff84205bc88e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dc5cbf-289b-4497-9f8b-83f32af33d0e", "sighting_of_ref": "indicator--1e359c80-b75f-4295-b09b-f291cb33ae22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013a31a7-a847-473c-80c5-71e0654f1a07", "sighting_of_ref": "indicator--86433154-9c63-4aad-af6b-63326b3f1273", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d43d43-63c5-4fbf-b2e3-6a301400b5a4", "sighting_of_ref": "indicator--86433154-9c63-4aad-af6b-63326b3f1273", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450f5bcd-8a1a-48a5-8f8d-34b7dabb426d", "sighting_of_ref": "indicator--86433154-9c63-4aad-af6b-63326b3f1273", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b95d9d9-21d0-4ed6-b105-166e3597a1a2", "sighting_of_ref": "indicator--037a392f-2a73-45fc-8822-2eb870b064f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59a03c8-9faf-4b87-9e80-62c6656c86cb", "sighting_of_ref": "indicator--037a392f-2a73-45fc-8822-2eb870b064f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7f3b14-c647-48d2-9222-6145dd6ff384", "sighting_of_ref": "indicator--9a9cbc72-3b87-4aad-8aac-624aae4fbfb1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc8796-8c27-439b-b19e-9814c165c388", "sighting_of_ref": "indicator--0980e631-b2c8-4a7d-9b67-a1ec41e0ba9a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2318f46f-eb8a-4320-ad3b-2d6363c6a76c", "sighting_of_ref": "indicator--7b2d3829-4939-492c-9fe3-33ccf900e528", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140627c-6b1a-43cc-9807-d0066711d5a8", "sighting_of_ref": "indicator--4f41753a-0d7d-4fc8-9804-a3ae7156c2fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08f3c02-abf6-4443-8bac-95858827f89c", "sighting_of_ref": "indicator--4f41753a-0d7d-4fc8-9804-a3ae7156c2fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2b08f6-d03c-46b4-863b-07d9b0790904", "sighting_of_ref": "indicator--2f5aac14-0aa0-4f1d-8103-2cfedc112fed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e6e7ae-3706-49be-bf62-c24cc9a31bea", "sighting_of_ref": "indicator--8a902a16-79f9-4092-99b7-b689dcfdcd36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a01141-0547-4f7c-9a41-710e4be1d71a", "sighting_of_ref": "indicator--94f4243f-1bfc-4472-90ed-76fa898a162d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54677df-e1bf-41b3-980b-5d50011ad88a", "sighting_of_ref": "indicator--94f4243f-1bfc-4472-90ed-76fa898a162d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756259c0-f4a1-4d8d-99f3-b8a1864ad1b4", "sighting_of_ref": "indicator--17b48cee-5bee-41a7-8058-48fcefcb822e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e44320d-c515-4b23-bcbf-a2396c0cd22d", "sighting_of_ref": "indicator--17b48cee-5bee-41a7-8058-48fcefcb822e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f218dd98-bf11-4602-8962-ef899bc49104", "sighting_of_ref": "indicator--17b48cee-5bee-41a7-8058-48fcefcb822e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461d7301-8f3b-42ad-af06-0563d0b05f9f", "sighting_of_ref": "indicator--ba9b0a43-a109-4d88-a597-b190320ce3ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed50fe5-4590-431b-9a74-32afcb72ea27", "sighting_of_ref": "indicator--ba9b0a43-a109-4d88-a597-b190320ce3ef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83501126-a9a1-4f96-9c83-f88d4d6226f2", "sighting_of_ref": "indicator--8a2913d1-0144-4838-8224-a2cce89ed6b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a689720-0319-4a73-ae38-c9c8b3e4ed23", "sighting_of_ref": "indicator--8a2913d1-0144-4838-8224-a2cce89ed6b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b099721-a27f-4612-8aee-56c6a17482fc", "sighting_of_ref": "indicator--3c5214ee-3f39-4823-94a2-16b678096650", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bf2c2d-fe46-4f73-902a-d35350a7ecb7", "sighting_of_ref": "indicator--2200420d-7cd9-408d-909e-0a0bd4e324a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f95367d-29fa-4dde-ae1f-57f2816e7371", "sighting_of_ref": "indicator--007acf7e-4c3b-4476-a07f-7552afd213a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baffc1bd-3e36-4018-94b5-c550112200ff", "sighting_of_ref": "indicator--007acf7e-4c3b-4476-a07f-7552afd213a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a33489-c3c2-4a45-b3cb-648c2d6ba6f6", "sighting_of_ref": "indicator--4023317d-0178-4092-b3ba-8ad90269d66f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec465d7-f623-4e1f-b6f2-b0c603c084cd", "sighting_of_ref": "indicator--cd899c57-6e9d-43fa-a57e-e6e51e7cc359", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547d490e-4fe0-4c63-a415-b6ac1c63cb59", "sighting_of_ref": "indicator--d8f9e289-62a9-4dda-81f6-a5b3d807a20e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4089274c-3167-42fa-b824-e4b6ea5e84b8", "sighting_of_ref": "indicator--d8f9e289-62a9-4dda-81f6-a5b3d807a20e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1f44a8-241f-4148-a191-2237f6a4275c", "sighting_of_ref": "indicator--3c512e3a-4377-490c-83c0-22900a26f9bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d8882b-33e6-4c31-98f1-2bc12c219af6", "sighting_of_ref": "indicator--3c512e3a-4377-490c-83c0-22900a26f9bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e1c0e1-2846-464f-98fa-b2f732a792f1", "sighting_of_ref": "indicator--dc99837d-9bc8-4a65-a561-350fd520c802", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd35834e-f0d2-4338-a846-0dfd602f7692", "sighting_of_ref": "indicator--dc99837d-9bc8-4a65-a561-350fd520c802", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244c43f1-0df6-48bf-840e-6b42cd83a454", "sighting_of_ref": "indicator--28f76fab-d371-476a-87b8-0b4f42dc8c40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c67b2ed-0662-4371-bbe1-5f4e20607556", "sighting_of_ref": "indicator--28f76fab-d371-476a-87b8-0b4f42dc8c40", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd226527-04c4-4dfd-8296-7289819f0022", "sighting_of_ref": "indicator--28f76fab-d371-476a-87b8-0b4f42dc8c40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336778a8-4b71-40bf-9ef4-2417ff05ad17", "sighting_of_ref": "indicator--c53c85ed-04b1-4960-91ed-85fa0a52c89f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa3b780-5210-4f39-bdbb-7edf0bb84836", "sighting_of_ref": "indicator--c53c85ed-04b1-4960-91ed-85fa0a52c89f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735c1668-0046-4e47-8786-ecf4aedee9bd", "sighting_of_ref": "indicator--0b5e7d02-8c72-421e-bb91-c6efc15e42b5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6778388-bdfe-448a-b380-55ec98b35ef8", "sighting_of_ref": "indicator--e466256a-5e2a-4b51-ba4e-8a57d55bc51c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83dc349-8d29-4d82-a471-c753baca8756", "sighting_of_ref": "indicator--d43c2ecd-656c-4276-9d6a-a3e699879022", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2aeae76-20e8-42d4-b1c9-81d9857980cd", "sighting_of_ref": "indicator--5a726922-f275-4ac1-b41a-bc165f03a12f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acb0f40-8250-4501-96c7-b113cd6c2b21", "sighting_of_ref": "indicator--5a726922-f275-4ac1-b41a-bc165f03a12f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb155ccf-3618-40ae-8d86-5bb942ef4707", "sighting_of_ref": "indicator--1e77bfd3-4040-4d55-9532-72f311371122", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d988c-ab91-4369-a192-c87a00ef841e", "sighting_of_ref": "indicator--1e77bfd3-4040-4d55-9532-72f311371122", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23407c12-9e87-4575-8ec5-29b0172481f9", "sighting_of_ref": "indicator--461f55da-47e1-46d3-b531-a0e6a14cb649", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec53608c-37ee-4d66-bd23-1c98ddb41d15", "sighting_of_ref": "indicator--461f55da-47e1-46d3-b531-a0e6a14cb649", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fea74f-19ef-43ac-9734-38a423f19433", "sighting_of_ref": "indicator--64e24d5e-bbe2-4771-b4f2-c1866d635dfd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba454f6a-c0cd-4a78-9487-b5e8d49dd658", "sighting_of_ref": "indicator--f0fced62-8319-4ce5-8595-8be6099c106d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cc3b6a-ad98-4dae-87ea-ba61f0ee957b", "sighting_of_ref": "indicator--8761094f-a8c6-48fd-ac40-1cca6f2fe607", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe37a2b-e80c-49ff-8c40-95c5679b5805", "sighting_of_ref": "indicator--d54c4a84-53fc-426f-a2b6-cdea0d00ced0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbcb710-17df-48c9-8524-c0ccc3877d84", "sighting_of_ref": "indicator--d54c4a84-53fc-426f-a2b6-cdea0d00ced0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b79432-75d0-4824-8a85-cf5a2e6ca90f", "sighting_of_ref": "indicator--d54c4a84-53fc-426f-a2b6-cdea0d00ced0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111d9685-0cea-463f-9184-57d081117cb3", "sighting_of_ref": "indicator--3c756a57-cc9d-45a1-9c07-5d47dde95a65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aa03e5-1f51-4b15-ac72-bf737f4b2bac", "sighting_of_ref": "indicator--3c756a57-cc9d-45a1-9c07-5d47dde95a65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab9cea5-96ae-42cc-8c02-8fcedf7a2eb8", "sighting_of_ref": "indicator--1db74778-b53c-490d-97e1-45d4254c784d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165b21b3-55a4-4ffb-8453-b40d927a9038", "sighting_of_ref": "indicator--1db74778-b53c-490d-97e1-45d4254c784d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14d1795-80cc-49db-9817-a754c664ddc8", "sighting_of_ref": "indicator--94fede59-d224-4bc2-8464-12447a42b3b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2dbf40-8e86-4361-879e-2df54c839ccf", "sighting_of_ref": "indicator--94fede59-d224-4bc2-8464-12447a42b3b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3ee20d-7fef-4cf9-911b-e47fb83a6374", "sighting_of_ref": "indicator--76d85680-7212-4a69-a3a9-bc2cf3246420", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6d7bf1-6577-4da4-a0c3-3eb5562c20af", "sighting_of_ref": "indicator--76d85680-7212-4a69-a3a9-bc2cf3246420", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08123b95-d9a2-4510-b9e1-7fe7c12d9dc9", "sighting_of_ref": "indicator--ed50a90a-155e-485f-b9f2-ece6ad19e045", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c8853a-44ed-4280-9177-7eb560b23287", "sighting_of_ref": "indicator--ed50a90a-155e-485f-b9f2-ece6ad19e045", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848b3fb8-ef98-4855-be1d-6740a378c7be", "sighting_of_ref": "indicator--ed50a90a-155e-485f-b9f2-ece6ad19e045", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d9a7ec-00ab-4b3a-a53c-370a9babcbee", "sighting_of_ref": "indicator--05be7ea0-3768-4e86-9c53-4df595d2eddc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e059124-d4e7-4a59-b12a-54975526bad0", "sighting_of_ref": "indicator--05be7ea0-3768-4e86-9c53-4df595d2eddc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55faf021-7f2a-4e36-9743-67e393daaef4", "sighting_of_ref": "indicator--ef8c4736-cbbe-4fae-b7bd-82cbbbc952a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23d1412-2468-463f-8a7f-224352962c16", "sighting_of_ref": "indicator--ef8c4736-cbbe-4fae-b7bd-82cbbbc952a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606c7f15-b460-4e35-864d-5da0881cf1fd", "sighting_of_ref": "indicator--e0a41094-d01e-49c7-8a8b-3a204f903204", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd8bbbb-82bf-4805-91b6-86a09473c2d8", "sighting_of_ref": "indicator--e0a41094-d01e-49c7-8a8b-3a204f903204", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c85c088-7a0f-41eb-b300-6bd064fc4867", "sighting_of_ref": "indicator--e0a41094-d01e-49c7-8a8b-3a204f903204", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97865ed7-97ff-4785-b80e-bfc1cf2b723e", "sighting_of_ref": "indicator--ca111585-1f28-41eb-a672-d64a603a7f11", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2505aa-26de-41ff-b502-d6c3d17bfaa7", "sighting_of_ref": "indicator--cec65296-4ffd-44b8-b003-1043bdfa0916", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85638cf-2608-47b4-bdea-2a2a5b007dcc", "sighting_of_ref": "indicator--34d50f74-037d-4c12-bee9-52e2d4dde0b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63964e50-2c96-4f10-a588-d5496f8e2aca", "sighting_of_ref": "indicator--34d50f74-037d-4c12-bee9-52e2d4dde0b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f145209-6288-46e2-aa0d-224e58d7e1d1", "sighting_of_ref": "indicator--e4ee0b13-be13-49dc-9025-610969475ebf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c09e878-841c-471c-9b9e-592364aaa24a", "sighting_of_ref": "indicator--e4ee0b13-be13-49dc-9025-610969475ebf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad1643a-2a08-42c2-8f3b-19d1d8083af8", "sighting_of_ref": "indicator--f0ed1868-d6ea-48d4-97de-c17ad3ca9b76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2c4ee5-df19-44a8-ae01-cc9201f0293e", "sighting_of_ref": "indicator--f75aea51-f1e2-43a6-b803-4070c5dcdb8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8bacf7-07f1-4442-9b90-5f6db5d0f786", "sighting_of_ref": "indicator--f75aea51-f1e2-43a6-b803-4070c5dcdb8a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d54e497-df0f-4bef-b059-5c2ac83b88fa", "sighting_of_ref": "indicator--f75aea51-f1e2-43a6-b803-4070c5dcdb8a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef74d71-e5c4-4522-879e-a75f2b4ce190", "sighting_of_ref": "indicator--54d1268e-cebf-4913-9fef-b0fa76ef8aeb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14960270-2677-4173-98da-c24a6fdb5397", "sighting_of_ref": "indicator--54d1268e-cebf-4913-9fef-b0fa76ef8aeb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daec382-667e-4ace-8171-c23ef7c6f097", "sighting_of_ref": "indicator--54d1268e-cebf-4913-9fef-b0fa76ef8aeb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e52f08-3648-448b-a505-734a288b8f22", "sighting_of_ref": "indicator--0bcf309a-9bd2-4f67-bf44-f893bf88431a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70af8f44-046c-4895-b841-113139125283", "sighting_of_ref": "indicator--0bcf309a-9bd2-4f67-bf44-f893bf88431a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639c2c3-0c6f-4af0-936b-aa5df350cff2", "sighting_of_ref": "indicator--ecf7e603-d476-4672-be72-1eae43926345", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2c9dfa-c5b0-4c01-9cf8-ecbdb4613a52", "sighting_of_ref": "indicator--ecf7e603-d476-4672-be72-1eae43926345", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c04ae88-7738-4e35-8581-c0e353d33740", "sighting_of_ref": "indicator--ea9ce2a5-5c9a-4ceb-80c8-396802911256", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c14100d-933f-4f90-ae8e-54f84fb28a8a", "sighting_of_ref": "indicator--8d80add2-c736-46dd-8c5d-f268e6606665", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4692070-98e3-41c4-ad83-195c36404fb4", "sighting_of_ref": "indicator--81bea8b6-f8c4-427c-b84d-b1e1c2cce0e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fedc70-7ccf-4604-abf1-76056e5d5c97", "sighting_of_ref": "indicator--81bea8b6-f8c4-427c-b84d-b1e1c2cce0e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b49a3da-955c-4d81-be3f-b6638061f93d", "sighting_of_ref": "indicator--7a3ec5f2-bf8c-4bd8-baeb-6d155b46c5e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e1a005-3dd6-451f-93f5-abded192fb1b", "sighting_of_ref": "indicator--7a3ec5f2-bf8c-4bd8-baeb-6d155b46c5e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dd0450-29d4-484b-aafa-1e59d4a4591d", "sighting_of_ref": "indicator--7a3ec5f2-bf8c-4bd8-baeb-6d155b46c5e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63d1a78-cc28-4012-b2fb-440b626216b3", "sighting_of_ref": "indicator--7253fddc-9597-4402-9b07-c866e47fc943", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d218b1-51da-4a5f-afe4-cb1cd9442dad", "sighting_of_ref": "indicator--78b6de83-548f-4540-995c-c85e6991564b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5b449f-d11d-48cb-a758-6fbc128008b8", "sighting_of_ref": "indicator--b443d24b-6de2-426e-b9bc-b513b2eb644c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d506ef54-e2ee-40a0-8078-19ae238e5f36", "sighting_of_ref": "indicator--b443d24b-6de2-426e-b9bc-b513b2eb644c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b370f64-876a-49ff-b3a4-cad112041048", "sighting_of_ref": "indicator--74978a9d-ec26-4949-b664-b7f3b2ccaa6a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f325052b-1d5e-432d-9ac6-8c55ffc7c2d6", "sighting_of_ref": "indicator--91a33dff-4b77-4672-b46c-8244566112bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083a682f-7519-4a98-be81-81cbebc379bf", "sighting_of_ref": "indicator--ea8b4c67-5cb6-410c-8142-c4cbd9d303a0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43410da-be58-409d-affd-6c57ecdc519e", "sighting_of_ref": "indicator--35120a4b-fa69-4cd7-b099-9b6b727fd875", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87436f8-ca0b-42a1-b035-994018d4372c", "sighting_of_ref": "indicator--f947f72e-1c37-4231-9d07-2e101c06a579", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa706464-23c0-4e60-8c4e-5feb70a47793", "sighting_of_ref": "indicator--f947f72e-1c37-4231-9d07-2e101c06a579", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189ae126-7b9f-4003-8d04-5a156b14b4f6", "sighting_of_ref": "indicator--f947f72e-1c37-4231-9d07-2e101c06a579", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b695408e-c6ab-47aa-9c4b-c8d5c9ecdd93", "sighting_of_ref": "indicator--47576bc3-860e-493b-8a31-11482635fdeb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bd8bc5-60c1-482b-9ca5-f313b1d7ac75", "sighting_of_ref": "indicator--8a551a15-c612-456f-b67c-11434a9ab0e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c844d5-a74d-43cd-9b58-6da6575745d0", "sighting_of_ref": "indicator--2026138a-c26c-4ef5-879d-873c315b257f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b56134f-6f63-4700-9410-7da73aad1d7f", "sighting_of_ref": "indicator--d15479c1-1f9b-4472-a330-64f6e65cab28", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a30fa1-35ed-491f-9ee2-3d95b688fb77", "sighting_of_ref": "indicator--d15479c1-1f9b-4472-a330-64f6e65cab28", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f179489-808d-467e-910e-09b051727615", "sighting_of_ref": "indicator--21913f03-d39c-42cf-ba64-8d7c682f7ed2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf83f8a-de16-4bb6-a8cc-086ae5bf87d5", "sighting_of_ref": "indicator--21913f03-d39c-42cf-ba64-8d7c682f7ed2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa7fdf4-e885-451c-8040-ee75854b1a81", "sighting_of_ref": "indicator--2dd41096-e095-4abc-83c5-c9e541c56933", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b28d62a-c7ed-487b-958d-b7d7dbeac8c7", "sighting_of_ref": "indicator--cb50e1e4-15bd-4082-b529-abab73ddede4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5952bb2-9570-4b52-95d1-47dffc630f51", "sighting_of_ref": "indicator--cb50e1e4-15bd-4082-b529-abab73ddede4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942067be-5979-419f-9e38-4e634fa694df", "sighting_of_ref": "indicator--4690a0eb-4050-4999-9bb4-1d9bd4b04f8c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a40409-e881-438f-bdfc-bc64a77343e4", "sighting_of_ref": "indicator--4690a0eb-4050-4999-9bb4-1d9bd4b04f8c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d3b116-ab55-4a9d-8af8-cdede01fd6eb", "sighting_of_ref": "indicator--0c643e56-b3a1-4202-98ad-aae3743010db", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ed7c63-10d2-41f6-b682-65fab8cff62c", "sighting_of_ref": "indicator--3602b426-2e14-456b-8413-584a4968f860", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6e6e04-649a-4c3a-a6ee-7aa1e76debb3", "sighting_of_ref": "indicator--3602b426-2e14-456b-8413-584a4968f860", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0794129e-8376-4c96-ad90-0797b6def9cb", "sighting_of_ref": "indicator--d4584329-f78d-4f59-9f59-7f7f2983b757", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b88bc77-d086-4b53-a6ed-034de745547f", "sighting_of_ref": "indicator--2a7b3a7b-e105-43ca-b17f-a0847f08b343", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a2e88a-7764-41d7-9541-06473fd66c28", "sighting_of_ref": "indicator--2a7b3a7b-e105-43ca-b17f-a0847f08b343", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3f7ebd-5464-422d-b339-7b7588ef1151", "sighting_of_ref": "indicator--d329ff20-8947-413a-955c-8237a01c769c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baa5d0e-95c9-4d0e-aaaa-ee56a46b00c5", "sighting_of_ref": "indicator--d329ff20-8947-413a-955c-8237a01c769c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c08569-c19d-4973-aa89-603e6a999edc", "sighting_of_ref": "indicator--ed0d11a4-eca0-4563-ab02-4d3a2a94923a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00319ce-3594-4c2e-8bb5-15fe17e2aaff", "sighting_of_ref": "indicator--ed0d11a4-eca0-4563-ab02-4d3a2a94923a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9c0108-ea94-4230-8529-fd34b6e25a05", "sighting_of_ref": "indicator--91f20897-dce5-46f3-a058-5081331b8503", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f10fcdc-a2e8-470c-9878-8db64c3417d8", "sighting_of_ref": "indicator--0dd3afd0-98f7-4e9e-af42-b1b6c11f6ffe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18b49d3-0d25-4d8f-875a-7660113632f6", "sighting_of_ref": "indicator--0dd3afd0-98f7-4e9e-af42-b1b6c11f6ffe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614be043-2889-4605-88e7-a219df8d819d", "sighting_of_ref": "indicator--d461ccdc-bd02-4f4f-a42d-0c618fc0f00a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10fdcfa-723e-46b2-bd62-3a43d68fd3e1", "sighting_of_ref": "indicator--d461ccdc-bd02-4f4f-a42d-0c618fc0f00a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dddb33-ba6c-40a2-b057-8ffd9511ab90", "sighting_of_ref": "indicator--316d713f-aed8-405f-8e19-4d167302f1d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d30c93-4e4d-4381-84aa-2670a8bae71d", "sighting_of_ref": "indicator--e37234b5-2e8e-41a6-b9ba-ea30e1984da0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20346391-a46d-4d84-a702-f95938d089d9", "sighting_of_ref": "indicator--847c2ed0-8878-46b0-ba52-4540688f1e32", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3243d1ee-caab-404b-988a-c1e0b6ffe05c", "sighting_of_ref": "indicator--847c2ed0-8878-46b0-ba52-4540688f1e32", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb75e3f-14d4-4883-9ff1-a3875e32c8a1", "sighting_of_ref": "indicator--b367f237-f776-4c25-881a-55b776e1a8a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20f1e1e-eb3f-4a91-b3e6-e3b3c0aa8142", "sighting_of_ref": "indicator--b367f237-f776-4c25-881a-55b776e1a8a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0723a22-49fd-45b1-b0c9-9c8ff774751d", "sighting_of_ref": "indicator--566d7126-7088-4520-b6af-874c7cf93b85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adb4a99-6dc0-4a72-9526-78a3c8078ef0", "sighting_of_ref": "indicator--7dca5abf-4eee-4aee-83dd-2d6146ca5235", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c491de15-6aa4-4def-9e37-13b54e6704b7", "sighting_of_ref": "indicator--4c360aa0-1306-4bab-9807-13ab019d9969", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bd6164-d09c-4cfe-b582-5fecc2778d2f", "sighting_of_ref": "indicator--4c360aa0-1306-4bab-9807-13ab019d9969", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e43269-29a8-48c0-93fb-d51c5a31f8e1", "sighting_of_ref": "indicator--9fa9c274-9162-4c73-91a5-859ee37c962f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df492c18-0e5b-4b20-81c5-8b5d2abbb972", "sighting_of_ref": "indicator--9fa9c274-9162-4c73-91a5-859ee37c962f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14efaab9-6072-478a-8e68-e38208e0e19f", "sighting_of_ref": "indicator--e4cb57dc-4076-4f3d-9da9-92e9fbcc74ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7009eeba-86ca-4f38-83c2-d67c1a023a83", "sighting_of_ref": "indicator--028f727d-b023-4a62-8df7-26945a001e4a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b9263a-83b2-4500-9a6a-816f2bcfb17e", "sighting_of_ref": "indicator--028f727d-b023-4a62-8df7-26945a001e4a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6357a267-f5af-48b7-998c-efc68201c331", "sighting_of_ref": "indicator--7e4c8299-78b3-4178-84b2-01ac0b999b73", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31729972-4b2c-49d6-969e-c6831455a34e", "sighting_of_ref": "indicator--00ef9a8f-f278-4939-81c0-4054c54a83ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f93a6b-f272-496a-9ba2-1e83253e0789", "sighting_of_ref": "indicator--00ef9a8f-f278-4939-81c0-4054c54a83ce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88aecdf0-8d6f-47d7-8701-16d96f909c0b", "sighting_of_ref": "indicator--058af9a4-d6b9-415f-a88c-1f0763ca5f7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67499ed-650f-41c9-b530-55028dd552c5", "sighting_of_ref": "indicator--2abebb00-6977-4844-8fd7-c3f1a54403f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8964faad-1264-4164-9aaa-3719a7413a72", "sighting_of_ref": "indicator--2abebb00-6977-4844-8fd7-c3f1a54403f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e02624-5348-43a6-ba03-f2585734ad68", "sighting_of_ref": "indicator--983351dc-54e1-465e-b691-7938b0de3b89", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f85e999-51d8-453d-bc83-7e67b7f1bc1c", "sighting_of_ref": "indicator--cfbf2e25-3162-4d47-a82e-f5edadbc4843", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973e0c2c-b465-465c-91d7-0f0eb4550926", "sighting_of_ref": "indicator--cfbf2e25-3162-4d47-a82e-f5edadbc4843", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b22d702-3cdf-4f2a-904c-6691ae3f78ce", "sighting_of_ref": "indicator--cfbf2e25-3162-4d47-a82e-f5edadbc4843", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ceb46e-7d41-4220-a742-032e549f00a9", "sighting_of_ref": "indicator--8bc7cd68-b1d5-41a4-ab1f-66ce26b277d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90861640-ca33-450c-844d-58391c5ad20b", "sighting_of_ref": "indicator--8bc7cd68-b1d5-41a4-ab1f-66ce26b277d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264b74c5-3e8a-48eb-8b21-f06928b4b007", "sighting_of_ref": "indicator--778cd52e-1c8b-43ff-bf8a-525e5c8d8602", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118e3271-4c0b-4177-a7a3-f074cd0ad9bd", "sighting_of_ref": "indicator--778cd52e-1c8b-43ff-bf8a-525e5c8d8602", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c335b6b8-ffab-40d2-add7-6fbe13685b00", "sighting_of_ref": "indicator--c40ced1f-bffc-45a0-828f-1de1d4b71559", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc55e02f-d241-4d22-86f8-b2f3d92710e9", "sighting_of_ref": "indicator--c40ced1f-bffc-45a0-828f-1de1d4b71559", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4e86fe-0048-4990-b2f9-2dbf3d39fa09", "sighting_of_ref": "indicator--928833a2-d740-4be7-94bc-a45ca2154d6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ae7bd2-f61f-45c7-b53e-70f13aa94b46", "sighting_of_ref": "indicator--2f45f002-c955-4cc4-8694-493fb9ccd4e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99d348c-a29d-4f6d-be70-e6c79293be0d", "sighting_of_ref": "indicator--2f45f002-c955-4cc4-8694-493fb9ccd4e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20229d5d-40f2-4d76-bf00-9f8b3adb4f12", "sighting_of_ref": "indicator--ffa4f100-db46-49a0-bef6-0c847248b288", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39949eff-71a8-4f5c-b7bb-2f61be58e4d3", "sighting_of_ref": "indicator--3901271a-e71a-4adc-9784-0767f597282f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f8af81-1734-415a-b279-cb7749bd8b72", "sighting_of_ref": "indicator--c45a305a-483d-4734-84bf-3fc8eea08c2b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413a5c9b-10ce-499c-a3ed-f4b9828235c4", "sighting_of_ref": "indicator--c45a305a-483d-4734-84bf-3fc8eea08c2b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a159a61b-8fbf-4cbf-a51e-06efaa774651", "sighting_of_ref": "indicator--c45a305a-483d-4734-84bf-3fc8eea08c2b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814e0e79-c9f1-49b9-ba5c-3f0c00612ad7", "sighting_of_ref": "indicator--c60233d7-b2f8-4f6b-b0bd-7e2262da2cbe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ceb9a6-8381-4cd4-9b0a-254b381a107b", "sighting_of_ref": "indicator--5499c6fe-0ff7-4fc4-ac41-ffc4cdc96e6e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc530e7-f338-4391-82da-712c213f7deb", "sighting_of_ref": "indicator--ecd1f42f-1995-48b9-8dbe-edc3e67c3ff9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef8e51a-0ca1-42bf-b738-9f5b81bd42ed", "sighting_of_ref": "indicator--dc5e3d65-2483-43a8-848c-9b9c14c28cdd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7f4828-2003-40bd-a5ef-2e407f0dbe06", "sighting_of_ref": "indicator--dc5e3d65-2483-43a8-848c-9b9c14c28cdd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1999fc2c-f36a-49cf-94cd-67e180c64450", "sighting_of_ref": "indicator--8a8b71f5-4375-4a01-8bc0-8a2f5fa70482", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c3c45a-b9fc-481a-8b9c-405cdac83ae6", "sighting_of_ref": "indicator--8a8b71f5-4375-4a01-8bc0-8a2f5fa70482", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972da3ba-25b3-45da-a9b5-a8a6c731a8d0", "sighting_of_ref": "indicator--24496038-30e7-4dfb-997b-e71db4a332a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63c576b-16ef-4111-8a6a-0c715ec46c72", "sighting_of_ref": "indicator--f163a16b-e0cb-4978-abb5-e2183aa9bfb8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b62ee60-b189-41ac-aba7-5bb93d97cb52", "sighting_of_ref": "indicator--f163a16b-e0cb-4978-abb5-e2183aa9bfb8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e165182-2086-44c2-a2d3-b10ac2f7ed68", "sighting_of_ref": "indicator--f463f52a-41c4-4559-9dcc-f03033404850", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9517255a-9ef7-40c3-a88e-a90a3539706e", "sighting_of_ref": "indicator--f463f52a-41c4-4559-9dcc-f03033404850", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988650c4-f52b-4083-864f-052b9269cd14", "sighting_of_ref": "indicator--b1a077ae-4bf8-40eb-88f5-ad0e02bbbf30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8580a3-4394-48f6-bea0-5dcecd567928", "sighting_of_ref": "indicator--81428153-2911-4669-8b31-f8b26fe557dd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d40335d-7440-4768-b58b-457fe8a8ad2f", "sighting_of_ref": "indicator--81428153-2911-4669-8b31-f8b26fe557dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea4127f-393d-44f3-9911-6ef2da726789", "sighting_of_ref": "indicator--dd171add-22fb-479b-9320-f69b1231bed1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03be02d8-58c5-4018-a488-2cd02569454a", "sighting_of_ref": "indicator--dd171add-22fb-479b-9320-f69b1231bed1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d19f0b0-5c49-4bf2-82ee-a7d84856356a", "sighting_of_ref": "indicator--eda60f5c-81d8-4446-a953-ee44a64e3c0a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e9c635-9f0e-47f9-9f90-ab00557c22a1", "sighting_of_ref": "indicator--eda60f5c-81d8-4446-a953-ee44a64e3c0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde5e3a3-2aa9-42a8-88d8-82236f5c581e", "sighting_of_ref": "indicator--72f27c3e-fb55-4c0a-b806-1e13062e217f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75722e9-6cfe-455d-9710-b32b8db071ef", "sighting_of_ref": "indicator--72f27c3e-fb55-4c0a-b806-1e13062e217f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb0c0ba-acac-4c81-b75e-2c927e209695", "sighting_of_ref": "indicator--4b0d7acf-4cde-4b4a-b974-32780160c12a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8719d8-4218-4610-a552-2d613b998589", "sighting_of_ref": "indicator--4b0d7acf-4cde-4b4a-b974-32780160c12a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f897b6a-f9d7-4079-a3f6-d5713ceaaffc", "sighting_of_ref": "indicator--a00f8699-72c4-4d3e-853e-2c4baa5b37df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba8d54d-01ec-4301-b33f-ea4dc96eef89", "sighting_of_ref": "indicator--a00f8699-72c4-4d3e-853e-2c4baa5b37df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7002b4-b856-413c-bdbd-ec78360c8ee1", "sighting_of_ref": "indicator--a00f8699-72c4-4d3e-853e-2c4baa5b37df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f8aa01-2cdc-4b39-9e5e-a1ca111bd1f1", "sighting_of_ref": "indicator--811d2f9f-c2e3-45de-af47-768df5a2408b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8467522b-c7bd-48e3-b64a-8f7a551287fe", "sighting_of_ref": "indicator--3787c70f-1f53-4068-a491-e636f9e185ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6422c7f9-092b-4c21-9e01-928648956428", "sighting_of_ref": "indicator--3787c70f-1f53-4068-a491-e636f9e185ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5358cce-5873-489b-b094-e64e406b340a", "sighting_of_ref": "indicator--3787c70f-1f53-4068-a491-e636f9e185ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f02566-e703-467e-8765-d79a36c5e11d", "sighting_of_ref": "indicator--19366ada-7361-4d6c-b241-fd01cd63a27e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfde4438-1b65-4732-a5a7-69197fafb3db", "sighting_of_ref": "indicator--19366ada-7361-4d6c-b241-fd01cd63a27e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb4c074-9d83-47a8-a150-c0c95672e098", "sighting_of_ref": "indicator--71831263-892a-4ae6-94b8-fd3cf2750e0a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfea860b-37d7-4de8-ad11-294e41307952", "sighting_of_ref": "indicator--71831263-892a-4ae6-94b8-fd3cf2750e0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7632fa82-2142-45a0-8870-8e045e92416a", "sighting_of_ref": "indicator--24544f8f-8c5b-4636-a14d-0f8fc5057fdd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27aa648-677d-46c8-838a-bf14e27eb8aa", "sighting_of_ref": "indicator--7e8da830-9f66-4ca6-b1b6-64348e7dd885", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2742c59-ed67-421a-a47e-b5f14ed377ea", "sighting_of_ref": "indicator--54c1f902-2dab-43df-9d2c-3cebe88be725", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd001a4-b085-464a-a1ea-8fb599a8311c", "sighting_of_ref": "indicator--54c1f902-2dab-43df-9d2c-3cebe88be725", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1441a6-62f6-4e21-bc92-bd6956753f96", "sighting_of_ref": "indicator--c45fa507-b8b1-4014-b66d-4c4194e9da0a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5e32e5-9ed5-40ed-b570-5f25fc86372e", "sighting_of_ref": "indicator--c45fa507-b8b1-4014-b66d-4c4194e9da0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e6ee3d-eeef-4533-b4f3-112b4a090c18", "sighting_of_ref": "indicator--618be438-afd9-4f02-8842-8d4fab30a433", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460fa024-b333-41a5-a657-76af2a124b86", "sighting_of_ref": "indicator--618be438-afd9-4f02-8842-8d4fab30a433", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64549868-0fd7-4f9a-b217-17e8a2c0f65c", "sighting_of_ref": "indicator--59d4f077-6aa3-4d11-b5a3-fbed17251e8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab765ed-cf0a-48d1-8be6-1f90617cb9ad", "sighting_of_ref": "indicator--feed38eb-06b6-4101-ae74-7dce3b7e4c35", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6ce7ca-4a52-49a6-9e73-91bb765421e7", "sighting_of_ref": "indicator--feed38eb-06b6-4101-ae74-7dce3b7e4c35", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bbb2e0-8f03-47e0-9d1d-1b8a4fddcbd5", "sighting_of_ref": "indicator--1bba79f0-f9f7-48aa-92de-2a655051b844", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af52c3e-98ad-470b-9497-6036bc3ef146", "sighting_of_ref": "indicator--2c18cf2b-d292-40c6-9bc8-54c78497e2cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa14e613-e0d0-4844-9c78-190b8e1731dd", "sighting_of_ref": "indicator--2c18cf2b-d292-40c6-9bc8-54c78497e2cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce136832-98dd-4427-b55f-5a1e221c8dfa", "sighting_of_ref": "indicator--2c18cf2b-d292-40c6-9bc8-54c78497e2cc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abe53ae-6f0a-4d50-8e80-2b1c7ac9ab07", "sighting_of_ref": "indicator--6c9ebffd-d235-4da7-963d-f7cd6822a591", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aa984a-10fa-4f33-892d-ac5068baa0ea", "sighting_of_ref": "indicator--6afd319f-e497-4424-abf7-e92bf2043ee0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a5d35d-5f97-4b79-b8fe-db38b8d08453", "sighting_of_ref": "indicator--6afd319f-e497-4424-abf7-e92bf2043ee0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a8d971-b80b-4470-871d-7494975b7668", "sighting_of_ref": "indicator--6afd319f-e497-4424-abf7-e92bf2043ee0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0b12f5-3ae5-4f6e-8a77-cf1bd3bb08a1", "sighting_of_ref": "indicator--4302f885-1abd-49ec-b87f-56cbd0119e21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d121f0d2-36c5-4928-92da-0af80f4e5a82", "sighting_of_ref": "indicator--4302f885-1abd-49ec-b87f-56cbd0119e21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b28224d-8ec2-4931-96f2-24171a8bb707", "sighting_of_ref": "indicator--5c7ee761-8d46-4602-847e-2564f515dba8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f140fae5-8edd-4d03-83c9-fa712a51c7bb", "sighting_of_ref": "indicator--0d982bea-44ea-4540-87d2-89a3a9e74833", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf65583b-ea57-4def-af13-b7e53f120f2e", "sighting_of_ref": "indicator--ee41e9b0-f72c-47db-8bf8-a37020462fd6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7959901c-3c9e-4daa-962e-e49cfbd96109", "sighting_of_ref": "indicator--80260f84-ecfe-4320-aa7b-c5e15b57cf9c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcd4115-9d37-4d70-8889-8c4e0e9e056a", "sighting_of_ref": "indicator--48ce62fa-0ab6-4ef9-aa01-2ce4b14f2bda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb5560a-72b2-4783-8fb0-eb0f1312c72d", "sighting_of_ref": "indicator--64b560c3-de47-45dd-9f0d-ddf868b823a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b3faec-f4ea-40db-b600-055173f3d7d8", "sighting_of_ref": "indicator--97303d16-5c7f-46dc-b7df-642269253835", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32eeb8c7-b5eb-498c-af6f-04aae0ba3037", "sighting_of_ref": "indicator--cf25a4e0-5a9a-4630-aa89-101749a0d0be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c0308d-f00f-4f82-af9d-0c547770d776", "sighting_of_ref": "indicator--6c6296c7-b6aa-4982-9353-035e96092fbe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8ca4b6-7020-490a-b0e6-ea1e77241ce9", "sighting_of_ref": "indicator--3d9c00db-ba42-4403-bfd7-893b84b55301", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6446d9-2ef5-437e-826e-9f6c072036e1", "sighting_of_ref": "indicator--9521f6ac-f510-4604-9f78-a72c5b68e301", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0751e5be-a48c-451a-923d-498b9d2b04ea", "sighting_of_ref": "indicator--6edef10e-e608-4659-94e3-cf574571273f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ad96e9-b427-4c6d-aa44-519c84209dc0", "sighting_of_ref": "indicator--2d2b49b8-bd7f-48e0-9979-cef708247226", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b1b126-d5df-4990-869a-4fc6ef9faa1a", "sighting_of_ref": "indicator--2d2b49b8-bd7f-48e0-9979-cef708247226", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdc2a45-c341-4f5e-95d7-af586ac5b94b", "sighting_of_ref": "indicator--03234325-9b6a-4ab6-b541-9fdced5460b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2471f89a-f4ee-427f-a20d-088e1169d914", "sighting_of_ref": "indicator--03234325-9b6a-4ab6-b541-9fdced5460b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9546b8a3-47c8-423c-b6eb-b02e858f0df0", "sighting_of_ref": "indicator--03234325-9b6a-4ab6-b541-9fdced5460b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ff3a0f-d68c-46c5-a635-ee2870e7ae3a", "sighting_of_ref": "indicator--b81de254-8f21-4120-beeb-7873f45586c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f83bceb-b6c5-4902-a670-3664c7bc8a97", "sighting_of_ref": "indicator--211e2f44-26e2-4e0d-bf8c-8cef7262b434", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d897aef-093b-4d84-bbf1-89865dc28b8b", "sighting_of_ref": "indicator--211e2f44-26e2-4e0d-bf8c-8cef7262b434", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79715efd-3d27-4e5f-9dfa-d0f8ab3bda73", "sighting_of_ref": "indicator--e248bbbf-0327-4893-8c34-8e8e069187ec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b61d03-6b7e-40b9-9bd8-5404ba026b2f", "sighting_of_ref": "indicator--e248bbbf-0327-4893-8c34-8e8e069187ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1da47c-830e-4fca-b128-dbabc8a1cc55", "sighting_of_ref": "indicator--e248bbbf-0327-4893-8c34-8e8e069187ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0a6f59-3c27-4b5b-abd5-005db8cc4104", "sighting_of_ref": "indicator--8cb221f7-6c09-406b-95a7-7daa88f388af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f8484b-b375-4831-ab88-b066adeb31db", "sighting_of_ref": "indicator--52d370cb-b1a8-4521-a3d3-009fe6f52e51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c94621-eb59-4fbe-95bb-6312fa137216", "sighting_of_ref": "indicator--52d370cb-b1a8-4521-a3d3-009fe6f52e51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1357d070-784e-4cfc-8cc0-d87cd24ce4bb", "sighting_of_ref": "indicator--4efa87cc-00f1-44fd-bc63-16ab0d8cc10e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641e655d-371e-4ed9-b2ef-1cf76f913374", "sighting_of_ref": "indicator--4efa87cc-00f1-44fd-bc63-16ab0d8cc10e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7961a3-14d8-4b73-8161-8eeffda88a90", "sighting_of_ref": "indicator--4efa87cc-00f1-44fd-bc63-16ab0d8cc10e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfabf984-b788-4d4c-b3d9-bce1da17e1c7", "sighting_of_ref": "indicator--eab66486-a62a-43b1-82a6-3324f2362a49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ed6b87-e95d-4c29-bee5-d8a46d67278f", "sighting_of_ref": "indicator--eab66486-a62a-43b1-82a6-3324f2362a49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa4d037-dc0f-496c-ab15-7d16b1734a4f", "sighting_of_ref": "indicator--eab66486-a62a-43b1-82a6-3324f2362a49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d8774d-daf4-4530-95f1-a6651635701b", "sighting_of_ref": "indicator--0ccb4901-2612-443e-91b8-5fb55babdc85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bdf799-c004-435d-b949-65a957893ca3", "sighting_of_ref": "indicator--c9ad0d11-e290-4f42-bde5-43d730e4d9a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08581896-c637-49a2-97ee-621cdee7480b", "sighting_of_ref": "indicator--c9ad0d11-e290-4f42-bde5-43d730e4d9a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a575d75-f66f-4bb2-a762-0d7ba2422043", "sighting_of_ref": "indicator--b917e0c1-2cc0-4242-9b5a-14a1a160170a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b064ac8-98a1-4ebf-9e63-e8f1b4177faa", "sighting_of_ref": "indicator--398b78cd-c4ac-49c1-aab1-9f6711403b7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77de41fb-38e9-4fd8-8730-d353e72a36ef", "sighting_of_ref": "indicator--a08d2437-af31-4fee-98ed-3507cb54e12a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79177a2b-ad06-481c-8c4f-e371aa4ebb26", "sighting_of_ref": "indicator--b792ed84-2c1b-42bd-b9c8-2a1469f169e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3a8c6b-3060-4d6e-9cbf-4e52f7d1e556", "sighting_of_ref": "indicator--c08a9435-4343-43b2-877e-f9e164743e32", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed4401d-0ba7-4f5e-8681-80fc4039eea6", "sighting_of_ref": "indicator--c08a9435-4343-43b2-877e-f9e164743e32", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf74e34e-b047-4ef3-9db6-dd739a9fe887", "sighting_of_ref": "indicator--ef872a14-fae8-45b9-aea2-0307b4c763fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121f31b8-5f3f-47e5-ac1c-267ff5e74e55", "sighting_of_ref": "indicator--ef872a14-fae8-45b9-aea2-0307b4c763fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223e41da-ce18-4258-bf27-d22ddbff7c6c", "sighting_of_ref": "indicator--307512c5-113b-4354-b321-1d6c1147de67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72b16ac-c00d-404d-802e-682754fabfcf", "sighting_of_ref": "indicator--307512c5-113b-4354-b321-1d6c1147de67", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e558f00-10c7-41de-98ce-48b50108bcc0", "sighting_of_ref": "indicator--4ebf7667-cbf4-4080-9eb5-0637bd89b6a1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80e76a4-06ca-4427-900c-d0c14040dcec", "sighting_of_ref": "indicator--78791409-a49c-4818-9a29-1103f1d658aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fa12b7-b557-42ce-8d7e-0aaaa9768c37", "sighting_of_ref": "indicator--b1e0a5c5-7be4-450d-88d3-6cd88d43c041", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382d3d54-08a0-4e10-aa01-e01bec837a7d", "sighting_of_ref": "indicator--30bab059-5166-42b4-8775-63ca32f0f840", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9716cc-56a9-4941-a31d-4cfc0315fb12", "sighting_of_ref": "indicator--30bab059-5166-42b4-8775-63ca32f0f840", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a08087-e4ac-45c8-a34b-1de4da34987a", "sighting_of_ref": "indicator--30bab059-5166-42b4-8775-63ca32f0f840", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263a9050-3d68-4c95-91bd-c5c2a169ba5a", "sighting_of_ref": "indicator--f07cfe53-00f5-4f5f-a4e4-101e76d8ed34", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0116c4-dfc9-4eef-bae4-0f001c051343", "sighting_of_ref": "indicator--0d6d141b-1ead-468e-b95f-1e361b78543d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce51033a-aed3-4482-8c61-bf5f5f57e59f", "sighting_of_ref": "indicator--7d4fd8ea-ca20-46be-8049-edbe9cfbaa56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82842134-dc42-45d8-badf-487819902624", "sighting_of_ref": "indicator--826e60d2-c4b4-48cf-a32b-c6cef6f53ac6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a9e49e-d3f6-479f-a7a6-9f9e98ba0e57", "sighting_of_ref": "indicator--826e60d2-c4b4-48cf-a32b-c6cef6f53ac6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fbd3d8-1a74-4eda-8329-aee945507a8f", "sighting_of_ref": "indicator--71e74a04-0ae6-477b-909f-9687e8706f85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e621036-88c7-430e-a5eb-09f23b1b0dba", "sighting_of_ref": "indicator--71e74a04-0ae6-477b-909f-9687e8706f85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00e324d-96ca-4b58-8557-b69887487fd9", "sighting_of_ref": "indicator--05e36db6-04a5-4caa-8a59-0d571d684ea1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73527020-a803-4b75-8699-9f2f23748ee0", "sighting_of_ref": "indicator--f3324aef-dafb-4604-842f-988aedead5d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec99575-f90e-4051-8ec3-fe3daa88cdf7", "sighting_of_ref": "indicator--f3324aef-dafb-4604-842f-988aedead5d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b50e0fc-60a1-472b-8e31-9c4d21af88f6", "sighting_of_ref": "indicator--f3324aef-dafb-4604-842f-988aedead5d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce53e9d-7eaa-4f5e-8256-fbc9474bd8ff", "sighting_of_ref": "indicator--b7a322f5-f3c5-49cb-b712-73e65e6888fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbd4185-fbe6-4543-910f-40d121aef856", "sighting_of_ref": "indicator--26eee82d-98ff-4a86-999e-b84041f52fb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ffae37-9cf1-42c3-82e3-49856946b02a", "sighting_of_ref": "indicator--11ba8618-33dd-4cb9-9242-3d296a7b8286", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f94a61c-0de3-40e2-ad3d-c9430d640656", "sighting_of_ref": "indicator--11ba8618-33dd-4cb9-9242-3d296a7b8286", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d3196a-394f-4de4-9466-0023dba1469c", "sighting_of_ref": "indicator--11ba8618-33dd-4cb9-9242-3d296a7b8286", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19f99b8-eb31-4269-9388-b49b76124bee", "sighting_of_ref": "indicator--9b3643c0-a9a9-4418-96ff-4adc5576ed80", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d7f021-da93-47e9-be83-04a97752e239", "sighting_of_ref": "indicator--aa338f52-3c8d-4419-bd8d-e8ded703eac5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b9b97f-2f20-4230-89c7-c5a60a7f35c2", "sighting_of_ref": "indicator--aa338f52-3c8d-4419-bd8d-e8ded703eac5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086b7e79-8b71-4df3-934a-f34a2402fca5", "sighting_of_ref": "indicator--abf8c092-ef92-432d-8436-4540533fe47b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82d7f4c-ac88-4776-8f58-83382178922a", "sighting_of_ref": "indicator--abf8c092-ef92-432d-8436-4540533fe47b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996add40-c607-42a7-ac5c-bfc7d53ba815", "sighting_of_ref": "indicator--5c2e4836-080b-450c-95ee-e07902ce5df3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f817216-0114-4719-ad79-8a4f5c73e37f", "sighting_of_ref": "indicator--5c2e4836-080b-450c-95ee-e07902ce5df3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3479f5-9ba7-4f96-9165-4fca7d71caf3", "sighting_of_ref": "indicator--e3d7dcab-b081-43e0-8cac-4b9733aab14e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cd7eaf-a0ee-4213-823e-e5cbe783a3f4", "sighting_of_ref": "indicator--e3d7dcab-b081-43e0-8cac-4b9733aab14e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244654d0-c27c-494b-97cf-b62e2c0261fe", "sighting_of_ref": "indicator--764e7476-027f-4c55-ab11-28c75d6835eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa81cd5-cb38-4987-9263-96768b245961", "sighting_of_ref": "indicator--764e7476-027f-4c55-ab11-28c75d6835eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855ecf15-c4df-4552-9bd2-4d26779785af", "sighting_of_ref": "indicator--677a07a4-e4dc-4997-9955-b8359aaa2fe8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647354af-ce0b-46d6-a183-c494fe1f59dc", "sighting_of_ref": "indicator--677a07a4-e4dc-4997-9955-b8359aaa2fe8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dd2dc6-65e5-4f6c-be14-43e3f8a76c72", "sighting_of_ref": "indicator--1c45b198-20f5-4835-a8f1-a438da6ac041", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf74d1a-18eb-4b8c-a099-f0f0f24b52c7", "sighting_of_ref": "indicator--c9da54f6-940c-4ac5-90e8-1cce0538cf0b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c42791-a713-4f46-ab09-d330ac7304c9", "sighting_of_ref": "indicator--c9da54f6-940c-4ac5-90e8-1cce0538cf0b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a4f118-262c-4d90-83e3-93599a8efe02", "sighting_of_ref": "indicator--4a72f6d5-45d9-4d2e-b71e-15caa6c04d88", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274e5bd5-aab5-4bab-8291-72310833a769", "sighting_of_ref": "indicator--5e2d144a-a9a1-434d-bcd3-9cc394b17179", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b9db04-b293-4aa0-9d98-8a90daf87f19", "sighting_of_ref": "indicator--5e2d144a-a9a1-434d-bcd3-9cc394b17179", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8483c4-edb6-48f9-b60d-c79e18e3bd25", "sighting_of_ref": "indicator--dad10097-f316-4869-a7cf-0c4b6b25f6b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7edefba-7b0e-4457-b006-150f8d6ba69a", "sighting_of_ref": "indicator--f44b193a-023b-4d21-9040-cea5b9d6349f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cede69c-97bc-4c5d-95e9-c7445a3af190", "sighting_of_ref": "indicator--f44b193a-023b-4d21-9040-cea5b9d6349f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec35d92-4242-4397-aec8-fb1d8c3349c8", "sighting_of_ref": "indicator--f44b193a-023b-4d21-9040-cea5b9d6349f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dde21ae-2a9b-488d-8a33-f0384ae3b1d9", "sighting_of_ref": "indicator--20e38e1b-be65-4974-bcb0-f2557c728e88", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503f6dc6-f05b-4eb4-b4de-27447bdaf422", "sighting_of_ref": "indicator--a4202253-12d1-41eb-8c57-6c3e3b795ca8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac04470-96f5-47a8-9ba2-76cd6a098122", "sighting_of_ref": "indicator--a4202253-12d1-41eb-8c57-6c3e3b795ca8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675c8607-bbac-4fc1-97a7-fb83f0ad5b25", "sighting_of_ref": "indicator--e0e35800-a6e1-4034-b69e-fe92ad47149e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50b55e6-f314-4628-8bf3-fc519ab6ce0c", "sighting_of_ref": "indicator--e0e35800-a6e1-4034-b69e-fe92ad47149e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edeef13-d0c2-4ce8-a311-06b805e6f481", "sighting_of_ref": "indicator--cd3ebc26-5c1a-4385-bc3b-e9d61cd00e4c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3758b0f6-2ceb-4fe0-a47b-b2cd1bebfc97", "sighting_of_ref": "indicator--cd3ebc26-5c1a-4385-bc3b-e9d61cd00e4c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4bcf63-c49d-4a79-be04-2a5bd41bb1f7", "sighting_of_ref": "indicator--e1ff428d-95c3-4d00-94d1-7200dee03607", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02783a3-b1b7-413c-b207-bb9a15568704", "sighting_of_ref": "indicator--0713615b-0fc7-42ca-a2de-b9a3f6640759", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d426e365-9c73-48fe-8c73-cdecd66748ac", "sighting_of_ref": "indicator--28523776-baa7-46d4-b168-cf069741bada", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a045185e-eba4-45fc-9f2f-b5ebec6fdf77", "sighting_of_ref": "indicator--ff65b26c-b19a-4a8e-b838-f5007d221464", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa893b3-9b02-4546-97bc-63bf2cb2e6ae", "sighting_of_ref": "indicator--cef658f4-c9ea-4544-9363-7c08aeb03592", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aaa91a-8219-4d05-b0a7-b99e6beba34e", "sighting_of_ref": "indicator--cef658f4-c9ea-4544-9363-7c08aeb03592", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8bfcc5-c0e5-4b60-8a6a-62f6d7547a62", "sighting_of_ref": "indicator--8b74991a-73ce-42e1-8828-0c27c25eea0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5de62c3-1e73-427e-b09e-31b12a0e7a2c", "sighting_of_ref": "indicator--1a2ea204-6459-45f0-89a8-59dac1b10b22", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d1789e-3b1f-4c9a-ad4a-0213f272181d", "sighting_of_ref": "indicator--1a2ea204-6459-45f0-89a8-59dac1b10b22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5a537b-21ef-4014-9803-cabc83b74c47", "sighting_of_ref": "indicator--1a2ea204-6459-45f0-89a8-59dac1b10b22", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc68003-8b49-4837-bb07-0b347e6ba541", "sighting_of_ref": "indicator--c9435ba4-7913-4e6e-b4ed-5ef1c28e0301", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7645b9a8-aceb-46a7-9b02-a4e435361d29", "sighting_of_ref": "indicator--c9435ba4-7913-4e6e-b4ed-5ef1c28e0301", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be57f0b9-054c-48ee-a6e5-ffed6cf9266e", "sighting_of_ref": "indicator--c9435ba4-7913-4e6e-b4ed-5ef1c28e0301", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc09089-45a7-4d66-a20c-82085e8f436b", "sighting_of_ref": "indicator--d9e12f8e-48cb-43a0-80ff-b8aa44165a88", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c46d79-7d03-4e84-a5e1-2d37f6b055bc", "sighting_of_ref": "indicator--fd111abe-4e46-45a2-b8d4-456fc761355b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4acf37-b4b2-4952-8732-48aee4b6b391", "sighting_of_ref": "indicator--fd111abe-4e46-45a2-b8d4-456fc761355b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576a0297-face-4656-92d7-fb6d172a1891", "sighting_of_ref": "indicator--5c66fcdf-ced1-4cad-a102-bbb5e5200025", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35746695-b5e4-4d99-9df2-639423f14605", "sighting_of_ref": "indicator--db97d2c2-affa-45d3-8223-3c400e22e5b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3218d9-fa0a-43c6-a972-17c242760105", "sighting_of_ref": "indicator--c7a2eec6-3bd4-49ed-88c9-4c2ea8d0ce32", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf793a3-30e9-40b8-8e54-a732dba38714", "sighting_of_ref": "indicator--e4fc56c2-32b2-4e3f-9f7e-92f327189ea0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170b2ce1-f2bf-40d8-93fe-4c90c098d090", "sighting_of_ref": "indicator--241f1b82-08a8-4260-b1f3-1b6eadabb851", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca68e4ff-444c-4f70-84c8-8fba79841000", "sighting_of_ref": "indicator--101ab861-e34e-4850-bf18-2f9225a9890f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1688ad1-0872-4825-bd81-a7d534c17033", "sighting_of_ref": "indicator--101ab861-e34e-4850-bf18-2f9225a9890f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef58448-6a2a-470b-8f7e-b054e665c327", "sighting_of_ref": "indicator--f7c68a04-b531-4690-a22d-10afad7f4227", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa50ce1-048d-4dcb-8bfc-e859172d6bcf", "sighting_of_ref": "indicator--d7ac5a63-f59b-4509-a0a9-0fc9a309e17b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb38cb47-4e71-4add-9282-32f52606bf6e", "sighting_of_ref": "indicator--d7ac5a63-f59b-4509-a0a9-0fc9a309e17b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3186fca8-a41c-46c0-8a88-d543cdb2164d", "sighting_of_ref": "indicator--7dd9fc49-9693-4dba-b3bc-1fabb26b3a40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fe908d-05d6-4218-84b7-3e3eaeef901e", "sighting_of_ref": "indicator--7dd9fc49-9693-4dba-b3bc-1fabb26b3a40", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56b72dd-1b43-42e9-9a61-e8375d25d8f6", "sighting_of_ref": "indicator--fc466642-d616-4b91-a5fe-a50d630b4cd0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1490ff-a3a6-46a8-96be-0e7a4d26f60a", "sighting_of_ref": "indicator--fc466642-d616-4b91-a5fe-a50d630b4cd0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff206021-c49c-4768-ad53-e21ae9d8824b", "sighting_of_ref": "indicator--d846c89d-c2fc-443f-a633-e5a87b597c2a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0a41c6-39c5-4ad9-a1e5-c7e91b001cd4", "sighting_of_ref": "indicator--e67ef2fe-d96b-4ee6-bacc-0817e1f83c9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094b0ad3-7c04-4a80-a7b8-73d25f2df9be", "sighting_of_ref": "indicator--01536d8a-3061-4d4f-8f64-0c2d976d729d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8356578-b651-43c3-8c2f-542a3ad15f0b", "sighting_of_ref": "indicator--01536d8a-3061-4d4f-8f64-0c2d976d729d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e1e9d3-bc46-4212-bab8-5aed1cc889f8", "sighting_of_ref": "indicator--bf12afbd-46e6-498a-9ca6-462dc1bbf710", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5421d7-a7e0-4010-abc0-ec98d04cdca9", "sighting_of_ref": "indicator--979e01c3-60fc-4ba7-99f5-a8be457eea40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72992ea6-a261-4df1-bc52-52ed418e59b5", "sighting_of_ref": "indicator--f7a70e13-c704-4155-b220-efe9fa520c8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dd7a72-d623-4c2f-ae1b-dc557d85ce6f", "sighting_of_ref": "indicator--f7a70e13-c704-4155-b220-efe9fa520c8b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f580c7bb-6c28-4146-a7d9-fcbc0efb77ac", "sighting_of_ref": "indicator--f239bbb8-ba17-496e-92e3-9e1de64db875", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7246ac58-7122-445b-b451-0bc0c38ec36b", "sighting_of_ref": "indicator--f239bbb8-ba17-496e-92e3-9e1de64db875", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ce951e-20fa-43fa-b8ff-36f1d35d13fd", "sighting_of_ref": "indicator--ceaa62e2-1b9c-406a-a1dd-e453e65360a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a351b02-ded9-4174-a6c2-43f56a4051b0", "sighting_of_ref": "indicator--ceaa62e2-1b9c-406a-a1dd-e453e65360a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed372600-bc24-4854-8a91-cde40edbec95", "sighting_of_ref": "indicator--274650ed-0e5b-427e-829a-2db7c7e0fa82", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbecfa3-2a29-4095-a028-c47ed4ef19a1", "sighting_of_ref": "indicator--274650ed-0e5b-427e-829a-2db7c7e0fa82", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2ca351-de6a-4409-8272-7c3488a32b05", "sighting_of_ref": "indicator--15e9d1a5-6ce6-4416-a706-d1989760973c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313877f3-f405-4e50-976f-5710443bfdd4", "sighting_of_ref": "indicator--15e9d1a5-6ce6-4416-a706-d1989760973c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0310709-23b7-4c47-814f-e6a7c0222c12", "sighting_of_ref": "indicator--b99034ee-b9ee-433c-aee0-d87c052ceb8a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca065613-fdf8-4576-954d-d59f5bcc4687", "sighting_of_ref": "indicator--4414ca4e-0222-4b31-aa41-9069aba46ab1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a31fe8-1037-4161-a29d-437abf22c8a7", "sighting_of_ref": "indicator--9e5dda92-7be2-4b59-8377-dc82200cf1dd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5edc8890-9389-4bb2-b58e-6b6b57295a64", "sighting_of_ref": "indicator--cfd3d81c-871f-43ca-b38f-b68a657bf82b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38de9633-a461-4ec0-bd75-593e654e46e1", "sighting_of_ref": "indicator--053dfc53-3213-482b-9e6c-d8b85fa12956", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1382941b-5dc6-45d7-a1dc-71fb10919f71", "sighting_of_ref": "indicator--053dfc53-3213-482b-9e6c-d8b85fa12956", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15535bd2-916a-432f-9aed-a84fbe10bc44", "sighting_of_ref": "indicator--11b6ecf5-aa55-4e84-becf-cf07861317ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdba4b43-5ab6-46d1-a8fc-b2660ec669b2", "sighting_of_ref": "indicator--9c64193b-4079-4f5b-900a-8c72c8e996e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd91b223-5eff-404d-abb8-1ae59d150339", "sighting_of_ref": "indicator--7b17ae1f-c7bc-401e-a648-9ec8c13aae13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7698babc-5957-491a-85cd-12b54e0815c2", "sighting_of_ref": "indicator--92625936-6dcd-4c64-95b9-51563d47db3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481d1b2f-00af-480d-b650-5b86a87d3fed", "sighting_of_ref": "indicator--ad33bd6f-141b-4146-a329-11767c054ed6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea54ec87-41ab-4dea-afed-3121c02dc20a", "sighting_of_ref": "indicator--7022ea4e-ea22-48d5-947b-bc713074504a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e0065c-1e26-4f95-916c-b57625909696", "sighting_of_ref": "indicator--7022ea4e-ea22-48d5-947b-bc713074504a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c7df91-3a66-4602-b8c0-4286b71e04b6", "sighting_of_ref": "indicator--d93c1fee-9067-4c45-81c6-2d338e4e24d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87622973-9526-4d11-a63a-e475ef2dd2f8", "sighting_of_ref": "indicator--17a5af43-8b28-4f8f-8417-7915dd323aac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2274b2-3ab9-4319-a969-59af3e8dc8f7", "sighting_of_ref": "indicator--987ff57d-a74e-4324-803b-90b57125e43c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b11281-80aa-40af-8120-6bf4767411ea", "sighting_of_ref": "indicator--13e3977c-8e4e-48ea-8808-9e9ec0532455", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34913d69-1b01-4ab1-a6fa-4329e63ede71", "sighting_of_ref": "indicator--a3160486-c683-47ca-a43c-d3ecfc3cb159", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbe5685-e744-4c4a-9a6f-5ff349e317e6", "sighting_of_ref": "indicator--f476979a-9f30-42d1-9bd1-ec760ea6ef98", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2377c0-0bd2-47c2-b0d3-fc19d2775ac4", "sighting_of_ref": "indicator--3620bd11-c2ab-4b44-8d80-3c614ecae500", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23776f2-5444-4b8d-82a7-e10f397de096", "sighting_of_ref": "indicator--7fca9062-9781-45c3-853e-d988913931e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e0e861-4faf-462e-bbf5-47cd6f41b7a4", "sighting_of_ref": "indicator--7fca9062-9781-45c3-853e-d988913931e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ddc8b4-1638-49bb-9430-4ce7d3eba8de", "sighting_of_ref": "indicator--f7c68613-b3b5-4c88-9533-991c72a1122c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d40a233-d871-424a-a561-85759d5ee202", "sighting_of_ref": "indicator--05fe87cb-a326-490b-8f16-257b06ca7bc1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00502338-9613-4d24-8340-e5520c6662f5", "sighting_of_ref": "indicator--05fe87cb-a326-490b-8f16-257b06ca7bc1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f651ffb-b0b5-4fc4-9df4-7d15b17df0aa", "sighting_of_ref": "indicator--4254b5fe-c21e-4a95-9309-bec1ca249f1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3790e105-c729-4268-9c76-6b6a1c18f5cc", "sighting_of_ref": "indicator--c6b2d74f-b78a-4ad3-93a7-1fddefbea15b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2066c9be-cadd-40e4-959a-9c9285c779ee", "sighting_of_ref": "indicator--96236c21-25ef-41eb-bd52-daa4c3f47f9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c556ed5e-ef52-4037-b9f9-de63598fea48", "sighting_of_ref": "indicator--96236c21-25ef-41eb-bd52-daa4c3f47f9f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3caf46-d444-4a4e-96ad-97fdd5fbd26a", "sighting_of_ref": "indicator--ab645077-cf05-4a4b-823b-adbe7d823f5c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cb265b-de77-4567-8eb6-29db72b9677e", "sighting_of_ref": "indicator--43f49d23-cda6-4c2e-afa7-7b92e6e57619", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8129cb84-1abe-419f-a323-383636555a93", "sighting_of_ref": "indicator--43f49d23-cda6-4c2e-afa7-7b92e6e57619", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4b169c-c1f3-42a7-bd89-a631b02d2f5a", "sighting_of_ref": "indicator--29283b28-775b-43d1-be43-5c824bf1b1d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8882c107-4212-4fa2-9eae-d955beebfe9b", "sighting_of_ref": "indicator--3cafb8f5-a694-40f0-b974-a5d53921f4f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd2c543-2a8a-403a-9c5a-ac44a257aa76", "sighting_of_ref": "indicator--63e073dd-87b2-4210-83bf-bafff3ec5417", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4038c613-8f78-4e91-9eb1-43bb1820b3cd", "sighting_of_ref": "indicator--af0d2153-cd7b-4c2c-8ff2-e24ac700cf74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33106921-cff7-4e24-b002-a69902bdf7b8", "sighting_of_ref": "indicator--22eff701-ce3d-4c20-bb1d-0fe8fca4eea2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce114e91-5af9-4b39-9f7c-978df357c94a", "sighting_of_ref": "indicator--b4f21161-a6b2-4187-9e1c-a099bcf65b36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb87d8f-3369-499d-844f-c21577d5407c", "sighting_of_ref": "indicator--2ed1299c-e906-4f93-b388-ea436bbdd81c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafd5981-aabe-411e-bcf1-b7eed824eda1", "sighting_of_ref": "indicator--0d351431-70dd-4485-9f9d-d5d224fd8550", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec6cf7a-a012-4973-b512-a33c7a1bfc23", "sighting_of_ref": "indicator--b4b09d26-a178-430d-89d5-4848200ee9b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21c9353-8bd8-4454-8998-987a6ce96346", "sighting_of_ref": "indicator--ad160b4a-331b-4554-9b64-43a0d7afd6e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ce1cf1-01c7-48af-aaeb-6f74930e87c9", "sighting_of_ref": "indicator--a3e10c6b-28ff-4636-abdc-db74d8d48b6c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57639786-451b-46e1-a4d4-6b8d1035010f", "sighting_of_ref": "indicator--a3e10c6b-28ff-4636-abdc-db74d8d48b6c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b882a95-0f99-49ef-8c1e-b4bb48941d22", "sighting_of_ref": "indicator--2591d353-db58-467a-aed6-c3aeb5860738", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f477a99-995c-4d7e-87b3-7260624bebb8", "sighting_of_ref": "indicator--0a967854-476e-49b1-9344-356b4d6288c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97a9753-121e-4875-a43e-5a0f08aa5eaa", "sighting_of_ref": "indicator--8212be8a-ec48-4e86-bc8e-84d918f8f38a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd77e4a-3eae-4485-bb28-4fa266770333", "sighting_of_ref": "indicator--9f767796-0c2e-4bab-a762-0932201e813b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1875ed2a-f5f5-4ad4-a7d1-f76e15a726b1", "sighting_of_ref": "indicator--106b59b8-1505-406f-89c4-aa0579e65da2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065bee5e-e5ac-47a5-b09a-be6b917563bd", "sighting_of_ref": "indicator--2143b8d5-a5d7-4543-bae3-661c664a3165", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4ee0b1-2868-46df-98df-3c1e8ea2ab8e", "sighting_of_ref": "indicator--f4faae86-c80a-4979-bf8e-bab37c125000", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f4c9b6-199c-4f11-a848-ec5c83c5a466", "sighting_of_ref": "indicator--5798856a-3365-44a8-96e1-5b6d9a649dea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186fdbc4-a882-4aac-859b-e0a3ea9b9e27", "sighting_of_ref": "indicator--6ad5dadf-2548-4bbb-8e87-472e0f9785d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffca400-28b3-476a-b219-33c8f3d0b9e5", "sighting_of_ref": "indicator--6ad5dadf-2548-4bbb-8e87-472e0f9785d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da19f6a-45b9-4cfa-b767-8cfb3b404705", "sighting_of_ref": "indicator--0b2f8c7e-3911-402a-959b-b7f6997d4f1d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18926fe-9bb9-4fa5-9e97-63852793f6ce", "sighting_of_ref": "indicator--f1184a7a-7d73-4903-932a-a1602b993f43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b676d839-ed92-44d4-8980-50cef36da01a", "sighting_of_ref": "indicator--037527c3-04df-4008-901f-a47d4bbaa38f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dab04a6-fc63-4cc1-97ec-c2d82d4e4fff", "sighting_of_ref": "indicator--07b25c2f-ec1a-4fff-916e-e03deb066219", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98828541-4f21-4111-96ff-c69fbc6247a3", "sighting_of_ref": "indicator--9c17b7e3-67ef-42e6-bfbb-c675fddb4379", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab92a445-6567-4e04-87c6-f55827ee103b", "sighting_of_ref": "indicator--982da3be-3f21-4ea1-871e-880eae8c048c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d6a05e-cb6b-48a0-bc00-71785969c82c", "sighting_of_ref": "indicator--646dc0f9-ed36-41f3-a261-9e6b262527c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdca600-788f-401a-be28-40ff0f5809f1", "sighting_of_ref": "indicator--eeda00fb-326c-432d-b184-af6822e32db6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5376c49d-b39f-4c2a-9d0b-2f90c2579849", "sighting_of_ref": "indicator--44037139-f439-4376-957e-cec4ad630b35", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e46137-b904-49b5-8d7f-3821e66ba9eb", "sighting_of_ref": "indicator--b52e9f4d-efdb-4462-a9cc-346f654b28ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f101cc-ac1e-4661-a767-0f846040245e", "sighting_of_ref": "indicator--3ec049f3-1804-408d-bb47-2d5eba94d376", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19326c1-fba6-436b-9fa2-d39acb4b6acc", "sighting_of_ref": "indicator--66a5b694-21f6-49f7-bef9-8b734d4a539f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c9c7e2-5f3d-43b8-a454-6ea891a7f592", "sighting_of_ref": "indicator--016f54c3-31c3-432e-b880-212df332bd8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8042aa2f-7ce2-4ca6-ab65-ec5f737f3229", "sighting_of_ref": "indicator--547f9f5b-4759-48d0-b127-c03f33e0973a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84d8bc0-69e2-4ca4-8c32-a7a0dfae377b", "sighting_of_ref": "indicator--a90c9d94-e262-4af7-852c-d8792168fd3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63582bcd-5a9a-4681-abab-d3b57253cea5", "sighting_of_ref": "indicator--a90c9d94-e262-4af7-852c-d8792168fd3a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3326ffb0-782b-49f1-b08c-10626c5d30eb", "sighting_of_ref": "indicator--a90c9d94-e262-4af7-852c-d8792168fd3a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a50582-e284-45e0-b03c-5c422cabcc00", "sighting_of_ref": "indicator--22245558-dc4d-41a4-a28f-3476d562d716", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d35701b-f34c-4677-83cf-8b975eefb3e8", "sighting_of_ref": "indicator--22245558-dc4d-41a4-a28f-3476d562d716", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee1bba9-fe5e-40db-823c-a7e4f0af458d", "sighting_of_ref": "indicator--22245558-dc4d-41a4-a28f-3476d562d716", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4857b937-1172-4838-852c-ab5b01b4c627", "sighting_of_ref": "indicator--514056e1-aed6-4057-9951-0863f1f3df22", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af423fb-9271-4093-985f-d1ff8111c46e", "sighting_of_ref": "indicator--b9fb11db-3cd5-493f-b166-a6b73f756cec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89587d83-fc80-4515-b1c3-cacb9667df3e", "sighting_of_ref": "indicator--b9fb11db-3cd5-493f-b166-a6b73f756cec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7437cbd7-ac77-4df0-84f2-4581dfce8ced", "sighting_of_ref": "indicator--c5d168e8-d57b-4db6-810f-63ce2ad836fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd14a6-90e4-4c23-a84b-23ae1df144fb", "sighting_of_ref": "indicator--d847af81-fa97-4ab4-bb64-4cccd899e538", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f779fa-47a4-440b-8a21-7d34c0655cb4", "sighting_of_ref": "indicator--f58a0c9c-8c4d-43a7-97fd-230230a242ce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802158d4-665d-4153-88f7-0ee2d33915e6", "sighting_of_ref": "indicator--7f4ffd46-aa27-4721-86d8-3b56911bdbf7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506522df-8a11-4e81-a5a0-5c591c457cdb", "sighting_of_ref": "indicator--45efd1b0-40ca-4fea-b1b5-cef88e4a0d2a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e67c87-520f-488e-b697-9feb44f099ef", "sighting_of_ref": "indicator--45efd1b0-40ca-4fea-b1b5-cef88e4a0d2a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f196b7-09c2-4016-9fc6-52f05ce47955", "sighting_of_ref": "indicator--c822fe30-6658-4827-860e-57f6104bc59c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2ffbb1-0b79-42a7-abab-132ce8d68944", "sighting_of_ref": "indicator--c822fe30-6658-4827-860e-57f6104bc59c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2f2967-cc77-49e2-af08-dc44db19b6ff", "sighting_of_ref": "indicator--f959527e-4231-48c5-bf39-d82b4158d258", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b06850-9116-4ba2-b92f-1c1e5314c110", "sighting_of_ref": "indicator--f959527e-4231-48c5-bf39-d82b4158d258", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775376cb-8bc8-4def-af71-967b2c44edfb", "sighting_of_ref": "indicator--f959527e-4231-48c5-bf39-d82b4158d258", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776c85c7-7556-4358-9bc8-d62e39d8a816", "sighting_of_ref": "indicator--8494a588-d858-4b6c-ad28-bdee23974c6d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bed9519-e15f-4bcc-a21e-7784fcc0a4c2", "sighting_of_ref": "indicator--8494a588-d858-4b6c-ad28-bdee23974c6d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00da5cf4-6151-4206-922e-0e95ee137b7a", "sighting_of_ref": "indicator--8494a588-d858-4b6c-ad28-bdee23974c6d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d58474c-489c-4c19-9d80-5b644e320827", "sighting_of_ref": "indicator--1c3f1ca9-26e4-4557-a22a-4d61367d878d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135627aa-5050-441b-8a1f-f84ad9a47588", "sighting_of_ref": "indicator--4c0ab0eb-bc15-48d7-9947-822e683960e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9c888f-f8b6-4c4a-af40-0f13f8e8bcdf", "sighting_of_ref": "indicator--27bfd1ab-d5c3-4597-a11f-128de455e423", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f42d94-555a-4378-ac16-a3967e65a7fa", "sighting_of_ref": "indicator--27bfd1ab-d5c3-4597-a11f-128de455e423", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0511bd-5140-415d-87cc-ebeff516bca7", "sighting_of_ref": "indicator--c3210f51-ad09-47eb-b006-6ffe32e9d815", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4b9306-fa46-49a9-bd47-a04cd869cdf8", "sighting_of_ref": "indicator--c3210f51-ad09-47eb-b006-6ffe32e9d815", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f0f083-bb2e-458b-b4a5-41341d13cc34", "sighting_of_ref": "indicator--c3210f51-ad09-47eb-b006-6ffe32e9d815", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f0c381-652c-4ae7-8a8f-8c393420012a", "sighting_of_ref": "indicator--67607e7c-a697-4fcd-9599-e05b28eec949", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566afa29-2d11-41e7-ba7d-6ecc533bc157", "sighting_of_ref": "indicator--67607e7c-a697-4fcd-9599-e05b28eec949", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81673a0-241a-478f-b079-dea6ce54976f", "sighting_of_ref": "indicator--f1497ad5-227e-4b77-8a3c-a5e60109826e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c06bad2-d986-4a1a-a129-86a4f8f77dd4", "sighting_of_ref": "indicator--f1497ad5-227e-4b77-8a3c-a5e60109826e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0f82ef-2573-4f9b-a9d2-3b79a1d7ced7", "sighting_of_ref": "indicator--f1497ad5-227e-4b77-8a3c-a5e60109826e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8693c36a-3c26-4c04-bb20-30e41f8dbe7b", "sighting_of_ref": "indicator--4dd1cf90-b17e-4994-aa88-4946303c69ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1e6e86-6b45-445b-9eba-4d2e50c23f70", "sighting_of_ref": "indicator--12a99c34-3fe7-4116-8ee3-277d75a6c554", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b63c1f-d1a2-47a2-84dc-825811670e76", "sighting_of_ref": "indicator--12a99c34-3fe7-4116-8ee3-277d75a6c554", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f021ae-7963-4308-bc7d-e31fc5aeb691", "sighting_of_ref": "indicator--12a99c34-3fe7-4116-8ee3-277d75a6c554", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314a793c-7170-41fd-b23b-380d9c104616", "sighting_of_ref": "indicator--66cf074d-e9c6-4ef9-8835-64f83f32e344", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcf19c1-419a-4429-abcc-a0c3672e5cfb", "sighting_of_ref": "indicator--66cf074d-e9c6-4ef9-8835-64f83f32e344", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c306d40-4eda-417a-ade3-211b170cbf8e", "sighting_of_ref": "indicator--9a8494d7-0241-43d9-8a08-7e6aea4cc36f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a77266e-0336-490b-9f02-c748ef83805d", "sighting_of_ref": "indicator--9a8494d7-0241-43d9-8a08-7e6aea4cc36f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7440689b-cfc9-41fc-b4d5-7ba2971e4a6a", "sighting_of_ref": "indicator--53ca106e-1e61-4653-97b1-6b4c14a464e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6205d0-a70c-4aa9-aea6-c7cf7a2b9dd0", "sighting_of_ref": "indicator--53ca106e-1e61-4653-97b1-6b4c14a464e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99232d35-586e-410e-8b71-dfcd2e5676d6", "sighting_of_ref": "indicator--53ca106e-1e61-4653-97b1-6b4c14a464e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a79b2b-a384-4c18-8e34-aa49b99772e8", "sighting_of_ref": "indicator--ade3e181-1d4a-49e3-9d5f-b60618d4faca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2292271b-84ac-4603-a86e-74c16c09c689", "sighting_of_ref": "indicator--ade3e181-1d4a-49e3-9d5f-b60618d4faca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb20102-9d89-4158-8d3f-e573c37ecd4b", "sighting_of_ref": "indicator--be46f75c-4ffc-40fc-b7ab-625ae2a0598d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0465e046-fefd-43fd-819b-9bc2cd769752", "sighting_of_ref": "indicator--be46f75c-4ffc-40fc-b7ab-625ae2a0598d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e551ee-7211-4548-b99d-816d784644ab", "sighting_of_ref": "indicator--5ce1939a-e21c-43ed-bbee-904b52892a15", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d36238-5047-4568-971d-f156f548272e", "sighting_of_ref": "indicator--5ce1939a-e21c-43ed-bbee-904b52892a15", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71c662e-6427-4c43-bfe6-92fe034803b6", "sighting_of_ref": "indicator--5ce1939a-e21c-43ed-bbee-904b52892a15", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7caa7bb-0467-458a-8c22-4f1e7e768384", "sighting_of_ref": "indicator--5d43afee-608d-4d6d-b397-bd3a100aa3fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d46533-300d-4491-b611-0742ea395147", "sighting_of_ref": "indicator--5d43afee-608d-4d6d-b397-bd3a100aa3fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fac3cf-409e-4024-8347-df36b24a1f7f", "sighting_of_ref": "indicator--c9f27039-a585-4192-a8f8-6d1848286d69", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af947217-2d46-4353-8c09-34ae08cd9e97", "sighting_of_ref": "indicator--c1721158-c90f-4326-b335-f1caeab67982", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd7db3c-b8fa-49fd-9f74-9933bd849310", "sighting_of_ref": "indicator--5b2b7ece-41cf-4126-9338-e313d6812995", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52822a8-fb09-4b75-b9a2-ce300256e1be", "sighting_of_ref": "indicator--5b2b7ece-41cf-4126-9338-e313d6812995", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85411e07-73c7-47fe-9527-905f0d8f0451", "sighting_of_ref": "indicator--5b2b7ece-41cf-4126-9338-e313d6812995", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2b5e61-e9ce-4f9b-bccc-2c8d42e96aab", "sighting_of_ref": "indicator--0368933f-fb03-4bad-83ae-1a7201cdaa9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104c27a1-806b-4078-8132-f2b902e3b7a6", "sighting_of_ref": "indicator--0368933f-fb03-4bad-83ae-1a7201cdaa9b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b16011-8bca-4338-b709-ea80f339197d", "sighting_of_ref": "indicator--0368933f-fb03-4bad-83ae-1a7201cdaa9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c21ed1-da21-4108-bd14-ef7b26854aef", "sighting_of_ref": "indicator--c6928191-9d7e-4789-a1d0-478ef17d5f62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8133bb26-00b5-4a92-845b-855692f5e18f", "sighting_of_ref": "indicator--0a11149d-0545-4061-8b80-0a7602d56255", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b8f4cd-1731-47ea-b1f8-8586a82203fe", "sighting_of_ref": "indicator--ee48362e-d3ec-4aed-83c1-1760ef5ab0da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efa6a15-627e-4107-91c4-5ab4d89027f2", "sighting_of_ref": "indicator--012ba562-53fa-4fe3-b3c8-7bd3ecc3c087", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35567414-5cdb-4b7b-a01e-cba04a8a3953", "sighting_of_ref": "indicator--012ba562-53fa-4fe3-b3c8-7bd3ecc3c087", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca246d3c-6792-4801-ae04-5c25a76cdd42", "sighting_of_ref": "indicator--981b18cf-c470-4c80-98c7-3d7dd40e1b08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7cb436-d57d-402b-8dfd-29f1113659fe", "sighting_of_ref": "indicator--981b18cf-c470-4c80-98c7-3d7dd40e1b08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8be8f9-46d0-466a-b9e1-43b7315c233d", "sighting_of_ref": "indicator--45f30cb6-22af-48be-b951-8b51a57f7543", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51683b5a-a606-4371-8baa-d2541e404267", "sighting_of_ref": "indicator--45f30cb6-22af-48be-b951-8b51a57f7543", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d543c37f-3663-481b-88d6-8fefd2c85470", "sighting_of_ref": "indicator--45f30cb6-22af-48be-b951-8b51a57f7543", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05732d85-be30-4349-a2e8-0e39671de3b8", "sighting_of_ref": "indicator--6a6a456c-cb2d-476a-948c-18690b390664", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d879d5-5abb-43b2-9e70-579c85420723", "sighting_of_ref": "indicator--6a6a456c-cb2d-476a-948c-18690b390664", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565e1337-a4fd-4c13-8402-f5f9d4b5ece7", "sighting_of_ref": "indicator--17004346-1020-4908-be7b-f7ec6cd391b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8312df29-a49b-49eb-b953-0a556d3fc4d0", "sighting_of_ref": "indicator--17004346-1020-4908-be7b-f7ec6cd391b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5171dac9-a92f-48a6-8377-3834f627f93c", "sighting_of_ref": "indicator--17004346-1020-4908-be7b-f7ec6cd391b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556eece5-cc7b-4b13-8d28-cb647f385283", "sighting_of_ref": "indicator--e6ab6683-fad3-49c0-850b-2ce8107d1745", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46cfdc9e-7fd2-4659-aa50-fc343ede9ba7", "sighting_of_ref": "indicator--5c0e3eb4-f8a4-499a-a834-c24f369a5d05", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d515dd-0dc1-45d9-8239-5d9dae052bc2", "sighting_of_ref": "indicator--5c0e3eb4-f8a4-499a-a834-c24f369a5d05", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fd1f37-c05b-4fea-998c-a9a37fb8a51e", "sighting_of_ref": "indicator--5c0e3eb4-f8a4-499a-a834-c24f369a5d05", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a7a3d4-afd2-47cb-8ec9-d78420bcda27", "sighting_of_ref": "indicator--e8202757-05b4-4c6c-ab88-3a4a22aa1e0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4654d4e5-7dc6-410f-8d01-12cbc08ecc2d", "sighting_of_ref": "indicator--e8202757-05b4-4c6c-ab88-3a4a22aa1e0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64047114-2a73-49ae-9aa8-7ed7aa00a0b3", "sighting_of_ref": "indicator--e8202757-05b4-4c6c-ab88-3a4a22aa1e0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8607c4-cc25-4d8d-9146-89491cfca8b4", "sighting_of_ref": "indicator--550bbde7-0b37-4dee-a739-14fd08cb53d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e6aa11-c8ed-4293-ae8f-b06d9d10e538", "sighting_of_ref": "indicator--550bbde7-0b37-4dee-a739-14fd08cb53d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56233c48-0690-4338-b198-b22f73311373", "sighting_of_ref": "indicator--550bbde7-0b37-4dee-a739-14fd08cb53d1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f06dbb5-a796-442c-b4d1-7ae3ef103953", "sighting_of_ref": "indicator--19492ae5-637e-4834-9027-bc19b6257830", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a454f24-4b0b-409f-8445-f6b05e691701", "sighting_of_ref": "indicator--19492ae5-637e-4834-9027-bc19b6257830", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a714284d-810a-40f7-b250-1536bc2080c6", "sighting_of_ref": "indicator--1e0e0c0e-4c9d-4262-908f-7a046c121b12", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d31a3b-b254-431f-a5c3-ca885f88b881", "sighting_of_ref": "indicator--1e0e0c0e-4c9d-4262-908f-7a046c121b12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e185844-bbe3-4acf-95af-da6fe068deb0", "sighting_of_ref": "indicator--1e0e0c0e-4c9d-4262-908f-7a046c121b12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06af184-b123-4dba-8484-478b4cdda99f", "sighting_of_ref": "indicator--1850fad6-8b45-4a5e-831b-b12f0909601f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9462b0e3-282f-4e7b-866a-abb1534b246f", "sighting_of_ref": "indicator--4d6dee59-e974-4e17-a44c-8b0307ce35e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b98df4-2b80-46fe-8a17-cf6a4ea1c183", "sighting_of_ref": "indicator--528590cc-155c-421b-baa5-09722ae1ec50", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5782780d-85ed-4841-a900-4984bcc44fd2", "sighting_of_ref": "indicator--528590cc-155c-421b-baa5-09722ae1ec50", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c58a924-53fc-4d23-ae87-4585de2c2995", "sighting_of_ref": "indicator--67a17441-1e74-4379-8ce9-c82b21279d46", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3efeac-9f76-4085-a127-ca3e784577e6", "sighting_of_ref": "indicator--67a17441-1e74-4379-8ce9-c82b21279d46", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ff6336-a7d0-4495-be5c-80c4304a767f", "sighting_of_ref": "indicator--67a17441-1e74-4379-8ce9-c82b21279d46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f91fa3f-9e70-451d-a537-170766b4d4e3", "sighting_of_ref": "indicator--3ce78f77-1264-42b8-934b-b7d5930cfa04", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6580fcdf-d1ad-49bc-bbc6-3af2e3a40286", "sighting_of_ref": "indicator--55b51f12-ab62-4661-9950-d5c91800a3b0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815c40fe-b2fc-4604-b51a-91f8b3cc66ca", "sighting_of_ref": "indicator--a2761433-c300-40f8-8d1d-36948c671faf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00eeb8ef-510b-4d55-8355-8f16b29584e3", "sighting_of_ref": "indicator--6d283e8c-ec7c-4a44-8854-352f8f130c51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875eb23f-433e-4331-aad4-c01e66cfedf7", "sighting_of_ref": "indicator--52124a24-6da7-4d7a-a205-335f4bb47279", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f4a2a5-49b7-4cc3-afe6-d48adc071151", "sighting_of_ref": "indicator--52124a24-6da7-4d7a-a205-335f4bb47279", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa3d8f9-8763-49a1-8282-f8fa51af16a7", "sighting_of_ref": "indicator--891b3047-21bb-420e-ba42-7a39b2004d1e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b29be7-632d-483b-b999-30d2e219d442", "sighting_of_ref": "indicator--891b3047-21bb-420e-ba42-7a39b2004d1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95fad38-ff53-40fc-9803-5a731d514390", "sighting_of_ref": "indicator--10964bf5-cad2-440e-9854-c9e478c56ceb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f67be5-1eea-4efe-bccb-e912d8cc4263", "sighting_of_ref": "indicator--10964bf5-cad2-440e-9854-c9e478c56ceb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346f2354-4048-421c-81d3-ce78bc785ffd", "sighting_of_ref": "indicator--10964bf5-cad2-440e-9854-c9e478c56ceb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a964ae23-a892-4f64-8fe9-c70e04cf5869", "sighting_of_ref": "indicator--968e2b74-521a-441d-bfcd-80bfc99b0a88", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62fe64f-0d71-4d69-82c2-3a1000b1b00b", "sighting_of_ref": "indicator--968e2b74-521a-441d-bfcd-80bfc99b0a88", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898414f5-052e-48fa-9f01-b68e73384fcf", "sighting_of_ref": "indicator--54f1a27d-02aa-454c-99f7-ba0ba2396a9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654f12bf-188b-4b94-902e-d9f51499e492", "sighting_of_ref": "indicator--9d5dcf03-3042-4643-9669-eba80541f775", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844f6e8b-df8e-4900-b718-9d64b0758e46", "sighting_of_ref": "indicator--58d817c5-d9b1-4e1b-b60b-ded2c1fc0a27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5af354-e912-4b72-b266-a240bc671ee4", "sighting_of_ref": "indicator--31bdb55a-e37e-4488-a884-9d1391acdb6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9c01c4-e439-43a1-8798-f5367371337f", "sighting_of_ref": "indicator--31bdb55a-e37e-4488-a884-9d1391acdb6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95af864-319f-4edf-a3c3-0ce2deaf4e1e", "sighting_of_ref": "indicator--32da3b31-3126-4872-94e1-069bdbe867f5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7242f5d9-7b25-49b2-b897-ae7ad7575b09", "sighting_of_ref": "indicator--4baea91b-beff-4090-a22f-4569f482914b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76df18eb-94ef-49d0-9648-442b6350780e", "sighting_of_ref": "indicator--4baea91b-beff-4090-a22f-4569f482914b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e362a7-90ff-437c-88e0-3cd196654182", "sighting_of_ref": "indicator--4baea91b-beff-4090-a22f-4569f482914b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f1a821-f5de-4c04-9c11-67e0a7e48d62", "sighting_of_ref": "indicator--b286625b-7ef7-4036-8e48-d31622647f83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3e62fe-2701-4127-978f-b842a2eb86cb", "sighting_of_ref": "indicator--b286625b-7ef7-4036-8e48-d31622647f83", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5b67a2-ed5c-4479-bf2a-e8d5293b77c6", "sighting_of_ref": "indicator--b286625b-7ef7-4036-8e48-d31622647f83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb622ee9-74e7-4342-9ea5-66eb0496d1aa", "sighting_of_ref": "indicator--bb11f7fc-eda3-4f10-b8fa-28949a046b4f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e39421c-4977-495f-968e-ae82fbef7f86", "sighting_of_ref": "indicator--bb11f7fc-eda3-4f10-b8fa-28949a046b4f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b36a47-faba-4994-85d1-3da4e42b2724", "sighting_of_ref": "indicator--bb11f7fc-eda3-4f10-b8fa-28949a046b4f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b876da-74e4-49f3-acf8-d196c4cf8bc8", "sighting_of_ref": "indicator--bb0255ac-da5a-4150-a4bd-27c48108996f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ffcbb7-fd88-4615-b2d5-c733da5360e1", "sighting_of_ref": "indicator--bb0255ac-da5a-4150-a4bd-27c48108996f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc07236-eb1e-4cad-a13f-c3d592614b9c", "sighting_of_ref": "indicator--bb0255ac-da5a-4150-a4bd-27c48108996f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d6062f-b0ba-4e0a-844b-6006e3bca271", "sighting_of_ref": "indicator--335baab1-293c-4873-ab04-3cde416aa402", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30890e12-2661-4d40-9b68-2e8fef1991be", "sighting_of_ref": "indicator--335baab1-293c-4873-ab04-3cde416aa402", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6f843c-c569-45d5-8b3e-840c774f61ae", "sighting_of_ref": "indicator--335baab1-293c-4873-ab04-3cde416aa402", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15413907-aab3-4c3c-94d4-c225554b24e8", "sighting_of_ref": "indicator--5d440f8b-19b5-4e88-98fb-c9a6f59221dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7b7035-1dce-4062-bf7b-7bd3321894ef", "sighting_of_ref": "indicator--5d440f8b-19b5-4e88-98fb-c9a6f59221dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea00406-dc98-454a-8338-ab3566de4f50", "sighting_of_ref": "indicator--5d440f8b-19b5-4e88-98fb-c9a6f59221dc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d02dbf7-bebf-48b1-94b6-d2471bf88891", "sighting_of_ref": "indicator--3d9afe1d-6e18-4e71-b662-1185be7ae0c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e06b884-b4a6-4981-9b7d-de803b4f4acb", "sighting_of_ref": "indicator--3d9afe1d-6e18-4e71-b662-1185be7ae0c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be5a3c0-b72d-48d8-835e-0fcb4e477a88", "sighting_of_ref": "indicator--3d9afe1d-6e18-4e71-b662-1185be7ae0c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8517d214-07f0-46d3-bfd3-bcdc4a0b37f6", "sighting_of_ref": "indicator--1c4ebf9c-2413-4ff4-a7ec-fa5b0a010e18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188097b9-c97a-4a39-9a43-fc2142ea3157", "sighting_of_ref": "indicator--1c4ebf9c-2413-4ff4-a7ec-fa5b0a010e18", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89595669-fd3d-4e95-8b82-cf6946eb540d", "sighting_of_ref": "indicator--c4d800ec-ea1c-467e-8593-2047ba97bc4c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1b1f6a-38a4-4d32-8516-c5693e557269", "sighting_of_ref": "indicator--c4d800ec-ea1c-467e-8593-2047ba97bc4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a38fc7-82dc-4e31-a173-a5bb16c9ba5a", "sighting_of_ref": "indicator--c4d800ec-ea1c-467e-8593-2047ba97bc4c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba15061c-ebd3-4071-b01f-45185dd0a1d4", "sighting_of_ref": "indicator--560aac48-74ea-42fd-b622-838baf2cc1b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3663fbfd-337a-497c-aee5-d7debab394cd", "sighting_of_ref": "indicator--560aac48-74ea-42fd-b622-838baf2cc1b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9f2e25-6306-4dbe-998e-5547b9ac095f", "sighting_of_ref": "indicator--a95dd6aa-5d39-44c5-b67a-a8ee4c6e2915", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da33ada-e96c-4324-a4f0-0fd18fff5edd", "sighting_of_ref": "indicator--a95dd6aa-5d39-44c5-b67a-a8ee4c6e2915", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a65429-0a71-484a-b6fc-05faa9a7a61b", "sighting_of_ref": "indicator--a95dd6aa-5d39-44c5-b67a-a8ee4c6e2915", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d27a9f-e619-4baf-8667-0eeb04332dcf", "sighting_of_ref": "indicator--81a18f64-32ce-419d-868f-2ed7f5457d5f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7855224-a8f8-4f62-8d07-dd02b77d6b5c", "sighting_of_ref": "indicator--81a18f64-32ce-419d-868f-2ed7f5457d5f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983f7eb3-36cc-4c92-922c-577400621703", "sighting_of_ref": "indicator--f6a3d4f8-1a69-4df2-9f0f-8c9cbe66252f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9f2ab0-8943-4df4-a236-07730ff88ffd", "sighting_of_ref": "indicator--f6a3d4f8-1a69-4df2-9f0f-8c9cbe66252f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de86fd2-305a-43c1-9bdf-ac1bc49ae545", "sighting_of_ref": "indicator--f6a3d4f8-1a69-4df2-9f0f-8c9cbe66252f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955dfb8a-9703-4bfa-81bb-b991a1b34237", "sighting_of_ref": "indicator--8e0d2532-6b2b-49b1-938d-c3166ed63f1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06cf107-d8af-41d6-8e37-2d609b3a73b6", "sighting_of_ref": "indicator--8e0d2532-6b2b-49b1-938d-c3166ed63f1b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcae47dc-f666-4d1e-902c-060afbd8d256", "sighting_of_ref": "indicator--44acbb2e-4fb0-4a0a-ad40-155c28695e9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ddfe7f-ae92-4fc7-8c16-9efcdf42aed5", "sighting_of_ref": "indicator--3ab34b55-9cc0-4cbf-9583-585674383a22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256dc429-885c-4ccb-891d-040f3afa45cd", "sighting_of_ref": "indicator--3ab34b55-9cc0-4cbf-9583-585674383a22", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b82bb2e-4cbf-46f4-9bda-bc7baef914c0", "sighting_of_ref": "indicator--31ef74a7-b4f8-4cbb-80bb-4479b9fd722a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5fb40a-5074-4445-86f5-291367218265", "sighting_of_ref": "indicator--31ef74a7-b4f8-4cbb-80bb-4479b9fd722a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c134736-0367-4fe9-a29a-badf3c123f44", "sighting_of_ref": "indicator--0693ea22-767b-4b6d-8b35-a94c397a767e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5318e8-31af-40ca-9c4e-142bc34e9bfe", "sighting_of_ref": "indicator--0693ea22-767b-4b6d-8b35-a94c397a767e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ff99a1-9019-4e56-a816-a612b0edf724", "sighting_of_ref": "indicator--0693ea22-767b-4b6d-8b35-a94c397a767e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc6d41-0990-4eca-8d8b-f5be3ecabe63", "sighting_of_ref": "indicator--5b3e93d4-bc04-4938-aa01-ea2ffbe1947d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb71011d-0cac-445c-a472-5b5566daa372", "sighting_of_ref": "indicator--18c08f40-b44d-40bf-a2dc-6f22e80a56ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1dbf5e7-e81f-43c8-a5f8-6290748c3365", "sighting_of_ref": "indicator--8035ae7f-ead4-4251-8f31-2201a9c3d1cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2acad95-3fc9-46e8-9127-d99ed66350a1", "sighting_of_ref": "indicator--8035ae7f-ead4-4251-8f31-2201a9c3d1cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009722dd-65b3-4e37-82d8-d301b4048708", "sighting_of_ref": "indicator--c890d910-a842-4407-ae32-8fe1b496d36b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52980a14-85eb-4213-afcd-f8da838e88b5", "sighting_of_ref": "indicator--c890d910-a842-4407-ae32-8fe1b496d36b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e66708-c93b-42d1-8f43-32eae92fb980", "sighting_of_ref": "indicator--40824133-9731-4c7a-af8c-5c6916513cfc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b566f89b-7adf-4bc8-b364-ebda31d79573", "sighting_of_ref": "indicator--40824133-9731-4c7a-af8c-5c6916513cfc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda4f749-1b4b-4af6-a3bb-7585e20cbc2b", "sighting_of_ref": "indicator--40824133-9731-4c7a-af8c-5c6916513cfc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd99b624-699d-4f59-81b3-093879afd65e", "sighting_of_ref": "indicator--3bce4440-80e1-4e34-b0f3-710deac14429", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6963db6-d4e7-4752-8026-dc03d6538e43", "sighting_of_ref": "indicator--3bce4440-80e1-4e34-b0f3-710deac14429", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733966c6-b1da-4703-b041-361d0e3d5fc4", "sighting_of_ref": "indicator--d5c0a16c-4b1a-4a77-98f9-b37a7a2d1b3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4102a482-0a03-4de9-9c79-6e4d270f7328", "sighting_of_ref": "indicator--d5c0a16c-4b1a-4a77-98f9-b37a7a2d1b3d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a280c0e-31ef-4d9b-91d4-06f165bea311", "sighting_of_ref": "indicator--e5be84f0-eb45-407e-82a0-98a757212dff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dd9d38-a25f-4b50-99f1-0722502dff09", "sighting_of_ref": "indicator--53d5fe97-f462-471d-863b-c5419c15cd8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f365b01-4f7e-49b4-bc94-53b7f7c762d2", "sighting_of_ref": "indicator--0400ba18-c295-433d-9f5d-f3c2bf9816ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9546a72d-b26c-4d0e-80e4-d4995053e3c9", "sighting_of_ref": "indicator--b210e512-7f67-495a-86bb-ff2d9db9049a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebe5683-f840-4228-84fd-e5f02b54de3f", "sighting_of_ref": "indicator--efcfa2f7-1afb-4ebf-883d-4bb60ee70a56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106061fd-a3fe-4b67-b4d7-4a7974775736", "sighting_of_ref": "indicator--efcfa2f7-1afb-4ebf-883d-4bb60ee70a56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf18872b-eac0-43ed-aecb-2bd9fe912b12", "sighting_of_ref": "indicator--efcfa2f7-1afb-4ebf-883d-4bb60ee70a56", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897e81e3-cda6-465d-9c3d-e4166951b2ad", "sighting_of_ref": "indicator--11ebca05-042a-4553-af8b-a9e2bfcc3200", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd51675-8c10-42b9-90d0-4d0cba52d594", "sighting_of_ref": "indicator--11ebca05-042a-4553-af8b-a9e2bfcc3200", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7451dc-ea07-4c46-b204-de7952f9f846", "sighting_of_ref": "indicator--d6d5a0a8-377b-46a1-bd56-1bc461c27ee0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5261529-badd-4341-b1ec-941085ec827f", "sighting_of_ref": "indicator--15c7eca0-7513-4902-b5b1-c828e98b719f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee862c6-cd7b-48d8-9a70-fab67c067a0a", "sighting_of_ref": "indicator--15c7eca0-7513-4902-b5b1-c828e98b719f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783a3d64-9574-43ae-ac96-8393e0ac9a4b", "sighting_of_ref": "indicator--15c7eca0-7513-4902-b5b1-c828e98b719f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1a5846-70ed-407f-8211-e7184266de85", "sighting_of_ref": "indicator--2e88cc3b-f98f-46ff-b7d7-66dcdee2486d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79162ca-ed75-4790-b493-5513e33d59ba", "sighting_of_ref": "indicator--2e88cc3b-f98f-46ff-b7d7-66dcdee2486d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6bb2b7-aa18-43ed-a0e8-1b5ddcc60070", "sighting_of_ref": "indicator--2e88cc3b-f98f-46ff-b7d7-66dcdee2486d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f51d69d-511d-44f9-a4c3-713d72eaee69", "sighting_of_ref": "indicator--7b414ea4-e9cf-4aff-838f-646514e25a12", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d20f8ba-dfc8-408a-ad5b-f324b8bad4f7", "sighting_of_ref": "indicator--7b414ea4-e9cf-4aff-838f-646514e25a12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350956ab-8f06-4390-9958-278077e74e9a", "sighting_of_ref": "indicator--7b414ea4-e9cf-4aff-838f-646514e25a12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cadcba6-aa1f-4e24-bc2f-a20120fa81ca", "sighting_of_ref": "indicator--ebdb8423-0b73-4b5e-bcb3-bb0ca1514e2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ae1a1c-7ded-4374-b8b9-a9ce656f9b85", "sighting_of_ref": "indicator--ee2411f0-497e-4d54-9558-0e07a22939db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877eb6a7-eb4a-4809-8adc-18e1520240f0", "sighting_of_ref": "indicator--ee2411f0-497e-4d54-9558-0e07a22939db", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd128094-d0e3-4240-a7af-0f62ac27aeda", "sighting_of_ref": "indicator--ee2411f0-497e-4d54-9558-0e07a22939db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728118f6-5e2a-454b-ab1c-047b3f4e463d", "sighting_of_ref": "indicator--682d6072-2f8f-4ba6-b071-da119f618427", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3beeb7-4d39-44f2-8136-0113ab456929", "sighting_of_ref": "indicator--dd0a3fcd-e05e-4af1-b2c7-aa4e7abacab5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10feba2a-286d-42de-90a6-1b32f96024d9", "sighting_of_ref": "indicator--d2d2cbd9-1e65-4c41-84fe-a34ae9bf9ad9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84525ee1-5509-4671-8d06-3020e0cd69e9", "sighting_of_ref": "indicator--d2d2cbd9-1e65-4c41-84fe-a34ae9bf9ad9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb9118a-ba02-4665-a5e2-3118bd94d090", "sighting_of_ref": "indicator--c2bcbc90-f3ae-417e-be9d-73b8d4be239b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d493b69-f8e5-4a59-9dfc-aa0411c2e78b", "sighting_of_ref": "indicator--c2bcbc90-f3ae-417e-be9d-73b8d4be239b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e4a789-71c2-4d1c-8f14-7ed3a0878e42", "sighting_of_ref": "indicator--c2bcbc90-f3ae-417e-be9d-73b8d4be239b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24528351-e9cc-4fd7-9dce-cd26e8386e54", "sighting_of_ref": "indicator--fd59848a-4e4b-4276-80ea-e786aeb60a2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0af6c6f-918d-4110-9d0f-18cdc4eb8561", "sighting_of_ref": "indicator--a37bda89-3aa3-463d-a6d7-8e08fcdbb2e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210dda05-bc49-4a11-950e-83f2395de775", "sighting_of_ref": "indicator--a37bda89-3aa3-463d-a6d7-8e08fcdbb2e7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4125b04e-314a-4622-bef4-25ed41d7bea7", "sighting_of_ref": "indicator--ef3818e8-a665-4ba0-ad73-fb3e6a3e98c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d83723-43d5-41dd-8e4d-d38e50e941e7", "sighting_of_ref": "indicator--ef3818e8-a665-4ba0-ad73-fb3e6a3e98c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a513bc9-fee7-4db9-93c9-90f8a19df2b3", "sighting_of_ref": "indicator--ef3818e8-a665-4ba0-ad73-fb3e6a3e98c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7595847-5215-4309-9f3d-8e26c40a8077", "sighting_of_ref": "indicator--e27d8e20-6dc6-4d96-b8d0-4ac243e2f5c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09faca97-da77-4205-8ecd-b7c275dd16e3", "sighting_of_ref": "indicator--fa2036e9-2534-49ef-a53d-6ed58999a4a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed3ca65-4995-437e-9438-66b9c57fd6bb", "sighting_of_ref": "indicator--8df22059-d18d-41cd-b546-2973e4262c23", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0f59ec-26d5-40a5-a3a6-566be578d5c9", "sighting_of_ref": "indicator--44331986-bda6-47cf-9ded-0c9e8a87ab39", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94f3052-8cb4-4fef-8fd4-a9db97fc4d4e", "sighting_of_ref": "indicator--a36d4c73-e5a5-44f8-a8e8-7fd5aec7ff56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4cd4cc-63d8-444b-bbda-ca2498f509f0", "sighting_of_ref": "indicator--902fbb7d-238e-4020-b69e-8279fd27a561", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f72fdf8-877b-4927-b912-c3b8b41df8dd", "sighting_of_ref": "indicator--a15f1c6f-5fd7-4c89-9bb1-0798b862d694", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bec3124-f45c-4ce0-810c-63db4356871e", "sighting_of_ref": "indicator--a15f1c6f-5fd7-4c89-9bb1-0798b862d694", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370bfd9d-d303-4f0e-b040-f4801314b9b7", "sighting_of_ref": "indicator--a15f1c6f-5fd7-4c89-9bb1-0798b862d694", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3436537d-4106-4c3f-a3c0-3d8bf083b959", "sighting_of_ref": "indicator--bdfb6d69-c237-4208-85bf-34a0b2851820", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9990ce2-5d61-45f1-9f4e-c55e17656da0", "sighting_of_ref": "indicator--bdfb6d69-c237-4208-85bf-34a0b2851820", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347e89cb-c032-4de1-b82f-64931b216016", "sighting_of_ref": "indicator--bdfb6d69-c237-4208-85bf-34a0b2851820", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef119fb-8354-4109-ae72-7895a2b23ccf", "sighting_of_ref": "indicator--3d5bc592-e0a0-4f33-870b-eca8c00b1ed7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb37437-2b72-47e2-8882-1cde57ac413d", "sighting_of_ref": "indicator--6027d684-8b1a-420d-89df-989519255c68", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9756b560-33b4-4d68-97fd-0fa520715061", "sighting_of_ref": "indicator--fb37c9cd-ff67-41b5-a187-5752b3b23996", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec12591-6709-467d-9180-37a5354271d8", "sighting_of_ref": "indicator--42487d47-6bc6-4308-95b3-3fa5ba5b65eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3029eee2-c76d-4e63-b20a-5c66fa1764ea", "sighting_of_ref": "indicator--42487d47-6bc6-4308-95b3-3fa5ba5b65eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440a73c0-8a1a-47dd-9a80-b6be8559f416", "sighting_of_ref": "indicator--a0c0130a-8dd8-4948-baa4-56a0365c21d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99323799-0e2a-4dfa-9b18-b445e4eeb1ea", "sighting_of_ref": "indicator--35c3cdba-9789-4e3a-8263-e7810f418f24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cd84fb-8222-4c76-9ce1-fef80c640659", "sighting_of_ref": "indicator--3677e9f0-0787-4c08-971d-38252663c8c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b38711e-02aa-4c00-9df0-6d8af8da6abd", "sighting_of_ref": "indicator--3677e9f0-0787-4c08-971d-38252663c8c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa717ef-65f2-4361-8506-48a0e97972e6", "sighting_of_ref": "indicator--3677e9f0-0787-4c08-971d-38252663c8c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afb1dd9-0fd2-4044-9b9b-627595caccb2", "sighting_of_ref": "indicator--8ff044d6-a76e-46f5-bf1a-e1b4235b7dfe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766bed46-9aba-4aa5-9154-7e8570372a39", "sighting_of_ref": "indicator--3b01a0e0-db9d-4fff-927f-48ebdf9afae4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9451bba5-6ed1-48f8-bdf3-a69c4c2d1436", "sighting_of_ref": "indicator--0404308c-d258-4aa7-9d1a-6723eff22dad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789800a9-8fbc-47fd-a66a-e7e36dd3c790", "sighting_of_ref": "indicator--8ee5aca9-5eca-4797-ae4b-bb8955fce75c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7510f7b9-7372-44c4-84a2-a171ffe9367a", "sighting_of_ref": "indicator--6c59543b-5c36-4238-bb83-2546b5cf415b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8906403-8fe4-43a5-bffc-f0db358bfeef", "sighting_of_ref": "indicator--0aa66a1c-23da-49fd-9e51-17adbf9f6ec3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfa5405-76b5-4fc3-a437-2af5e80dcbfd", "sighting_of_ref": "indicator--a647c115-8f77-497f-8fc8-c132af079983", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08f5ba6-6220-44cd-9267-c31c2cac07da", "sighting_of_ref": "indicator--a647c115-8f77-497f-8fc8-c132af079983", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd4c26c-88ab-43be-af81-0e1a4f5039b9", "sighting_of_ref": "indicator--ba94e7db-37e8-4789-b746-c3a69accbd07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baa0cdc-7658-4631-9ed2-bd306ed636ce", "sighting_of_ref": "indicator--d74c68f7-3a8c-4081-b1d2-ca9337d33bdf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b686e3d-3e44-4ff8-86b5-ae3b2d1cc7ea", "sighting_of_ref": "indicator--1069cf5a-912b-43f5-b0ee-383adfe4c03f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baeb9c73-7310-4d0e-9dea-a0ba5831b5b1", "sighting_of_ref": "indicator--f280ca01-f66e-467f-91d6-eb17faea98bf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6721109-6432-402a-99d1-f50c75da21c2", "sighting_of_ref": "indicator--f280ca01-f66e-467f-91d6-eb17faea98bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7332a2a1-572a-41a3-a26e-dc80b9d5a6da", "sighting_of_ref": "indicator--920c89a9-67fa-46ae-9048-2393d0cacea5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d0747c-124d-456c-ae4f-1030342d2278", "sighting_of_ref": "indicator--920c89a9-67fa-46ae-9048-2393d0cacea5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9ac234-6162-4b3e-97b8-455e79919309", "sighting_of_ref": "indicator--920c89a9-67fa-46ae-9048-2393d0cacea5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d564f6-f737-4c19-bd24-09495be31972", "sighting_of_ref": "indicator--5788a8b6-9b0c-4878-adf3-ba0fa098720b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc7020d-9cb7-4ae6-8f60-fcb504b8b669", "sighting_of_ref": "indicator--dfc08485-8d8f-4979-807d-0d401ee18fc2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c49badc7-d39b-4a9b-aef3-1c9780908499", "sighting_of_ref": "indicator--dfc08485-8d8f-4979-807d-0d401ee18fc2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b0a937-2b2a-44c1-8c1c-ad1654918fa6", "sighting_of_ref": "indicator--32dde012-3f13-4163-a4fc-184e9b3577b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7193f4b1-b9ee-4f76-9d87-b51a71736e14", "sighting_of_ref": "indicator--26d0c9df-1703-4aa9-bc2b-87f8b3e26911", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a6c32-395d-46f4-b097-da0f6d2ccad2", "sighting_of_ref": "indicator--26d0c9df-1703-4aa9-bc2b-87f8b3e26911", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbc6812-8632-4fe6-8fd0-912f922d1bab", "sighting_of_ref": "indicator--26d0c9df-1703-4aa9-bc2b-87f8b3e26911", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19a2d0f-9b99-4101-83fe-122a7a170bd2", "sighting_of_ref": "indicator--0362b8c6-ff7f-4553-98ff-0b3500b4af24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a431ea-e723-45c5-99fe-0bec46653b2f", "sighting_of_ref": "indicator--0362b8c6-ff7f-4553-98ff-0b3500b4af24", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b5b2aa-f0d5-4270-bbe0-43b62aa27e45", "sighting_of_ref": "indicator--0362b8c6-ff7f-4553-98ff-0b3500b4af24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b39180-046e-4a3f-a115-c65dba37935f", "sighting_of_ref": "indicator--0e983af4-a06e-4f11-88c1-0eea68b77baf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854cf33b-fb3f-4505-bf0d-7c7e340e8730", "sighting_of_ref": "indicator--0e983af4-a06e-4f11-88c1-0eea68b77baf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1cdbbd-353d-4b45-bef0-ec55d12fe1a3", "sighting_of_ref": "indicator--0e983af4-a06e-4f11-88c1-0eea68b77baf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e6577b-2410-47c6-b4e1-431a4d6cd969", "sighting_of_ref": "indicator--5e89776c-8323-48dc-9f92-5a5c07de4287", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b646be80-2370-47db-a50b-c3ac8370ed03", "sighting_of_ref": "indicator--b157a44b-6dfb-4ce1-b02b-563e1d6ce431", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a0e82e-ce6f-46e6-a99e-f84d898b50d8", "sighting_of_ref": "indicator--b157a44b-6dfb-4ce1-b02b-563e1d6ce431", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1244c8ff-b393-4a57-b085-9d1f7e057268", "sighting_of_ref": "indicator--b157a44b-6dfb-4ce1-b02b-563e1d6ce431", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf4b180-ea6c-4e32-b396-c17d423b4b75", "sighting_of_ref": "indicator--661c527c-7031-4206-9231-3f0515b0255f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193829cb-9ac5-43f4-8f0d-105d0f9f954a", "sighting_of_ref": "indicator--661c527c-7031-4206-9231-3f0515b0255f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c814b17a-2de7-4ba8-a4d8-d20e2ed7d9fe", "sighting_of_ref": "indicator--123a9997-7882-4d9d-b0ec-6e99e7e50823", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe941094-7a80-431f-84c7-5319b1dc23d0", "sighting_of_ref": "indicator--123a9997-7882-4d9d-b0ec-6e99e7e50823", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fac9336-e8d0-4b85-81ff-90ea2b95124b", "sighting_of_ref": "indicator--f1b2b40e-5123-4715-b2d3-7442a609cb59", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f2e97c-9f74-4e40-9129-a1ff8deb23ca", "sighting_of_ref": "indicator--fe31fc57-ffc6-4255-90f4-f81695489ade", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8309bbd9-11bf-4954-89fa-e3f6ca424d9e", "sighting_of_ref": "indicator--72ae0a5a-f7f0-4e40-9222-b58b55f5ef86", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f611a52-6945-4035-8e32-c92683028947", "sighting_of_ref": "indicator--ee2013ce-fe02-4172-8f24-e0dc1434c75a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4419d9dc-4162-46a4-93b5-d6572e264881", "sighting_of_ref": "indicator--eb9f56a5-9d3f-4908-8a9f-cadc8740a553", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bc7b92-0d7f-40fa-b9e5-4ae00b4f58fc", "sighting_of_ref": "indicator--2b3b81da-eec7-4f54-8954-e89ed5ce79d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124531d2-9c34-455b-a360-52f23033e25f", "sighting_of_ref": "indicator--00343518-2521-4e06-baf7-6462dd7d04b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422d556a-c404-4440-8c3d-2d1e28b7ede8", "sighting_of_ref": "indicator--569e64df-afbf-4de3-bde3-dbdeea509be7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ef7989-5c59-455f-82bb-c09beceff648", "sighting_of_ref": "indicator--569e64df-afbf-4de3-bde3-dbdeea509be7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ad8d0a-459a-44db-ad40-d6c280662fc4", "sighting_of_ref": "indicator--569e64df-afbf-4de3-bde3-dbdeea509be7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599a43bc-3760-41c7-9e0c-d3ca89fcf517", "sighting_of_ref": "indicator--9c83427a-3dfb-4777-ba76-d1fdcc1bd595", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9c9585-9bc9-4a90-b5fa-9bf12d95237a", "sighting_of_ref": "indicator--a20ad5c5-1ba5-49a3-bddb-8748da6a870b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366990ed-022a-4f6d-87e7-c578ba8da584", "sighting_of_ref": "indicator--cd729536-e13c-49a5-b5eb-e68acb835a2a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f120659-08e9-4284-9f88-3801508a57f6", "sighting_of_ref": "indicator--cd729536-e13c-49a5-b5eb-e68acb835a2a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3a71f3-fce3-4849-9c28-f8ffc671c0f1", "sighting_of_ref": "indicator--66945598-1dac-4eae-a80f-c175f145cf2b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0537553c-639c-4cbc-a65e-94a50bc375c7", "sighting_of_ref": "indicator--66945598-1dac-4eae-a80f-c175f145cf2b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad11659f-6fba-4f80-b376-1d66e773145e", "sighting_of_ref": "indicator--9898a518-1976-498b-a3e5-2ab722991408", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8131389-e557-45db-8fbd-2dc738724b99", "sighting_of_ref": "indicator--c6bf41bc-2a3b-4ddd-b071-70b3140f5548", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588788ed-2bab-4c3b-bfce-0220c15bfaef", "sighting_of_ref": "indicator--64aaabad-163c-4c62-b125-b61012a9f93d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e4286c-c93c-40ef-8624-542043c9217f", "sighting_of_ref": "indicator--64aaabad-163c-4c62-b125-b61012a9f93d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06f4562-5671-4cf8-a0a8-f8cf0ba1b76d", "sighting_of_ref": "indicator--02d9bcac-07b2-4e75-b227-9f2c1328db75", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd87197e-9b27-42e7-8e02-f4f2a0638e1f", "sighting_of_ref": "indicator--02d9bcac-07b2-4e75-b227-9f2c1328db75", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947d1326-5042-4b54-acb5-f82a18aaf253", "sighting_of_ref": "indicator--65efa9f1-dbca-40fe-8e5d-e8bde1c62b7d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02b9f4c-2598-40eb-870b-05295a19bba1", "sighting_of_ref": "indicator--65efa9f1-dbca-40fe-8e5d-e8bde1c62b7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3668374c-50a5-40a3-8308-35ee3e21ed64", "sighting_of_ref": "indicator--63bafcdf-0ec0-47c2-bda5-a1c58f7ca505", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c240105c-5396-48c2-86bd-298b818c89dc", "sighting_of_ref": "indicator--852ceb6a-a744-4c03-97bb-159f1f38aae2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6972ffb0-1a13-45eb-b5dc-82ec3258f08f", "sighting_of_ref": "indicator--444539e5-1620-44fd-a46a-fb4d0fe016b9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd40cdc-4eb0-4a8c-a33f-7e21ca50aa5c", "sighting_of_ref": "indicator--514db419-c1e4-4901-8e42-aa852240df06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e25dd0-4940-4d15-a7e7-00640a9bc8fd", "sighting_of_ref": "indicator--514db419-c1e4-4901-8e42-aa852240df06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a03b931-d894-4d77-b3d7-4bf58dc5f314", "sighting_of_ref": "indicator--514db419-c1e4-4901-8e42-aa852240df06", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef5271c-006c-4b5c-a00e-b6c323dd3cdf", "sighting_of_ref": "indicator--ed8de540-bd3d-4432-b332-a0489d209501", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c66b14-28de-40c3-a7a3-0dc80b3a4ce9", "sighting_of_ref": "indicator--ed8de540-bd3d-4432-b332-a0489d209501", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c037bc-b06c-4e69-9384-6b100cc0ebf7", "sighting_of_ref": "indicator--1829f882-0a71-4be8-8f3a-97fe79e3b963", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3c9104-3cd8-4953-8537-83b7d50070f2", "sighting_of_ref": "indicator--60f555c1-4285-4803-a301-407a1e10c334", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e441ab1b-2015-440f-b269-054308777d70", "sighting_of_ref": "indicator--e8992e32-a46c-4ae9-bb47-e9a05d30d51e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a729d3-0af2-47e4-91d3-371751980201", "sighting_of_ref": "indicator--91aecc6c-dd77-4628-8e7e-a7c9dbf17951", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9707c8-ff59-45ed-b3cb-e7c1d9198e93", "sighting_of_ref": "indicator--91aecc6c-dd77-4628-8e7e-a7c9dbf17951", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd11bae7-da68-4b44-b84c-ba3c063c6af4", "sighting_of_ref": "indicator--2e7c8533-5147-47a9-86f1-402341016e24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d4e219-5f72-4b34-b61e-232f0626d4a4", "sighting_of_ref": "indicator--2e7c8533-5147-47a9-86f1-402341016e24", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a791e4-8cf7-4a96-bc5f-81c94599f976", "sighting_of_ref": "indicator--4be94ed5-67d0-4b77-83d0-cfccc2aba293", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7eefbc6-8331-4216-be8e-8adf5342c7da", "sighting_of_ref": "indicator--64e5c510-24f8-4863-996e-208a08d7c2ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eed6655-ef54-4a51-a8bf-a0490cc6f277", "sighting_of_ref": "indicator--a52c48a2-25bb-44dc-b8b5-4b4cebcd6f99", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392d4316-a758-47da-955d-ea8d9d06f289", "sighting_of_ref": "indicator--a52c48a2-25bb-44dc-b8b5-4b4cebcd6f99", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057a9c5b-4a74-4286-a7b2-49a6e09846a0", "sighting_of_ref": "indicator--5cdc2de9-5089-4071-83dc-201abc061bf6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50797441-3533-40cd-bd34-4a0b64bc599d", "sighting_of_ref": "indicator--682d7ce1-8475-45d1-8ed3-af6f0933a280", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbefbab-3f63-48cb-adfe-6135ccda3877", "sighting_of_ref": "indicator--682d7ce1-8475-45d1-8ed3-af6f0933a280", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0b484e-94dc-4955-91aa-b6921f986228", "sighting_of_ref": "indicator--a2cffc17-0722-4281-82a9-dbfe01d30b36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47f57db-68dc-41dc-adfd-7d22521e8d2c", "sighting_of_ref": "indicator--a2cffc17-0722-4281-82a9-dbfe01d30b36", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da7160d-95af-4c29-b262-2dbea9ee166d", "sighting_of_ref": "indicator--79365733-4517-4713-a0f3-26c609948860", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012fdf0d-39ca-466b-8138-649b66863b9c", "sighting_of_ref": "indicator--9adaddeb-fbdb-43c1-bad7-8d9f814c7705", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a03e595-500d-4fd0-8a35-7aaf5ec6b66e", "sighting_of_ref": "indicator--18bc60b6-6025-4f71-82fb-b4c9f8684541", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117b3069-7b39-4af0-ba91-6390db90340b", "sighting_of_ref": "indicator--e2d6b9a1-a23e-4abd-bf5b-344f21ac4060", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c054f578-b0b9-4219-8686-c4c3b88aae15", "sighting_of_ref": "indicator--f207d2af-c723-4286-be6a-2d336ef6ca1b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9761d9-4a2e-4ee8-b452-71aeabeb3ca9", "sighting_of_ref": "indicator--f207d2af-c723-4286-be6a-2d336ef6ca1b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a815320-6555-4de9-bd6c-d42123b3a3e4", "sighting_of_ref": "indicator--4f3d8b5b-f91d-4768-8aae-8ebaf5174acd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6ebf01-f81d-46a4-a305-c2d5c6f77a6e", "sighting_of_ref": "indicator--4f3d8b5b-f91d-4768-8aae-8ebaf5174acd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b915ed-6b75-4c79-9c8d-0e55a6abce01", "sighting_of_ref": "indicator--d0eec86e-0b24-4078-a106-859dcbb056d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38f6089-5e53-42d9-b288-2f32d3637ea8", "sighting_of_ref": "indicator--d0eec86e-0b24-4078-a106-859dcbb056d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e699fd8-f7d0-415d-943f-55c144174442", "sighting_of_ref": "indicator--04ec5147-312c-4776-9749-4e870c7293e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe553ae-0aee-4ae2-bc79-4e7a73dc3743", "sighting_of_ref": "indicator--f8e51bcb-d65c-4d20-bdd7-a511a39596b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c229b7-7027-4533-8f65-ceba9c1f6cb5", "sighting_of_ref": "indicator--f8e51bcb-d65c-4d20-bdd7-a511a39596b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed46656e-2087-4ad3-b566-70eb6672d3f9", "sighting_of_ref": "indicator--b4b345a2-ee75-4a85-b6dc-97560fd9c16f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb6f144-9d3e-45a0-9999-6c82da0ecf64", "sighting_of_ref": "indicator--b4b345a2-ee75-4a85-b6dc-97560fd9c16f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ae59b1-034e-4983-a846-da1cecd662f4", "sighting_of_ref": "indicator--bd8c0e73-3c31-45d1-bced-523de34e38ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0167fdd5-229c-41c5-953f-811f1916ed57", "sighting_of_ref": "indicator--2bd7789f-0ccf-4dc3-905f-eded9a76fbe4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b7e247-5644-44ba-9738-abfa9e5b8fe2", "sighting_of_ref": "indicator--f1864c5e-2c0a-4981-80e5-2788ba3b5a53", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4dcb06-63e3-487f-af7d-b4d391aef4ce", "sighting_of_ref": "indicator--b5cb0c2c-2199-436e-900e-f4dbee0f175d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b14ab9f-9572-4391-9344-9a6dffe7fc6d", "sighting_of_ref": "indicator--b5cb0c2c-2199-436e-900e-f4dbee0f175d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f76851-a71f-4b97-bfa5-b9e4452a424d", "sighting_of_ref": "indicator--2494cd3a-fd33-4c1b-a3ab-4684113ae9ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235be004-0bdc-40e2-9e77-64338b053e9a", "sighting_of_ref": "indicator--2494cd3a-fd33-4c1b-a3ab-4684113ae9ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137caaa8-fb76-4bdb-bdf8-4aab65784631", "sighting_of_ref": "indicator--af5280f4-f324-4200-8a45-dc66322d9206", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d90438-f05b-4294-a31b-b3cdf3f19c42", "sighting_of_ref": "indicator--94724f39-683c-4af4-bbac-959df2d38e2a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6663c80-52f8-4b2d-887a-f04ecfd96ac6", "sighting_of_ref": "indicator--94724f39-683c-4af4-bbac-959df2d38e2a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc07cc4-b915-4ab7-b289-44034b6ce4a9", "sighting_of_ref": "indicator--40ff258b-0344-46fa-8da2-2669ce5bd057", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3724f9b-832a-4dbb-af05-0bfdf50c8bdd", "sighting_of_ref": "indicator--5bf23e9e-567e-4829-99d6-e4626eea5593", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e889ae2-c27e-4a8f-a539-76538aa91d5f", "sighting_of_ref": "indicator--66817fde-4b0a-4753-9426-225070b70573", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a06209-231c-4f9b-af8d-e3c74ceedbab", "sighting_of_ref": "indicator--66817fde-4b0a-4753-9426-225070b70573", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44b3bb8-72dd-415e-bab4-0370038dd889", "sighting_of_ref": "indicator--e5a34ac1-ac86-4123-923f-6c6aad046763", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d940ac-61a5-4c86-84b9-d4a7be7f2989", "sighting_of_ref": "indicator--213a466d-e179-4ec3-a655-4e4ae3b8b744", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f429abe0-9474-4098-a65d-040a539d6477", "sighting_of_ref": "indicator--55eccdba-c148-432e-b6d5-4365b83a54e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758608e0-03c5-4758-a3c7-1e38df7f03a5", "sighting_of_ref": "indicator--24887a13-16f5-4442-b005-8a06764201d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8e344a-029b-4679-805b-00282fae0dc2", "sighting_of_ref": "indicator--a303865a-ca78-4b16-bd90-c7033b121ddc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513298a7-c45c-4f76-8a27-eaf9d0f5747f", "sighting_of_ref": "indicator--392386ed-21bb-4ed8-bfd4-6b3e161b5cc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73aec514-26da-4e96-9dda-36af9d86b45a", "sighting_of_ref": "indicator--ba00f907-7de1-4401-8493-9d4e898259a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7be3e32-2598-4e7e-96c2-bc0cefe7d1c8", "sighting_of_ref": "indicator--5f7f494d-89da-4651-a1a0-3f725650de61", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbba8a74-1776-4c93-b953-970c210da426", "sighting_of_ref": "indicator--1e28ffca-3ab2-4bd0-bd8f-94a9f5452001", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35068222-75d0-4e0b-bc04-c16817428205", "sighting_of_ref": "indicator--1e28ffca-3ab2-4bd0-bd8f-94a9f5452001", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7ae936-b87d-4c6e-9c5f-6c3b883356b5", "sighting_of_ref": "indicator--f93f1a95-1922-4b49-9687-5ebaab86556d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98f3160-62f4-485d-9248-dd0ce60895ef", "sighting_of_ref": "indicator--1be7fa6d-2e7b-4fd0-87b1-011563283064", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7079fb2-5cda-4241-ac59-716bb20f1435", "sighting_of_ref": "indicator--1c9822a1-0e68-4ad3-aed5-0bcb7ad62135", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d1003d-2dee-4f25-8f32-4449cfac9f40", "sighting_of_ref": "indicator--8e468f1d-0b91-4d62-b831-89377d44eaed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f671cbfc-a2ca-4be9-8e4d-c85a2bd8700c", "sighting_of_ref": "indicator--a537639f-33c8-40e7-9ffa-b8ed5da40a30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facdbcc2-791b-43f4-b626-6b6a3b36a1c2", "sighting_of_ref": "indicator--a26acc08-798d-4be7-85c1-3cb8d208c2b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91586d4-3b6c-42fa-bcaf-e9da7cfe97fc", "sighting_of_ref": "indicator--fa9dbc17-9ced-48ce-ace1-b4a558067500", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73a6bd3-72e0-4a27-bcd1-90c9201759f6", "sighting_of_ref": "indicator--16063790-b79b-4437-b77c-955dadce2033", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0216d8-79f1-485a-8c2e-5ae6ef4e27fa", "sighting_of_ref": "indicator--91ed5e52-dcee-403f-8f07-f969b4b603d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2dfb28-402f-4841-ae14-dfa606908045", "sighting_of_ref": "indicator--724bba88-8741-479b-9da6-2d02e651692d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a10948f-917a-4e86-bd2f-e067202b33ee", "sighting_of_ref": "indicator--479cb47c-b16d-467c-aa89-76fd12e143dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f39100-99c5-4be2-90d1-1215d1e4e18a", "sighting_of_ref": "indicator--479cb47c-b16d-467c-aa89-76fd12e143dc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d120eccb-1658-496f-b110-86ac984f3eaf", "sighting_of_ref": "indicator--d8810ee8-534d-4fdf-95a4-884bb3580a76", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce8118a-9205-4ee6-b372-2b0d3b6918c4", "sighting_of_ref": "indicator--cca39c22-4b3e-47e7-8fa7-18a2534ca7b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce819f63-238a-4cbd-8357-944f33f08d4d", "sighting_of_ref": "indicator--06dc15de-614a-44d1-ac65-e6de211e9717", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e9316c-344b-49f9-a415-d1a0a21eef82", "sighting_of_ref": "indicator--60b63064-d41c-4fb2-b42f-01c82f76299d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5835f7e4-53ae-4835-8132-13b54aff5321", "sighting_of_ref": "indicator--fe003dd4-de6a-47fc-9a1f-767c9cfcbaf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e935311-16b3-4ff7-8c8d-04e4a35d974f", "sighting_of_ref": "indicator--8e8786bb-a3a9-4e0a-bc17-304f44d4670d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1347d2d9-7697-4394-b3ce-55d6b634f7e2", "sighting_of_ref": "indicator--2188bd2f-6ece-4979-8c23-09b9950dac8e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b1f114-13ce-4615-8d9b-bd0fef1bb248", "sighting_of_ref": "indicator--0753124f-ec5c-48f8-93e1-3c6f7654167a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b2cd10-3ba9-48aa-8eab-be364d45b73a", "sighting_of_ref": "indicator--772f8347-a4ba-458a-9230-066f37f44273", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4402c192-381b-440f-9d24-4b4b042ecb0c", "sighting_of_ref": "indicator--d001e373-9768-4313-bb5a-813aa7967938", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4532fb-4983-45de-8aad-05456cf34fed", "sighting_of_ref": "indicator--d001e373-9768-4313-bb5a-813aa7967938", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94d8e56-e261-45dc-8d90-cd7b8d5bb104", "sighting_of_ref": "indicator--9b5a433e-ad82-4fd5-85fd-b076680797a1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170e8d3f-0d6c-46aa-9282-ca135705b79a", "sighting_of_ref": "indicator--c0492a10-ba49-4be8-8864-4d48929457d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0854cf-45bb-4c81-b19c-6267472b657a", "sighting_of_ref": "indicator--c0492a10-ba49-4be8-8864-4d48929457d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdbb059-00a4-4afc-9900-07aba2f564a4", "sighting_of_ref": "indicator--14a03908-1c51-45a2-bb0a-9337b5b6fa25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a8534e-c351-4162-9829-f7b8c2d8affc", "sighting_of_ref": "indicator--8ff7b8ff-9546-4cab-bccd-3bcec6d84f79", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dd981b-493f-4814-b4fe-62a63854edf5", "sighting_of_ref": "indicator--ac5b1ec6-5ff6-4176-acea-b829a4160ee9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38d9e59-abbd-4e1b-9918-3e834be8ad24", "sighting_of_ref": "indicator--a50cc53f-2879-47b1-8412-be7a4c9823e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b1d945-8acd-428d-881f-46ce862eedac", "sighting_of_ref": "indicator--ee758989-0828-4258-8883-2595660c618b", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c82219f-1831-4b10-849a-51fe35800dc3", "sighting_of_ref": "indicator--4cd2880b-a334-4203-83f2-a1beaed4c529", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b28444d-88c6-429b-bf78-65a4a75ec690", "sighting_of_ref": "indicator--b9db68c0-da99-4f85-b423-568099328544", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92331c2e-253c-468f-9827-7105fefef3b1", "sighting_of_ref": "indicator--b9db68c0-da99-4f85-b423-568099328544", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2843ab35-88c8-4a2c-96ef-7d7fc7767a34", "sighting_of_ref": "indicator--ca6e3903-ea63-427d-afb5-eff5df88ffd0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb18123-1dbe-4a43-b896-36757749f21d", "sighting_of_ref": "indicator--cf2ae2a8-1834-4045-975e-09a07b571fb7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a421287-a078-4787-aecc-5444e42ca270", "sighting_of_ref": "indicator--cf2ae2a8-1834-4045-975e-09a07b571fb7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6cf762-d0a0-4128-b7d5-5dd97cb78d66", "sighting_of_ref": "indicator--35ec14b3-c97c-4fec-9dc4-d86a11223678", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e63d940-d65d-4dfa-a1e5-a41df4d546e9", "sighting_of_ref": "indicator--35ec14b3-c97c-4fec-9dc4-d86a11223678", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1afbe76-3ba3-4748-8419-9768817c862e", "sighting_of_ref": "indicator--d56f346a-8625-44d6-a44c-0e5df851e088", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f559ea-593d-4d21-9352-8882c60ce957", "sighting_of_ref": "indicator--d56f346a-8625-44d6-a44c-0e5df851e088", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd3905d-f22d-43c4-8508-e9b5fc76e621", "sighting_of_ref": "indicator--4aa4a53f-a273-42ad-8b20-1c17d020f20e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3b721c-ec39-4e0b-9a23-1a8765b38aec", "sighting_of_ref": "indicator--4aa4a53f-a273-42ad-8b20-1c17d020f20e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f375b8aa-84b2-42a0-9c92-8d2f365f90fe", "sighting_of_ref": "indicator--500b8be5-ff31-4f27-b91f-b8cecbd19b4f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ffefd0-fbd0-492f-9450-39b6016afe4e", "sighting_of_ref": "indicator--694e2bcc-640f-40c7-99ce-966574d47b0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248aa71f-00d8-4326-bb60-a072959c8a7f", "sighting_of_ref": "indicator--694e2bcc-640f-40c7-99ce-966574d47b0a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513a4572-8200-496b-9206-6f707fc3332b", "sighting_of_ref": "indicator--36e8df22-97a7-44cc-b73b-9f38607c4861", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd0f299-3563-45e2-8deb-7229814cd879", "sighting_of_ref": "indicator--48b33ee2-f8c1-4bc6-a43b-a5b99643e0aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f8c914-fd0d-4a7d-bf2a-9ccbcb0b9d72", "sighting_of_ref": "indicator--1c4c84f2-4a2f-458e-92f5-be0207cb9648", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa8d31c-8b24-4b3b-8cfb-efae893595f2", "sighting_of_ref": "indicator--f4133c5d-208d-4b9c-87f0-792e82450a69", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36789235-4c1b-480c-ac4d-47bbb139465e", "sighting_of_ref": "indicator--f4133c5d-208d-4b9c-87f0-792e82450a69", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9967069e-35bb-4b47-955d-caf1f652eca9", "sighting_of_ref": "indicator--389f8466-53bb-4054-968a-b55583e3aaef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326fcb90-9dd6-4b9b-9eec-d3d7618d0a30", "sighting_of_ref": "indicator--c836e5ab-4f45-4f0e-8dd4-e1173930de18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c901b2-0cba-422e-b6dc-4775a142ca6b", "sighting_of_ref": "indicator--5f3cb560-80e7-41fe-91dc-6a3fd0aa9105", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb3d669-a391-4881-baa9-20621e4e3223", "sighting_of_ref": "indicator--6ef07273-d1c7-4714-8386-20b105abfaa4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515cee9b-512f-4795-8072-c6a0f3260755", "sighting_of_ref": "indicator--9d4f5809-9a46-40a9-9e01-2a93dde0cd41", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365ae678-b2f7-40de-9bc7-3de7178b73e2", "sighting_of_ref": "indicator--13eec53e-9ed8-4a12-b50e-fccd019eeed8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9133a1-1923-4e81-bfd5-b007b431acc7", "sighting_of_ref": "indicator--4fdfbcbc-6cc1-413c-a459-00c6cd53cc9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bde4cce-62f4-4bda-aa12-dd22b1777089", "sighting_of_ref": "indicator--680510af-de9d-448f-904f-8580b134321f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cf8da6-e036-4c63-a36f-51c09d794ca3", "sighting_of_ref": "indicator--5e0215d0-3a10-47a7-a18e-fd64c2051729", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf539ea-96e6-4207-9a7c-7b8579b23f3a", "sighting_of_ref": "indicator--4fd2f1fa-104a-451a-b4ae-6880bbe68b1d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fcb50a-1553-4d24-a3ce-a16129f09e4a", "sighting_of_ref": "indicator--61b4d9ba-a4df-4cf1-951d-1613f3083c4f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6d1caa-5ad4-4961-b6b7-1d434831f859", "sighting_of_ref": "indicator--61b4d9ba-a4df-4cf1-951d-1613f3083c4f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd7aa99-0a28-4a02-a37b-4c6623e94982", "sighting_of_ref": "indicator--3c4f0173-0d10-47a2-ba19-72d4d9cbeff1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937daf58-0e23-487f-adaf-202a41ea2496", "sighting_of_ref": "indicator--ff5d26bb-24d5-4132-a114-62590fa2b890", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c07896-036c-463b-8b89-5d956265ea6e", "sighting_of_ref": "indicator--6c82c44d-9b63-4d74-ac69-bc7657a20dc8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50011b9-ebdb-4412-9187-48f1a5f8f844", "sighting_of_ref": "indicator--1abdd8aa-335d-4f28-b559-df59f006c4b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb141dd3-8435-40db-bb32-5b84631840bf", "sighting_of_ref": "indicator--4f1a6825-a9dd-4bdb-93e2-99efd205bbf5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd160a18-2f6e-4fee-b38d-6fb6fc08259c", "sighting_of_ref": "indicator--4f1a6825-a9dd-4bdb-93e2-99efd205bbf5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73caad90-46e4-4c23-a847-5e2a5787adda", "sighting_of_ref": "indicator--c61a6733-aebc-4dae-8b83-81ae58533563", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b456ca8e-0a9c-46a0-8ec3-03c72fe6f1df", "sighting_of_ref": "indicator--f736dca9-b6ae-4984-8c41-7c870fc4dca4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5593b88a-05b2-49d5-af80-6df9ac462de7", "sighting_of_ref": "indicator--2b2a59d6-d1e8-43af-a7e3-f09da5cdafd6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1268d18d-c8f1-4d0d-9a4f-9902d7355807", "sighting_of_ref": "indicator--fe26cc82-2f8f-4e0f-9e50-7c7c9804e44c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf36bfc-d726-4dfb-a5db-b519d66a29fb", "sighting_of_ref": "indicator--2b9ac3e9-29f6-4589-a19f-327c1036d473", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2ad939-f141-4bad-8197-ff72f32f1489", "sighting_of_ref": "indicator--2b9ac3e9-29f6-4589-a19f-327c1036d473", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5533c4-4092-4c96-8548-3f0e99a62e0b", "sighting_of_ref": "indicator--3fbd5a17-d9bd-4d72-ad1a-e19b63736a27", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b813eb22-5370-4807-b956-7d88b5bb1ed2", "sighting_of_ref": "indicator--a97ea757-cccb-41b2-847a-d83decadd29d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a14049-af04-417d-84ba-e0bbf21cfae8", "sighting_of_ref": "indicator--bfda56fc-280e-4c2b-89c5-828c8a0eeb7f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62307f5b-da23-408a-9527-6ef9644a790a", "sighting_of_ref": "indicator--340c9be3-cf38-4c9c-bfb6-88c5a95497b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbace63-e0f8-4312-be8f-002ebe012701", "sighting_of_ref": "indicator--52af35a2-6af8-4b3a-b7ef-3883a3766e88", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda811e6-e826-41ec-a0fd-dfcca97854f1", "sighting_of_ref": "indicator--4b583e69-a8e0-4d4b-9a9f-75085db30966", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbbc5f0-d92e-4a41-8187-ab1cb9da1277", "sighting_of_ref": "indicator--3efbb112-5e8c-419c-b66d-5a785a0661d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbba5a0-1657-4714-84d4-4933e8b51cfa", "sighting_of_ref": "indicator--50d3d14b-d8b6-42a2-965b-be4b48bf3a74", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9d987f-e49f-47e1-bc20-711ce440360c", "sighting_of_ref": "indicator--a4e8adc8-37c6-4c16-b7a2-0502628e9357", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e322573b-89f1-4261-96ce-f5c72dd39949", "sighting_of_ref": "indicator--6d9dedbb-b14d-44d7-a3fd-c4aa2cbc0ef1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8316c9-0569-44ac-bc27-95664caf0a1a", "sighting_of_ref": "indicator--a007bb42-ac7c-46a3-b407-0aa1825330b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9052ad34-5b1f-4a36-ac63-f6ed86af872c", "sighting_of_ref": "indicator--65515db7-0d4c-40c3-aab3-9598bc72645b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02140873-28ac-4998-a469-3d9b05c62a37", "sighting_of_ref": "indicator--591b98c8-0c3c-403a-8098-5ef5b60fb8e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeee6b3-1476-4bc9-a925-c52bbafce079", "sighting_of_ref": "indicator--591b98c8-0c3c-403a-8098-5ef5b60fb8e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c439ec1-f629-4473-8c91-690e1fd1e6f0", "sighting_of_ref": "indicator--68d95574-c7d7-438e-bc75-48ed3212d87a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39da726d-14c8-4bba-822a-f1b6ea088040", "sighting_of_ref": "indicator--ce7f9dc0-4c6e-4ad5-9f20-7861a5e98b75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9e4010-3eab-4070-af1b-b5d26fcfb1fc", "sighting_of_ref": "indicator--73017ee8-7469-44bd-a71e-38a6b2b78596", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf34e24e-cd18-46f7-89e9-78226a17fbf9", "sighting_of_ref": "indicator--dfc4cfcc-2ebb-4a88-bf02-b9972448a2ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b27fe48-b051-4f9c-8ede-fde5048b0a29", "sighting_of_ref": "indicator--6cc52165-9cb0-46b6-9d11-57a3e6b9340d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36233451-756f-45ed-8518-58d75dec33c1", "sighting_of_ref": "indicator--2de422f9-d3fc-40b4-afac-c3261b2cf82a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5bc830-b40f-4de7-be83-9fea86d7609f", "sighting_of_ref": "indicator--90172cf1-ed30-485a-97ac-69aee799e296", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee9dab6-a416-46c2-8a03-fe3c6e35cc93", "sighting_of_ref": "indicator--d259694f-0323-4f0b-9d61-f2b13f26eedf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9065295-b1ea-44d1-9629-b9d40cb1379b", "sighting_of_ref": "indicator--609b4b1a-1abf-4009-acfe-a2cdf9e0df3a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e411f78a-d2e3-461c-ad8f-bc8a0ebb8240", "sighting_of_ref": "indicator--b2c37b4d-67fd-4d35-8577-de320df4a115", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43422c0-3370-4ff3-baa3-482df298e32c", "sighting_of_ref": "indicator--b2c37b4d-67fd-4d35-8577-de320df4a115", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f602a6d6-9d13-4d8b-ae81-363e6cbb56c4", "sighting_of_ref": "indicator--b2c37b4d-67fd-4d35-8577-de320df4a115", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c649e1c4-b4e7-4a22-bfc8-ca5177a6b244", "sighting_of_ref": "indicator--5f95a90f-6e98-490a-a0c9-54f61604b0ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27c49e9-7eaa-42d6-b3e5-da4c78086c3f", "sighting_of_ref": "indicator--5f95a90f-6e98-490a-a0c9-54f61604b0ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabf6fbc-24d1-4dcf-b0e1-89bf37ad2605", "sighting_of_ref": "indicator--5f95a90f-6e98-490a-a0c9-54f61604b0ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dad539a-fa42-4f24-ae24-fd3cf2779b99", "sighting_of_ref": "indicator--c52bdd10-85fd-4f51-9fd4-9ce0e1d4ce6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4d32f9-7a77-42ef-b9ec-532909e6efad", "sighting_of_ref": "indicator--c52bdd10-85fd-4f51-9fd4-9ce0e1d4ce6c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7880fb03-11d3-432e-9977-0bbd104ae490", "sighting_of_ref": "indicator--c52bdd10-85fd-4f51-9fd4-9ce0e1d4ce6c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd20cfb-b514-4ba5-94c6-836bb0bce1a3", "sighting_of_ref": "indicator--05d8cba3-d971-4a57-9837-7b552004a709", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db85cc4-0292-476c-b09d-c27a52ced202", "sighting_of_ref": "indicator--05d8cba3-d971-4a57-9837-7b552004a709", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d6fa11-4a82-4f49-8642-9ebae5416a2b", "sighting_of_ref": "indicator--c84be650-9faa-4e3b-ac71-aa2137f6a2c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec65d4b8-54c9-445f-a4a2-b7a872ea8c45", "sighting_of_ref": "indicator--c84be650-9faa-4e3b-ac71-aa2137f6a2c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ca734a-8860-437f-8d41-623ef74e4227", "sighting_of_ref": "indicator--c84be650-9faa-4e3b-ac71-aa2137f6a2c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3613dd-2782-4341-ba10-1cffe50f8db7", "sighting_of_ref": "indicator--34668b8e-4711-47cc-a30d-e14d61ce2801", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06f0081-c21e-4a1b-ba6b-dc8f7a6434f8", "sighting_of_ref": "indicator--634a06d5-6c9f-4944-a6ec-deead62a9f98", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693d41ff-7d5e-4366-b25b-6874f9356378", "sighting_of_ref": "indicator--cbacb250-0f49-4222-9199-fd88f9b775ee", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d5d6dd-9380-40e1-bf98-5647b610edb0", "sighting_of_ref": "indicator--6da966db-df0c-4d23-9551-0d2efec0fa1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf02ae5a-0931-4d21-baac-27d10639d6d0", "sighting_of_ref": "indicator--d5c33e02-3b94-426c-bb87-bf53becb10ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceb4ee5-63e6-48f4-85b5-d32538ae8eec", "sighting_of_ref": "indicator--d5c33e02-3b94-426c-bb87-bf53becb10ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6b34c0-7839-42bf-80e6-f0334ca3f265", "sighting_of_ref": "indicator--2fe8b73c-92f7-4bf5-bb66-f01dfb43d313", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f35d98e-d9e0-495a-8699-af32af79f3c2", "sighting_of_ref": "indicator--42175a9f-1288-43ae-8b76-de7dbd5fa6c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabe060a-f63d-4557-9593-a367254d4193", "sighting_of_ref": "indicator--f6a13d2a-2822-40df-98f9-21f8e04a1cae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2e62f0-bb2d-454c-8d58-3c21cdc1ee99", "sighting_of_ref": "indicator--18331e59-26bc-494c-93c8-0b3735fdf9ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae845f2-4c4a-4c87-b529-faa06f5c06f8", "sighting_of_ref": "indicator--962f5812-a86d-49f6-bada-4436ff7cefcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12853066-2ca5-48cf-87ac-7f9df9dcf276", "sighting_of_ref": "indicator--e67f80e7-7f44-4ad7-b904-0aaf881b2440", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587f1f80-03c2-4ac2-bf6e-d4252c113777", "sighting_of_ref": "indicator--54d87b7f-409d-4ce5-bc3b-e2d6fb6c99a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd8af5a-ce58-4521-8c89-264604e1b5fb", "sighting_of_ref": "indicator--2d5a6049-7bb3-4a76-b6bd-3e9ad5b68c7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc7758f-f357-4bc2-91a8-aa6fdc809ced", "sighting_of_ref": "indicator--2d5a6049-7bb3-4a76-b6bd-3e9ad5b68c7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5f434c-0b43-40dc-8ea5-919481ac3948", "sighting_of_ref": "indicator--9f844087-f018-4012-94ae-79ae0e749b7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e928e0-00b7-4a96-83d3-c0d51ec363c3", "sighting_of_ref": "indicator--9f844087-f018-4012-94ae-79ae0e749b7b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9bb517-0651-458b-ae18-2ebd05bbc8ec", "sighting_of_ref": "indicator--9f844087-f018-4012-94ae-79ae0e749b7b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e483c3e-a18f-424a-91d2-09398c927896", "sighting_of_ref": "indicator--31df51f8-3a17-4ddc-8252-76e7083d2e71", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3190c928-81c1-4a6d-93cd-ce90aaca8761", "sighting_of_ref": "indicator--31df51f8-3a17-4ddc-8252-76e7083d2e71", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f1b3fb-f80a-490e-b16b-0f736b882321", "sighting_of_ref": "indicator--5fe0e8cd-d1fc-409f-9e71-3ac00c2fa18e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f7ff1a-c942-4ca0-832e-31144768fa9f", "sighting_of_ref": "indicator--1c6beef2-a524-43b4-ab71-c3c49b30397a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6263a8-204b-4888-bd0a-54fc5dcfb932", "sighting_of_ref": "indicator--627829a5-8b28-4ea9-af7c-48e4007736d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93fc858-2bb2-4ddf-b364-e3b9c6c36918", "sighting_of_ref": "indicator--e13b1614-929f-4f6f-b8ce-f837e29b106c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba0eab2-b33a-44b0-b5e0-fb5cae9e584e", "sighting_of_ref": "indicator--e13b1614-929f-4f6f-b8ce-f837e29b106c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3e6b4b-d1a9-48ef-abeb-a9045c9fb734", "sighting_of_ref": "indicator--4529a0cf-e353-40c6-bf28-63f7c13e6a18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bf0288-a4d8-4bb9-9748-2368d7468b59", "sighting_of_ref": "indicator--5742d1a7-f045-415d-87b2-cd62437bf4c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4402ae0-6f59-46ab-951b-ffba60027b1e", "sighting_of_ref": "indicator--911f75b3-9b14-4371-8f0c-5c8338994555", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210cf1ae-ce13-445a-9f62-23a006112d51", "sighting_of_ref": "indicator--ffe9acb9-274b-41c2-b609-f2adbddaffb7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981f1cdb-fcc4-4df6-ae6a-9d8cd33d55a7", "sighting_of_ref": "indicator--ab1cecc8-2121-4963-a06c-3d7899ba0fd5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dc9cc7-d1e2-445d-94ba-d18f8d963c86", "sighting_of_ref": "indicator--a818519f-18a8-48b0-a205-571458bfabde", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281a4522-99c6-41fd-801d-d6fc9acca093", "sighting_of_ref": "indicator--b36cda7a-d64d-475f-ac61-df69aebb94d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68da1c17-9c03-4187-b19a-d5e410d30524", "sighting_of_ref": "indicator--ab652b3b-36ea-4a30-8824-7002c0f89af4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f905adf9-e7d9-4f4d-ba27-784bab5e9f24", "sighting_of_ref": "indicator--fac76591-faf1-470b-b138-9b3f7f687e3f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b438ed9-541c-4aae-84d7-eb7aeec6dee1", "sighting_of_ref": "indicator--acbfe3c1-6aab-496d-8a7e-95fe2867636d", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a236b3-86fb-4c27-9bea-77989a9b51ab", "sighting_of_ref": "indicator--af94b887-a305-4642-a2f7-a9eb6dff7f42", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b8c5f2-1c9b-4555-af67-887b232650eb", "sighting_of_ref": "indicator--01c0ce2e-14eb-4b5b-8f7a-1b56c6136a7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a7c426-5bc7-4013-a94a-a795f83be5f8", "sighting_of_ref": "indicator--1c1022aa-be33-4cc7-a26f-c0d06db59971", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c2d2f8-ca05-4f70-ae11-e06633ef2c40", "sighting_of_ref": "indicator--d17b17b6-377e-4e3d-ba28-6da9adeb247b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a50253-c11b-4f6e-8001-2983b180a8f8", "sighting_of_ref": "indicator--434a6478-1020-484e-8852-0070437284d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3430480-a05c-412a-adcb-7cf46c2a8d1b", "sighting_of_ref": "indicator--434a6478-1020-484e-8852-0070437284d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85176c4-478e-4244-80a0-28659295cd86", "sighting_of_ref": "indicator--315859e5-d28e-41b6-9f3c-dbaf83e96d4b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0927d589-df66-4c70-8dd7-24883d7c4a1b", "sighting_of_ref": "indicator--7a04df82-50d4-4ceb-83d5-dd236f70155f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbefe44-6a33-48cb-b530-35c5703d9d62", "sighting_of_ref": "indicator--d1863cdf-f27f-4794-ad04-f47332a26889", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f2c8b2-e4b5-4a04-b371-30c4c572b04a", "sighting_of_ref": "indicator--d1863cdf-f27f-4794-ad04-f47332a26889", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2513e954-bbc2-4f17-82e9-e88890295e6a", "sighting_of_ref": "indicator--d1863cdf-f27f-4794-ad04-f47332a26889", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565460ba-7356-4ad2-9605-b8995b1a77d1", "sighting_of_ref": "indicator--65f5cd66-c84d-4313-ba6e-1ee3c54c99d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd7bfd2-e62a-480b-8482-5d6b6f99102f", "sighting_of_ref": "indicator--65f5cd66-c84d-4313-ba6e-1ee3c54c99d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89812bec-c9f4-4c72-9806-c4c6763d63e9", "sighting_of_ref": "indicator--8d3fadab-2d3c-40f9-8b4f-5f5268064f07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8737a8-c3f7-4ff4-b492-98b1fc48f254", "sighting_of_ref": "indicator--8d3fadab-2d3c-40f9-8b4f-5f5268064f07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880cc268-c4f0-4352-9f51-0cf1642cc361", "sighting_of_ref": "indicator--93c0386f-c853-46f6-acfd-4c778298b531", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b9fd4d-1eb4-456e-af8b-afd8c1d8e538", "sighting_of_ref": "indicator--0fc8df7c-97b5-479a-84d8-0f3de83a34b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df23e733-4de0-4fff-bbe4-8d901029d017", "sighting_of_ref": "indicator--0fc8df7c-97b5-479a-84d8-0f3de83a34b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b78e958-4278-4369-b0f1-6f8d8dd9e86a", "sighting_of_ref": "indicator--1721381d-f3e9-4ede-b6ad-835909f1e64f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8196ba38-5994-4c7d-96b3-ee6485202d63", "sighting_of_ref": "indicator--1721381d-f3e9-4ede-b6ad-835909f1e64f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27fe5776-0d86-4b7f-9ac5-fa2d583603c7", "sighting_of_ref": "indicator--1721381d-f3e9-4ede-b6ad-835909f1e64f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53501ba9-3b04-4abd-867d-033314a6affd", "sighting_of_ref": "indicator--d6f8a7f4-e255-4dc6-8aa6-4ad0c68a7518", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b079c06-75b4-41b6-9295-3d3d23115877", "sighting_of_ref": "indicator--45fa81ce-ad0b-4709-a2a9-b89b72b7486a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3aec54b-34c9-4522-9fce-790e20e323ed", "sighting_of_ref": "indicator--bae12bf4-f748-462e-b32c-5a675e01e132", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56448db2-a1c3-475f-9c70-471a89b903a5", "sighting_of_ref": "indicator--bae12bf4-f748-462e-b32c-5a675e01e132", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523d5d13-ba0c-44ba-8a6d-1d0fee078409", "sighting_of_ref": "indicator--1a76e41f-4cdc-4233-89b2-1e405ae17548", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac69824-f085-4dc0-bbf2-016592bbfde0", "sighting_of_ref": "indicator--1a76e41f-4cdc-4233-89b2-1e405ae17548", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807d8f63-2132-4413-a1af-a913a04615f3", "sighting_of_ref": "indicator--c38d6633-ec03-4ee6-bc46-e781517285c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f036b8-f04e-4975-bde8-672d9cabb77b", "sighting_of_ref": "indicator--332f0dce-caf4-46ee-89a1-6c2fc5629a38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71540ba6-d286-4e61-9258-0a6a85381c9c", "sighting_of_ref": "indicator--332f0dce-caf4-46ee-89a1-6c2fc5629a38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271611b6-3b50-421b-ac09-498d9b604e8d", "sighting_of_ref": "indicator--5c684fec-09ba-4db3-8584-e6815498c3e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c92c04-841e-4890-b2c8-890071e9eb18", "sighting_of_ref": "indicator--5c684fec-09ba-4db3-8584-e6815498c3e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3437aab9-fee5-4b58-a3f8-cbf8e5845cb7", "sighting_of_ref": "indicator--9e72bb09-ae47-4ec3-a22e-25c745c71c28", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5553c764-9c12-49e3-b589-eb7445a48a3e", "sighting_of_ref": "indicator--9e72bb09-ae47-4ec3-a22e-25c745c71c28", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf27aa72-5ccd-44c3-8ae6-dd94b581cae7", "sighting_of_ref": "indicator--827ca4f2-489f-4e0d-a02e-7b4fbb6f1b3d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd847bc5-2ee6-481d-90d8-ccba019314a5", "sighting_of_ref": "indicator--43151816-b06e-466b-99d1-03817494eee7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29441c69-0dc4-4fe4-93fb-69f8ab96e6f2", "sighting_of_ref": "indicator--1b4730cf-6f29-471f-bff0-9955faac44b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfe2ef0-02f6-48b1-8359-4730918c30c4", "sighting_of_ref": "indicator--1b4730cf-6f29-471f-bff0-9955faac44b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c73a49-98bc-4467-9a50-65a20114c9f9", "sighting_of_ref": "indicator--67681d3d-954f-4c08-b68b-f84e3f953052", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4edebe-6cb6-4ee8-b753-e7d6dfbb4a4e", "sighting_of_ref": "indicator--67681d3d-954f-4c08-b68b-f84e3f953052", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1d544b-b9ad-4847-aebe-7697f133ea1f", "sighting_of_ref": "indicator--11ee475a-7fdb-4713-93e9-b62cbf494484", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0022363-ddf1-474d-b61c-4c7ecf050e16", "sighting_of_ref": "indicator--feb9b3db-742c-4ae2-8e6f-b78060c8a077", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b8a9df-7957-4486-9d31-809603b3d1e4", "sighting_of_ref": "indicator--885de97d-3d7e-44a9-943d-e0ccf7953483", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89972209-3acb-4a9d-bd20-5ff855ab4db6", "sighting_of_ref": "indicator--885de97d-3d7e-44a9-943d-e0ccf7953483", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6839e26b-00ae-4f96-a8af-9cb30e3c24b1", "sighting_of_ref": "indicator--ba86a4e7-0d01-4716-b751-b49d26b87094", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230c096f-c355-472a-a388-7dcb411b5640", "sighting_of_ref": "indicator--6af4c9da-838a-4584-9ad9-ee13a9925dea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fd4008-57db-4610-b5e2-8d1e286a3ba6", "sighting_of_ref": "indicator--4064b432-fa6d-465f-bde0-bbeefd2a09a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91323ee6-437f-47db-abcc-113f3cdc0638", "sighting_of_ref": "indicator--4064b432-fa6d-465f-bde0-bbeefd2a09a4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb200dcb-36f6-4aa0-8514-959b82de9146", "sighting_of_ref": "indicator--19510b5c-c779-4739-8bef-58d6a43c57e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fac838e-f965-42cf-8610-8f621b2ee7d8", "sighting_of_ref": "indicator--782c5e1e-da4b-4a80-ab56-3088de3fecf3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fec0da-8d04-4430-9a71-9afbe4bf2c2a", "sighting_of_ref": "indicator--184b9ac0-7ae7-435c-b909-f087d73aa94c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45934f4b-8889-4a9a-8e68-88d6aa765818", "sighting_of_ref": "indicator--b2bc023a-8c8e-4345-8fa0-36ab1bf425b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bcdac8-48d0-410d-961f-5c1b8aa8a4ae", "sighting_of_ref": "indicator--b2bc023a-8c8e-4345-8fa0-36ab1bf425b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58dc54a-8fb3-4dbe-842b-972c77e372e0", "sighting_of_ref": "indicator--b2bc023a-8c8e-4345-8fa0-36ab1bf425b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2ef287-651e-4e0d-bfaf-24f780fe16fd", "sighting_of_ref": "indicator--b24a0b0b-979e-4d08-9895-e93936e6c40e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf025b1-92b0-4ba3-8a57-86c1dcf8d073", "sighting_of_ref": "indicator--b24a0b0b-979e-4d08-9895-e93936e6c40e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b2be04-e05f-4fcb-90a5-84be9c897200", "sighting_of_ref": "indicator--59c6281e-ee86-4a9e-9d49-21c9def7122c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdef1a59-a0aa-4534-8d38-d6860bb5b240", "sighting_of_ref": "indicator--59c6281e-ee86-4a9e-9d49-21c9def7122c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2081e838-011c-4823-9459-a0621eee2ad9", "sighting_of_ref": "indicator--59c6281e-ee86-4a9e-9d49-21c9def7122c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4f7922-f018-45b7-9c5b-c96c5b390a7d", "sighting_of_ref": "indicator--3153aa9d-12e9-4bbc-a343-276d2239febe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3f720c-1dbe-4e02-a08c-0eb935fcfec0", "sighting_of_ref": "indicator--3153aa9d-12e9-4bbc-a343-276d2239febe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361cacab-25ad-4fec-a971-43d8fbaf6c3d", "sighting_of_ref": "indicator--705cc342-d56f-450b-a262-79c632b88864", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a73962-566a-4c2c-866b-c85f521a80d5", "sighting_of_ref": "indicator--705cc342-d56f-450b-a262-79c632b88864", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe54123-f819-4874-a910-2e3d813fe003", "sighting_of_ref": "indicator--07fc845d-d722-4e90-a1f3-65f1bf44ebea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee1e82b-a42f-4537-bffc-eb86810a1c9c", "sighting_of_ref": "indicator--07fc845d-d722-4e90-a1f3-65f1bf44ebea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd67406-af34-4bed-89c7-cf1480986b53", "sighting_of_ref": "indicator--07fc845d-d722-4e90-a1f3-65f1bf44ebea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15f90bc-3a24-4124-8f98-511c3d1d8fd3", "sighting_of_ref": "indicator--c4116e28-9221-447e-afe1-bd899cd5cd5f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5251c0-f711-4038-9f05-c97badca8f47", "sighting_of_ref": "indicator--a3d26aa6-7759-4259-b938-bc06c2340002", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610523b2-8ef9-4cc6-8812-4e735d7e85a8", "sighting_of_ref": "indicator--a3d26aa6-7759-4259-b938-bc06c2340002", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df29017-13e5-431b-92d7-5ce0147d7293", "sighting_of_ref": "indicator--046c407d-c877-49ba-b18c-8da5760743ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61510f1e-422a-4548-8267-eedcef20cb18", "sighting_of_ref": "indicator--046c407d-c877-49ba-b18c-8da5760743ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c191c0-c61f-453e-bdbb-4ac21c734f3f", "sighting_of_ref": "indicator--18a89478-9c0b-4090-b3fe-7205ddeb607b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459c9f00-7c72-4d48-a6ac-3fdd4e9c6d03", "sighting_of_ref": "indicator--18a89478-9c0b-4090-b3fe-7205ddeb607b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493ba6fd-767a-4fc6-8ad7-2459c0ae768f", "sighting_of_ref": "indicator--c18757f4-21db-4cfb-ac07-5ba6b44041a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec0ee83-4548-48a1-9410-16fe413905ef", "sighting_of_ref": "indicator--a753783f-5078-498c-9fb1-2ec15f937144", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fa204c-cb2e-4181-9a1d-1cbe5130c6b5", "sighting_of_ref": "indicator--17fd05aa-b1ca-407a-b91e-be5f49c39c3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dd947a-de1d-42ed-9112-5ce6afb9996b", "sighting_of_ref": "indicator--17fd05aa-b1ca-407a-b91e-be5f49c39c3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e90e7cd-754c-42ed-8d9d-6189f49a2db0", "sighting_of_ref": "indicator--17fd05aa-b1ca-407a-b91e-be5f49c39c3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f23f902-8634-49fd-8a38-3e81223eb820", "sighting_of_ref": "indicator--e2efcd87-a20d-48b9-9fde-75b127609885", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a01bb74-70c8-4728-9966-f3c65cd34991", "sighting_of_ref": "indicator--e2efcd87-a20d-48b9-9fde-75b127609885", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b25246-551f-4882-8a15-6eceadb07560", "sighting_of_ref": "indicator--2c7448ac-8c93-4b22-8696-2c1b2a32d9fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f0a9d1-292f-4501-be82-136569716434", "sighting_of_ref": "indicator--17f2d9ad-8754-4e28-bf56-3d404f032b52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d16a273-6d9c-40a9-bb9f-095b0b82bbe5", "sighting_of_ref": "indicator--17f2d9ad-8754-4e28-bf56-3d404f032b52", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f51c515-1830-48bb-a88e-54350bdc021e", "sighting_of_ref": "indicator--b841dc88-99ac-4ed8-8f27-02777a7b5170", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0f8311-b263-4757-81ae-e6bb0fba1572", "sighting_of_ref": "indicator--b841dc88-99ac-4ed8-8f27-02777a7b5170", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda25bdc-083c-4c24-af2a-6772672d5713", "sighting_of_ref": "indicator--af1e0edb-be59-468c-822b-097426b14567", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffdfda2-121d-4768-a084-1dd5369479cd", "sighting_of_ref": "indicator--af1e0edb-be59-468c-822b-097426b14567", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5e0bc5-9de3-4b97-855e-ccacdc53d6c2", "sighting_of_ref": "indicator--2049fc30-e075-4ba1-8eec-3d0f3a93a8d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fd339f-ba8a-4bf0-8f25-2310a6b87bb4", "sighting_of_ref": "indicator--2049fc30-e075-4ba1-8eec-3d0f3a93a8d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd4e106-400a-44a5-b31b-ed6e62eb79e4", "sighting_of_ref": "indicator--d56ce9e6-36e1-48e0-b50b-cc2196f964bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46541bc-e582-4050-b091-9dd051c00234", "sighting_of_ref": "indicator--3eea42a1-5425-4e76-99ae-2f2b11bdffe0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece9b1db-bca6-4255-a795-f31cb8d2d3ef", "sighting_of_ref": "indicator--59d0237b-ed2c-484f-b586-3e4fe9a971d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41da86f7-550d-4bf4-ad1f-131b656e4eba", "sighting_of_ref": "indicator--1a7bee39-add1-44cf-b30f-52bc75d044c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5734f7e-5f16-40ce-ada1-fb479a6a900d", "sighting_of_ref": "indicator--4c5af06a-867c-42e8-9ad0-a6041af95c49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19afb73-c915-439c-b215-7eeee788c170", "sighting_of_ref": "indicator--4c5af06a-867c-42e8-9ad0-a6041af95c49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f53241-91b6-496f-8bb7-6cdfc3c524c2", "sighting_of_ref": "indicator--a169def0-e35c-481d-acd1-b951a8883068", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3c1b9c-f2cf-49bb-8fe0-4ffad6588302", "sighting_of_ref": "indicator--a169def0-e35c-481d-acd1-b951a8883068", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833292f5-e1e7-47bd-9dcc-1409c1a304f5", "sighting_of_ref": "indicator--2889140f-c318-4e1a-b50b-c52c8d20b57a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bc7f07-fb75-4299-91d7-595163cc152a", "sighting_of_ref": "indicator--6b65ffa0-944a-42b5-9392-6ec92fefd041", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88f53a9-be53-4d73-8972-1f563a677a17", "sighting_of_ref": "indicator--6b65ffa0-944a-42b5-9392-6ec92fefd041", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb66adc-85f0-4445-9611-a112ee6f07fb", "sighting_of_ref": "indicator--d320b4f3-1279-4173-aca9-b377c4922fbf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7913d5d-8842-4506-85b9-bb8e9f34575c", "sighting_of_ref": "indicator--7bf82587-1a66-4d49-a5b5-6f4094c7b3c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5186352e-6f59-4a85-ab88-903a8af308e8", "sighting_of_ref": "indicator--7bf82587-1a66-4d49-a5b5-6f4094c7b3c3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0a042f-b270-4d62-a96c-e26f1889b22a", "sighting_of_ref": "indicator--7bf82587-1a66-4d49-a5b5-6f4094c7b3c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a0e362-de84-4586-a89b-14b73e68ac99", "sighting_of_ref": "indicator--1c8838c5-31c2-497f-98ec-2ca08a6bcf5a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d9142e-f4da-45fb-a845-ee6d2ffe61bb", "sighting_of_ref": "indicator--db6db960-01c7-4f9d-a0cb-4e9a57328fe6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0feb8fde-7476-470a-a437-c57d29d96d57", "sighting_of_ref": "indicator--db6db960-01c7-4f9d-a0cb-4e9a57328fe6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e67cc7b-25d9-4311-9931-cf219e052bfe", "sighting_of_ref": "indicator--1ce72828-70c4-4b30-b189-ddc9f71e75ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949220c3-8a55-4eb1-9609-e44203e734a7", "sighting_of_ref": "indicator--e00b0605-c53d-4bdc-a54e-a88188146f0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b783fd6-c2dc-4635-a622-f1fc03ad18ef", "sighting_of_ref": "indicator--823e0549-c0cb-4c4a-a85f-a6ed15acad41", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c9f5b3-defc-4fad-98f2-45c8efcc1071", "sighting_of_ref": "indicator--5f545067-79a8-4c7f-b183-d058b28ded12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2010dfc-90ed-4c4f-a93b-232ba5575e58", "sighting_of_ref": "indicator--5f545067-79a8-4c7f-b183-d058b28ded12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d98c17-5700-4127-992e-1f39814ecdd6", "sighting_of_ref": "indicator--1e7bedb8-e32c-4978-a5a6-95b4f14a899a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76ab6b7-061a-433d-b776-2527e4ac9982", "sighting_of_ref": "indicator--1e7bedb8-e32c-4978-a5a6-95b4f14a899a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff2ca0e-14c7-47ac-8cf7-7b2eaa53dc36", "sighting_of_ref": "indicator--1b642fad-f285-4b4a-9ff7-57cefcbd4f66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1362761d-ea58-4e4b-83f6-c0804611f8e1", "sighting_of_ref": "indicator--7e24528f-3e5e-4e70-a0a9-78b43afc7e03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7998f462-5c8c-4b29-a714-2a14d8ef3e13", "sighting_of_ref": "indicator--0547ad33-dbaf-49f9-a224-67a096f6595b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eef942a-54d9-4c56-a69c-f6a09fa8fad7", "sighting_of_ref": "indicator--d8f5d533-468e-44fd-95f2-34e7ff5c7810", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24a84a1-8515-4782-899a-77c3dceceea7", "sighting_of_ref": "indicator--3ca9c4cb-4f86-4f0e-98c9-d5fcbf5e11ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2100dbcf-e9fc-4fd1-b1e8-cf4860c3b53d", "sighting_of_ref": "indicator--e5d7bb73-2f57-469a-a6f3-5c758bdb3552", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e54cee8-a7a8-430f-9c01-684f261d1818", "sighting_of_ref": "indicator--6b29cfb8-0d8a-41d5-861a-1d2a26b27266", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72539d32-d163-433c-8327-6ec7f5e2e4be", "sighting_of_ref": "indicator--6b29cfb8-0d8a-41d5-861a-1d2a26b27266", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e764228-2c31-4576-b564-e29378044445", "sighting_of_ref": "indicator--6b29cfb8-0d8a-41d5-861a-1d2a26b27266", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8c21ce-eb7a-40e0-bfbf-bbb461d74098", "sighting_of_ref": "indicator--65950e44-64aa-449f-81a4-61fa82eba15f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c56a7ff-02f1-47b1-9067-06c0615aac6f", "sighting_of_ref": "indicator--311f273a-edf6-4453-b267-26363a3ca2f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3049cc17-f3c9-44d7-95f2-72b09c0e2d09", "sighting_of_ref": "indicator--c5ac3165-eab9-4a74-96e2-69b73ebc85df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df725682-1566-4fb6-a7f5-34f65ab21021", "sighting_of_ref": "indicator--340cd2fd-fcce-4251-8404-c53630749b5f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a0dce8-5d2c-4ad1-a527-d04385c33597", "sighting_of_ref": "indicator--14ffd6e3-b6fc-4fff-8ebc-833ddda5494a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea914ed-7135-4cdd-ab56-90b4cd808f9f", "sighting_of_ref": "indicator--14ffd6e3-b6fc-4fff-8ebc-833ddda5494a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc00950-e247-449d-84ab-4c691be592fb", "sighting_of_ref": "indicator--46dc3233-fccd-4337-96b3-0bed2dcb58e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e54e44-5e8d-40e6-8fd2-74a063bdbbde", "sighting_of_ref": "indicator--a7176a25-63df-4da7-9b66-a0eab871893d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cafaf48-1cf8-46fb-b04b-a427126d9f35", "sighting_of_ref": "indicator--a7176a25-63df-4da7-9b66-a0eab871893d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b308d3-ea2f-44b8-b896-4765848c0589", "sighting_of_ref": "indicator--a2a317bd-02ec-4963-8a8b-a7aa28fb4970", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df82ec7f-1af3-4e9a-be39-88168bc1afb8", "sighting_of_ref": "indicator--dbb953d8-ac48-485a-bc5b-8b0a5f91a831", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e01cf21-ba7f-49ff-842c-7c38cfdee179", "sighting_of_ref": "indicator--dbb953d8-ac48-485a-bc5b-8b0a5f91a831", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6bf7aa-be5b-47ca-997b-9da9f8eea2ff", "sighting_of_ref": "indicator--f83cbd8c-2d74-4971-ba88-406ef0962ec7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb20568-c9e3-423a-8513-0b3cfd0c0bc9", "sighting_of_ref": "indicator--b1c45b6c-f7c1-4547-b092-50aa27853894", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2b650a-d7da-4326-82c5-79e8f50449d5", "sighting_of_ref": "indicator--1c58d005-8d2c-4ada-b401-3d519af18b66", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8adb9ea-ae96-4029-b62a-3c4775a19977", "sighting_of_ref": "indicator--1c58d005-8d2c-4ada-b401-3d519af18b66", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb9c21b-1c7b-4fbf-a404-d60d495714c7", "sighting_of_ref": "indicator--170e6dfb-980a-43d0-9077-0d4ef2858b7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aab0516-5abb-4f45-88c5-d74e5deb34f0", "sighting_of_ref": "indicator--1563f65f-8ef2-4aad-9a36-ae9fb7b96aa4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174b01da-e2c0-49b5-bc7b-64c1d1243aee", "sighting_of_ref": "indicator--1563f65f-8ef2-4aad-9a36-ae9fb7b96aa4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db61ba2-b669-4475-95aa-62b15d99b206", "sighting_of_ref": "indicator--7865ef36-9a1d-4d53-8c10-1a3c1d8928de", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2340602d-a9b1-4dee-9286-f5bd21468976", "sighting_of_ref": "indicator--2b3d132e-2da2-40cd-9eb8-fdaefcea573b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292efba6-0c8b-481c-b21d-2281b42fec5f", "sighting_of_ref": "indicator--c206337c-75e8-401e-add5-59d5f60136ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635dd42e-156e-48ce-a89e-8c37322f51ee", "sighting_of_ref": "indicator--1d4b706c-e0e5-4e6a-8044-a156d8c3691d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4586664e-0f26-4d3e-bfd6-b20c37a78d7d", "sighting_of_ref": "indicator--7d9d6d87-c02e-4270-bedc-c70ec0914f40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9673b172-1f44-4d2e-8cc1-c3bd2ce4f4e0", "sighting_of_ref": "indicator--7d9d6d87-c02e-4270-bedc-c70ec0914f40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1ac48a-b693-42d6-866b-8d8b34212fdc", "sighting_of_ref": "indicator--ff8ac2fb-8bcc-4f6b-83b3-b35a90323815", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba067f3d-60c3-4fe0-b9f1-e67937faf48a", "sighting_of_ref": "indicator--e2139e1b-0c76-4d88-a1bd-7e8379144acc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf45d48c-d3d1-4287-91c3-48137c366cba", "sighting_of_ref": "indicator--e2139e1b-0c76-4d88-a1bd-7e8379144acc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bd8379-dd9e-4d80-8926-18ca3fcd3828", "sighting_of_ref": "indicator--1a6b2cd4-fdb1-4b84-91b9-e5bd0c3ced1d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dd38ed-f90a-4d04-80c3-4e10dbedb638", "sighting_of_ref": "indicator--1a6b2cd4-fdb1-4b84-91b9-e5bd0c3ced1d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c205172-b7c7-44b2-8ad4-699d72d91317", "sighting_of_ref": "indicator--1a6b2cd4-fdb1-4b84-91b9-e5bd0c3ced1d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93496f14-1a26-4722-a340-09d2e07ec242", "sighting_of_ref": "indicator--b52bc71e-ac31-4d16-bcbb-392e9365017b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8759d115-4f02-46a4-9fb1-9c73c9bab985", "sighting_of_ref": "indicator--441a306e-067f-4bec-883e-d4a7b6619c03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c90821c-3641-4503-b98a-54dc254ce1a5", "sighting_of_ref": "indicator--441a306e-067f-4bec-883e-d4a7b6619c03", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a54f1e0-6dfb-4d3f-95c0-a0a033887ce1", "sighting_of_ref": "indicator--441a306e-067f-4bec-883e-d4a7b6619c03", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105a6375-9fb2-4f6f-a10e-cf3867061625", "sighting_of_ref": "indicator--fd351b60-ce6f-4196-8a38-708cfee07f68", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8aba71-9b1a-451a-8c12-01571ba54d3e", "sighting_of_ref": "indicator--9fd55a12-296c-4f1b-90cf-b287ea6b6425", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c72865-aadc-4c39-9bc4-1f1517376276", "sighting_of_ref": "indicator--9fd55a12-296c-4f1b-90cf-b287ea6b6425", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e924fb5-ae9e-42f9-b934-e803d6699948", "sighting_of_ref": "indicator--091b9b67-eb5e-4d62-a4c4-8ffc106d6ac3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c0efba-6a9e-4265-acaf-400269f68f3f", "sighting_of_ref": "indicator--091b9b67-eb5e-4d62-a4c4-8ffc106d6ac3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b9b1c0-0b09-4b70-a870-730ce0c4d0f7", "sighting_of_ref": "indicator--091b9b67-eb5e-4d62-a4c4-8ffc106d6ac3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a48144b-3bc9-4037-ad64-04a76fbc011d", "sighting_of_ref": "indicator--343cba47-d53b-41f0-92ed-937221378f02", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e657daa-fc6a-4241-8a49-7b02f790a779", "sighting_of_ref": "indicator--343cba47-d53b-41f0-92ed-937221378f02", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05339045-827a-4846-9542-9e631877fecb", "sighting_of_ref": "indicator--d6c0b224-54a1-45bb-89f3-b6a80bd41359", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9a93eb-1121-42d4-b59e-03c6341377a5", "sighting_of_ref": "indicator--d6c0b224-54a1-45bb-89f3-b6a80bd41359", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3846b6-026a-4e01-91bf-e1cbd8fbcded", "sighting_of_ref": "indicator--4eca74cb-ceaa-49f3-88c7-831f79b159bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a927a9c9-c9f4-4082-a325-f404e44007d8", "sighting_of_ref": "indicator--4eca74cb-ceaa-49f3-88c7-831f79b159bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfd5ad2-7cb5-42b0-b333-87c147ea5161", "sighting_of_ref": "indicator--5110d271-969a-4dcd-9549-ecec5bbd960b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc66102-3c89-4af5-9e39-a07fdeeff173", "sighting_of_ref": "indicator--5110d271-969a-4dcd-9549-ecec5bbd960b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7cb650-02e1-4909-948f-09e407076999", "sighting_of_ref": "indicator--9e4579f9-a829-445d-8891-852d996cc309", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefc380f-e9ef-4f93-9b11-2d979154aa40", "sighting_of_ref": "indicator--9e4579f9-a829-445d-8891-852d996cc309", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a531f915-59e3-4238-944a-880aaf743230", "sighting_of_ref": "indicator--210b06c8-3862-404d-8555-992d67ec7d50", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5df80e7-5c52-467b-98c1-e272eb06db74", "sighting_of_ref": "indicator--210b06c8-3862-404d-8555-992d67ec7d50", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8dc775-701a-40c6-a832-ac76c7b17482", "sighting_of_ref": "indicator--6c41623a-e463-4517-b748-c40524633e1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52851de3-5f9c-4d0d-bbcc-0fe0d6d63c72", "sighting_of_ref": "indicator--6c41623a-e463-4517-b748-c40524633e1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1473c05c-0206-470c-a6f0-3eaa41fa22f5", "sighting_of_ref": "indicator--5bce5bd8-2776-4306-a65f-0cf36dcda4f9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74714e34-b8b6-4975-9740-60654b5d6e67", "sighting_of_ref": "indicator--4a181a91-a24f-495f-abdf-15d1e3b4226c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5b53d2-0a4b-44ff-ab62-bc31da397c06", "sighting_of_ref": "indicator--bd32cc4e-967b-4fc9-8388-bb10047d84f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36fe80ab-7988-4f3f-89f7-72a96f2f31e6", "sighting_of_ref": "indicator--bd32cc4e-967b-4fc9-8388-bb10047d84f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf75bc9-203c-41f6-9c32-0bc757ab0774", "sighting_of_ref": "indicator--48f3c83f-e9df-4f99-895e-a15be0780569", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0952233d-f08c-4642-9487-ccc43fb8981b", "sighting_of_ref": "indicator--48f3c83f-e9df-4f99-895e-a15be0780569", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b10b283-3fd6-4fc8-b7f2-c934a942e531", "sighting_of_ref": "indicator--eb1ddd75-844a-4e87-a4a9-e90122e54e85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a129ffcb-044d-4612-90f2-d56c5edbe69b", "sighting_of_ref": "indicator--eb1ddd75-844a-4e87-a4a9-e90122e54e85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87da2852-9e38-4eaa-9371-82966d669a76", "sighting_of_ref": "indicator--d651e457-6403-4c33-8065-bafeb829d935", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a72add0-4490-4298-b474-512cf751d59d", "sighting_of_ref": "indicator--d651e457-6403-4c33-8065-bafeb829d935", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a42633b-ad68-46f3-9f70-e575e1effca3", "sighting_of_ref": "indicator--cab70945-2c48-4523-b842-67b0562b7935", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98e2707-e14a-4b36-a088-b246d4c8fbcc", "sighting_of_ref": "indicator--362ad350-bca1-4e0a-967e-7998ce6ccd16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b72974-fabf-4cc9-86f7-cf73d63f9ac3", "sighting_of_ref": "indicator--362ad350-bca1-4e0a-967e-7998ce6ccd16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50464dd1-1a62-4aa1-b12d-632c6df28735", "sighting_of_ref": "indicator--63cd1445-9cb8-4eaa-a331-b9c2a9010d19", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cd859f-c8f3-4585-9e0e-f36055e261bf", "sighting_of_ref": "indicator--06006283-e7bd-42ee-93fb-0bcd3bfdf6de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144b970d-3399-4fc1-ace4-d2bca2f6ec66", "sighting_of_ref": "indicator--018585d1-b6de-4446-84e7-f208c85ae8e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36511bb6-2b9a-41e8-8427-dd49e6e03c74", "sighting_of_ref": "indicator--018585d1-b6de-4446-84e7-f208c85ae8e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71fcab9-cf76-447e-97a5-5c008f9b76b1", "sighting_of_ref": "indicator--0a805293-d6ee-44f7-96f8-a876e7ff50df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebb2bb2-b858-4d53-b1e9-502bf36db57f", "sighting_of_ref": "indicator--0a805293-d6ee-44f7-96f8-a876e7ff50df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe4d4cf-0282-472b-bee1-43693bce41d9", "sighting_of_ref": "indicator--0a805293-d6ee-44f7-96f8-a876e7ff50df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac6d67b-d10d-4ca1-aff8-f7e6c7ee91ab", "sighting_of_ref": "indicator--dfffd3ca-1a1a-4e1a-83bc-662f4227e3b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb2fbcc-e4a2-4ed0-be41-b6eaaa4df294", "sighting_of_ref": "indicator--dfffd3ca-1a1a-4e1a-83bc-662f4227e3b2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4029ff45-90b4-461e-b7d8-8de1c29efbbd", "sighting_of_ref": "indicator--03b9b9b2-cb6a-4287-bae9-bee37fdd8a70", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9a9966-f96e-4bd0-8e80-9f5acde2b07a", "sighting_of_ref": "indicator--58852f05-e7df-403f-9f9d-9e50b2647bd0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdaf9b1-96d8-4526-afc1-9fbda1057a0a", "sighting_of_ref": "indicator--14492896-dbd8-4584-81fc-e3ffb3a6d79b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0ecac0-a2c8-450d-9b6d-0f40e7be5438", "sighting_of_ref": "indicator--51cbf02a-f76e-4265-bafc-ea87df7d2343", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279062a3-eb6c-4149-9075-0c8d2db164f8", "sighting_of_ref": "indicator--96c392dd-5f41-4f8f-9c13-7229e327354b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd4c8e6-33f8-42b1-97f1-fddb0747520f", "sighting_of_ref": "indicator--96c392dd-5f41-4f8f-9c13-7229e327354b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782d714d-858d-4815-9e77-405c18d27664", "sighting_of_ref": "indicator--96c392dd-5f41-4f8f-9c13-7229e327354b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6e379e-e56a-4afa-aa9e-e08bf413f92b", "sighting_of_ref": "indicator--1c92a4ca-de62-4882-b205-3572a4652019", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91436caf-1a67-40b0-aca0-46e84af681e1", "sighting_of_ref": "indicator--1c92a4ca-de62-4882-b205-3572a4652019", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ee1aaa-dd2a-4df1-9d0a-4c3ce6e2fd2a", "sighting_of_ref": "indicator--1c92a4ca-de62-4882-b205-3572a4652019", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f207b77-e4ba-426d-a97d-5bbb74028972", "sighting_of_ref": "indicator--92448c3e-be22-4eff-b4ad-590c7e14d7ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73b3cb4-2e1f-40f1-bd07-57e37e192f23", "sighting_of_ref": "indicator--118a96f3-95b1-4eda-9d30-b13501271897", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fcefe8-9e8a-4093-8b3d-7fb3d0f451b1", "sighting_of_ref": "indicator--118a96f3-95b1-4eda-9d30-b13501271897", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e122eb85-211c-4d34-b558-cf8793a89a09", "sighting_of_ref": "indicator--d792c1d6-0e57-43ad-a522-465a90e95d31", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dfc25a-430d-4c05-ae8b-4c12cc10a763", "sighting_of_ref": "indicator--ddefe68e-668b-4f12-bdda-cff0402ff294", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6466a2f4-ab88-435a-8f62-694fe4b9aa76", "sighting_of_ref": "indicator--ddefe68e-668b-4f12-bdda-cff0402ff294", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cb945e-156f-493b-bb06-a70329f2bc6d", "sighting_of_ref": "indicator--83085985-6cd8-4e7a-ad0f-9a02fb97a802", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895b9895-f0ab-4446-9a59-3f60afdbf7d0", "sighting_of_ref": "indicator--83085985-6cd8-4e7a-ad0f-9a02fb97a802", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44995df5-9a51-4dcf-932d-d8d59654cab8", "sighting_of_ref": "indicator--d64d51c4-3a70-4a99-85f5-fdfbdb7c1546", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bff7ee-298d-49a3-8117-bafcc629cc3f", "sighting_of_ref": "indicator--8a3db693-eda9-46ca-8b43-dba83a6a01cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8b282f-623b-4b52-98c7-bb4182498248", "sighting_of_ref": "indicator--8a3db693-eda9-46ca-8b43-dba83a6a01cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a49f6f9-feb0-4922-86c7-6c8f20f2e1fe", "sighting_of_ref": "indicator--9075cb4a-cc0a-4ee6-a8ae-cbc9dfb75c1e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883a8d7a-f992-407c-9efa-88cabeb8a77a", "sighting_of_ref": "indicator--0dabcbb9-77d0-405c-90a9-29c888ac1f04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82558ddf-7856-4805-a357-c85ba628b26c", "sighting_of_ref": "indicator--d4d8dbce-7c40-4989-84d3-2fe996a382f9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1549703-620e-4447-a00f-c89856b1f778", "sighting_of_ref": "indicator--1a3f8427-bd48-4b56-897f-433792328fa9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd60b50-6f16-47aa-b5b2-ea5e615eb28d", "sighting_of_ref": "indicator--f132b475-cdbb-4ed0-a99c-b4a1c1d9474f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b6ea52-ac59-4f48-9e8c-d7cb7827c99c", "sighting_of_ref": "indicator--fdf6810d-2d4d-4623-8dad-2ae74421eb0a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767903a9-d3fa-4eee-b878-30c6476de424", "sighting_of_ref": "indicator--fdf6810d-2d4d-4623-8dad-2ae74421eb0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e646ef-94ef-474f-ae20-f5ed498e862d", "sighting_of_ref": "indicator--9d4fd649-a150-424d-8c2d-5a1befcad6c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d63c86a-beda-4399-8e08-57b7cb62187e", "sighting_of_ref": "indicator--9d4fd649-a150-424d-8c2d-5a1befcad6c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2754e83-5097-442a-b191-3e4fa8efd2cd", "sighting_of_ref": "indicator--9d4fd649-a150-424d-8c2d-5a1befcad6c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a8ccae-3a25-43b4-b245-1a945edd8366", "sighting_of_ref": "indicator--62bb1979-a9c5-43e8-a2ce-6d4c9ab9fd3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becc5afa-ab7e-4ada-a2c3-2095800691e2", "sighting_of_ref": "indicator--4041ed27-59c9-4982-9edb-1f4c0b547934", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf49750-5a18-4137-80bf-9b3c260a77c1", "sighting_of_ref": "indicator--bd640d61-bb3a-4945-a23a-0ef50a045906", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190f6086-5294-43b8-b5b3-94c0a0506840", "sighting_of_ref": "indicator--bd640d61-bb3a-4945-a23a-0ef50a045906", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028e265a-316c-4ce0-ba6f-b749fc2aee1b", "sighting_of_ref": "indicator--bd640d61-bb3a-4945-a23a-0ef50a045906", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f1ccfb-86ca-4721-a3dc-bc3c540eeead", "sighting_of_ref": "indicator--92e30090-90ab-41c4-a80e-17faddd02721", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c9e4a6-44c7-47e6-b1d1-8c93f39708c9", "sighting_of_ref": "indicator--cbdb7bcd-58d2-48cd-84e4-996d37a38196", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7995d95-7357-4e68-b331-83f4aa70a086", "sighting_of_ref": "indicator--220dce0c-be01-4839-9846-d3e6781dd89f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb9dfcb-aa67-4705-87b6-3d623bbd4ad1", "sighting_of_ref": "indicator--220dce0c-be01-4839-9846-d3e6781dd89f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3253651-a869-47ed-8a70-3a0c4cfcd064", "sighting_of_ref": "indicator--4a5c2e11-98da-4b86-b5c5-073a3d1fe86c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3872f623-0b22-4061-856b-88b1e525cb0a", "sighting_of_ref": "indicator--4a5c2e11-98da-4b86-b5c5-073a3d1fe86c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cf06f6-5188-46e1-8d31-b288f8a2230b", "sighting_of_ref": "indicator--4a5c2e11-98da-4b86-b5c5-073a3d1fe86c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9e90f7-eccd-4dfb-81aa-925ff01aed34", "sighting_of_ref": "indicator--792d7ef7-2cdf-4ad6-a840-146676411db9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11e40dc-c4ba-4040-95c1-28b68eb00500", "sighting_of_ref": "indicator--792d7ef7-2cdf-4ad6-a840-146676411db9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c263d4d8-14d6-46fb-98ad-dc5bbcea25fe", "sighting_of_ref": "indicator--ed568897-cdf7-458f-9995-b5a6603395cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2283fb-6e8b-46c8-98a5-b30be8da82dc", "sighting_of_ref": "indicator--ed568897-cdf7-458f-9995-b5a6603395cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688bee94-216d-469e-b79f-3123d5832d6e", "sighting_of_ref": "indicator--f0e85b1c-bf0c-4dee-b9f4-c51572e0e7d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51024610-3be7-49ce-956f-64ab8968f54f", "sighting_of_ref": "indicator--f104cd2f-6b0b-422e-8df5-d852cb34e8d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee49e1b-9c7a-40e8-bf33-fcddf28507bb", "sighting_of_ref": "indicator--f104cd2f-6b0b-422e-8df5-d852cb34e8d3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8cf9a8-67f8-4e03-884b-ec46bc859528", "sighting_of_ref": "indicator--344ec809-682f-4dd6-873c-aa8cbe606271", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab69893-3c52-4327-bbd4-58483b367158", "sighting_of_ref": "indicator--344ec809-682f-4dd6-873c-aa8cbe606271", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2c0853-ef4f-4bf7-8eea-3bc66cdec736", "sighting_of_ref": "indicator--3bb756d0-3681-4eea-aef4-7ac09bb08a09", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602fe0dd-2e02-45a3-8918-cca5d85617e5", "sighting_of_ref": "indicator--3bb756d0-3681-4eea-aef4-7ac09bb08a09", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d050f8-a7a7-4cbd-a500-08717a9a7084", "sighting_of_ref": "indicator--ee339f6a-83c7-4696-a9d8-d78c6f1c8039", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c04e83-e82c-447e-beee-df0cf94ec676", "sighting_of_ref": "indicator--ee339f6a-83c7-4696-a9d8-d78c6f1c8039", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead42f86-9f4c-4c5a-9f65-8ff77cb559ce", "sighting_of_ref": "indicator--ee339f6a-83c7-4696-a9d8-d78c6f1c8039", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668dd1ad-5b1a-47b0-a05b-8cf73abc3880", "sighting_of_ref": "indicator--d13614de-f588-4859-b46c-93acef19fd00", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417dbe60-30e8-4106-800c-a138e197d439", "sighting_of_ref": "indicator--fddad033-c757-4848-9553-9e4d09735404", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545b4816-0ee3-4d15-a9ca-3b8e6ae4827d", "sighting_of_ref": "indicator--f37d958f-19dc-4053-ab01-48d0bec120a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04913df-e03b-4675-b35b-ed7bd7dec0b4", "sighting_of_ref": "indicator--85ebc8c0-92ea-4816-8f2d-ed502997945b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6c73fc-8351-4442-a284-71bb15a9fd5c", "sighting_of_ref": "indicator--85ebc8c0-92ea-4816-8f2d-ed502997945b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08616051-18ef-4923-ac6a-01c9a4f27ca8", "sighting_of_ref": "indicator--f35e7d5e-d01b-4e3a-aa76-6c2a1b134875", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b815207c-db7d-4929-8906-0a0774109203", "sighting_of_ref": "indicator--f35e7d5e-d01b-4e3a-aa76-6c2a1b134875", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f98485-e339-4dee-91fb-6c4f9af8e57f", "sighting_of_ref": "indicator--8abb1e68-3b9a-439e-9b94-a1f117dc6d2e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10701847-a964-4fcf-8d21-477ba8e44d77", "sighting_of_ref": "indicator--0622a9ab-55b2-4568-87e4-687bdbc2fa66", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a09b0f6-63c6-4985-a8b4-61f31381cd77", "sighting_of_ref": "indicator--0622a9ab-55b2-4568-87e4-687bdbc2fa66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bf1a8a-a2c8-4c85-819a-5c43ea268180", "sighting_of_ref": "indicator--0622a9ab-55b2-4568-87e4-687bdbc2fa66", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbec525-f158-42f8-b665-dca40a4adf3b", "sighting_of_ref": "indicator--8eeb2318-327a-4468-bd04-d93a76fd3e59", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad794447-5b68-432a-82b8-03ddf6aee078", "sighting_of_ref": "indicator--2d2d7705-274e-4e6a-9a51-ec2557c3f05a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1233948-ba1a-40df-a3a8-597d2ac4ba99", "sighting_of_ref": "indicator--2d2d7705-274e-4e6a-9a51-ec2557c3f05a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c2d5b8-770e-4365-8c1b-457fa719c82b", "sighting_of_ref": "indicator--e73837de-6061-4077-bc23-28019ffe8c7d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33dc66e-6360-440d-9170-429fe66b8cce", "sighting_of_ref": "indicator--e73837de-6061-4077-bc23-28019ffe8c7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff648a4-6486-4f52-a475-fffa9d261752", "sighting_of_ref": "indicator--ba034891-396f-4f15-a4bc-e6f037f35b63", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f91d8e-51ce-4a86-bc0c-9f2ffd44ef61", "sighting_of_ref": "indicator--ba034891-396f-4f15-a4bc-e6f037f35b63", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4846e31-4391-4c08-b692-31cccad79912", "sighting_of_ref": "indicator--464b08ab-54c5-45e0-9a14-f6257fb13632", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a496f4f-521c-4413-8a93-ea07dac4b6a2", "sighting_of_ref": "indicator--c16330e7-abeb-4d62-9613-2134ad193074", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b275709c-f12c-4621-825e-9e1f33610590", "sighting_of_ref": "indicator--7d746dda-0c10-435b-bf7c-4bb481b12c24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72168a0-3c61-4b4b-be5b-d4022d74cc9a", "sighting_of_ref": "indicator--7d746dda-0c10-435b-bf7c-4bb481b12c24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d8290b-1790-4567-a9ab-a9a88e2d92e4", "sighting_of_ref": "indicator--54527c47-ec6c-4439-807a-4d0d291d4b3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ad4d08-98f2-4141-845d-676112ef66af", "sighting_of_ref": "indicator--2addf935-17ad-40a9-81cf-a7155e98a56e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7687aa6f-7c8f-4745-934a-9747bc537804", "sighting_of_ref": "indicator--2addf935-17ad-40a9-81cf-a7155e98a56e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcbcd08-010d-4613-817e-c0c55d6eafc3", "sighting_of_ref": "indicator--4de2d264-3fa8-4102-8656-97865d1a251f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609c954e-9257-4a0c-a899-e477c9e2541a", "sighting_of_ref": "indicator--b687e671-cac2-4f92-b0c1-ce91f4bccab4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c575edc4-73b5-4ed2-951d-91405c756b4f", "sighting_of_ref": "indicator--b687e671-cac2-4f92-b0c1-ce91f4bccab4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd426ce-d4f2-42d6-8053-e231793c99aa", "sighting_of_ref": "indicator--ea2dd949-8a79-443f-a8b9-9f5da9a5a139", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c02dfa-6934-4078-81f5-2c37671dd659", "sighting_of_ref": "indicator--ea2dd949-8a79-443f-a8b9-9f5da9a5a139", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8777f5f1-ab93-43b3-85c0-a8a01d239efe", "sighting_of_ref": "indicator--422a995d-8367-4659-b7fa-18eadbe719df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9890ad82-feaa-4b47-8ebd-823b9e324bbf", "sighting_of_ref": "indicator--422a995d-8367-4659-b7fa-18eadbe719df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8074fbc-4d80-4bb8-9db2-2b0ce3180e1b", "sighting_of_ref": "indicator--cb7de610-cb7a-4f8c-9603-1dd4a00a97a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03da9578-37c4-4a76-93ad-8063dc7f643e", "sighting_of_ref": "indicator--cb7de610-cb7a-4f8c-9603-1dd4a00a97a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6765941c-dd95-4100-b8a1-959d32449a14", "sighting_of_ref": "indicator--2c0f146c-6aa5-448a-a7c6-5fcf44377e4f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2e75a8-c2ce-4694-9244-8ece56d4f2de", "sighting_of_ref": "indicator--4e7a7aa0-ce8e-4243-ad4e-553dbdedb0cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e550b5ba-7f33-4a7f-8c26-f36091ead58a", "sighting_of_ref": "indicator--4e7a7aa0-ce8e-4243-ad4e-553dbdedb0cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0851bf0a-25bd-4a0e-bf22-d3accb9bbfbc", "sighting_of_ref": "indicator--d723061b-29ef-4037-913f-1db8a3a7cd4b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15122183-7317-4186-b26f-7777d6924e3c", "sighting_of_ref": "indicator--d723061b-29ef-4037-913f-1db8a3a7cd4b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49d8cc7-8e82-494c-ac2a-46a34fbe04e1", "sighting_of_ref": "indicator--d723061b-29ef-4037-913f-1db8a3a7cd4b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67e9e04-da8e-43fa-ae17-5dbe3db00d21", "sighting_of_ref": "indicator--f186469c-10dd-4653-9dd8-d93c73c0341d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4986ba91-1a1b-47a2-8551-1eb9ddc0e229", "sighting_of_ref": "indicator--532e0b46-0a60-4607-b846-826223f5d52d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1812bf-e3f4-4256-b231-f72707b5613b", "sighting_of_ref": "indicator--9356195d-4385-4353-8976-3d5c06f85825", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e936308-4807-408a-9138-a4af8f190de6", "sighting_of_ref": "indicator--21263a34-e018-4c19-ac70-f8dfac865b40", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9a4333-0e5f-4132-8085-63189ee42f67", "sighting_of_ref": "indicator--21263a34-e018-4c19-ac70-f8dfac865b40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ae5ae9-a38b-46f1-87e8-2fc21761736b", "sighting_of_ref": "indicator--ca1dff24-57d1-42f4-aabe-81e139f607dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a261e49-61d0-4627-b935-16ce5b7576a7", "sighting_of_ref": "indicator--b891d07b-4270-4332-a884-20f6e8e17c01", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5be01c-5181-45fa-9890-ca8772d43fb1", "sighting_of_ref": "indicator--2c3ac25e-01bd-4f5c-8b51-2c1e3b206c67", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db381ef-6563-422d-8dfa-0abed8cffecb", "sighting_of_ref": "indicator--2c3ac25e-01bd-4f5c-8b51-2c1e3b206c67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0030de1-e6eb-4e95-8dbd-622aa935cd0f", "sighting_of_ref": "indicator--6e155b10-25e0-45b9-9a8d-d8e438a682c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702f12cf-1ddd-46ee-98f6-4a192e9026ca", "sighting_of_ref": "indicator--6e155b10-25e0-45b9-9a8d-d8e438a682c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0054473-c9fe-4769-8767-b23fea76dbf2", "sighting_of_ref": "indicator--fde2120c-c545-4f4a-b0d9-41178e4460c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59d893c-c448-4928-b891-b526cc45953f", "sighting_of_ref": "indicator--fde2120c-c545-4f4a-b0d9-41178e4460c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c760366-2ac4-4538-80c9-7b543ee8fec4", "sighting_of_ref": "indicator--40c80568-0db4-44a8-b60e-baa7e89ad73b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c569da-93ba-4559-955b-2e63bd114656", "sighting_of_ref": "indicator--7c29b9bc-7cfc-466d-9992-0ce8bc32ec3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32aa00c-0944-4761-8da7-4b8f3ac3ec2f", "sighting_of_ref": "indicator--3c13ffdd-921c-4d94-8f1f-8773b2a0c6a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56682509-620a-49fc-bcac-6a033a7fa5aa", "sighting_of_ref": "indicator--3c13ffdd-921c-4d94-8f1f-8773b2a0c6a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34308eab-bb38-4466-a59b-4cccd8d8fb9a", "sighting_of_ref": "indicator--30f69605-5b85-4ada-aec7-662f7ab6d6c5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d6f28f-7721-4bcd-805e-0866746a1ad2", "sighting_of_ref": "indicator--b24c7718-6c39-4f59-a061-ce8934831b6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65792b7a-db45-4df3-8bd4-d295aa69bf08", "sighting_of_ref": "indicator--b24c7718-6c39-4f59-a061-ce8934831b6c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb260df-f548-4189-8e8b-bd0b9f6fc915", "sighting_of_ref": "indicator--e7147eb3-926c-4d36-8ef5-c266dbbf61d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e244a6b9-5218-4e71-8041-8fffffe8da01", "sighting_of_ref": "indicator--75367510-a156-4fb7-8cd1-62cdc784d421", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb6acaf-d650-4b62-a073-da1aaa840775", "sighting_of_ref": "indicator--75367510-a156-4fb7-8cd1-62cdc784d421", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b719cdd-4a66-41be-9562-21d44ff4694f", "sighting_of_ref": "indicator--75367510-a156-4fb7-8cd1-62cdc784d421", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cc5d8e-763c-4914-ae53-153f9a70f953", "sighting_of_ref": "indicator--0025b9d3-bf0b-4d48-8f89-2d4d2da2787a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faedc11a-356b-4554-b48f-7e54983b0e5c", "sighting_of_ref": "indicator--175ce832-ab9b-4e36-8a82-6a44f7a535e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14506171-9ce4-49e6-bc94-5d82c42a3e86", "sighting_of_ref": "indicator--e2ac1980-3961-435f-99ba-d124d11f068b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c164abd9-9a64-4732-8841-6d3549dae0c7", "sighting_of_ref": "indicator--e2ac1980-3961-435f-99ba-d124d11f068b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a6c477-a43d-4337-af1d-88e716e37c55", "sighting_of_ref": "indicator--e2ac1980-3961-435f-99ba-d124d11f068b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05458ba0-865d-45ff-925b-83b93466f0c5", "sighting_of_ref": "indicator--4c374498-a03e-4e60-8ccc-775431fe4884", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e455d43b-526f-45c2-a712-51f206e32b1e", "sighting_of_ref": "indicator--4c374498-a03e-4e60-8ccc-775431fe4884", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec575292-c679-4224-8722-9db6717d4673", "sighting_of_ref": "indicator--3e7f13de-db65-4c30-9cb1-9fac1b236363", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2f580e-3057-4ef1-b4ea-ad5588a554eb", "sighting_of_ref": "indicator--2fdfc6a0-a07a-4283-885f-815a0a18e0f5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae05eda-9473-4303-a49f-8b3d74c143da", "sighting_of_ref": "indicator--0bccc7e8-b5a4-47c3-bc53-6ad59df0e5c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caba8d18-0212-4643-9379-bc59298fa245", "sighting_of_ref": "indicator--0bccc7e8-b5a4-47c3-bc53-6ad59df0e5c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51eb9083-4a3f-470a-81f7-524cdd3167f2", "sighting_of_ref": "indicator--bfb75bbb-d61e-44c9-8cc9-806aaa2f6e2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a836ca4c-874d-437a-8284-95085d3c38b9", "sighting_of_ref": "indicator--87598444-e445-4a81-8ed8-3aa4dee884e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bf7fde-8d36-4548-8c03-3b2ba547fe6f", "sighting_of_ref": "indicator--87598444-e445-4a81-8ed8-3aa4dee884e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff8eebe-ead3-4f4c-8568-8b3bbeb4355b", "sighting_of_ref": "indicator--87598444-e445-4a81-8ed8-3aa4dee884e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79cc2bd-827e-46f9-a30a-fd4801517fd1", "sighting_of_ref": "indicator--b2b72b4f-865f-4237-9e2d-ee77792dcbb6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee9673f-bd0a-487b-87fd-8ffe3fed8e33", "sighting_of_ref": "indicator--b2b72b4f-865f-4237-9e2d-ee77792dcbb6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fe32f4-d8c2-4af1-b975-833baed0ee70", "sighting_of_ref": "indicator--fd60aa70-b5bb-44d3-9424-6651ec4bd3c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81233475-5e4a-4c6b-8ae9-679b75914d5a", "sighting_of_ref": "indicator--441cf419-ae4f-4d04-b7f3-3e8c717d4e33", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d28b0d0-835e-4e13-9ebe-9ff0ab47a9fa", "sighting_of_ref": "indicator--7ef9cc6d-489b-432e-9c5d-c8ddc75f1d18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f379d9e-d207-476a-b3ca-a70b4f9f74b4", "sighting_of_ref": "indicator--7ef9cc6d-489b-432e-9c5d-c8ddc75f1d18", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd09a2d-1ffc-4656-9c6b-b6bdb185ffcf", "sighting_of_ref": "indicator--d5e77b64-758f-484c-ac01-e2d1bd6a3abf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51f70b3-357c-44c0-bb4b-8b2b07bad3fa", "sighting_of_ref": "indicator--1c527bef-66d2-432b-b90c-17ac5929ec24", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfcd136-f787-4c0b-b1e2-dbb32ce266d4", "sighting_of_ref": "indicator--1c527bef-66d2-432b-b90c-17ac5929ec24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7011a3-7098-4d29-80fb-ad386850ebbd", "sighting_of_ref": "indicator--a4921ff1-2bad-4dd9-ae0d-30a4bf7eac2e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dddea70-d4ff-4e44-9afa-999ac54adeca", "sighting_of_ref": "indicator--a4921ff1-2bad-4dd9-ae0d-30a4bf7eac2e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a078bbf-c934-4753-af76-30e8d7d76a81", "sighting_of_ref": "indicator--aab2a2fa-6eb8-46b6-83cf-e56fd7a5df4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbf2bc8-2c33-43ac-9483-6b25b025a60b", "sighting_of_ref": "indicator--0ae598c3-de5f-437e-92e4-7f41a7040eb7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90181773-4d17-40b7-af72-9ace0efcec79", "sighting_of_ref": "indicator--3304d137-0c28-4072-84a4-fa5de22e2900", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9569d5-cae2-4b5b-989e-4b153e28100f", "sighting_of_ref": "indicator--3304d137-0c28-4072-84a4-fa5de22e2900", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b85adbd-1080-4c32-b651-111d2b74f42b", "sighting_of_ref": "indicator--a555e05a-e4b8-4225-9bb2-0bf83711d47b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b21a0fc-004b-46f2-adde-5cc99b99a61a", "sighting_of_ref": "indicator--f742a12a-f5a5-46f5-bf37-5855e96bafab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02698886-d298-456a-aa77-f2c66ff1e2ea", "sighting_of_ref": "indicator--ab085eb5-105c-49e9-bc17-a1f1ff14f858", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402f4c61-d93e-4abf-b266-e8c9247c7f4d", "sighting_of_ref": "indicator--b0429dd7-5bce-4154-a927-cbce18d9af3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efb406c-b2d4-4dbd-99ef-dbf59886f9b5", "sighting_of_ref": "indicator--b0429dd7-5bce-4154-a927-cbce18d9af3d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40360f65-7925-49b9-8dbd-fd6c031c2b04", "sighting_of_ref": "indicator--6640fc7f-ffc6-4d31-b838-c80cf1f31ce7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aa1b20-b07d-4ef6-bdb4-9cba236c49ad", "sighting_of_ref": "indicator--5648d0f2-08b6-4fff-80da-74946885dde2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5056659-1de7-4363-a1ec-b022ef389981", "sighting_of_ref": "indicator--5648d0f2-08b6-4fff-80da-74946885dde2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4f829b-7a0e-40f5-a4f6-3b271a4d6f4e", "sighting_of_ref": "indicator--cdc6e2ba-75d2-4160-b941-4fefe44ff2e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aced8145-a7e8-4055-8c4e-9f7d0d6e2cca", "sighting_of_ref": "indicator--2188059f-b205-444f-b3b8-b1287959a882", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced18f5e-6a9a-4de4-ad0d-429792ae320d", "sighting_of_ref": "indicator--2188059f-b205-444f-b3b8-b1287959a882", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efea0cbb-e40e-416c-ab5d-e9adff23d9b1", "sighting_of_ref": "indicator--7b530606-a19f-4470-9c18-e171554e5351", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ce5570-7719-4296-8ac2-d335db36a7b8", "sighting_of_ref": "indicator--7b530606-a19f-4470-9c18-e171554e5351", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118deebd-8710-41d8-b2e7-b16cc9d72a44", "sighting_of_ref": "indicator--7b530606-a19f-4470-9c18-e171554e5351", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d8a7b-a782-4de6-b251-ba8827b0b6d0", "sighting_of_ref": "indicator--25a70c60-0abc-446a-9928-d3c7e224f112", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074f594d-a55b-4172-a555-4eb533dd09dc", "sighting_of_ref": "indicator--25a70c60-0abc-446a-9928-d3c7e224f112", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c68997-ab92-447a-837a-cf6d5ade5d84", "sighting_of_ref": "indicator--cfc62985-3a3c-447d-9fe6-0cb0f74b9995", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b673448-ed7e-4320-b950-7a19af73ab75", "sighting_of_ref": "indicator--a1606946-86b1-4335-8797-ba9d60e7111a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7a39ce-1489-4ff4-a87c-1e3c374e6f4f", "sighting_of_ref": "indicator--bce93fa4-92c9-4e6f-831b-90442fe66c43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3841b902-3565-44e7-8b6d-a4fab15d5c32", "sighting_of_ref": "indicator--2ff75f67-6341-4709-83c4-ef76db977be8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162f7202-0318-46f9-9010-5a413da0f79e", "sighting_of_ref": "indicator--846dba69-8edd-41fc-b201-62a65df60a3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3775699d-c657-4a94-9dc8-9db632a9cea0", "sighting_of_ref": "indicator--846dba69-8edd-41fc-b201-62a65df60a3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e05200-1877-4dbc-a235-f78ef4715702", "sighting_of_ref": "indicator--846dba69-8edd-41fc-b201-62a65df60a3e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7c7767-32d7-439d-8e90-02f501849851", "sighting_of_ref": "indicator--5440cec1-63b4-4b6e-b4b9-db984819c59e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe9cb40-aaa6-47de-95fc-7243362246cd", "sighting_of_ref": "indicator--5440cec1-63b4-4b6e-b4b9-db984819c59e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8cfbf8-f1b3-4dc9-b822-d874ce3d97fc", "sighting_of_ref": "indicator--0d104ab3-c815-4ec5-a1df-6aafb04d52e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b5a51c-c7cb-467f-90be-1d1984646d6d", "sighting_of_ref": "indicator--1978d15e-8318-4e32-a211-7a0f51298776", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf5f7f4-6f0c-4a4d-af25-d41c9f37e9ff", "sighting_of_ref": "indicator--1978d15e-8318-4e32-a211-7a0f51298776", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacb809a-da7b-42c3-9778-be41663c438a", "sighting_of_ref": "indicator--0db159dc-bebb-4758-b4ac-c675715b8d5b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982a1567-840d-4872-acc5-562cbdc676e5", "sighting_of_ref": "indicator--61958b8a-46c5-4c87-b504-d589661534d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ab08ec-6e3b-45f6-9aa6-a43ecf26e144", "sighting_of_ref": "indicator--ee6b5619-3352-4eae-978f-dd20bccc18fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9bf98a-d9e1-41f2-84ba-94f2c8e7fe8c", "sighting_of_ref": "indicator--d9661a5d-c36a-40f9-a6e3-814a3a5e8c80", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2d88a0-044f-4ed8-8e06-92e74f15d2da", "sighting_of_ref": "indicator--053c5c89-407f-477f-b0c1-c561f8f500f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b36fef5-221b-46c7-9a8c-a95b90a21355", "sighting_of_ref": "indicator--2696b3b4-6b51-4b6a-a87b-338cd7c27d01", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1e88e1-269b-4c71-8269-e8fa8de54fa0", "sighting_of_ref": "indicator--3f49014b-9bf2-4333-9c57-6daf2368aff9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911f67e0-919c-442b-89e5-b32cb80261e2", "sighting_of_ref": "indicator--5b895a98-8b03-4039-b06a-7f9ba4a54173", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0255f9-c7c8-4617-8e55-d36a7f0d0554", "sighting_of_ref": "indicator--67e5c7cc-89a7-4847-bffd-099f400829c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3542ea5-410c-48e8-8edc-b27adcf72c10", "sighting_of_ref": "indicator--78e79f32-184a-4542-be98-b6d0f3aa6426", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aa7440-689a-4dca-82b9-187543878a65", "sighting_of_ref": "indicator--762a9876-1d2c-4f02-a3ee-8c6630f80aa9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5654a425-a623-4565-a9f1-58dea2c9f7d7", "sighting_of_ref": "indicator--762a9876-1d2c-4f02-a3ee-8c6630f80aa9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164fbcbd-f21b-4794-839b-594d935d4fa2", "sighting_of_ref": "indicator--1cbc0a5d-3c45-43ce-961c-fe1286135007", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06531909-36d6-4e49-a465-46ca79ffdea0", "sighting_of_ref": "indicator--0a13b6ea-508d-4401-8431-a2e488cedc76", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2646d8a-2d79-4fa5-ba19-8d5409b1dfd6", "sighting_of_ref": "indicator--0a13b6ea-508d-4401-8431-a2e488cedc76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e81200-9c4b-451b-bf1b-da2381b9e4ed", "sighting_of_ref": "indicator--0a13b6ea-508d-4401-8431-a2e488cedc76", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6943337e-f487-4ebe-95fc-88e7de2c7310", "sighting_of_ref": "indicator--0a702687-8cad-4381-82ca-04fbd24c90d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae31621-ee28-4b59-99a5-05e98df494f0", "sighting_of_ref": "indicator--0a702687-8cad-4381-82ca-04fbd24c90d4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1e4690-08a2-436f-bbad-5d8b3e9e5779", "sighting_of_ref": "indicator--9970f7a4-07b1-4be7-9c4c-7c880ede3833", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227073cd-4b6f-4a82-815d-f95a83b1189d", "sighting_of_ref": "indicator--9970f7a4-07b1-4be7-9c4c-7c880ede3833", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baa387d-216e-4514-9c78-89503122a785", "sighting_of_ref": "indicator--2cb0f64b-ce8f-44b8-97fc-f28867385dd3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fed2b9-1f08-4732-869e-e890ce662a05", "sighting_of_ref": "indicator--2cb0f64b-ce8f-44b8-97fc-f28867385dd3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085501bd-a4f8-4a18-ae0c-8ca6550e8942", "sighting_of_ref": "indicator--2cb0f64b-ce8f-44b8-97fc-f28867385dd3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb625971-cc64-4320-a8ee-9c12ac084a95", "sighting_of_ref": "indicator--57e31d51-11be-46cd-8462-710ba2f756ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d1aeca-3d41-4915-8db7-5903e6452cf8", "sighting_of_ref": "indicator--b26e5d63-d750-46cc-b9cd-efd41c0552fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0102533-5fbc-4d2d-b064-da79bd55853d", "sighting_of_ref": "indicator--b26e5d63-d750-46cc-b9cd-efd41c0552fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8849ad90-3f54-4439-90fa-d678aedca37b", "sighting_of_ref": "indicator--05bcecf0-cd3c-409c-b139-d25d2fa5877b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc1de4c-a8a9-4d12-b132-7d7943833796", "sighting_of_ref": "indicator--05bcecf0-cd3c-409c-b139-d25d2fa5877b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925e01fc-9dc7-411c-a088-750af2466219", "sighting_of_ref": "indicator--344901d2-996b-43c7-a9c1-3746da16a3b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc4a303-9dec-4914-88c9-193aaac2dafd", "sighting_of_ref": "indicator--344901d2-996b-43c7-a9c1-3746da16a3b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b8d275-6c14-430f-84bf-2c72cb321b4d", "sighting_of_ref": "indicator--5e41ecf5-99de-4336-bd32-1ac430ffcf99", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e07518-d591-4626-8e76-08db5f18103b", "sighting_of_ref": "indicator--bec53bae-41c5-48ea-9960-6b52de084330", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8205278e-c03a-49a6-a7c9-413eb13a475c", "sighting_of_ref": "indicator--bec53bae-41c5-48ea-9960-6b52de084330", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab180c9e-568c-4d48-9c53-da02a70a949d", "sighting_of_ref": "indicator--bec53bae-41c5-48ea-9960-6b52de084330", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7ee453-cdd0-4ded-9fd4-b071406cf572", "sighting_of_ref": "indicator--cb7b44c0-391a-41a2-86b9-4d1ecc171506", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525866bb-cef6-4e50-af33-21dba6936481", "sighting_of_ref": "indicator--1d0ab1f3-2837-483a-889f-fcca2432e189", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1373b7-cbb6-4c0d-b604-cb2912edc8c4", "sighting_of_ref": "indicator--9bb3b589-5054-4093-9bb4-73caadfad86a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60302c71-eca1-4f5b-9984-cbec174fc0c9", "sighting_of_ref": "indicator--9ad9a2fd-95f0-4061-98a3-6b29ca6d160d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5540d9-a831-4a65-b495-0743a848d092", "sighting_of_ref": "indicator--49d4b8b6-0811-4c72-b032-33059a7623a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83749e11-f426-41ce-99a8-690554164b04", "sighting_of_ref": "indicator--49d4b8b6-0811-4c72-b032-33059a7623a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adc766c-11d5-4476-acc4-798a12d80749", "sighting_of_ref": "indicator--49d4b8b6-0811-4c72-b032-33059a7623a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfc7581-5555-4086-b784-e7fd07bbcd22", "sighting_of_ref": "indicator--b7ac513a-b829-435f-9933-b6d48f729e11", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514731fd-0b7f-48f8-afbe-65df426cdaf4", "sighting_of_ref": "indicator--b978442a-6664-45a0-8e68-2022f9f89016", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240033bd-287b-41bc-9b41-d973fdeddf49", "sighting_of_ref": "indicator--b978442a-6664-45a0-8e68-2022f9f89016", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a5ac66-438d-427f-8102-4c3220e2a714", "sighting_of_ref": "indicator--b978442a-6664-45a0-8e68-2022f9f89016", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade7b69d-1c9e-47f9-885b-9dd3143beaca", "sighting_of_ref": "indicator--ddadabc7-a68d-4dd7-b079-3fd2cb1c8f22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a02057b-9eb0-4690-9fe6-f1114065dc08", "sighting_of_ref": "indicator--5a5f0f91-2a40-4c64-a7b3-f0904c69f680", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6922bf9a-ef18-4b2c-b495-fd5fd87f22f0", "sighting_of_ref": "indicator--29215c17-5131-438c-9962-4370d5a16329", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e583dfd-04d1-4bdd-8dee-4f18c1cba592", "sighting_of_ref": "indicator--29215c17-5131-438c-9962-4370d5a16329", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02d5fe9-4ac3-44a8-96c9-5d07c4d57e6f", "sighting_of_ref": "indicator--cd847adc-717d-4062-9487-55d9b665ddcb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079b199e-06c8-4dc9-8952-c83b35b814f8", "sighting_of_ref": "indicator--cd847adc-717d-4062-9487-55d9b665ddcb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77467fa6-abdf-43fc-8216-73feba4744ba", "sighting_of_ref": "indicator--98e9dc22-a4d2-4b21-bf55-4f322bb550e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84a4db0-abce-45f4-b2f5-1dd33eec38f2", "sighting_of_ref": "indicator--8394f7f4-4d6d-4bb2-b93a-a831095af513", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dccfd7a-adc6-4768-b5be-4c0255721c01", "sighting_of_ref": "indicator--8394f7f4-4d6d-4bb2-b93a-a831095af513", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2873dd7c-5f59-4562-83b1-8d33bec01c28", "sighting_of_ref": "indicator--996f3f1f-4fa4-4726-9804-1cf85c71eb5c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0625fc-2644-4e6b-89b7-c64fcdc0de26", "sighting_of_ref": "indicator--67b7f708-9de0-478c-9c4a-932391107934", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534898b9-0f8b-4b48-851a-ccce54469289", "sighting_of_ref": "indicator--67b7f708-9de0-478c-9c4a-932391107934", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b651daa4-f034-420b-adbe-18723f16da1b", "sighting_of_ref": "indicator--67b7f708-9de0-478c-9c4a-932391107934", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e44134-2bae-42d1-8827-b65699d80138", "sighting_of_ref": "indicator--dfec3eb3-e6fe-4ad7-8068-0536dc5d2863", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcff94a6-2cee-46fc-b2f5-c8685c9ce7bb", "sighting_of_ref": "indicator--dfec3eb3-e6fe-4ad7-8068-0536dc5d2863", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b6d568-4602-4421-b860-2072088e5ecb", "sighting_of_ref": "indicator--86424e70-13c9-4237-8299-c84aecebea07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82dfef-3bdc-45d4-a4b6-70b99821c1a1", "sighting_of_ref": "indicator--0ef0dece-16ba-4ede-b421-813dcf4c32c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82525a3d-5f2b-4e0a-bdbb-23681c1279cc", "sighting_of_ref": "indicator--0ef0dece-16ba-4ede-b421-813dcf4c32c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b277ba3-3d02-4d0d-8aae-f32b7cc2d999", "sighting_of_ref": "indicator--2c17ed7c-c4df-4bdf-a18f-6de99f4e4d68", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b55a5dc-8cd6-4a73-b2ac-335dbae8a32a", "sighting_of_ref": "indicator--c92b7882-59c9-4ded-9f92-e61466c83b13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dbc1c3-fded-432a-aa05-0badf8455a29", "sighting_of_ref": "indicator--c92b7882-59c9-4ded-9f92-e61466c83b13", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276c055e-57fc-4d2b-ba30-27b41a4bef41", "sighting_of_ref": "indicator--67115c88-5b1b-449a-8ada-b06e17d83378", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a7e3f6-a102-427d-b42f-9e146b1e979a", "sighting_of_ref": "indicator--67115c88-5b1b-449a-8ada-b06e17d83378", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489b07c7-21a9-4bfd-9ad4-c2299a5e2cbd", "sighting_of_ref": "indicator--d266f534-93b2-40e9-aea6-463688c924fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48dfad8-c299-472b-aa8c-544a41644b8b", "sighting_of_ref": "indicator--d266f534-93b2-40e9-aea6-463688c924fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03672f75-2a5e-40f2-a84b-d6f0a91437fd", "sighting_of_ref": "indicator--fe32bb8d-016b-442d-b8a1-9bcb65d4ffa4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869b6f85-af1e-4a34-aded-8673919d62d7", "sighting_of_ref": "indicator--fe32bb8d-016b-442d-b8a1-9bcb65d4ffa4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f66b256-9350-416d-95ce-bf9bce7771e5", "sighting_of_ref": "indicator--fe32bb8d-016b-442d-b8a1-9bcb65d4ffa4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe919e6-3a5d-4429-a10f-c1393048e53d", "sighting_of_ref": "indicator--69b8159e-25b3-445c-92df-db3fc40c3ed8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c751e51-31e5-4dc7-885f-c312c0a04a62", "sighting_of_ref": "indicator--69b8159e-25b3-445c-92df-db3fc40c3ed8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5ac39a-ac1c-4570-9860-dd943b4a9913", "sighting_of_ref": "indicator--0edcf761-389e-412f-a07e-800b08bebc12", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a06bef-b5ed-4d1a-ba5b-0eadc22a4363", "sighting_of_ref": "indicator--5fef38bf-0f88-4cb4-8c64-5fb94a92cf18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e5c999-8fd5-46b3-8b15-288dc8757c38", "sighting_of_ref": "indicator--9f54d6d5-8ee4-4068-99d0-71b27ae0ece3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf711fc-5016-4c26-9200-233d525f0b5a", "sighting_of_ref": "indicator--663b6233-3ad5-48fd-9428-3e4e4dac7d43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f00753e-9ab9-4d80-87bd-ee4fb60b9d33", "sighting_of_ref": "indicator--663b6233-3ad5-48fd-9428-3e4e4dac7d43", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf2a942-8fe4-4cff-ace2-349b145a4206", "sighting_of_ref": "indicator--a328ea4d-1674-4cf6-8135-89b61ad061bc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e94511-cbde-485e-aa5c-57fb0fb6ebce", "sighting_of_ref": "indicator--a328ea4d-1674-4cf6-8135-89b61ad061bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3604425-0679-4c2f-b21e-269cf4493386", "sighting_of_ref": "indicator--a328ea4d-1674-4cf6-8135-89b61ad061bc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c1ebc7-ef87-48d8-a5de-0c5cdce7a53f", "sighting_of_ref": "indicator--0c15e192-ece5-4b44-ad34-64a99004b2a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c49cf3e-c7c6-4cdf-9f8b-e38a138bd34d", "sighting_of_ref": "indicator--b629323e-8c9b-4957-bf90-abc148ba76eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d03f4d-720f-459d-9e35-c88a0ba2dee0", "sighting_of_ref": "indicator--b629323e-8c9b-4957-bf90-abc148ba76eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cb931b-947e-4f9c-bb93-7c04e8b26fcb", "sighting_of_ref": "indicator--126194d4-b8f1-4002-a1cb-e8cb18b7aeb3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9daf99-27b0-4e56-8515-a60da908f250", "sighting_of_ref": "indicator--876db2e6-50c4-4aa0-9e86-81441325ba5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41014337-9d20-45e8-8fe4-fa0de0d60c90", "sighting_of_ref": "indicator--5f6dd4a9-cc30-4131-b7c4-c13098f9f267", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e305cbe2-407a-4a16-b84f-d2a15916b4de", "sighting_of_ref": "indicator--a5127d54-3c25-42c1-a7c7-1144746e76cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6703cb03-b8b1-45c4-9a90-dfd3e2eec809", "sighting_of_ref": "indicator--a216b447-ed2b-4739-b710-e52f8425b80f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab621d1-8e29-4c53-8680-4856649c6a68", "sighting_of_ref": "indicator--588ce6b8-6bc0-4cd3-93e1-13093a955c1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7178def7-e333-4b27-a935-1ae3e7864fa6", "sighting_of_ref": "indicator--d37a6960-0c79-44de-9bd3-400dc1d7e665", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cba607-49f9-466a-85db-f8539c437b4f", "sighting_of_ref": "indicator--d37a6960-0c79-44de-9bd3-400dc1d7e665", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424de722-ad5c-4031-9b76-9c7f81c732f8", "sighting_of_ref": "indicator--6cc65796-7793-4947-8d4a-bfd723ad3a3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af529015-7e79-4b68-a45f-cdba4592a51c", "sighting_of_ref": "indicator--7b19979d-5751-4fd8-8ea0-bc73f97ad9b0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcd4620-3fe3-4eef-a79c-99f6964e8459", "sighting_of_ref": "indicator--c8b8c600-3b0a-46e8-a1d0-0b5255773499", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f01a3b-3aa2-48f5-bb77-96a09ba1bc34", "sighting_of_ref": "indicator--1fa20785-1c91-4027-b163-0e2ee422a266", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1db77d7-e9d0-4389-847e-22b2d1f07b6d", "sighting_of_ref": "indicator--f3b2e8d7-f85a-4a7d-b6d8-ffdd90d56efa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd2b4bf-2c74-4617-8af9-096dc0300c79", "sighting_of_ref": "indicator--f3b2e8d7-f85a-4a7d-b6d8-ffdd90d56efa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df23440-25e6-47ed-abe2-51bad1739d81", "sighting_of_ref": "indicator--c8d4adb7-58e4-48d9-8ad0-9dfe58ea6478", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9b7d99-9581-4bd4-9829-604393ada5aa", "sighting_of_ref": "indicator--c8d4adb7-58e4-48d9-8ad0-9dfe58ea6478", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712635ee-6e35-43bf-98b5-d3663ed823dc", "sighting_of_ref": "indicator--ee5e5e01-ccbe-42e0-a93c-d259b4664648", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92081dc-bc96-4e12-9fa1-588e2737e9a0", "sighting_of_ref": "indicator--e6454e8e-e019-4189-8bc4-6ec3f8f29b74", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c21de0c-b6ba-44a3-b0c4-d710f38c7582", "sighting_of_ref": "indicator--fe4ca793-7d41-4f8e-8e7c-f96e19fc9afc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d2fad3-bdd2-4896-9cb9-a29913c22248", "sighting_of_ref": "indicator--15833d2d-b441-44ca-be64-f6063d915c1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6a0895-0014-4f84-91b2-bdaf04d71aba", "sighting_of_ref": "indicator--15833d2d-b441-44ca-be64-f6063d915c1e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df456b50-a98d-480d-a746-63c506d87303", "sighting_of_ref": "indicator--5b4f2d18-8ef9-45d1-b931-f50bb1966ce6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64efd9b-482b-4698-904c-4448423eb2dc", "sighting_of_ref": "indicator--5b4f2d18-8ef9-45d1-b931-f50bb1966ce6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e11d71a-d299-4ec7-ac4a-3a45d1bfcb5b", "sighting_of_ref": "indicator--9a33e850-54e7-452b-8783-40212404e453", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c6b6c9-35e4-4217-8949-fda58761ba2c", "sighting_of_ref": "indicator--c890451d-674b-4c01-b4d5-c51f9ff1e21b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7402edd7-0a30-4301-afc2-c4783bb2750d", "sighting_of_ref": "indicator--c890451d-674b-4c01-b4d5-c51f9ff1e21b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207a7744-2f08-4603-96a2-173e74b96ad7", "sighting_of_ref": "indicator--c890451d-674b-4c01-b4d5-c51f9ff1e21b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e94847-4ca9-4e93-8198-2460d1fc0139", "sighting_of_ref": "indicator--16741d71-a477-488b-9b65-996596138276", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35edff14-0c19-4236-9b5f-9d0d68e0ba68", "sighting_of_ref": "indicator--bfa18c3a-f850-4ade-bd65-aed04905133c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7958c4d-c37d-4e15-a34c-946c5008aa7c", "sighting_of_ref": "indicator--bfa18c3a-f850-4ade-bd65-aed04905133c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef1f35c-b8ce-4f4d-9560-6833bd95f206", "sighting_of_ref": "indicator--31a7b055-5e34-4028-923b-996079c29d14", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd96414-e3ed-4c27-bc66-01e9e5b2603a", "sighting_of_ref": "indicator--d98dd2c4-721d-4556-8706-0b5f027b0454", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42bd5d5-6875-447c-9655-31d0b9368801", "sighting_of_ref": "indicator--10503797-25bb-4f9e-b252-c073d730d262", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed972b3-468a-4ac8-b482-12f64a3228a7", "sighting_of_ref": "indicator--11350bfc-b8c8-4d54-99f0-cb3576768bf1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c52609-4196-4832-bbda-fcc640fca6e5", "sighting_of_ref": "indicator--9649b987-0f03-4416-9d4c-398b266d1f76", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ec06e3-4e4b-46aa-8d6b-9064a4bfdf8b", "sighting_of_ref": "indicator--b2a8d825-c9bf-416b-bf6e-6d894ba68b93", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b9ecbb-032e-4ca3-a2f0-012418cd5c0b", "sighting_of_ref": "indicator--b2a8d825-c9bf-416b-bf6e-6d894ba68b93", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4701f251-d622-4fb1-8212-190245d1cb16", "sighting_of_ref": "indicator--dbe46f20-72dc-4f23-bb9e-b01ab58af023", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed649e46-c355-49b6-bb85-57b6dddad2eb", "sighting_of_ref": "indicator--d3bc6757-fa08-4737-bc6b-474013d9f54f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d2332e-3fb4-4583-9e61-105860c55030", "sighting_of_ref": "indicator--295cfd27-2896-4f6e-abcc-8ee79183004e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85faa81-0e0f-45ee-ba31-9eed5c7ef489", "sighting_of_ref": "indicator--295cfd27-2896-4f6e-abcc-8ee79183004e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674bee2d-b5c1-45b8-b615-0fd5eb7c9330", "sighting_of_ref": "indicator--3d7cf911-2509-495e-975c-5352ecd63eda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b89e126-2d16-45db-b3d3-1e0e71d49fdf", "sighting_of_ref": "indicator--f29c509a-2829-4683-96a3-f6e2d4aaa605", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e152b85-3134-47b5-9705-c8fdffc85a45", "sighting_of_ref": "indicator--f29c509a-2829-4683-96a3-f6e2d4aaa605", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbaa007-b001-41ed-a774-0b511d89350c", "sighting_of_ref": "indicator--f1dd6d47-07af-4abb-b936-a79e6e4e8005", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caba5a4e-27f8-4b07-b261-2b3d5a08785c", "sighting_of_ref": "indicator--f1dd6d47-07af-4abb-b936-a79e6e4e8005", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6874411-93b9-4909-a591-7d081cd8a20d", "sighting_of_ref": "indicator--ee003496-f2bc-42cc-8740-909e862913cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab395fd-e954-49ec-b479-21d666c20f27", "sighting_of_ref": "indicator--202976c1-274b-4a49-b362-b2f981b996ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68eb91e0-fade-4036-9fe7-a677399fd39a", "sighting_of_ref": "indicator--202976c1-274b-4a49-b362-b2f981b996ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516b69bf-7a55-4116-90a3-9376d7c910e0", "sighting_of_ref": "indicator--3d0a26ca-89ce-40c0-8706-8fc43235acd1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7b01cd-aa38-4f47-9b53-79594c048a19", "sighting_of_ref": "indicator--3d0a26ca-89ce-40c0-8706-8fc43235acd1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9216afac-4c46-4e27-b33a-74bdd72df2c4", "sighting_of_ref": "indicator--84a871e7-621b-46cd-aa08-97514351acb6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae94c28b-ff31-4996-87fc-ed84db64ace5", "sighting_of_ref": "indicator--84a871e7-621b-46cd-aa08-97514351acb6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcff337-da94-469d-82d7-c64754329a8c", "sighting_of_ref": "indicator--551c8327-2ee1-4955-8a15-6efa28343f1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76b07a6-083c-4443-9229-1376fff1db6b", "sighting_of_ref": "indicator--551c8327-2ee1-4955-8a15-6efa28343f1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f26aa63-44b9-4a2a-97ee-dd680c61fee8", "sighting_of_ref": "indicator--667efd3b-8049-4685-bd17-f2ecbe0d7edf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadc43ac-65d9-4f61-9901-fe177815ea57", "sighting_of_ref": "indicator--c8ad6dc8-5041-4907-9452-fdbf8927f018", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f81b65-7507-49c9-a03b-04d761cdd0da", "sighting_of_ref": "indicator--c8ad6dc8-5041-4907-9452-fdbf8927f018", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3f30e6-0e00-4147-8b3a-04f23670970f", "sighting_of_ref": "indicator--4677eae9-b580-4113-a8d2-b35f8ebf719b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c143b6-28d5-4789-a54c-e8f4c79df0a1", "sighting_of_ref": "indicator--4677eae9-b580-4113-a8d2-b35f8ebf719b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367416c3-3bf7-405b-851c-905a115c945e", "sighting_of_ref": "indicator--6c74df26-fb27-4841-81f4-3f456acbcf3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d690f64d-4760-4c8e-bf9e-084eb34a0545", "sighting_of_ref": "indicator--6c74df26-fb27-4841-81f4-3f456acbcf3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f40093-0714-4823-a341-e0b70f7a36ea", "sighting_of_ref": "indicator--d6ec60ec-6166-4c17-8a47-6edeeb9dac7d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e5522e-6dd3-40c7-af11-480e09a1a4eb", "sighting_of_ref": "indicator--6ec68cbe-b163-467b-8bc6-6c0041653bd6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb685a9-6afd-4390-b64a-0e2b00771016", "sighting_of_ref": "indicator--74161237-f6ae-4c48-a927-4ce23822b1fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717ad432-8fd0-49ee-a852-7575473785e8", "sighting_of_ref": "indicator--74161237-f6ae-4c48-a927-4ce23822b1fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a31ddd9-8c67-42cf-a9cd-aded76c15480", "sighting_of_ref": "indicator--bdc8c135-6826-47dd-986d-e8ac897fa696", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adba48f1-a35f-4fa4-bad6-c31313e92d43", "sighting_of_ref": "indicator--bdc8c135-6826-47dd-986d-e8ac897fa696", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f6de7b-8033-4955-8bb9-0377eb6c2aeb", "sighting_of_ref": "indicator--47a48289-3271-4d53-8572-bbf67b16bdfa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e73876-ded3-4b63-adaf-b0287d0f7bf8", "sighting_of_ref": "indicator--47a48289-3271-4d53-8572-bbf67b16bdfa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8039d1-5cd2-4581-90f2-e48a0a0fbbc8", "sighting_of_ref": "indicator--5411d60e-45c0-45ff-81d5-5aa37352fc04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578a3f4b-b2b5-471a-940c-0a93af63e299", "sighting_of_ref": "indicator--5411d60e-45c0-45ff-81d5-5aa37352fc04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0509ab54-0380-4a6d-9d4f-ebfe4a76a744", "sighting_of_ref": "indicator--15314eb2-30be-4efc-8275-fde352548b9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aca96dc-0254-45bf-95c3-f552c2d5fc99", "sighting_of_ref": "indicator--8ff946c3-604d-4828-ac23-f01ec308c048", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fbcde3-474c-4b23-871d-15fcbf38cf77", "sighting_of_ref": "indicator--8ff946c3-604d-4828-ac23-f01ec308c048", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1ba22c-bea6-4c60-be9f-9a8c9b77848c", "sighting_of_ref": "indicator--ddcedfc3-dcf8-42b5-b9a1-96c20abf0e52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a42eb9-de59-46cf-a26b-e9f000b6b318", "sighting_of_ref": "indicator--f9d0986a-8176-4f3d-9f62-3ee31358ab2a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff721cdc-05c2-49e9-94b5-7fdd2287f6ec", "sighting_of_ref": "indicator--fbd47eca-37e7-43ec-aecf-a798289dcf17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a72a53f-1d78-4f0e-9171-417434a131c6", "sighting_of_ref": "indicator--fbd47eca-37e7-43ec-aecf-a798289dcf17", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fed2a3-788b-4eca-b46f-bd37f9326b26", "sighting_of_ref": "indicator--2466c88d-7493-4665-a247-27cbc0c33acb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2c674e-c71f-4b5d-aa81-2975f7162000", "sighting_of_ref": "indicator--2466c88d-7493-4665-a247-27cbc0c33acb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1aaad8-b097-4bc1-a23e-d07bd0e179e4", "sighting_of_ref": "indicator--2466c88d-7493-4665-a247-27cbc0c33acb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec074578-31d1-4ed6-bdee-e2c76003b974", "sighting_of_ref": "indicator--d2f5cd7c-96f8-4673-bbbf-7b9731e7855b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27941392-e16e-418d-9e37-330ecd18fa75", "sighting_of_ref": "indicator--33b763a1-d21c-442e-baba-15f5442726ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bed886-5190-4aaa-94b8-d589d1a81565", "sighting_of_ref": "indicator--b2485965-4207-4e18-9718-d4c7f94c31ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d9e450-39a5-433f-b70d-d9934cd87966", "sighting_of_ref": "indicator--b2485965-4207-4e18-9718-d4c7f94c31ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7861b6-137e-425b-b5c7-6bd1a5e297a5", "sighting_of_ref": "indicator--805569f5-30f2-4248-a3ee-df89f6197a14", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9c79cc-43b8-4e16-912c-6d2fbc615194", "sighting_of_ref": "indicator--805569f5-30f2-4248-a3ee-df89f6197a14", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e24b0cb-6c4d-4e4d-a11a-f07c5b3e75ba", "sighting_of_ref": "indicator--805569f5-30f2-4248-a3ee-df89f6197a14", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a506806-4638-4ab4-98ff-4710eaa42484", "sighting_of_ref": "indicator--02f326b7-933a-4ba7-977b-64ed3b36edcc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86614f70-f640-4936-9001-a10fefe8aee8", "sighting_of_ref": "indicator--02f326b7-933a-4ba7-977b-64ed3b36edcc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f328b6ac-590c-4fff-a853-b0298cb43b6c", "sighting_of_ref": "indicator--64fc0469-99ec-4d7a-91b0-3cb9a2429f8b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34be93f-c5ab-4996-84db-d90b457f73f1", "sighting_of_ref": "indicator--3e71b3c7-879f-42c3-bb09-14e91c21f1fc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ece9f1-2bd7-474d-83dd-a64d2d285c24", "sighting_of_ref": "indicator--3e71b3c7-879f-42c3-bb09-14e91c21f1fc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db285532-db9f-422c-87d5-e37f523eba69", "sighting_of_ref": "indicator--be257992-121b-4d02-b131-95aa460c26c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318ff2e6-8d96-4279-be45-21ef06ae0ce3", "sighting_of_ref": "indicator--66529a93-0180-441e-916b-bb5e2e63c88a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcfac58-1d34-4811-92a3-c8778e2cdf95", "sighting_of_ref": "indicator--66529a93-0180-441e-916b-bb5e2e63c88a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2966f31-d3fe-4cf7-ac3b-fcc0289e82d9", "sighting_of_ref": "indicator--d7b211a9-717a-48d9-96cd-e29171b383a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20946243-58c5-49a3-9dd2-5b5b7e441b96", "sighting_of_ref": "indicator--69763ccc-69a4-487a-9c14-101e81e57720", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5831d547-c976-4fc1-85f6-fcd2adbb533d", "sighting_of_ref": "indicator--69763ccc-69a4-487a-9c14-101e81e57720", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157686e0-a178-4521-9e68-bbcf4362f415", "sighting_of_ref": "indicator--0adf0e99-7613-4edd-aef4-9812917f69f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd53caea-d819-43f7-9ce8-717e55f56875", "sighting_of_ref": "indicator--a6e48f1d-5d62-4472-942f-48a6a5a33dac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87749389-95ab-42ca-b391-4caf03f7f24e", "sighting_of_ref": "indicator--7843d5af-9413-4b23-b154-6d5cc7e073d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c554e1cd-5687-4126-bc7b-dd8bee9a722a", "sighting_of_ref": "indicator--7843d5af-9413-4b23-b154-6d5cc7e073d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addd6515-236d-4fe4-9766-f67055e44535", "sighting_of_ref": "indicator--a71bb5c7-0fcd-4487-965a-89d5c17b7146", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ac75c3-7a2b-42a8-86cd-d7d00925bf0a", "sighting_of_ref": "indicator--a71bb5c7-0fcd-4487-965a-89d5c17b7146", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa80816-b416-4084-8860-212001d81c52", "sighting_of_ref": "indicator--a6962303-e047-473c-ac09-f43bf4d342a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469825db-11c9-4b7a-8d2d-3ac5d529ab7b", "sighting_of_ref": "indicator--a6962303-e047-473c-ac09-f43bf4d342a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962f9941-a458-4c0d-80cf-3a0fb696617b", "sighting_of_ref": "indicator--a6962303-e047-473c-ac09-f43bf4d342a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09486979-8db4-4940-9289-aee04c922b1f", "sighting_of_ref": "indicator--ef62fc5e-98c2-44ea-aeb6-1b9bb9e5a41c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bafe4f-d9f7-48a0-941e-d3e4e3c07e80", "sighting_of_ref": "indicator--4d795a3c-a7c5-4357-b848-e8117810d342", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b10380-bfa9-462d-9b05-4dc7f66727f3", "sighting_of_ref": "indicator--4d795a3c-a7c5-4357-b848-e8117810d342", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bc2561-f9b8-44ca-8f08-f101d85b1c09", "sighting_of_ref": "indicator--74e213a2-ea14-4716-b8bb-853eb966bf8c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d743bcf1-7e20-4a6d-a7b2-659c12277bd8", "sighting_of_ref": "indicator--74e213a2-ea14-4716-b8bb-853eb966bf8c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8466205-ecbf-41d9-9fd0-7b2096326b63", "sighting_of_ref": "indicator--8f3862e5-fae9-477f-9316-6eb204e98f24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7495ac54-b341-40a2-927e-0eac195f2a13", "sighting_of_ref": "indicator--e8a8875e-0eb1-43f3-9cfe-9e3f7a3bfe39", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65106329-a139-4d7b-990b-8ccaa0f9546d", "sighting_of_ref": "indicator--e8a8875e-0eb1-43f3-9cfe-9e3f7a3bfe39", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4490496-38d0-4843-9cf6-6c81e7f999c8", "sighting_of_ref": "indicator--e8a8875e-0eb1-43f3-9cfe-9e3f7a3bfe39", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb093d4f-371f-4308-a398-a662e713eebf", "sighting_of_ref": "indicator--92221eb4-9be0-49b0-9a36-2435cf2a7661", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9379c5c0-a511-4471-ad6f-19ff2bf1e21d", "sighting_of_ref": "indicator--92221eb4-9be0-49b0-9a36-2435cf2a7661", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b213a5-f09a-45be-a520-dfe1f10891b0", "sighting_of_ref": "indicator--7b995de8-9c9b-4ad5-b69b-b8630e0276a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da722b7c-8148-4c1e-a384-d2980fa850ca", "sighting_of_ref": "indicator--30b6fbc2-bc0a-4cc0-b74e-c48a73cdc1a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aee6c2-1078-4038-a9c6-db3c5bbb17c6", "sighting_of_ref": "indicator--a136392f-3add-49b9-8a23-ec27d68bded1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8801a106-9459-4599-8cae-5e9331e4244d", "sighting_of_ref": "indicator--33613a2d-8879-4519-a7e1-71b92e8aa995", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a545c845-e4b7-4e1f-aa11-ddf7fa95efdc", "sighting_of_ref": "indicator--33613a2d-8879-4519-a7e1-71b92e8aa995", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43503d93-ca98-49aa-85f3-d56b31e6a441", "sighting_of_ref": "indicator--ede4cb7e-1d03-4e84-bc05-aba3f0d5d5e8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7692d5-83ae-4337-9338-c8317b721ddd", "sighting_of_ref": "indicator--ede4cb7e-1d03-4e84-bc05-aba3f0d5d5e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098e4be7-df0a-483f-8454-b61e9e5f27f5", "sighting_of_ref": "indicator--8f261831-5a52-4644-b1e0-e5e1412664e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8ef636-3e07-4ccb-83f0-901f5c021fb1", "sighting_of_ref": "indicator--dab83d1a-c0ca-4ba5-a299-e8f34d546175", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac4d617-e8de-4126-9862-2f6d5c250416", "sighting_of_ref": "indicator--dab83d1a-c0ca-4ba5-a299-e8f34d546175", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0180e72a-d1ff-406f-b865-dfc710968c75", "sighting_of_ref": "indicator--73a1a0dc-edcb-4020-8c88-bca52ffef2f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c291fad9-4d64-495a-a81d-7f06f36f0019", "sighting_of_ref": "indicator--73a1a0dc-edcb-4020-8c88-bca52ffef2f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4396d414-f556-444d-9a85-843da5a4e7df", "sighting_of_ref": "indicator--73a1a0dc-edcb-4020-8c88-bca52ffef2f3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb60c5f1-2a9b-426e-b2fd-db9774a71e9b", "sighting_of_ref": "indicator--e2cbb549-89f1-4045-922b-b3a7d3c21302", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92375b04-cb4b-4b6b-a5ea-f011accaaa2b", "sighting_of_ref": "indicator--e2cbb549-89f1-4045-922b-b3a7d3c21302", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbda360-d68a-4d0a-be2f-7e665d59182d", "sighting_of_ref": "indicator--46f4b8c4-b1f7-4999-98a1-eae685ecf92f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff18dba-5998-4ac8-8d21-aa41181aa45c", "sighting_of_ref": "indicator--a15e9eb8-5ec2-4edd-a92e-7bfe050ce846", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181aaf97-59b9-48c7-b3cf-e74177a9b7f4", "sighting_of_ref": "indicator--a15e9eb8-5ec2-4edd-a92e-7bfe050ce846", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747b28a7-3864-4cb9-9bc9-ffcd301de6fa", "sighting_of_ref": "indicator--3855a877-2860-4723-bff8-b6060630d9a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294b2c6c-0e22-4c99-838b-9aad0724a59f", "sighting_of_ref": "indicator--3855a877-2860-4723-bff8-b6060630d9a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893a56ab-05a6-4b48-93d4-0d002790a71a", "sighting_of_ref": "indicator--3855a877-2860-4723-bff8-b6060630d9a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7f9fe0-546f-463a-93f6-89c360cb390d", "sighting_of_ref": "indicator--6ed1ee9f-ffbf-4a4c-bb03-370b99b3c6f9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b61539e-51c9-468c-82f0-cb13689a8e6f", "sighting_of_ref": "indicator--6ed1ee9f-ffbf-4a4c-bb03-370b99b3c6f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87971575-b8aa-472a-bc61-5c92c030ad3e", "sighting_of_ref": "indicator--6ed1ee9f-ffbf-4a4c-bb03-370b99b3c6f9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414bcc36-d286-497b-a1f4-a6bee38d23e2", "sighting_of_ref": "indicator--3cb020fa-7ded-45a3-b5f2-dc948f516f87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a05992-0e3c-4b6c-ae96-b884056cbdc3", "sighting_of_ref": "indicator--02fab7bd-fb27-4fcf-bd68-1dd9442e18df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dad8004-a7f5-4a0c-bacd-a163e75d6fb2", "sighting_of_ref": "indicator--02fab7bd-fb27-4fcf-bd68-1dd9442e18df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c926502a-4da0-42d1-831a-feed62391e5b", "sighting_of_ref": "indicator--bbe58535-4065-4f3a-82aa-a01bf661078f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ce0205-7b17-4849-8c40-a63d37b63bd2", "sighting_of_ref": "indicator--144c6838-3556-4473-9430-fd3885a466cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c69060-86e1-4067-b932-d3d6f8d5293c", "sighting_of_ref": "indicator--ffc6125f-ba8f-44b5-8f6f-87378101abfa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d28a7b-6fcc-4d8e-b125-510a55d0b270", "sighting_of_ref": "indicator--ab6b5910-46a1-4923-990d-019c750e60ec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ec76ab-3553-4ce8-a078-4a6aa23e2caf", "sighting_of_ref": "indicator--ab6b5910-46a1-4923-990d-019c750e60ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f210fe-31ba-43d5-b97f-aef55151f17f", "sighting_of_ref": "indicator--21084e08-e80d-42f5-bf8a-f789dbb2adbf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f4f25d-334f-47e5-9004-dd394de90f23", "sighting_of_ref": "indicator--21084e08-e80d-42f5-bf8a-f789dbb2adbf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c6567b-d679-4af8-bff5-389d04df59ec", "sighting_of_ref": "indicator--21084e08-e80d-42f5-bf8a-f789dbb2adbf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d8db12-8d09-4735-8086-6f50995f1bc9", "sighting_of_ref": "indicator--9844e314-e7e4-412b-a508-9e0bd37297fd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc39ef6-fa8b-43cd-b983-7efaec10bc56", "sighting_of_ref": "indicator--44a9ede3-15e5-422b-ac07-a67789a1cae8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a2b73f-350f-4345-b78a-24bf1abc4630", "sighting_of_ref": "indicator--44a9ede3-15e5-422b-ac07-a67789a1cae8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28009599-0135-4be8-b788-c9e493797342", "sighting_of_ref": "indicator--c356808e-cbad-4387-b3e3-a41825a30a29", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f955ae2a-e451-414f-91ad-b43271584c51", "sighting_of_ref": "indicator--c356808e-cbad-4387-b3e3-a41825a30a29", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7242da56-b274-42a8-ac90-86fb056e810b", "sighting_of_ref": "indicator--c356808e-cbad-4387-b3e3-a41825a30a29", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79e4106-468a-4b91-8144-c77900179315", "sighting_of_ref": "indicator--623402e7-b045-4956-9f9a-e997c0525519", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2ce434-2a0a-44f2-82b9-ce926281185e", "sighting_of_ref": "indicator--bd3f8770-663e-4891-9ccb-7faae56d0bd3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1142badf-8937-4a5f-8a72-675d8d458503", "sighting_of_ref": "indicator--bd3f8770-663e-4891-9ccb-7faae56d0bd3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbfff78-a72f-4375-9a86-0879f31cff8b", "sighting_of_ref": "indicator--92a53209-435d-4b51-9288-64bf5b5931a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d829f36f-0c4c-4e93-bf92-f68b1002e28d", "sighting_of_ref": "indicator--a0ac948d-756e-48a4-9a68-f1e860156769", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec9f214-3fe1-4da1-9674-9ac46bf7da38", "sighting_of_ref": "indicator--ebeb8f21-db21-423d-98bb-0e0d0713fb0b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01237ad3-4c0b-4bcd-b618-d038acfcc5b0", "sighting_of_ref": "indicator--28f4bccc-e70b-4c67-b026-f2ff5b63dec1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d50508-53c1-4fbb-b65f-632dc45c8104", "sighting_of_ref": "indicator--4ff8d179-501b-4c2b-9379-0a55535f246a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81c7aff-2129-4d4d-933b-63318ff91c6e", "sighting_of_ref": "indicator--4ff8d179-501b-4c2b-9379-0a55535f246a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee41c15c-5b97-4df9-8726-9c496397f16c", "sighting_of_ref": "indicator--4ff8d179-501b-4c2b-9379-0a55535f246a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfd90a5-8066-4d64-bb47-78298abd76b4", "sighting_of_ref": "indicator--f9eb39cc-e31f-49e1-ae34-1e4e64a6ebba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebe4c23-132b-404c-a8f4-807caa1abfd1", "sighting_of_ref": "indicator--d3891ad7-56b3-40ad-978d-b72493accd77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8edf0cf-1310-499c-8620-44b7eb3e00dc", "sighting_of_ref": "indicator--d3891ad7-56b3-40ad-978d-b72493accd77", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420a726b-2131-4589-bae8-926c5f4d00ec", "sighting_of_ref": "indicator--ed592d2f-4185-422a-8d80-054334ee4739", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bfccf9-1a1c-4045-b704-dfc4903850c9", "sighting_of_ref": "indicator--2ce3aa55-301d-42f9-afa8-4aea7e5e0fbe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb81e398-fac3-486e-84eb-1c613124941e", "sighting_of_ref": "indicator--2ce3aa55-301d-42f9-afa8-4aea7e5e0fbe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85494a75-372c-4ba4-9628-d8d6ff5f868c", "sighting_of_ref": "indicator--e6642117-4bce-4b85-8d20-6dcb605f1c33", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7398a1-de4d-4fdb-8b08-4b0997a65ffb", "sighting_of_ref": "indicator--34724f5b-4597-42f8-becc-3f729f89b750", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c2bc52-31de-4ba9-96d8-5dfd7b4f5df2", "sighting_of_ref": "indicator--34724f5b-4597-42f8-becc-3f729f89b750", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794a90d9-1b63-4b54-a568-91c3328465cd", "sighting_of_ref": "indicator--5302e2ee-7149-43ea-ae73-d73c0f0afccd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527d56c1-df22-4a56-8384-99adf39bbc49", "sighting_of_ref": "indicator--5302e2ee-7149-43ea-ae73-d73c0f0afccd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead12d3c-df8b-4d89-bfd5-f20bcd95a639", "sighting_of_ref": "indicator--0a985b02-798d-448f-91d9-fc99614d2839", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5150aa52-7847-4074-b277-fc3153b1e252", "sighting_of_ref": "indicator--277d87ae-ab97-4b45-82b5-cfb1131b788b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5c3183-007c-458f-a535-8ce5f9b29d71", "sighting_of_ref": "indicator--92faef77-a290-4cd0-888e-848918727b96", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e5b174-c045-4f78-97c8-8246023cc296", "sighting_of_ref": "indicator--02892da4-de43-4ae3-9970-fcacd596b2a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490ab9ac-d392-4734-a18c-d3124798b58c", "sighting_of_ref": "indicator--9c55c86f-b8cc-4982-bf96-f1dca2959821", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721cc4a7-2667-4db1-bf3a-ac4332ec20e3", "sighting_of_ref": "indicator--9c55c86f-b8cc-4982-bf96-f1dca2959821", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e984b1-8ab1-4efa-83f9-cbc098b04e44", "sighting_of_ref": "indicator--3ac2405e-16be-4f6d-966c-d3e23f7610ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace01fed-6c6f-4b98-a4b1-3d323ae863c6", "sighting_of_ref": "indicator--7223e82c-4039-4ef4-8b26-ff681aaae3e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa515ceb-e5ab-4054-b9c9-954973dd83c8", "sighting_of_ref": "indicator--f7701b62-ee64-4112-bbdb-9e9c49c0f36f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cfea2c-8e20-4168-96d6-8616092a4046", "sighting_of_ref": "indicator--f7701b62-ee64-4112-bbdb-9e9c49c0f36f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c05ad0f-6cd5-4b07-978a-09d28bddcced", "sighting_of_ref": "indicator--a0c77cc2-a153-4583-b6e4-7ad556889a9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad49bf0-4cc2-47b9-82e8-4401e5cb30b0", "sighting_of_ref": "indicator--a0c77cc2-a153-4583-b6e4-7ad556889a9d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b8ded4-fd37-44f2-90c6-caa706965a1f", "sighting_of_ref": "indicator--a26f0789-7380-4ad4-8877-7f37fb68f806", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8bd5bd-8ce9-4437-9bf2-0224cf27df10", "sighting_of_ref": "indicator--f0f741cf-d4aa-4b91-9e23-df2f502a8f21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ce5401-1da1-4e64-928e-154c90ced289", "sighting_of_ref": "indicator--fd4d5f44-9e52-4d09-acb3-a1d7c912f571", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872a1c82-aba7-475c-b6c8-64b32fd71bad", "sighting_of_ref": "indicator--fd4d5f44-9e52-4d09-acb3-a1d7c912f571", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baf60c1-4e0c-42e4-b4a6-f54bdcfc3f70", "sighting_of_ref": "indicator--f3f27b19-243b-47c8-aa09-67f9bf03a1cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eea1cec-3567-4914-bd77-f746442f8a0b", "sighting_of_ref": "indicator--a40c956f-2201-41fb-8512-c0402187c1da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3184450-def2-49f0-8a86-77b0ee21bcf5", "sighting_of_ref": "indicator--73bf31b9-0719-4cfe-b8da-d58e41469484", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c72419-d11a-46e3-9c90-93179fa9c0ef", "sighting_of_ref": "indicator--28f7977d-03d7-479d-9863-aea0906a5f07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b039d6-cf7f-4f82-a51a-3f3b1f5459e3", "sighting_of_ref": "indicator--1fd71ed7-ae24-47cd-b468-1098cfb7d735", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c749c0f0-c73b-4096-be94-8b1fae4a1ab3", "sighting_of_ref": "indicator--3b4543e1-82e8-4e6a-92b2-d64e91c2f67d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0698a7d1-f505-41a1-a42e-8858e1dcfc17", "sighting_of_ref": "indicator--3b4543e1-82e8-4e6a-92b2-d64e91c2f67d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e5a151-3407-4509-9933-68fb12495bab", "sighting_of_ref": "indicator--3b4543e1-82e8-4e6a-92b2-d64e91c2f67d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cea6158-8374-4d21-9234-7d170ba63932", "sighting_of_ref": "indicator--1a3b605c-ac62-47b9-b836-994877c64831", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ca6f0e-3c4e-466e-ac10-d99c06a6f663", "sighting_of_ref": "indicator--1a3b605c-ac62-47b9-b836-994877c64831", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9058846e-fbae-4ab2-91ae-78b1fa2ba9a9", "sighting_of_ref": "indicator--047e2f0b-a82b-4fd3-9779-3a2a89f3b85f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6422477b-2989-4fba-bb7e-681ce542bb54", "sighting_of_ref": "indicator--047e2f0b-a82b-4fd3-9779-3a2a89f3b85f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87be0b81-5dd4-4c89-9519-5f4bccf34240", "sighting_of_ref": "indicator--c6f7b1f7-fca9-4229-841b-edfb35bcffea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797d7e79-8250-44a0-bbb0-73e1991af511", "sighting_of_ref": "indicator--93b4617e-47b6-406f-8bef-9ec48d7b593b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638c07e3-3926-45f5-bf2d-99d2d0df7979", "sighting_of_ref": "indicator--93b4617e-47b6-406f-8bef-9ec48d7b593b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccd164d-e9f6-4d26-b45b-45a65e2eaff0", "sighting_of_ref": "indicator--54b2ceb5-ff77-4006-bde0-4e073baa1c5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb95014-c45f-4a92-8561-9c34e89cc2d6", "sighting_of_ref": "indicator--ae584585-3e10-4f65-9cdf-f0a8e136091b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac59660-f6f4-4794-a149-fb89d57389bf", "sighting_of_ref": "indicator--431661da-ad57-40c5-b149-8b6ba1ebf9fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0a9412-40de-429d-bbe9-586ce78c04fb", "sighting_of_ref": "indicator--b666cb4a-7875-4ae0-bf05-8ae22da300a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a899b21-8aba-4172-9db1-77dae9b10e06", "sighting_of_ref": "indicator--e9b167b7-2323-4980-8eff-168f354ebb1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8135f6-02b9-42ce-9da6-5890a3dcad06", "sighting_of_ref": "indicator--e9b167b7-2323-4980-8eff-168f354ebb1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bc1b95-dcec-499c-b9af-d09060a9dd32", "sighting_of_ref": "indicator--e9b167b7-2323-4980-8eff-168f354ebb1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319ab347-46dc-4ca9-8ce4-6776eba19d5d", "sighting_of_ref": "indicator--5e301670-5b60-442e-8fea-fa98af9038c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d76a27-663c-4989-8ba9-99a13d9a6215", "sighting_of_ref": "indicator--10694a72-e649-46ab-9270-bba6b68c37d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4fe7c2-64c7-4bf7-afcb-2e07ff0aa314", "sighting_of_ref": "indicator--0fc24468-09c2-47ae-9dad-a1219a4210dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01059ace-70d8-4012-895d-ae877ff4c2e2", "sighting_of_ref": "indicator--83e20d4b-0bb4-4d6a-b78f-738eee8c93a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659efffe-effe-4e3e-a668-fe28e6df1af7", "sighting_of_ref": "indicator--0fdcccd6-037e-44e1-a00d-ba486a564e64", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5540b3-d02d-4c15-bac7-1cf47b229b45", "sighting_of_ref": "indicator--0fdcccd6-037e-44e1-a00d-ba486a564e64", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c62ca0-e0ed-4efc-a5d0-33e0f2849b31", "sighting_of_ref": "indicator--54ed3172-3159-4e8c-a2d2-cb6d5eb7a831", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa119c58-0bce-4c02-b17d-c49e2f3ea255", "sighting_of_ref": "indicator--54ed3172-3159-4e8c-a2d2-cb6d5eb7a831", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e89108-b055-4e15-be26-88fcc0f9f0f3", "sighting_of_ref": "indicator--ab59257c-20c9-421d-b304-9ecde3701ebd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc864e1-0fae-4f71-b31b-26dc606f7e90", "sighting_of_ref": "indicator--ab59257c-20c9-421d-b304-9ecde3701ebd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1e4ca2-2821-4635-a469-4cf28b6d93b3", "sighting_of_ref": "indicator--8739b70c-58fc-43ca-b783-fb7734fb8ba8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93d5b8d-18c7-4507-9d33-b3d49c454c1a", "sighting_of_ref": "indicator--8739b70c-58fc-43ca-b783-fb7734fb8ba8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfac61da-3345-4c8f-843e-af3baa1d7f3e", "sighting_of_ref": "indicator--6cffcd36-d54a-46a3-bd14-d9e3d3ca2a4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6058ec45-faad-4d5a-ba5e-6f431bcb4b4f", "sighting_of_ref": "indicator--6cffcd36-d54a-46a3-bd14-d9e3d3ca2a4e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282f4e72-692a-46e7-bd5f-8a9265675b1b", "sighting_of_ref": "indicator--6cffcd36-d54a-46a3-bd14-d9e3d3ca2a4e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dd71dd-4e85-4001-b844-6a220afd3040", "sighting_of_ref": "indicator--a6fb486c-6ace-4fb5-9e5e-a7de260a5ed0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557e248d-9032-43ae-b13c-de9cf68fae21", "sighting_of_ref": "indicator--a6fb486c-6ace-4fb5-9e5e-a7de260a5ed0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ebb5b0-1242-41cd-9398-d219dfa427bd", "sighting_of_ref": "indicator--a6fb486c-6ace-4fb5-9e5e-a7de260a5ed0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9542c510-accf-4ecb-849f-f26dabf65368", "sighting_of_ref": "indicator--c0fbd5b3-063a-4509-997d-e2ad1a78a58e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b510179-714e-4eba-a38b-db2a792bc9e1", "sighting_of_ref": "indicator--6e76f6b1-0ace-401e-9db4-284eade88c7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f607ba-6311-43f9-96ad-c235a838e04c", "sighting_of_ref": "indicator--e111b258-382c-4bb4-aa61-4c6967effc49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b67791-eb72-4b8b-962e-1c8f8c044f10", "sighting_of_ref": "indicator--3e1a8874-b9c6-4922-9b3e-5ce627b7fc96", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d6184d-ee99-48f4-9506-06b7f65bf6cb", "sighting_of_ref": "indicator--286d4ea9-9141-4e3a-833a-cb99974a796f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e1870b-267a-4026-bffb-d5d6c63fd10f", "sighting_of_ref": "indicator--550a01cd-242f-49e4-bc24-eb85dccc453d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443d2854-7647-4a9a-834e-449fdec5c05c", "sighting_of_ref": "indicator--550a01cd-242f-49e4-bc24-eb85dccc453d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e3fc6f-fd89-4a12-a27a-8776b2e2c9db", "sighting_of_ref": "indicator--13d124b3-82f1-4ea4-89f6-e2351c5253ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597ac661-96b8-4914-a4b2-89b0f194ca71", "sighting_of_ref": "indicator--f547907c-59e7-40f9-a127-ec259e96fc92", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c9338a-408a-4cb4-940b-0b232c97b402", "sighting_of_ref": "indicator--ef2b01c5-88ce-4268-942d-e386dd82cd82", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2b8520-c2c2-4649-8017-13fe7af14f91", "sighting_of_ref": "indicator--8a2729b6-9188-422d-b81d-684f498fb7af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715a97b3-0309-4701-b13f-87b14e708f2e", "sighting_of_ref": "indicator--77e7c8b3-d216-4fde-9401-ba20d20721b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001b6bc2-086e-40fd-9d2c-a338268243f2", "sighting_of_ref": "indicator--e4419963-341f-46a5-ba44-0d9daafc7966", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde3dcb1-5d0c-42d9-b50d-677bf7b079fe", "sighting_of_ref": "indicator--e4419963-341f-46a5-ba44-0d9daafc7966", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c4cc4c-8169-43ee-b098-2307c428cdf9", "sighting_of_ref": "indicator--9e175667-f467-4a87-be41-f32e4f9e02c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d322ee-41f4-42f0-a2b1-2f1db5694bc0", "sighting_of_ref": "indicator--b8e7d9d5-a6d4-4c19-a86a-316c66d68c65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ff6811-4503-4c0e-b521-c1e12d79a63d", "sighting_of_ref": "indicator--b8e7d9d5-a6d4-4c19-a86a-316c66d68c65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514d9e8a-6c53-4e41-bc71-30b7b0db3be3", "sighting_of_ref": "indicator--b8e7d9d5-a6d4-4c19-a86a-316c66d68c65", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b25c19-3af2-4512-85f0-374f68518002", "sighting_of_ref": "indicator--80db4706-7624-47fe-9cad-7a1c4bc634f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a0857e-cf71-48de-9ab3-8b8188da5675", "sighting_of_ref": "indicator--80db4706-7624-47fe-9cad-7a1c4bc634f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fa1cb3-9b46-41b7-898b-4ced19fd96f9", "sighting_of_ref": "indicator--48ebf56a-9adf-42d9-9160-39f57a9d0260", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48bea98-d428-448e-86da-66415c162eb2", "sighting_of_ref": "indicator--48ebf56a-9adf-42d9-9160-39f57a9d0260", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5208f415-9eb2-4dbb-b6b5-2728d85fa05a", "sighting_of_ref": "indicator--48ebf56a-9adf-42d9-9160-39f57a9d0260", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f581d4a3-eca0-4218-81aa-036fb409f212", "sighting_of_ref": "indicator--2b75406f-1bc7-4f1f-a59b-7bbc3b59048c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1328d0-a435-4198-9959-5e4e8a583c5b", "sighting_of_ref": "indicator--b809043f-b18d-4ae3-9b53-004367852d8e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31731a15-1157-4be7-a578-9f3e180e4119", "sighting_of_ref": "indicator--b809043f-b18d-4ae3-9b53-004367852d8e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da419ca0-04b2-4824-9eb0-6a703f61fd10", "sighting_of_ref": "indicator--08471bc4-1a0c-4692-b87e-a2ca48f3ca51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de5cdd7-d5f0-472b-ba24-e91938aab95a", "sighting_of_ref": "indicator--08471bc4-1a0c-4692-b87e-a2ca48f3ca51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8307e039-b992-4d6c-9ce3-c70751d013c0", "sighting_of_ref": "indicator--de6546c8-c5c3-4fdc-a1cf-a5065be18882", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2d75f0-11fb-45b8-8431-0500fc3cf893", "sighting_of_ref": "indicator--792dfc28-beeb-4e23-bcea-7a7f9456a6fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1eb130-6318-4096-8822-87fcc0428dd9", "sighting_of_ref": "indicator--38f11f8b-d3bd-4afd-8617-86d066c9ea04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601afd03-730d-4dbc-b03f-530c6cbf5b00", "sighting_of_ref": "indicator--38f11f8b-d3bd-4afd-8617-86d066c9ea04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f130ea14-6836-4dad-89e6-621f41c79da6", "sighting_of_ref": "indicator--efa68277-ba86-4fb0-878f-173771e71d9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f96f9d-fd95-47e9-a26d-edbeb909a16c", "sighting_of_ref": "indicator--68d1ff5d-daeb-459c-96ba-582de832cd84", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26e638c-f948-465e-8171-f0fd84c95fe2", "sighting_of_ref": "indicator--9c204717-5eff-4f9f-9b46-9c3e47879ef1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce18d54-e592-483b-af01-49adf5bb189c", "sighting_of_ref": "indicator--9c204717-5eff-4f9f-9b46-9c3e47879ef1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1753a4-33b9-4ee0-80b5-231d93f360ff", "sighting_of_ref": "indicator--c468b759-08bd-4ab7-be56-2e07f7e7593f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdda7981-62a8-44ee-9637-f49dffde0db3", "sighting_of_ref": "indicator--c468b759-08bd-4ab7-be56-2e07f7e7593f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debd4ee1-0d56-4a3d-8269-af34ac2e707a", "sighting_of_ref": "indicator--89ac299f-a128-4afe-82a7-00110d20b526", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef9b0e6-ab35-4607-8a47-26a03c60d6bf", "sighting_of_ref": "indicator--57921acc-2203-46b7-9302-e38daf18549e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7ecff2-27ef-4e02-91d0-da74c00ff07e", "sighting_of_ref": "indicator--2ad23eba-7e64-45d2-94bc-e9e8e63b15ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa8043f-10c8-489a-8941-e22d57f9633c", "sighting_of_ref": "indicator--2ad23eba-7e64-45d2-94bc-e9e8e63b15ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c6e1dc-8c6c-462c-9289-32dc6e751dea", "sighting_of_ref": "indicator--086f2195-47c6-4575-9feb-042383cb9d37", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d5c46d-5ab9-470a-808d-69b1ba031377", "sighting_of_ref": "indicator--689c6410-5005-4330-a536-88a6679cf005", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c613fc-dff5-4769-8050-8dae26f1ebfb", "sighting_of_ref": "indicator--a41baae1-4f0f-4905-b21c-3941e5e1c4fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f915fdd2-17f5-468b-ad76-7751289b2b88", "sighting_of_ref": "indicator--a41baae1-4f0f-4905-b21c-3941e5e1c4fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c461638b-aa6a-4780-8363-f6197c0ba656", "sighting_of_ref": "indicator--4ab11784-909a-4b35-9e21-283a86cf84f7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c03c37-6214-475b-a99b-1483f4821944", "sighting_of_ref": "indicator--4ab11784-909a-4b35-9e21-283a86cf84f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2072ca-4a82-4ee3-a6ab-01f454002939", "sighting_of_ref": "indicator--4ab11784-909a-4b35-9e21-283a86cf84f7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b6d9d4-eb52-4777-b3a3-f9cd188ccac7", "sighting_of_ref": "indicator--7c363908-3fd0-4eac-b146-6d04f78a6714", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a9f9aa-1d45-44b3-9cde-2767d0b3e46b", "sighting_of_ref": "indicator--bc2edfab-a9a5-4c03-9ec5-d956855a4760", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b49622-2cd4-4c0d-a67c-c37b0e39d029", "sighting_of_ref": "indicator--38b6145e-7c79-4cf9-b154-d45eab76cd17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7a10ff-a2f1-4ab2-a669-c4721f54c66d", "sighting_of_ref": "indicator--80ecb10b-80e9-4c0f-a1ac-5d0fea6abca6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c700c59-0ad6-4430-8d6d-9973346dfc56", "sighting_of_ref": "indicator--80ecb10b-80e9-4c0f-a1ac-5d0fea6abca6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900b3e70-e88f-475b-bc0c-490b3187edcb", "sighting_of_ref": "indicator--80ecb10b-80e9-4c0f-a1ac-5d0fea6abca6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ca9d97-40f3-480f-bceb-ac2dde1eba3f", "sighting_of_ref": "indicator--ebef975c-3a29-43d7-8305-b16954e2927a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b704b4d-2af5-4c46-a793-5e77b0fb81cd", "sighting_of_ref": "indicator--ebef975c-3a29-43d7-8305-b16954e2927a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57b3ad1-324f-4ec2-a10a-761bec27a2e8", "sighting_of_ref": "indicator--2251d6af-0d9a-41e4-b5b7-a48b63cae837", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c085a4-7774-4a78-bead-5bf8b6593e69", "sighting_of_ref": "indicator--5c0fdf31-c9bc-42a8-8215-f8b0d2817669", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97918cc-4576-4f5d-89c9-1a10a2ca5055", "sighting_of_ref": "indicator--d5c46efb-d096-4458-8e9e-f87ca09bf40f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ece7c00-8123-423e-9da4-015e83087ca5", "sighting_of_ref": "indicator--41bfc26a-df26-4428-959a-6c112033e92a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e580a12-342a-4789-af8c-04f43d1930bf", "sighting_of_ref": "indicator--d7902feb-3f4c-4c62-b50f-135b7db60faa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad36b96-985b-47df-929e-b6d7fc7e274d", "sighting_of_ref": "indicator--e14313b0-d098-40b2-932b-cf20ef61b987", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3821d92-294a-41d8-9092-fa2c9857a3f7", "sighting_of_ref": "indicator--e14313b0-d098-40b2-932b-cf20ef61b987", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb33648b-5eaf-4d88-aa39-2cf1b0a83343", "sighting_of_ref": "indicator--09f93a2c-0202-4de5-8900-93f77a06f03c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0fa1f2-3802-44ab-9210-759ae1eea3bb", "sighting_of_ref": "indicator--dc2d181a-e032-4d80-a1fc-698330eaff26", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c21fdd-20cb-4b35-a8fe-693f91b49c0e", "sighting_of_ref": "indicator--13e4c3a4-647f-418c-a2b4-c61bea6823a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a50ae5-870b-47db-b1bd-0c564c7f6583", "sighting_of_ref": "indicator--f96a8ec9-178f-46bf-9450-70b49e856491", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8600e81f-8b09-40f2-aa5a-cd14a48c1e2a", "sighting_of_ref": "indicator--f96a8ec9-178f-46bf-9450-70b49e856491", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541cee26-f591-4586-9a8e-175232ed3551", "sighting_of_ref": "indicator--f96a8ec9-178f-46bf-9450-70b49e856491", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44fdac7-0810-4cbd-93ae-9f515ad20b56", "sighting_of_ref": "indicator--8f4ca7a7-d180-424a-914f-663ac91cc422", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e67a03d-9b6c-4879-8f36-9d598f15943a", "sighting_of_ref": "indicator--07232d58-698d-4fef-911c-388249f8e287", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbccbbe-5e50-4f4b-9fc8-56766b8e46c4", "sighting_of_ref": "indicator--07232d58-698d-4fef-911c-388249f8e287", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c962216-f05f-41f9-96d9-c5b4a898dde3", "sighting_of_ref": "indicator--06b063e9-0d5e-45e1-8d05-cb7761bfe0da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed39102-f663-47a7-84f2-8b99ccc4bf54", "sighting_of_ref": "indicator--06b063e9-0d5e-45e1-8d05-cb7761bfe0da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc1abdb-7753-4067-85cc-2f13e0044063", "sighting_of_ref": "indicator--fc9a7393-7bdb-4f62-acab-9c5f2fef4bae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe0a639-1fce-4c9b-998f-30bb3437d419", "sighting_of_ref": "indicator--644e69aa-25bc-4988-9c2d-9a23929f3edf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efbbba3-9628-4ced-8e66-f927cc10d667", "sighting_of_ref": "indicator--79a4daa6-2f0d-4cfc-a9fa-2c8a52364f3c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7462e7-bc85-4e66-8540-b023d0c528bf", "sighting_of_ref": "indicator--79a4daa6-2f0d-4cfc-a9fa-2c8a52364f3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48664610-2c55-4d88-9c4e-269ddaf1dd4c", "sighting_of_ref": "indicator--79a4daa6-2f0d-4cfc-a9fa-2c8a52364f3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee6005e-02f3-4be3-ba90-be570a8f81bc", "sighting_of_ref": "indicator--c1e13493-b266-4b02-ad7f-8ea4216cd5dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84d368f-a883-483f-90eb-9093f3675a71", "sighting_of_ref": "indicator--c1e13493-b266-4b02-ad7f-8ea4216cd5dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73387a9b-8c15-4c1f-8854-dd2157c1a4e8", "sighting_of_ref": "indicator--c1e13493-b266-4b02-ad7f-8ea4216cd5dc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aa6d51-04c4-491f-bac5-8dab47283a3e", "sighting_of_ref": "indicator--da537fe7-922c-4696-a788-5fde9dcc891f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ba32b1-6b9c-4e74-9ed8-f669003052fe", "sighting_of_ref": "indicator--ac577b3c-80ab-432e-9f58-62ecebb75aff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f2b280-5cb4-4094-a2f0-af92502cfd1e", "sighting_of_ref": "indicator--c26d5b04-96d7-4472-9b21-3bdcea7c7eff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0bb184-76ae-4840-8160-57f04cfa70b3", "sighting_of_ref": "indicator--1eb771bc-5df0-4f40-b2a9-34aa487732e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c80a93c-2633-49d4-9344-e6f5486c1fa9", "sighting_of_ref": "indicator--61878376-f540-40ab-bbc0-714b8274cb64", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27db953c-f7e1-48b2-b295-c2486aa9f467", "sighting_of_ref": "indicator--61878376-f540-40ab-bbc0-714b8274cb64", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56ca125-3c18-4f7b-81bf-0966ac34da58", "sighting_of_ref": "indicator--d9eac433-b537-47f7-ac90-b54026bbb06e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e934462f-c518-4e3d-b2c7-a91f505540cd", "sighting_of_ref": "indicator--d9eac433-b537-47f7-ac90-b54026bbb06e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05333ed-335f-4fe9-b71f-a8e8ba8ad52d", "sighting_of_ref": "indicator--8fa02290-af4b-42a4-b604-8ba9089466a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3d6d5b-2992-4857-a43b-28804ad8d917", "sighting_of_ref": "indicator--bae32bfd-1286-4967-8be4-f9d1cfb268dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ec30d4-390d-4933-a2df-df49bc265127", "sighting_of_ref": "indicator--413969b6-ccb9-4430-8ce5-84476043eee4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953853ae-4e8c-430f-bcc6-4fad880e3723", "sighting_of_ref": "indicator--c2fef279-7c59-45f9-a6e4-e7e2f27572d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55ad8cd-f037-49d0-bfa6-ff689ac8af28", "sighting_of_ref": "indicator--6512dc68-3814-41b6-8f99-82f74d6da9f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc255e0-7492-4c08-a271-3f22d372891a", "sighting_of_ref": "indicator--62edcf9e-1b32-4a3b-8c18-d0361f139e5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3531971-982d-4e4e-a794-6fa3836d3794", "sighting_of_ref": "indicator--e0567351-3e3d-46b2-afb4-70015851fe55", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42c44ae-174f-4edd-874b-5ad41b8570f6", "sighting_of_ref": "indicator--482890f8-58f5-4141-89dd-c1a8b316dd4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033f6644-8df7-427e-b86e-8147e621e5fa", "sighting_of_ref": "indicator--482890f8-58f5-4141-89dd-c1a8b316dd4e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9106300f-b480-4706-a147-da2e2c3fa492", "sighting_of_ref": "indicator--482890f8-58f5-4141-89dd-c1a8b316dd4e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d34378f-ebf2-458c-9c41-4725f44454b3", "sighting_of_ref": "indicator--e652a3c8-118a-4a45-928a-8e1c92b7555c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee00663-925b-481d-affc-1c2d8d5168ee", "sighting_of_ref": "indicator--ade789c0-3606-4a38-935f-16b774bbc9c8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11244bd-8ccb-490e-8a36-f9ac123e05e1", "sighting_of_ref": "indicator--ade789c0-3606-4a38-935f-16b774bbc9c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac814e0-ce83-499d-b359-e703f48e758a", "sighting_of_ref": "indicator--93ea8f60-1c89-47e4-bc15-96c7ce58b74a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dab2b57-ebb6-4e45-a4a0-ea610f0ba6a0", "sighting_of_ref": "indicator--c08672ed-64a2-40b9-ac80-219dd7b62095", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f2b7e1-9f20-4578-b96d-6a53d14730fa", "sighting_of_ref": "indicator--c08672ed-64a2-40b9-ac80-219dd7b62095", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d745af-d116-4628-8630-9e07fc18d1e1", "sighting_of_ref": "indicator--7ebd3aea-b77b-4515-a011-9a28f11da1c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a474deb5-dce9-4e8d-8a9a-256ef4aea27e", "sighting_of_ref": "indicator--5454e787-cc23-4a15-9551-c6e496901281", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326282fa-7f2d-4a25-871a-5f5f2790b818", "sighting_of_ref": "indicator--5454e787-cc23-4a15-9551-c6e496901281", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67c8015-8203-450d-bbd3-e0bcad80f167", "sighting_of_ref": "indicator--d7774c9b-a916-4b4b-9067-ce5ccd785cc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2cb91c-e0ef-4183-8875-d686d5eec351", "sighting_of_ref": "indicator--d7774c9b-a916-4b4b-9067-ce5ccd785cc9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f157c6e-7c56-4b49-b5a8-d51c83eef4c7", "sighting_of_ref": "indicator--e3537092-5e56-4121-8728-4b07db9e9c89", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa911ab-3609-463f-8618-c86edb73211f", "sighting_of_ref": "indicator--e3537092-5e56-4121-8728-4b07db9e9c89", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06278539-6ea5-4c91-834b-ee180fd4429d", "sighting_of_ref": "indicator--30d3422b-4d7c-481c-b9f1-91dd98cac002", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eecd72-843f-419b-a078-fa88af3e763e", "sighting_of_ref": "indicator--ae6b7366-28b9-4e1c-b144-5fec9e849c9e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572a9f5d-4a14-4f50-8477-82d3c87cdc38", "sighting_of_ref": "indicator--4e434f19-6edf-40f5-b3be-af0bd50e7470", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a110fd-c5e9-4c08-b7c5-c232d8673736", "sighting_of_ref": "indicator--69e9d640-d25c-44ed-932d-17b64e4d51ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70ed2c0-7435-4ba9-8f2a-537f68d1d0e3", "sighting_of_ref": "indicator--69e9d640-d25c-44ed-932d-17b64e4d51ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f30b5f-d8d3-4714-b6be-9c7ac6e06a70", "sighting_of_ref": "indicator--8e66d7ef-ed9e-4834-97d2-8ea23ca393d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17c81a4-aed2-4bbf-9794-653abe2db383", "sighting_of_ref": "indicator--8e66d7ef-ed9e-4834-97d2-8ea23ca393d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736e4075-92b2-4287-9a8c-e9c8aa4b142f", "sighting_of_ref": "indicator--d65610b6-84eb-4d38-80d1-1f67056e616f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c35531-e45f-4266-a677-a2caadf7ef66", "sighting_of_ref": "indicator--5ee30ff9-07f9-4515-85a1-bf09773150d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abb073d-9db5-49d3-80bf-ff427563010f", "sighting_of_ref": "indicator--8bd6449e-2ad8-4700-8f4f-e783e68a1ee1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a896993d-addf-4ede-8c45-8b2c4007223a", "sighting_of_ref": "indicator--8bd6449e-2ad8-4700-8f4f-e783e68a1ee1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664e83d1-05de-4bff-9c54-85503f199b68", "sighting_of_ref": "indicator--8c07e826-e0b5-46d4-a2d1-b6fd0d7b9ff0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35cf509-98ea-454b-89cc-70b1c0e08566", "sighting_of_ref": "indicator--8c07e826-e0b5-46d4-a2d1-b6fd0d7b9ff0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324ba482-3871-4d59-a143-f99410754eab", "sighting_of_ref": "indicator--6b2183ef-6ee0-4111-aa01-da94640bc725", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24224102-46a6-4e16-9181-1ea8696702ef", "sighting_of_ref": "indicator--3b4a4378-3da1-45ae-8ffd-d19c53c2eec5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894832c0-4619-4a05-a272-2aeaf5bbcc99", "sighting_of_ref": "indicator--770a6d36-bbd3-4149-bb0d-4b4c197a5f4b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdff459-b7fc-4656-bbde-0352b694f17e", "sighting_of_ref": "indicator--770a6d36-bbd3-4149-bb0d-4b4c197a5f4b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac01937a-2b50-43be-a1e7-4e8f4fa4187e", "sighting_of_ref": "indicator--e29d7340-fe5d-43c4-a2d2-3710121cf26d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e564f9e-3f92-4344-9d02-d1561dc8369a", "sighting_of_ref": "indicator--e29d7340-fe5d-43c4-a2d2-3710121cf26d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de74bec-6d34-40bb-869f-bd29c7eb9544", "sighting_of_ref": "indicator--e29d7340-fe5d-43c4-a2d2-3710121cf26d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcca90b-7d6d-4873-ae73-ddbde345f39e", "sighting_of_ref": "indicator--d6d81c27-4fe6-4750-a857-31eb18a2dbbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76055106-e372-4e1a-a9df-ad9e13c5d077", "sighting_of_ref": "indicator--a6a2320c-9176-496a-9252-93c2ccc656ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75d2fe1-6e1f-4161-b2fe-0403d0c4cf89", "sighting_of_ref": "indicator--a6a2320c-9176-496a-9252-93c2ccc656ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2408e7-c111-410e-92b0-601e3a17593c", "sighting_of_ref": "indicator--d057675b-c628-458f-bc34-28ac88c331e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ee510d-4a96-40c0-b489-e8fd4efd2975", "sighting_of_ref": "indicator--d057675b-c628-458f-bc34-28ac88c331e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c47f1a-76ad-4b2f-ae32-ea4577cce60a", "sighting_of_ref": "indicator--0b13e8b7-beb9-4f3f-a614-fa789c1eabcc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a05e0a0-45a6-48d0-bc39-9eca8f798f20", "sighting_of_ref": "indicator--42fe598a-cc94-4a54-b181-dd9d7eb016a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db1f26a-b9ec-4406-85a6-0dccaee31bbf", "sighting_of_ref": "indicator--e905c696-c709-4a43-85e5-96713825d8a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef636d3-2c4e-490b-9e88-cb2232129cfc", "sighting_of_ref": "indicator--ac881b08-ebb5-4b97-84ca-f639af638e6e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b66f986-e094-4109-80c1-066a8ac0cab0", "sighting_of_ref": "indicator--ac881b08-ebb5-4b97-84ca-f639af638e6e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f88e65b-7bbb-4352-96be-f60d2f6622cd", "sighting_of_ref": "indicator--1f883aa6-a7de-4151-928a-636ae5f62367", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cf672d-3b63-4cc9-8737-401ebc56dd55", "sighting_of_ref": "indicator--1f883aa6-a7de-4151-928a-636ae5f62367", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbf0dd0-3527-4773-bb35-966f589973e1", "sighting_of_ref": "indicator--dd0d1541-cd22-44ae-8bba-bb23a86be1ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29589a61-5787-4399-9819-332ff7c90b01", "sighting_of_ref": "indicator--2cfe342a-1f17-491e-8c3c-579a98a281ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fa63cd-72a6-4a48-abf8-a7fb772148ef", "sighting_of_ref": "indicator--f8db916d-9416-47a1-afd3-244b82f44685", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871bd241-14a4-4da6-9be8-12624a190aa4", "sighting_of_ref": "indicator--f8db916d-9416-47a1-afd3-244b82f44685", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2b9c80-01c1-4ded-bc40-aca79289d4b1", "sighting_of_ref": "indicator--19d9955e-66be-4fa7-86c5-0c84f38e223b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd65f2ee-ee5b-4948-b0bc-794cb043a3a1", "sighting_of_ref": "indicator--792d1324-78b1-4324-bdea-ab57940af88a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351528de-c841-4049-9b1e-7e9ea85013fa", "sighting_of_ref": "indicator--4ff8ebd0-9023-4e59-b9ed-056936b38f09", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65647c09-a60e-425d-bf8b-14c25ee67309", "sighting_of_ref": "indicator--4ff8ebd0-9023-4e59-b9ed-056936b38f09", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1a2bc7-bfa5-490a-8ce3-02ac069cd5e3", "sighting_of_ref": "indicator--7fc64e76-f3bb-4c54-b794-2792ac89d888", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece696ef-3725-4264-a2ff-dd285ed7f8ca", "sighting_of_ref": "indicator--7fc64e76-f3bb-4c54-b794-2792ac89d888", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d56c51-5941-415b-8046-f325862acb8d", "sighting_of_ref": "indicator--086f21cd-8d00-4238-aff6-bcb38d409b4f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7318f8ad-995f-45f2-aedb-2564d04ec12c", "sighting_of_ref": "indicator--a1e60cea-6696-4510-84ea-6c5e0511d2aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a0879d-5931-4a9e-8987-4416502e9340", "sighting_of_ref": "indicator--822141a0-aaf7-44a5-ad21-cadd9c140a20", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53102d7-386a-4c42-b0e7-0b4ef0f871ad", "sighting_of_ref": "indicator--822141a0-aaf7-44a5-ad21-cadd9c140a20", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dbd875-8f40-4981-bafc-41b4aa62ab70", "sighting_of_ref": "indicator--e7f75dbb-7704-4181-bd65-b1da48dead29", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bff4cd-3205-4b21-8bf7-f194acdc4130", "sighting_of_ref": "indicator--e7f75dbb-7704-4181-bd65-b1da48dead29", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217caebd-2f08-40b5-93a8-22e317366ebc", "sighting_of_ref": "indicator--13bdf422-c543-41af-a18c-1c0d2271c48d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8554e5d8-6a3c-4754-8088-756987dc894e", "sighting_of_ref": "indicator--62029fa4-bf0f-43ca-b2a9-6544681075cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf10c38-5713-44a8-8195-f21d67d71dbd", "sighting_of_ref": "indicator--434d81f0-3f18-4d18-9fd3-a5ed1f34de4a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b919af7c-fdf9-450c-a5f2-907b4f318fee", "sighting_of_ref": "indicator--9ad6077f-b109-4575-a4bb-7dc490b433df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03631d0-913b-4ca2-851c-768af965c6b5", "sighting_of_ref": "indicator--9ad6077f-b109-4575-a4bb-7dc490b433df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73cfa7a-5dd0-402d-9494-476b215f03c0", "sighting_of_ref": "indicator--8dea6183-7ab2-4791-8ddd-8c6325e58ad7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e23759-1313-47b2-baf0-16809ecaffe9", "sighting_of_ref": "indicator--8dea6183-7ab2-4791-8ddd-8c6325e58ad7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c7616a-8bc2-4027-9980-b7c63940e444", "sighting_of_ref": "indicator--32608575-348b-4435-9d9b-c9ad653b0584", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fb5b14-92d5-4eeb-876f-06dee78539a9", "sighting_of_ref": "indicator--b687efd7-fc5b-46a4-8744-6beac1156585", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902e5c9f-099e-4ba6-9584-f9ddec6a14c2", "sighting_of_ref": "indicator--8943c2b0-6924-47e7-9080-a8e83b92f1a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcd141f-8c3e-40a4-bd0e-2ef32768a7d3", "sighting_of_ref": "indicator--8943c2b0-6924-47e7-9080-a8e83b92f1a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e2a422-64f7-419d-b749-75600ce59e23", "sighting_of_ref": "indicator--ff6e2c57-38cd-4e94-92a4-6234f6f43d22", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fef51c-a579-4860-91aa-a918e186e962", "sighting_of_ref": "indicator--ff6e2c57-38cd-4e94-92a4-6234f6f43d22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fe33a9-fd3c-49c8-98a4-79fe563fa56d", "sighting_of_ref": "indicator--205c000b-a860-412b-b74b-260e2992b867", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e698e752-b541-4c08-b678-930724fbe4af", "sighting_of_ref": "indicator--198efa22-d0d5-4f57-b71a-5eb0f0a46883", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cda831f-a7b8-406a-b9e7-e04318a55c08", "sighting_of_ref": "indicator--198efa22-d0d5-4f57-b71a-5eb0f0a46883", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3d1a1b-cb59-4b6e-86de-eeee90983723", "sighting_of_ref": "indicator--ab4a2a2c-dde3-451c-96ad-8cd4a10f969a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfce9bc5-f0a3-446b-8088-c1724f86162e", "sighting_of_ref": "indicator--401e057e-a8e6-46e5-9905-11dcc658a377", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce21896a-ae1d-460c-8121-2a28687e9266", "sighting_of_ref": "indicator--e73a1592-cf9a-49ac-8ec6-e6ebbed7464a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a63f65-ee9e-4e23-9644-556b3ede4d92", "sighting_of_ref": "indicator--e73a1592-cf9a-49ac-8ec6-e6ebbed7464a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3642d2-d5d9-4b6f-96bf-61dd255c4efb", "sighting_of_ref": "indicator--8f23b494-a3f7-4a16-8f59-3bc2f7257941", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edfa8e2-8c7e-4457-a5a6-506e09385b3e", "sighting_of_ref": "indicator--0c820bcc-c3bf-4bcc-a05c-3a3a7c6d098d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437e6732-1731-478c-8743-cb40e953864c", "sighting_of_ref": "indicator--80416739-0579-4ced-8a10-079a9e9e7c93", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34936a44-90c7-4967-831d-b3c8139d636c", "sighting_of_ref": "indicator--7eca5c91-bf4d-4753-8d78-e4dbb49e74ec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a1047b-07d8-4339-89a1-07b81e2cb7de", "sighting_of_ref": "indicator--7eca5c91-bf4d-4753-8d78-e4dbb49e74ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad03120-3f78-480d-8187-99ce0258a3eb", "sighting_of_ref": "indicator--7eca5c91-bf4d-4753-8d78-e4dbb49e74ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9a06cc-8fd0-47f0-b16e-164e18b33f9e", "sighting_of_ref": "indicator--73633401-b0a5-400a-9354-be2a5d86047a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f8a698-85c6-4180-a69a-39d309d35cc5", "sighting_of_ref": "indicator--4a9c0023-f190-4e00-9f1c-ef5dc6bf3120", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5818d960-c64e-4f8a-a1b6-df7394b0a2e3", "sighting_of_ref": "indicator--a226e28c-1673-49ec-a83e-f4446af143b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b8738c-a87f-41a7-92cc-91d60265a887", "sighting_of_ref": "indicator--bfdc294a-73d2-498c-9a7d-878964865215", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008938ef-8e68-4f97-8951-eb4cdcd5c6bc", "sighting_of_ref": "indicator--ada909ef-62f4-45c0-9235-2c2e26fe037f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da40be6-f0d5-4629-84c8-983c32a4319d", "sighting_of_ref": "indicator--bc952489-7b9c-423a-b225-06e66311aa4f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d611fdd6-459a-4b60-a281-898e0c33e671", "sighting_of_ref": "indicator--bc952489-7b9c-423a-b225-06e66311aa4f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3efc56-6008-498d-be2a-fadb90e99ea6", "sighting_of_ref": "indicator--965617b3-2b2e-4555-b0a5-809a819f7152", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eee761-7e05-476c-bc21-0241c57761d4", "sighting_of_ref": "indicator--256979f2-7f7f-4a45-ae21-0a771a81f290", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4559274f-979e-4926-924a-59c6c07b9371", "sighting_of_ref": "indicator--4aad098c-9e09-4744-af6d-2cbed382b5f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b37a31f-7637-4c90-84a3-e98fe9a7b94f", "sighting_of_ref": "indicator--1ce9f782-c199-441c-ac96-1891e4bfd9bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9389140-37ff-4f7b-a724-eba687579863", "sighting_of_ref": "indicator--a9bbb5ff-e1d5-4acd-8287-5e35c05f1c43", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0448066-7247-4abb-a57f-09feeba52ed9", "sighting_of_ref": "indicator--a9bbb5ff-e1d5-4acd-8287-5e35c05f1c43", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa795f4-34ed-49e2-bfbc-4ca699279d4a", "sighting_of_ref": "indicator--cf01f365-077e-43e7-96fe-d125691b5655", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc0e6b5-f6a1-4ccd-8673-05a52e3c2130", "sighting_of_ref": "indicator--cf01f365-077e-43e7-96fe-d125691b5655", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2225ad23-6764-4890-9a9a-bb8600fb3054", "sighting_of_ref": "indicator--cf01f365-077e-43e7-96fe-d125691b5655", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e1b862-e45c-4441-a049-2b1e0c6cfb04", "sighting_of_ref": "indicator--59a839f1-6a3a-4aad-b5a4-a7404b8be377", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3107337b-9b67-4f5b-89cf-2d1b2b3bb98b", "sighting_of_ref": "indicator--e88fe464-ea90-4ca8-9f90-e73d97ad1128", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47761090-53e7-4956-9c32-b5d174a2cc09", "sighting_of_ref": "indicator--e17bb6e2-d1af-443e-b5ad-c6cc0423d459", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2123808-f1da-40da-81e1-a3940e6ea55e", "sighting_of_ref": "indicator--790faf65-6bba-4185-a58e-3878bc5db97d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68471bcc-73ad-4ed5-add5-89dde142ef6c", "sighting_of_ref": "indicator--bea36a49-6280-48c8-9412-8a997d008372", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422086c6-92e0-401a-9f6d-5b27eb6116f3", "sighting_of_ref": "indicator--bea36a49-6280-48c8-9412-8a997d008372", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a56625d-0cce-42dc-889c-2c5ecf02a323", "sighting_of_ref": "indicator--5d44922b-2625-4f3d-b68e-8c746a6bc205", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00eb0db-a7b2-4826-8a5b-31433099061a", "sighting_of_ref": "indicator--a60d838c-394a-4d81-852a-e2bcb24b9990", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337118ea-45fc-4b6d-88b8-5b15391013a2", "sighting_of_ref": "indicator--144ab58f-36fc-4f1c-92f4-d6e6ae3041a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce215330-7072-4484-b8c4-7b4865cf44ab", "sighting_of_ref": "indicator--144ab58f-36fc-4f1c-92f4-d6e6ae3041a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b5127f-60d5-413b-b8e6-2c62d434d0dc", "sighting_of_ref": "indicator--a3044fdc-806f-4601-8af1-fa4b129cda51", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03c9e77-cdfd-435b-9032-170a748c6865", "sighting_of_ref": "indicator--a3044fdc-806f-4601-8af1-fa4b129cda51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ac56b8-bcb3-48fb-941a-30169819e833", "sighting_of_ref": "indicator--7ed8d5a8-3d4f-46bf-9152-7aa3db32d58b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab195a46-21f2-47b1-94c8-f7e33abe144c", "sighting_of_ref": "indicator--8ffee5cc-cdf2-4d87-8cd9-73b935e174fc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baf80ef-8706-4359-bcc2-6b3250ca9355", "sighting_of_ref": "indicator--8ffee5cc-cdf2-4d87-8cd9-73b935e174fc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c43db3-b829-44ba-b839-3dfa7c22af37", "sighting_of_ref": "indicator--a7d30eb9-a5d4-4cf8-a25b-f607254772dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f057116-dbfc-41ce-91d6-2001ef11537a", "sighting_of_ref": "indicator--ddd7ccb1-9f8e-4beb-a920-b227ec7dcc8f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16b68e6-1ff0-4446-a0c3-891074fa7549", "sighting_of_ref": "indicator--ddd7ccb1-9f8e-4beb-a920-b227ec7dcc8f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6dfd6b4-9a7d-47fd-8d84-ad473d13ab20", "sighting_of_ref": "indicator--c0d64030-e32b-4295-b961-53eacffee5ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c7d9dc-3d95-4b64-850a-fdfe8fe9a998", "sighting_of_ref": "indicator--c0d64030-e32b-4295-b961-53eacffee5ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216664c7-0339-4483-9cc7-93537d2f82bd", "sighting_of_ref": "indicator--191d1883-0dcc-46b2-a4d9-4ee73bc46ab2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b179e2e0-382c-44a4-bf4f-deb239c1515d", "sighting_of_ref": "indicator--f1a09df2-9ec8-4f43-9763-664f6e4186cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df1e26c-6146-4975-8936-d8357eceb9aa", "sighting_of_ref": "indicator--f1a09df2-9ec8-4f43-9763-664f6e4186cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3675ed8-7b5c-4173-b6d6-3557b64325da", "sighting_of_ref": "indicator--f1a09df2-9ec8-4f43-9763-664f6e4186cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0755659-f1db-423b-9b23-0e26cd394d6a", "sighting_of_ref": "indicator--d154badc-c315-4792-a1d9-e188a3c828e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980921c5-a168-4153-b335-8c6871dfdf56", "sighting_of_ref": "indicator--d154badc-c315-4792-a1d9-e188a3c828e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670268c0-6684-4751-881e-7ad22450e746", "sighting_of_ref": "indicator--cde14e52-46ba-413f-a8f9-f44f9c3d7db2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46f0481-422f-4e9f-b49e-bff6a29b2805", "sighting_of_ref": "indicator--55ee6312-80dc-4f84-9749-da3a1926bbb3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20993c93-9635-441d-927e-7ad79061ed31", "sighting_of_ref": "indicator--5b9b8027-480d-442d-9c8d-5ec428cd70f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3aae81-c819-42c0-821a-3702944c8522", "sighting_of_ref": "indicator--3fc82d61-540f-46fc-94de-4e50f1878b31", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb260980-9c63-41e8-957a-17ae83f72132", "sighting_of_ref": "indicator--08ca4806-9cbf-4db0-8ff1-9a90480081ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a65bd7-09d7-456e-9469-938a6cf2ea37", "sighting_of_ref": "indicator--08ca4806-9cbf-4db0-8ff1-9a90480081ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb29937-59be-4883-9725-2a06fe5884d3", "sighting_of_ref": "indicator--03fa2598-0abc-46d7-a9bb-96fb339c8ab3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39d7ad4-feb3-418a-a9ba-b8ab0aca19e0", "sighting_of_ref": "indicator--4260f7fc-4fea-4e37-8002-d77519990f26", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4723f10a-af0f-4804-a11b-b84184613a49", "sighting_of_ref": "indicator--3550ed0a-596b-4afc-ab67-badafda4a026", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a8ed81-9356-40ad-8e14-ff452e86b291", "sighting_of_ref": "indicator--9d2c4345-6b7b-43c9-a775-fa06c0627b16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96d5ac5-1b34-4638-a959-137ff3dec72f", "sighting_of_ref": "indicator--a1809c50-c935-475e-8bf2-58f187d7c3c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74512a44-4f47-42fc-a5e7-4ec7823f2aed", "sighting_of_ref": "indicator--5d0673c5-fc6e-4a11-ae14-a49a7c943740", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3720743f-df84-4351-883d-5f83bd70ed68", "sighting_of_ref": "indicator--5d0673c5-fc6e-4a11-ae14-a49a7c943740", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d58f27-2c85-4e1a-8d67-73e4eef9cfad", "sighting_of_ref": "indicator--ac2fa13b-e747-42b9-9f94-aa923a11b24e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ccaa29-40db-45bf-9f72-0822e5d40680", "sighting_of_ref": "indicator--de3d7d44-ef0d-43d9-aca2-d3544fa224a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee20524-effa-49e7-af07-e8086eae2712", "sighting_of_ref": "indicator--0e145a7f-fa9d-4999-b027-6cb31d2b5de8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d110185-6316-4173-86fd-35410547182d", "sighting_of_ref": "indicator--0e145a7f-fa9d-4999-b027-6cb31d2b5de8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cee9dfa-efb0-4aac-bb16-571c0f8d17b8", "sighting_of_ref": "indicator--f115df4f-c842-4176-999c-8a8bf32c2df0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4eae34-957b-46dc-b4e9-d9dd0e4d771b", "sighting_of_ref": "indicator--b063708c-ccf1-4be5-a8a5-ceeb6493e800", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f43c4d-2588-4617-9f12-535777a3b38b", "sighting_of_ref": "indicator--ff7bb8a4-aa2a-4f72-a947-89b87aa74640", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ada09e-68b6-4970-acd4-cb18c5cb4287", "sighting_of_ref": "indicator--515146bc-15cb-45a9-aa8e-6a0cef99d204", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeca559b-d85d-4a82-8d89-c5066d553288", "sighting_of_ref": "indicator--d668a6db-7676-4045-9e38-33c54bc2dfed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ed240e-04d5-4569-8360-7f575c2762b6", "sighting_of_ref": "indicator--14c32d99-a580-4d3f-af1c-842cc861f951", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45282c66-29ea-4faf-a628-1064c1ffe59a", "sighting_of_ref": "indicator--c0de7a2a-50b8-48a2-8b6a-b1649773f53b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1955fc4-8af6-40cd-9ae6-4a7e93efd7d5", "sighting_of_ref": "indicator--c0de7a2a-50b8-48a2-8b6a-b1649773f53b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53bae1f-10f2-4c6d-ba7b-27b25446f2eb", "sighting_of_ref": "indicator--f2d69cca-ab2f-450d-83b4-f3512aa6bb72", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593df9e7-18cb-4df1-bb2b-0de99a067d8c", "sighting_of_ref": "indicator--74ad33af-88be-4379-8377-86325f8ea8ca", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288eabd4-4f0c-40d4-ab64-90d29c9a369d", "sighting_of_ref": "indicator--bea54d3c-3fc7-4cc8-bf54-7a5444191547", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8456c1dd-9604-41f1-8fbd-15c8e20186ff", "sighting_of_ref": "indicator--40fac944-f146-42ec-a172-c65c8604199b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0314122-5486-4d84-a43c-b6d221866860", "sighting_of_ref": "indicator--40fac944-f146-42ec-a172-c65c8604199b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7fd1a4-522a-4449-9acb-88578e5cca27", "sighting_of_ref": "indicator--041bc8a9-fdd2-4478-b074-e111b9314ea0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eb8ad6-8d04-410a-a835-9a5a4c491f72", "sighting_of_ref": "indicator--041bc8a9-fdd2-4478-b074-e111b9314ea0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b447d9-4f85-4b2e-8d0a-88193f4b9dd8", "sighting_of_ref": "indicator--041bc8a9-fdd2-4478-b074-e111b9314ea0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998282e2-e22f-4b94-892d-c67276c968fd", "sighting_of_ref": "indicator--c1d2b954-4edc-435a-9583-30d16eb6edaa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351b0f22-4859-4cab-aff9-c9fee034f2ad", "sighting_of_ref": "indicator--416e4596-112a-497c-9f95-dff88fa64ffa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd80cdaf-501b-4c42-87d3-324dbef47918", "sighting_of_ref": "indicator--416e4596-112a-497c-9f95-dff88fa64ffa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e230f236-94bd-4749-9c8f-d5823a377ac8", "sighting_of_ref": "indicator--416e4596-112a-497c-9f95-dff88fa64ffa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a5d3e0-afe3-450b-ae3b-d20aea0273fd", "sighting_of_ref": "indicator--1f0c6cee-f5d2-4dac-9e92-7951d16161ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719af436-c3c0-412d-b105-cb64f101f0da", "sighting_of_ref": "indicator--d0aea264-7d00-487d-af70-7190bf6a1ade", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7abdef2-dc31-4c0e-9a2e-49618aec8599", "sighting_of_ref": "indicator--d0aea264-7d00-487d-af70-7190bf6a1ade", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07a72b5-c952-4c64-9abb-9e07423082db", "sighting_of_ref": "indicator--d0aea264-7d00-487d-af70-7190bf6a1ade", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290c7771-0b6b-4919-bb27-7f44ecdbac07", "sighting_of_ref": "indicator--9ec48ffe-0e2e-41ad-a8d1-50017c848e73", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa35ea2-4ee4-4880-bed6-2f85da6f5379", "sighting_of_ref": "indicator--4ed78b2e-bee7-450d-91dd-3539376af9f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc49117-a00f-4dab-afdf-b1c14f775470", "sighting_of_ref": "indicator--d9e5e729-0018-4f3c-b1d0-0ada7f2c9582", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2915bf2-9b8d-4ad4-80c5-c3885be2fcf6", "sighting_of_ref": "indicator--6f025d1e-2d7a-4f37-b000-7b9bbe5872eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75936e39-4d87-4637-9f8e-6f458e0989b0", "sighting_of_ref": "indicator--bf99d364-bf97-4d15-959b-5660a370804a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfafeec5-de3e-4e6b-ac96-5d3578341e48", "sighting_of_ref": "indicator--3dfdb838-49fb-421e-b730-cb16a7d6266b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0e5d28-dd9d-4b38-8056-6c2d5dc37cc9", "sighting_of_ref": "indicator--3dfdb838-49fb-421e-b730-cb16a7d6266b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2062eae-4584-45f0-8a3b-35bbbd21492c", "sighting_of_ref": "indicator--1745f901-46b5-41d7-9abe-8d387631c923", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e292c56-5ea6-4c18-845d-bcc036fbbee0", "sighting_of_ref": "indicator--59c5a017-1ad2-4458-95ec-5883f0076625", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0eb454-be6f-4b4e-a91f-61ef0b605601", "sighting_of_ref": "indicator--94c51f27-0eda-44cf-9c6e-baf433ac4e7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c754368-f896-489e-839e-7d47ec33ab15", "sighting_of_ref": "indicator--322f1ab8-7a3c-41a8-a321-fbd2a80a995b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433d320c-cf10-4f61-a908-e6536a0ea002", "sighting_of_ref": "indicator--322f1ab8-7a3c-41a8-a321-fbd2a80a995b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f3b566-8993-40b9-9db5-d770d588192d", "sighting_of_ref": "indicator--322f1ab8-7a3c-41a8-a321-fbd2a80a995b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d0251f-fa10-4590-83fe-dd071ca748db", "sighting_of_ref": "indicator--7cea6213-414d-42b1-bf30-f00dbef004e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c631281a-d91f-45a3-a296-5dc2b0fc4b27", "sighting_of_ref": "indicator--4364af27-c908-4211-9cfd-ac87b637a828", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23a8e37-261d-4562-8c78-e06633cbfbec", "sighting_of_ref": "indicator--1b22db35-b4a4-4054-82e9-005b934c60d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e342a90d-2d05-4501-8a1f-fd2d51835abc", "sighting_of_ref": "indicator--1b22db35-b4a4-4054-82e9-005b934c60d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1f071e-baf7-431a-a7eb-0fb0c23811ad", "sighting_of_ref": "indicator--3d66624e-f352-40c8-884d-63fd1674f162", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67220d38-07c1-420f-b735-ea8ae7fd3998", "sighting_of_ref": "indicator--91feac31-17b1-4066-81b8-faecde7a9709", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23fadb9-7810-4beb-88b0-c6ee01e0bdb3", "sighting_of_ref": "indicator--91feac31-17b1-4066-81b8-faecde7a9709", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e080bf33-bffd-4f20-a279-c6eef6f5f6b2", "sighting_of_ref": "indicator--e2bcd0cc-c756-4f6b-9d1b-c69d75a69509", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551f7a26-c1e9-4dd9-8208-634f6c729e96", "sighting_of_ref": "indicator--e2bcd0cc-c756-4f6b-9d1b-c69d75a69509", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc7e92f-df32-4f37-aa24-8ee486e02897", "sighting_of_ref": "indicator--e2bcd0cc-c756-4f6b-9d1b-c69d75a69509", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe348f3-4e47-4576-9253-558b10ffeb5e", "sighting_of_ref": "indicator--dec47ff9-ad20-4492-9b2c-0e7a0f983eb2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648a972b-ffbe-4218-be51-03c7671b4034", "sighting_of_ref": "indicator--dec47ff9-ad20-4492-9b2c-0e7a0f983eb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb79c78-66b0-4c76-a7a4-ebeb2e5370f9", "sighting_of_ref": "indicator--9f4a5c7f-9920-4688-a136-4a1acf954587", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0e03e9-c4d0-4758-a0f4-c9f755b20309", "sighting_of_ref": "indicator--4c18a604-c0aa-4cae-a082-83fb82dce694", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc1c5f4-f384-45c2-9af0-9848d758f590", "sighting_of_ref": "indicator--4b8dcfd9-ae2c-430f-9ae4-9d8fb1e05c7b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5446b12-c9ce-4182-aa34-5584bd706207", "sighting_of_ref": "indicator--12a5f112-316b-486c-97ce-7ed818f2a6c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8379cec4-3a25-489b-9241-3206d021c544", "sighting_of_ref": "indicator--12a5f112-316b-486c-97ce-7ed818f2a6c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e015b844-1575-4487-9f1b-b0085d4985a7", "sighting_of_ref": "indicator--0a547dd0-cafe-47f4-8341-4c175fc27b6e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd9f9ac-a5a6-4cf6-a96d-e859df773db8", "sighting_of_ref": "indicator--0a547dd0-cafe-47f4-8341-4c175fc27b6e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5234b12a-2d1f-408a-af07-2efb76a00185", "sighting_of_ref": "indicator--0a547dd0-cafe-47f4-8341-4c175fc27b6e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69602f0a-88d4-4f37-a279-d6677a42ef8b", "sighting_of_ref": "indicator--c146368a-d291-40b3-98cc-dc87a3e390ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb883792-4efe-4098-99e9-b0a6c169c144", "sighting_of_ref": "indicator--c146368a-d291-40b3-98cc-dc87a3e390ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eaccd9-dc19-4848-b18f-260b8dc56761", "sighting_of_ref": "indicator--cbbd235b-a03d-425c-bb44-c7c879e6d9c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca21020-118c-4613-8585-9fac59fa7ef2", "sighting_of_ref": "indicator--cbbd235b-a03d-425c-bb44-c7c879e6d9c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd6f108-5f8a-46da-ac6b-f72ee2ac5626", "sighting_of_ref": "indicator--cbbd235b-a03d-425c-bb44-c7c879e6d9c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a41867-c711-4184-9f4f-262656c758d9", "sighting_of_ref": "indicator--f843faf2-38ff-4f55-9df5-db735a6b0eb1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfa85c8-a419-4428-af5f-52443520cdee", "sighting_of_ref": "indicator--f843faf2-38ff-4f55-9df5-db735a6b0eb1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0bce02-5539-4067-9207-68c806c66222", "sighting_of_ref": "indicator--147d7ca6-c0de-4b8b-a692-defcb571e4fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203b5854-73ce-4eef-a024-012c0b7750dd", "sighting_of_ref": "indicator--147d7ca6-c0de-4b8b-a692-defcb571e4fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9cc2dd-076f-4083-84a6-ce99250a7057", "sighting_of_ref": "indicator--147d7ca6-c0de-4b8b-a692-defcb571e4fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95df1b1-1309-4a38-b87c-67d154789a0f", "sighting_of_ref": "indicator--85430e4c-fe91-4495-b54c-76c23e985161", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5373b87-386e-49d1-8853-01597172baeb", "sighting_of_ref": "indicator--33504842-4681-4ab3-8689-2b8bfc724a2e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e987b818-1575-4594-9568-eeade816661a", "sighting_of_ref": "indicator--a6e4b52f-9ec9-4a57-8bc2-f03509c9eacf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c60f9c-543f-4606-864d-af3f2befda04", "sighting_of_ref": "indicator--5489b057-6714-45be-892a-8494a80c24d9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdd0a6b-cd66-4d8d-9089-e9100b62bcf6", "sighting_of_ref": "indicator--5489b057-6714-45be-892a-8494a80c24d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0517f9f-9784-4acf-a7d9-f73ac5c2140f", "sighting_of_ref": "indicator--5423122a-accd-4f4b-8cc3-ff4d39cf691a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38c661a-c9c6-4251-9612-be2e770e6b1f", "sighting_of_ref": "indicator--c1f87ad3-d5a8-44d3-bd00-147261a1e205", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c45cb7-3abc-4c5a-bceb-b25c14fa46e0", "sighting_of_ref": "indicator--683f524c-17fd-43aa-b370-bb5a91338f50", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4b457f-d440-49fb-a243-9b6743924ab4", "sighting_of_ref": "indicator--af056c91-f213-4058-888d-e9e4335f6325", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612f7456-ff43-4eb7-a4b7-8b606e1c7abd", "sighting_of_ref": "indicator--22a8d9a6-3da6-4d62-b342-deb14d5179d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c386f647-c5b2-4170-a1ff-ab013ddf70bf", "sighting_of_ref": "indicator--5b45e98c-131e-4458-82d0-bac76891c782", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28503de-9c2c-4a55-834c-d9a36c003d89", "sighting_of_ref": "indicator--ca9c59ca-7c3b-4e1a-a831-2a7ca89dc343", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c114ab9-86ac-423e-ad5d-d8d86685895c", "sighting_of_ref": "indicator--ca9c59ca-7c3b-4e1a-a831-2a7ca89dc343", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba5c1e6-f5cb-46b4-8f76-8167dc6864dc", "sighting_of_ref": "indicator--d4e6687f-68b8-4c14-b483-23ef5f03768d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f407b1b-4e52-4de9-89db-0e6c3172ab72", "sighting_of_ref": "indicator--1ce7806e-16e2-497d-b09a-f680dbe4554e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef617a4-3efe-4b92-90a0-bfa444697149", "sighting_of_ref": "indicator--5362311f-f39a-43f9-afa0-319512704e13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2305e47-1657-43cf-9785-5707f7dba3e4", "sighting_of_ref": "indicator--5362311f-f39a-43f9-afa0-319512704e13", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe0b69c-4905-4418-a4a3-f31a37823bde", "sighting_of_ref": "indicator--f74231e6-b31d-4bdc-8cbb-b1199499370d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439c0e2e-dfb7-4455-baed-c5a67f445a20", "sighting_of_ref": "indicator--f7c8a9ff-bec8-4f25-94b3-e7d661f41566", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df9c409-fa0f-4c7b-9869-05a78bf1a237", "sighting_of_ref": "indicator--0ceb226d-b37a-4801-9a4e-eac302d89be7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62e95f8-0841-4342-a692-19a29743455d", "sighting_of_ref": "indicator--c20f59d6-7a5a-4e83-9537-32be3f01dd63", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366056b5-d177-4e10-8d67-9fbb555db468", "sighting_of_ref": "indicator--b6be15ed-85bd-4e2f-9a81-dad510482e42", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ebddbd-1be6-45e1-9639-12bfb95c1aae", "sighting_of_ref": "indicator--3511e25d-5cef-442e-a6bc-366c2abade3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7979804-d1f9-489a-89f6-10e75a583a18", "sighting_of_ref": "indicator--3511e25d-5cef-442e-a6bc-366c2abade3e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f90b8e-8c9a-460b-a7be-d976773ac0c2", "sighting_of_ref": "indicator--ff5fb17f-f7a5-4b27-89d0-b5efdf6e4569", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9caf0cc-13a0-4132-9318-c14bd0d5884a", "sighting_of_ref": "indicator--ce76db40-1969-4fd1-a089-ae2c81e32d83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5bbb1a-2044-4400-98b8-128e67181552", "sighting_of_ref": "indicator--4ac09585-f7e9-412f-ab14-37d6afa03626", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55f4d73-fb2a-464d-b30d-f563fc7960ba", "sighting_of_ref": "indicator--4687bf38-f4fc-4999-b0a4-a6c4d5fe60e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba79cc-b772-407c-8f9a-a23036d25715", "sighting_of_ref": "indicator--63888cef-0449-42dc-a309-7d88b80b3445", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadd4997-fd54-4d16-ae59-c4983d5b92d7", "sighting_of_ref": "indicator--e73735c4-9cb1-45c3-ab3d-e9a9a51adaa9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1508e97a-9c28-4bae-8c2c-1825d47bfa62", "sighting_of_ref": "indicator--d97ecb47-08f1-460b-9d2e-0bb9eec3a2a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822ac4ea-a610-4b12-bdc8-1ab108416d43", "sighting_of_ref": "indicator--5bc75537-0380-4c3f-acfb-6a7af5dcc5be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d28496-79cc-400e-b53b-722adc7027e1", "sighting_of_ref": "indicator--4ee8f4d2-5d11-43d3-97dd-d9b1b479e97e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774f04f0-8418-4895-9309-816ffb528c79", "sighting_of_ref": "indicator--1848e87b-ca55-4c1f-b75c-47f7aaa03353", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240cd6f3-23d2-447f-83bb-2c21db8cacdd", "sighting_of_ref": "indicator--1ea126b0-5f87-4c85-9dbe-f55803179baf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15d5e26-4738-40b6-8c4e-f412e74b4e52", "sighting_of_ref": "indicator--3d9452a3-e3c1-4529-917d-9913e086a911", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ea66c2-a688-4a85-92fe-58fe5b9aa4cb", "sighting_of_ref": "indicator--328c41b8-5de3-4f95-9191-c83b9af821ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51512ade-0339-4eda-aeb1-6c5b4b4e9c85", "sighting_of_ref": "indicator--457c4c8d-9c0b-447c-b2aa-4bf887b4e51c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815bc6c1-7ff9-4d2e-a6e5-ff69ede8931a", "sighting_of_ref": "indicator--0cb4623b-128e-43b8-84c2-5677dfdc110b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fca589-2fb8-48d0-a2a7-79ac059fb4a7", "sighting_of_ref": "indicator--0cb4623b-128e-43b8-84c2-5677dfdc110b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07070ed0-120e-45a9-990c-f66f140af4c5", "sighting_of_ref": "indicator--0cb4623b-128e-43b8-84c2-5677dfdc110b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59014721-1fb9-4358-909c-fd96bab05b4d", "sighting_of_ref": "indicator--5e55ce4c-c9dd-42d3-81ff-a739780e4350", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c01a1f0-0827-4fca-9edb-d5161f2b0171", "sighting_of_ref": "indicator--8c22db69-5819-4a69-a7e3-c984cb8d03a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fa148a-818e-4315-8ddc-7286cd33b5e5", "sighting_of_ref": "indicator--8c22db69-5819-4a69-a7e3-c984cb8d03a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee04bf6d-f5f2-4ae1-9998-804b16143cbd", "sighting_of_ref": "indicator--63f8ca57-0a65-4e7e-a452-757b7a16056d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de777ab-a518-4c0e-a884-4e7de0496869", "sighting_of_ref": "indicator--4777e2e6-d437-4046-bbb9-6a668f1f7346", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379b44f3-4619-4835-9030-18fea181c12f", "sighting_of_ref": "indicator--409bea83-3c27-4506-b555-707a9ff06f71", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913aa70e-f179-4274-8d7e-8cea30ac4124", "sighting_of_ref": "indicator--72d103b5-5cf0-4e5b-a967-8e5606bcf572", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a877b059-12c1-4f08-b490-e2979870d118", "sighting_of_ref": "indicator--a790dfdc-9113-4f4b-8110-6a077b90c81f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34269f8-de56-4dec-bfa0-1970c80048e0", "sighting_of_ref": "indicator--5f624a11-dbaf-4547-8a88-a488994afe51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7227ce-2f7b-4a5d-9a53-2fc930cb138d", "sighting_of_ref": "indicator--5f624a11-dbaf-4547-8a88-a488994afe51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91078c24-db41-4c3d-afcb-629f5c89a49c", "sighting_of_ref": "indicator--ab2553de-92c3-4a11-833e-e3db1b6b38ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65f9c11-102b-48b3-93fe-cf309397e5db", "sighting_of_ref": "indicator--ab2553de-92c3-4a11-833e-e3db1b6b38ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c81f5e8-f7d4-4ca4-9965-d020a642e60a", "sighting_of_ref": "indicator--793c188c-744c-4e56-8a0b-8becd396ef21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838cf378-6821-4f32-b265-4007e013a717", "sighting_of_ref": "indicator--69f7ab73-1e3f-4b69-9164-906ada1b24b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d994870-a0d6-43c6-86e3-f3596292fe3f", "sighting_of_ref": "indicator--b7500676-f87e-4768-99ea-6879570c8bf5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02567754-6a26-42fe-8469-f024862da21c", "sighting_of_ref": "indicator--b7500676-f87e-4768-99ea-6879570c8bf5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63516025-4fce-49c3-bd8a-5526457df237", "sighting_of_ref": "indicator--b7500676-f87e-4768-99ea-6879570c8bf5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff8948f-7697-435e-89f3-7ef65a15ff2e", "sighting_of_ref": "indicator--6fd2e08d-cb04-47e1-a3b8-391c1983f14c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3352da01-1985-4f49-93ad-0a9e0d164f99", "sighting_of_ref": "indicator--6fd2e08d-cb04-47e1-a3b8-391c1983f14c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacd281f-aa0a-4e8a-bc94-3ded48ae2c27", "sighting_of_ref": "indicator--6fd2e08d-cb04-47e1-a3b8-391c1983f14c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1ce0f4-2d75-47a5-bf33-51155a4dcbc3", "sighting_of_ref": "indicator--2f1e10c8-0a6b-4e9b-84ad-0a2be7e2741e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61ca687-9b36-4c5a-8519-97cf4ec2c914", "sighting_of_ref": "indicator--2f1e10c8-0a6b-4e9b-84ad-0a2be7e2741e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4af6fc1-afa5-4034-94b3-6595bfb086c1", "sighting_of_ref": "indicator--2f1e10c8-0a6b-4e9b-84ad-0a2be7e2741e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0348ad00-2ef5-4580-a3c5-86aac8e332d6", "sighting_of_ref": "indicator--6e1fc5ab-d2c5-43d6-ba28-8f4dd1f57be7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da6166b-c620-4af5-81c6-13101fff9288", "sighting_of_ref": "indicator--6e1fc5ab-d2c5-43d6-ba28-8f4dd1f57be7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b881e3-b6f0-4cc2-a403-40f5bd1e80db", "sighting_of_ref": "indicator--6e1fc5ab-d2c5-43d6-ba28-8f4dd1f57be7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93dfa55-a7f2-4aeb-ad56-fe8e46c6057f", "sighting_of_ref": "indicator--da79db2b-9932-4cc9-8baa-6f0b728b2efb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9494de99-2735-4d23-a477-af3825f8c457", "sighting_of_ref": "indicator--da79db2b-9932-4cc9-8baa-6f0b728b2efb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2364b5ac-cb01-4417-a0a6-9f56abd39564", "sighting_of_ref": "indicator--da79db2b-9932-4cc9-8baa-6f0b728b2efb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e609af-9eb3-4d28-922a-6155d72cbc7f", "sighting_of_ref": "indicator--90707540-39d6-4bf8-bf95-938e37f8f22d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc16188-b1a5-4e72-ab2f-f2ce0a418eeb", "sighting_of_ref": "indicator--90707540-39d6-4bf8-bf95-938e37f8f22d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c7f089-6572-49ae-9d99-d0ceeecf020b", "sighting_of_ref": "indicator--ab58d06a-40f9-4de1-841c-30c31461d1ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1a3d9f-dbe6-4b97-abc4-6a0d30df9900", "sighting_of_ref": "indicator--ab58d06a-40f9-4de1-841c-30c31461d1ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdf780f-3bc2-4044-85e6-207a620d2aa4", "sighting_of_ref": "indicator--ab58d06a-40f9-4de1-841c-30c31461d1ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9552576-912a-4644-b248-e4ff33b235df", "sighting_of_ref": "indicator--35c27f07-7252-4224-ad6d-e4c48a62f572", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b924f009-3194-48af-89fc-746fe598ed39", "sighting_of_ref": "indicator--35c27f07-7252-4224-ad6d-e4c48a62f572", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6d2a13-f42d-4695-9dbf-e1edec68b41e", "sighting_of_ref": "indicator--35c27f07-7252-4224-ad6d-e4c48a62f572", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b6d8d7-f820-4c2c-b1b4-6f0ead5a2130", "sighting_of_ref": "indicator--65d8ba54-b77d-4627-990d-6dc4efac5409", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d5540f-b793-4f8b-9a15-2ed65bbddb2d", "sighting_of_ref": "indicator--65d8ba54-b77d-4627-990d-6dc4efac5409", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0787eebc-8ded-4151-9d62-b57b4207eb92", "sighting_of_ref": "indicator--65d8ba54-b77d-4627-990d-6dc4efac5409", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c817d6ee-f6da-45f1-ac57-45a2298f29f5", "sighting_of_ref": "indicator--43d5bbbe-7041-44d3-8205-e9d62ae787e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba48b3e-aff3-4bb4-907c-05f20f4a7bc3", "sighting_of_ref": "indicator--43d5bbbe-7041-44d3-8205-e9d62ae787e6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b98d29b-a604-4a0a-8fde-7eb3296f19b6", "sighting_of_ref": "indicator--43d5bbbe-7041-44d3-8205-e9d62ae787e6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88756abb-4be5-41e9-b23f-395ba983035d", "sighting_of_ref": "indicator--1a73c78a-678a-4015-8c53-7976f3778278", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4e23ae-6903-4b30-bcff-e870c2496f03", "sighting_of_ref": "indicator--1a73c78a-678a-4015-8c53-7976f3778278", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c071670-e35a-4ca8-b91f-42a59d779a2d", "sighting_of_ref": "indicator--f5dd1fe9-0777-4358-9a36-e860ff54924f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abd9008-8420-4731-b23b-c74c4f70a2ec", "sighting_of_ref": "indicator--f5dd1fe9-0777-4358-9a36-e860ff54924f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c1112a-76e3-4bcd-91fd-1171c83ed1c4", "sighting_of_ref": "indicator--f5dd1fe9-0777-4358-9a36-e860ff54924f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaeffdb-a3a6-4e34-9101-7fdbffa17109", "sighting_of_ref": "indicator--fd5a7eb8-82b9-4e64-8c7e-abb3e25e427b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b71fb7-fd4a-4196-b1d3-2ba50853396f", "sighting_of_ref": "indicator--fd5a7eb8-82b9-4e64-8c7e-abb3e25e427b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815e0b85-d2e0-4c3a-8ed1-e58efa660b25", "sighting_of_ref": "indicator--fd5a7eb8-82b9-4e64-8c7e-abb3e25e427b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dcb56f-6e67-42c4-8383-b2eb17116616", "sighting_of_ref": "indicator--469cd5a7-ee10-4ef3-8abb-74c2339f8dfe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d124c346-a79e-4093-a1e7-afbbae83c27e", "sighting_of_ref": "indicator--469cd5a7-ee10-4ef3-8abb-74c2339f8dfe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d56a554-6cb5-4f2c-90e0-893fe70bb20c", "sighting_of_ref": "indicator--18697f1e-20bd-4d10-bfe2-c51569ea7348", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f040606-6636-4712-8a69-7984d1cf6d00", "sighting_of_ref": "indicator--18697f1e-20bd-4d10-bfe2-c51569ea7348", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b26c03-55f8-4de8-898b-0fd809324d0c", "sighting_of_ref": "indicator--18697f1e-20bd-4d10-bfe2-c51569ea7348", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f15aea-2ad8-4de4-8f85-622fac4581d6", "sighting_of_ref": "indicator--b7b1d65f-ccea-428a-b1af-8e1d6a46d638", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52847cea-4017-49bb-bee8-0368f6fe9165", "sighting_of_ref": "indicator--b7b1d65f-ccea-428a-b1af-8e1d6a46d638", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebee7662-d2b5-4ab9-982b-a3e1d4797f27", "sighting_of_ref": "indicator--b7b1d65f-ccea-428a-b1af-8e1d6a46d638", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b957603-9f83-440b-a5ef-222de6541dcb", "sighting_of_ref": "indicator--67432202-58ac-4298-9eef-4648cbc24907", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f995898-dbed-4b7e-8ed3-6ba1585960b6", "sighting_of_ref": "indicator--ffb649d6-9048-4b78-b241-eb4c3f15bf48", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c01e9f8-08dd-4e91-9fb3-3594835f0c4c", "sighting_of_ref": "indicator--b1e5c354-cb69-49ac-95f2-4b5c7a5a5a78", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3046208-aa0c-4aae-94d0-f5330aaa9006", "sighting_of_ref": "indicator--7321cac8-b122-47a6-a425-a5d71870d3d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1da0c16-02da-4ea5-a09c-253177c7bb5a", "sighting_of_ref": "indicator--32042abe-8f16-49ce-aa63-4e1dc35772a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8633d4-e7b1-436b-8b94-5faccf5f57f3", "sighting_of_ref": "indicator--bd6ccac1-9172-45f1-87d6-27ed4018671d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6ba3c1-5b0f-49a9-852c-4cea4678e5d3", "sighting_of_ref": "indicator--d0171174-2841-466d-a297-696d36db50f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c86069b-058e-4b94-8a21-9acfe49b8c43", "sighting_of_ref": "indicator--b6c009ec-a053-4632-ad73-588b4c45cebe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72b7ea2-1a34-43a8-a4c4-fbbe3e80b984", "sighting_of_ref": "indicator--d79e97fa-fd54-48bc-992b-b56eb2cee257", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5ec493-2e66-4b43-bc25-07727cafe2a5", "sighting_of_ref": "indicator--948f744f-aead-45e9-a1ca-e6d10a8bfada", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1f9645-5edb-4ca0-83ce-63224c0d8407", "sighting_of_ref": "indicator--595d5161-477f-4694-b8c3-154753322295", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1f09a9-cf48-4cce-95b7-038465f8fca7", "sighting_of_ref": "indicator--e68e61d1-6616-471b-a9c8-4f639a07f8a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58453cc2-c869-4360-ae28-afe0be8b1070", "sighting_of_ref": "indicator--f3a691ed-12d5-47cf-95a8-50f6acdecfaf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2274a6-5b11-4648-8ae6-dc6e13b066c9", "sighting_of_ref": "indicator--5a544ab7-f527-4014-a0d9-115b21f5806e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91aab9a-481f-41ff-9916-62cfcb7cd452", "sighting_of_ref": "indicator--c58b6ac2-d124-4cf3-86b7-64df6b1ebb74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc03b75-f7e2-4d03-a8d4-9407cbd65895", "sighting_of_ref": "indicator--9d53721d-2cd1-487d-aed7-2f066b45b132", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1072f95-4307-4885-b3fe-9af26582b6cc", "sighting_of_ref": "indicator--72872b8d-637f-4558-a999-02883289b222", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99caf77d-49ca-48f4-a2a5-a26e19baa86f", "sighting_of_ref": "indicator--1b19ee9a-079f-469c-adf4-19195eba1eb9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ed8cdf-1271-4ac0-87f9-e8e1ba4dcd2e", "sighting_of_ref": "indicator--bb3ed446-e2d3-468c-b066-f9fa1140216f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbfabfd-8f4c-4471-a8ff-02828595ae4b", "sighting_of_ref": "indicator--309ad3a1-349a-49e3-843d-b1aa70f4c939", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7f3c01-5892-4199-9c81-ac0c4347eb44", "sighting_of_ref": "indicator--91abcfe3-1098-4542-a7d8-c1a6db00d62a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1401320-fd98-403f-ad58-39a4e9fcfff5", "sighting_of_ref": "indicator--bfd45bff-b67d-43a8-823e-a1e7401c78f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2649f714-98cc-4936-abc3-38eb982fae8e", "sighting_of_ref": "indicator--05869ec8-e479-42b5-a4d0-bc76a76855cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778963b6-ef17-49d1-a1aa-f4afd053b538", "sighting_of_ref": "indicator--eabd3f55-8dbb-4d56-9321-9beb1c44b50b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c81fc7b-a5b1-4eaa-9af7-0a2ec39262f2", "sighting_of_ref": "indicator--cff8b9c8-6344-4743-840a-c981cd2fa4c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc82848c-9d6e-4b08-b02c-769b38f97b0c", "sighting_of_ref": "indicator--cff8b9c8-6344-4743-840a-c981cd2fa4c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738203a3-0d6c-4776-9d49-cd0dda79e01d", "sighting_of_ref": "indicator--cff8b9c8-6344-4743-840a-c981cd2fa4c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8e3557-ee3a-44f9-81a6-35656918861e", "sighting_of_ref": "indicator--7120144f-dd12-4749-afae-2fd22c8b979b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984f017c-379f-46ea-b9ee-1208aecc04f5", "sighting_of_ref": "indicator--7120144f-dd12-4749-afae-2fd22c8b979b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a391ed-5a9c-4830-9ebe-f7de42a9b5bd", "sighting_of_ref": "indicator--49764950-0761-408d-a872-6311a9d5adc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082c7c94-cd85-408b-b11b-e661e3044245", "sighting_of_ref": "indicator--ef8f4ca1-9ae2-4205-a450-fe8685ca907a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31dcec3-42f3-42d9-84dc-1d81b8858d9e", "sighting_of_ref": "indicator--ef8f4ca1-9ae2-4205-a450-fe8685ca907a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1677f11e-8cff-45a7-a5b9-0678e982823d", "sighting_of_ref": "indicator--9ad2cdd5-53a5-4a2b-93c5-07b14687f05e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85ea82e-d325-46ff-a682-fa6b608d892d", "sighting_of_ref": "indicator--9ad2cdd5-53a5-4a2b-93c5-07b14687f05e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2df4f83-d4d0-4630-b41c-081b7e57326e", "sighting_of_ref": "indicator--b7277394-c6f6-4b4e-8ace-e59ac495aed8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9040dcd1-b863-46a8-8b51-5d75c004314a", "sighting_of_ref": "indicator--5b706425-a830-4249-9964-f01d9090004d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcd6a80-5728-4d2f-bfde-735deb6f8f95", "sighting_of_ref": "indicator--5b706425-a830-4249-9964-f01d9090004d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42fc4b3-1b93-41f2-af36-6e815a0f9320", "sighting_of_ref": "indicator--78fb0914-4ca0-4e22-9c51-2677f9581cda", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c48872f-de8a-4eb2-a008-4878f30ed294", "sighting_of_ref": "indicator--78fb0914-4ca0-4e22-9c51-2677f9581cda", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51b8189-cb0b-42ea-be16-9a38c9581fa0", "sighting_of_ref": "indicator--78fb0914-4ca0-4e22-9c51-2677f9581cda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5b766a-0c92-448c-af1b-f0069ce91ef0", "sighting_of_ref": "indicator--8fc1e278-e7fc-4958-8e61-07fa318f6711", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ff68a5-91c7-4f73-b399-0811ec24ef19", "sighting_of_ref": "indicator--8fc1e278-e7fc-4958-8e61-07fa318f6711", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1928f7-1507-4ac4-b99a-2177a29309a0", "sighting_of_ref": "indicator--63b1e6a6-a160-4fda-a6de-975f95cab283", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbe7d82-429c-46d2-ad8e-03b8d30865e1", "sighting_of_ref": "indicator--63b1e6a6-a160-4fda-a6de-975f95cab283", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca2c8ec-2b77-4c56-bd25-80447cee5dde", "sighting_of_ref": "indicator--d6889d50-73d0-4967-b8a8-ad0ce7d2d72b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d26af4-cb78-4d67-8c37-105fe2b07b06", "sighting_of_ref": "indicator--4269c9c9-e351-414b-8a25-95cc88cc9221", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36a00a7-209d-4a5f-b71d-3e39242282de", "sighting_of_ref": "indicator--4269c9c9-e351-414b-8a25-95cc88cc9221", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae5c5f2-88f0-4f74-9d19-311b380b7d31", "sighting_of_ref": "indicator--a62e3743-02af-43e5-8c5b-bdd9d34e39ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5defd1e8-bada-43c5-b931-871ff2007072", "sighting_of_ref": "indicator--a62e3743-02af-43e5-8c5b-bdd9d34e39ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa87a6fb-6a82-49b5-88c8-4c8d2c85ff9f", "sighting_of_ref": "indicator--0a4bdcc6-2afd-4013-bf82-b642e6a3bd91", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b791cbeb-d152-4a45-9b45-ebb04840b2e3", "sighting_of_ref": "indicator--0a4bdcc6-2afd-4013-bf82-b642e6a3bd91", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd57b3b-7015-4143-bcff-f55864d99310", "sighting_of_ref": "indicator--723b35cf-ca3a-42dd-8137-8d29ae5f8007", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09a5266-5618-42e7-b546-d6bf644d28a2", "sighting_of_ref": "indicator--723b35cf-ca3a-42dd-8137-8d29ae5f8007", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d54001-c226-4fda-861f-7df63e5c9133", "sighting_of_ref": "indicator--2eb97cde-093e-4819-83e3-cca95cc04196", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc41a77-563a-4845-b16b-c5e092da9149", "sighting_of_ref": "indicator--6b285cd2-36af-4b03-a369-51824ea0ba0e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136a9900-68c4-48e5-97e8-e8a7648048ed", "sighting_of_ref": "indicator--53424979-9400-4b89-9ec0-6137afb62a6d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a82829-be10-46c6-b2bf-bec252e260e7", "sighting_of_ref": "indicator--316b6a2c-770b-4d6d-a2c2-f197aadbafd5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f0f9ba-6d3a-4516-b50d-ce156cebcce4", "sighting_of_ref": "indicator--1d2590be-6be6-4ef2-8f97-ee84eaf28d02", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bff024-c3f5-4edc-a139-14c0d392479d", "sighting_of_ref": "indicator--11b72679-18b2-424b-807c-741dd84de0ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763d14e3-11e1-4d27-8306-e1e437c07d38", "sighting_of_ref": "indicator--508d0a0f-c6ca-4010-b4da-a3b1c4cf5d51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61cdb9b-785d-4632-a9f9-9370d245d444", "sighting_of_ref": "indicator--42464539-e858-433d-8efe-1bbb232fb4ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1599575-a8af-456b-8650-d85f31911774", "sighting_of_ref": "indicator--83483806-c5ac-43ae-b8bf-93f206454fbf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011882d8-1e62-48e9-902a-3f73f97fe338", "sighting_of_ref": "indicator--83483806-c5ac-43ae-b8bf-93f206454fbf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2216d98d-ce21-4661-9a1a-ee851d31f71d", "sighting_of_ref": "indicator--83483806-c5ac-43ae-b8bf-93f206454fbf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e949837-46b5-4317-95d5-a7370194394a", "sighting_of_ref": "indicator--eac545c0-5d92-49fd-8b1c-a7db9042049b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7525e60c-7afc-4254-a0ea-19229b149c66", "sighting_of_ref": "indicator--eac545c0-5d92-49fd-8b1c-a7db9042049b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0ace73-32b3-45bf-842d-ac019c59b3b5", "sighting_of_ref": "indicator--830fa14e-764f-4cd9-b20a-b1ebf3ecce7e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bdfdf9-e858-4dae-b1d2-bf27d79d76a4", "sighting_of_ref": "indicator--4958060e-d1e1-4540-b120-f212ae6baee1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6c80a5-9146-4a96-b972-8373ea7c298a", "sighting_of_ref": "indicator--23b9567d-6ddc-405e-adc6-acdabd3f2380", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8b2f3e-3c2b-4d5b-afff-19a4b6e0c73d", "sighting_of_ref": "indicator--12abdbe1-ac6b-44c4-8933-fa0f522533ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa74b2e1-90c8-4b7b-bdd2-b8fd9530e99c", "sighting_of_ref": "indicator--f204b273-0387-4dc3-8690-ff72c92cd80c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98cbdfa-63c1-42b4-947e-bbf3c7721efb", "sighting_of_ref": "indicator--7cc85c3e-1ef4-472b-bb59-3d15af769048", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb3b3b7-c01b-42bb-9946-428607e2f4d8", "sighting_of_ref": "indicator--36cc4648-f229-4f46-930a-8c1518519293", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fa632d-0be9-40d0-af9a-292b2488fbdb", "sighting_of_ref": "indicator--f2476c85-8c13-4ad2-82ff-62636d33002d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f467d94d-4fc4-4860-8fe9-19c0fc1d6e50", "sighting_of_ref": "indicator--a68a31b4-6e67-4841-ad55-8ef801ac7ffb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7929fa7f-d398-4c13-8371-e99ac9b65f8c", "sighting_of_ref": "indicator--5bcd0756-8f7d-4082-bc22-747b587681e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eeefc36-417e-4ce9-82cf-1504a4980702", "sighting_of_ref": "indicator--e3529b8d-0d03-4bda-8ef4-bbbea270afdd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de672ea-76ac-40fe-81d2-f54269326753", "sighting_of_ref": "indicator--ce41fe9e-0507-42a1-99b3-ec6a3ab13780", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02b782a-24d7-4be0-ace4-10dfa474a8ec", "sighting_of_ref": "indicator--ba06ee1f-e63f-4eef-ac33-9e9f3f85de3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698e0a93-38e6-4df8-808b-026f1a7b0511", "sighting_of_ref": "indicator--1b77b056-3147-4a2e-9c0d-bc7a1bbcde95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d215b4c2-4c83-423c-a9ad-ef63a69687c6", "sighting_of_ref": "indicator--4f2c50b5-e712-4027-8ca7-9522de23a4da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b03915-56c8-4c9e-bdad-915bc1666d80", "sighting_of_ref": "indicator--7cb59610-bde7-4baa-a938-4e7fb44c9bd5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f117ca9a-3f0c-487e-a3f3-7fc9a9f3a404", "sighting_of_ref": "indicator--551a5bc1-581a-4049-a584-e18c1d5f27c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd7b910-1aca-442c-8c7e-66239110843a", "sighting_of_ref": "indicator--551a5bc1-581a-4049-a584-e18c1d5f27c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa978578-4f0f-468e-9846-80a6067ae510", "sighting_of_ref": "indicator--551a5bc1-581a-4049-a584-e18c1d5f27c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1064d7-0aee-49e8-b9eb-c4b8a52397fa", "sighting_of_ref": "indicator--0958ddef-a93f-437d-9952-60f007ab31c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3385fb-3266-42cd-b09e-682d04973a67", "sighting_of_ref": "indicator--0958ddef-a93f-437d-9952-60f007ab31c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd93e1e-91bc-4478-b5ca-830d337a67d1", "sighting_of_ref": "indicator--0958ddef-a93f-437d-9952-60f007ab31c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338a537b-60aa-4887-8aa2-d937454452d2", "sighting_of_ref": "indicator--c185a95b-666f-4369-a613-620dab426bc8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d125a1-7b65-4df9-95f4-5ed94d26475f", "sighting_of_ref": "indicator--c185a95b-666f-4369-a613-620dab426bc8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56990448-29ad-425d-91ed-64db770a11b1", "sighting_of_ref": "indicator--c185a95b-666f-4369-a613-620dab426bc8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b824b5e7-d9a4-4c3f-bbe6-d3bf6ca91ffc", "sighting_of_ref": "indicator--fdb6dcaa-fecd-4556-92dc-44599e37da3c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd21e4a-2aba-42aa-996b-9fa42b6f5078", "sighting_of_ref": "indicator--fdb6dcaa-fecd-4556-92dc-44599e37da3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2abf8f-54f3-41b5-8bfb-ee5824c59c1f", "sighting_of_ref": "indicator--fdb6dcaa-fecd-4556-92dc-44599e37da3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b933bccc-6fdb-4163-ad9b-7e2b5e8d607b", "sighting_of_ref": "indicator--32429265-3e3a-4bdd-95a5-c27cccc49637", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48f2bd6-e0ad-44a8-9796-62486f281749", "sighting_of_ref": "indicator--32429265-3e3a-4bdd-95a5-c27cccc49637", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215a38a6-2526-4be9-814a-4f671c986587", "sighting_of_ref": "indicator--32429265-3e3a-4bdd-95a5-c27cccc49637", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1ae2bb-bd14-44b8-88fe-d8040fce0aed", "sighting_of_ref": "indicator--7854888c-2de7-4d33-ba84-2bbe55012893", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc09e9b-f8cf-4179-a05c-06e4ea3308de", "sighting_of_ref": "indicator--7854888c-2de7-4d33-ba84-2bbe55012893", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51482d80-e307-4b8b-a3fa-85f07e85b938", "sighting_of_ref": "indicator--7854888c-2de7-4d33-ba84-2bbe55012893", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f31862-e2c9-48d7-81fc-086a9f85c0de", "sighting_of_ref": "indicator--bd8ce524-0d04-45ca-aa14-d7137c4897f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cdd084-751d-4595-9b7f-e3f55c3a3db5", "sighting_of_ref": "indicator--bd8ce524-0d04-45ca-aa14-d7137c4897f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d9574d-8843-4d51-af2b-bab8d716dfd1", "sighting_of_ref": "indicator--bd8ce524-0d04-45ca-aa14-d7137c4897f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eaa7f8-4d51-4335-bcc1-2c0bbf390349", "sighting_of_ref": "indicator--fcf0e6fb-a6c3-45ca-9b19-7a5ca1a9a17b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eeb030-12be-43c4-9e56-bc71f8afa604", "sighting_of_ref": "indicator--fcf0e6fb-a6c3-45ca-9b19-7a5ca1a9a17b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adb193e-0d76-4686-ba59-9ce32d300668", "sighting_of_ref": "indicator--fcf0e6fb-a6c3-45ca-9b19-7a5ca1a9a17b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3550c85-31f9-413c-aa7c-b0454518d3da", "sighting_of_ref": "indicator--21c9630c-5b49-4cef-8126-fe72696c9976", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aabee21-e5f3-42be-86a5-53f60ba22c1a", "sighting_of_ref": "indicator--0a51b862-5f12-41dc-9986-ca30779e0b63", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5413169c-fe70-4128-9265-d5d3db9d380c", "sighting_of_ref": "indicator--e588208b-ea10-4ae2-b73b-79fba7bdebf7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2b588e-aae2-4014-9d37-0c8bf6a57784", "sighting_of_ref": "indicator--e588208b-ea10-4ae2-b73b-79fba7bdebf7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f588d24a-44d4-4bed-a87d-d7e83bffd516", "sighting_of_ref": "indicator--7d9bdecb-0753-4749-b6a5-3da7d4462ef1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973d21a0-c273-4f86-b4cb-757aa2c0b726", "sighting_of_ref": "indicator--7d9bdecb-0753-4749-b6a5-3da7d4462ef1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954d68a9-c486-4595-ade0-809c72e93897", "sighting_of_ref": "indicator--ad44547f-bf81-4ee5-9dc4-8f93e7b602f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d64a35c-976d-4dc6-bfe6-54315b1f219c", "sighting_of_ref": "indicator--7bffa617-b3d7-4933-96d5-65968d4ca796", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7a7535-bec3-465c-93c3-59c510dc063e", "sighting_of_ref": "indicator--7bffa617-b3d7-4933-96d5-65968d4ca796", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64092cdc-b2ca-41ed-ba6d-2ac8fcf73031", "sighting_of_ref": "indicator--335ade4f-7f4a-4fe9-8da4-475b24c1c24c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3549140d-c533-4564-8103-bef237221b42", "sighting_of_ref": "indicator--4558df9a-3111-4b42-9d12-cc4ec169a186", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2247517-e2ee-48c2-810b-d54f3bf52737", "sighting_of_ref": "indicator--b7899b80-8586-494a-a83e-05b1641478e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e77e4ce-ac8e-4578-8b99-99f8929ebc41", "sighting_of_ref": "indicator--b7899b80-8586-494a-a83e-05b1641478e6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4fb1d9-4325-4ba9-a27e-cd0e50c8f76c", "sighting_of_ref": "indicator--092d921e-8930-472c-9b45-1be5ba1b15f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df7aeb7-6979-4e19-8795-7bcda3e0337d", "sighting_of_ref": "indicator--092d921e-8930-472c-9b45-1be5ba1b15f8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfc0899-b0a8-4bc2-b727-2c23ca923a29", "sighting_of_ref": "indicator--f6dde2ea-8f85-43dc-ab4d-5b4e0527f6b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffb4f48-0529-4e4c-98a8-5c45355d1aed", "sighting_of_ref": "indicator--e874b75d-9763-4c57-9e3d-37b8982d900d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e288b66-6227-4a95-a2f8-aa3005d6cf68", "sighting_of_ref": "indicator--1c3a509e-2d97-4431-8cfc-753c461ba304", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06afce0-5791-4e71-9c82-41bc9396cd1d", "sighting_of_ref": "indicator--81a6a802-ed1b-41d7-803d-b58f8aa53db7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a991ec-490d-40d8-b752-f7e16fc62112", "sighting_of_ref": "indicator--a4cff496-a022-4785-a1b4-01461c42ba9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cab7814-d2d7-4c75-9c2b-e827a5f179f0", "sighting_of_ref": "indicator--b13dff26-a53c-44ab-ba77-ca3416d8a3d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56328f88-d95e-4ab7-9dca-6b30aaa6b0ab", "sighting_of_ref": "indicator--c7f503bc-2571-4a7d-b0fc-ef28c4929a20", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee599e9-2030-4535-bbf1-08a9f196f1ad", "sighting_of_ref": "indicator--b66e7432-88cb-4832-90fd-526c71b9d814", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdfd91a-9340-4f22-a045-2b15d87e9414", "sighting_of_ref": "indicator--a034646b-3cad-4120-9922-754f95b0f7ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b299ab-4870-47fd-820b-b2bd5c4173e3", "sighting_of_ref": "indicator--8f4d3a4d-12e2-4167-8da7-8423634477fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d71e5ac-9f88-4358-97cf-68b8cc3e29bf", "sighting_of_ref": "indicator--db960ca2-53eb-4dbb-a74a-4d3c295e0dc7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6eba200-577b-4bce-b712-67f99dbc9da0", "sighting_of_ref": "indicator--dd3fa17c-3b53-4263-8e2b-25b17a4b121e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706e29f4-0bc2-4f72-9abb-87291bf73238", "sighting_of_ref": "indicator--81622834-ced8-40de-b188-2cd8a5763630", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b37917-b0e2-47c1-9705-36769b3b2584", "sighting_of_ref": "indicator--b66080f9-fa57-4f67-aedf-d52eb5703b03", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6790987-40ff-4c48-a242-4ff9e7cb960f", "sighting_of_ref": "indicator--26a6279a-3d7a-483d-8b2d-64ae6e03ec9d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6588feb9-606c-417c-920d-df89ec00126a", "sighting_of_ref": "indicator--6703b4b2-7349-4258-af75-e647d390305e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa521d1-1f90-4a36-9169-c458a21a27d4", "sighting_of_ref": "indicator--1ccc2e32-3bfb-4520-a4e4-9b3ccae635f0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9e1324-b99d-4f1c-81d0-b96d836df8df", "sighting_of_ref": "indicator--a902ac0c-57b7-4f26-9205-a87592ee1b1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857e709e-2afa-464d-a800-4b3ff9d1125b", "sighting_of_ref": "indicator--a902ac0c-57b7-4f26-9205-a87592ee1b1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5383164-3db7-4fd4-8aff-6390e16c8001", "sighting_of_ref": "indicator--a902ac0c-57b7-4f26-9205-a87592ee1b1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cd5a1c-16fb-488f-8823-c206a99de3f9", "sighting_of_ref": "indicator--c932f9a4-c87d-4ea3-b3ea-d2bfefbc7ed0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81a0b0d-40f0-4864-8170-3d84475e9a47", "sighting_of_ref": "indicator--d988ca06-4e9f-4e7c-931e-76e11704066f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6ab5f9-2ef6-426b-8ad4-013411ced27b", "sighting_of_ref": "indicator--0947885d-d37d-4cb0-b8e3-e3bad0923cb8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84839c3a-dba7-45b7-8d79-81f6e30ce488", "sighting_of_ref": "indicator--17464811-9575-4d60-8adb-f3ccbb8ff6ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfa8f9a-a90b-48bc-9403-25c005476903", "sighting_of_ref": "indicator--45ffa69b-028b-48c2-8e34-25b2d282105e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2f0793-65a7-4eab-82ed-f39e3596d0ba", "sighting_of_ref": "indicator--76dc327f-1f35-4dd6-ba3c-5dfa72401491", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c2ef7e-912a-46a0-a165-8df9d2647e47", "sighting_of_ref": "indicator--a2be01c2-62dd-4490-b571-8f28e794039d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00a17f7-cd57-4a20-a6c9-b71c7b6186ed", "sighting_of_ref": "indicator--58d8b201-79ae-4211-9684-ee319d313977", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dd8740-b2d3-4e80-b6ed-a6ebbd271fcd", "sighting_of_ref": "indicator--0cf8d8c5-f3fc-4cf5-a069-213d4ac8c6cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64ffd6a-76a4-4e0a-8869-76e9abfd7bdc", "sighting_of_ref": "indicator--98e8881f-e88e-4b8b-a9ce-d2c7e8251683", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771041c2-4645-453f-aed7-67b6d2dbd60b", "sighting_of_ref": "indicator--dd36acdb-2748-4981-8ba3-2e9bb2367695", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94a641a-a03e-451c-9422-4ad1d9ed70ef", "sighting_of_ref": "indicator--e151ed8e-1ecc-4c90-982c-868c22d4e8eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527abeb5-7b7a-4f73-af2a-3bb014eb0120", "sighting_of_ref": "indicator--6713f11a-9aba-4447-a7cc-0a8eaf24e4a0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78ff642-dfb3-4532-872b-7658b153eb3e", "sighting_of_ref": "indicator--4d9be492-c3e0-4ed5-b5a7-e0cdf825d27f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2c2d85-38e8-4ff7-bf5c-698da16aed96", "sighting_of_ref": "indicator--f0bea644-36cd-48e7-a655-7a994bb50946", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfa6f2c-e599-4703-b80c-85ce639efe86", "sighting_of_ref": "indicator--76965d48-ee69-4830-855b-26eef667187c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8190ff15-ef7d-482d-a8dc-4884dabb731b", "sighting_of_ref": "indicator--5c184cad-a9cd-4b37-9934-d0171a3298e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402cfcd9-2230-44d1-9397-2d5d4630ceef", "sighting_of_ref": "indicator--5c184cad-a9cd-4b37-9934-d0171a3298e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f6f30c-8398-4a31-8138-2363a2790e80", "sighting_of_ref": "indicator--c34b777f-8fc7-4265-84bb-715dfbf0bfae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c131d772-4a45-4175-bfe7-0e07df631c30", "sighting_of_ref": "indicator--c34b777f-8fc7-4265-84bb-715dfbf0bfae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f880989-ef57-4e1b-a088-29cb4ca7eaeb", "sighting_of_ref": "indicator--c34b777f-8fc7-4265-84bb-715dfbf0bfae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ce732f-91ec-42db-9984-c8df20c2be58", "sighting_of_ref": "indicator--857bb69b-53fe-4a66-bec4-efad939894d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f96ec3-3d86-4043-bdfd-7a61114e98c3", "sighting_of_ref": "indicator--6c5f093e-df47-4560-8710-a9a3f46e823a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12ee778-a98a-427b-a49a-62e49766074b", "sighting_of_ref": "indicator--5757d088-e020-4509-91a9-d3744842dcf3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cf9174-333f-411c-b2bf-6e7769020e2c", "sighting_of_ref": "indicator--5757d088-e020-4509-91a9-d3744842dcf3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2160fa2a-d150-491c-9864-19923f1b8015", "sighting_of_ref": "indicator--8ea20545-15ee-41d7-96c8-825d0b0212f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cc9dec-c036-4989-b992-8a9646b565de", "sighting_of_ref": "indicator--550aeabb-197d-4804-b98b-c6ba67b55854", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfe77b1-c827-4973-86cc-554daeb45ae7", "sighting_of_ref": "indicator--f274a451-0aaf-4520-8631-7bc5bf561b6f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cd50a0-da17-4d16-ab40-4ee1391b59f7", "sighting_of_ref": "indicator--628e3fcc-f5e4-427d-97e5-0c3fbf52cf0d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a64b772-2e49-4ce5-b8c5-9c36fb4abc5b", "sighting_of_ref": "indicator--628e3fcc-f5e4-427d-97e5-0c3fbf52cf0d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093349a1-f478-480c-a79a-186ce7c7bd24", "sighting_of_ref": "indicator--628e3fcc-f5e4-427d-97e5-0c3fbf52cf0d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec5f926-d028-42a2-9cc7-eb7087c671c2", "sighting_of_ref": "indicator--885e4de3-a3f0-4b68-bda8-eb0817d4d979", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da27525b-0ed4-47c5-8082-68fd77c5b91b", "sighting_of_ref": "indicator--ee4fc29b-1597-4410-9522-177e9e101459", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5553022a-e91d-48b3-966d-adda2b92a436", "sighting_of_ref": "indicator--2dfe3bf2-8f3f-42af-84d8-922ece5d047d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a04f81-ea1d-4099-b61e-5d3f0d19c804", "sighting_of_ref": "indicator--2dfe3bf2-8f3f-42af-84d8-922ece5d047d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7069724-707f-4eb0-ab1d-94580490e7c1", "sighting_of_ref": "indicator--e3cd9ec3-6564-4d89-a54e-4bb655479fa4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a10739-5550-410c-a63a-b553c8f4854b", "sighting_of_ref": "indicator--e3cd9ec3-6564-4d89-a54e-4bb655479fa4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bae905-ff87-4562-8af6-e5c3d68c4d18", "sighting_of_ref": "indicator--e3cd9ec3-6564-4d89-a54e-4bb655479fa4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51187506-aa7d-4e22-922c-bbe2a399d3d4", "sighting_of_ref": "indicator--7fd622a9-f1ea-4a10-ad35-fb09545758a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309cf6e6-3ad5-4015-958f-e080ebc14f2b", "sighting_of_ref": "indicator--7fd622a9-f1ea-4a10-ad35-fb09545758a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af73c285-038d-41d0-9823-53ebdd0a7520", "sighting_of_ref": "indicator--7fd622a9-f1ea-4a10-ad35-fb09545758a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523b4202-df4d-42e2-a510-b880575b7c6b", "sighting_of_ref": "indicator--00a6481b-a393-4463-842b-a46b7d5d87a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbcb27e-ed64-4bba-a823-a7dd6421eed1", "sighting_of_ref": "indicator--00a6481b-a393-4463-842b-a46b7d5d87a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3431f4c-c997-4601-a650-da452cd613ad", "sighting_of_ref": "indicator--7364b70a-1754-4799-b200-66e991792697", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e56fe94-30ea-4501-acd3-c140868e86f0", "sighting_of_ref": "indicator--d3aa60b6-fcfe-4746-a20e-7e0cb5382998", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b42c995-03c6-4bfa-ad52-c7bfee4fde7f", "sighting_of_ref": "indicator--7c6b5f93-4303-4348-bfcd-f6d0efd9f679", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b788765-c37b-467c-b42e-d71fdeae3c81", "sighting_of_ref": "indicator--a0abf8bf-a966-4f0e-87e7-3f71b90f529b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8829bac-4a97-4769-916a-e123b904e326", "sighting_of_ref": "indicator--00962bf6-0017-4071-a0d7-21964cbac125", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97a7f85-df97-4aec-ae9e-2e215e4f16c9", "sighting_of_ref": "indicator--1a7f6e16-c31d-4578-8a6c-ba96879e90cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c49e9f-b4f0-44d1-a560-a1c542d3e00a", "sighting_of_ref": "indicator--9692c72e-cc01-4a43-9856-ffae8f4992f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5110cc7f-5016-4b3a-b551-7fd4ed62d723", "sighting_of_ref": "indicator--5be47d88-cde7-413f-9cbc-de9a3576fba8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45cf835-f639-4824-b1d0-559ca6f4337a", "sighting_of_ref": "indicator--4f4499c8-ef3e-4954-923a-0200f02cb085", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09365117-4201-4a63-827b-f251d9729fdd", "sighting_of_ref": "indicator--75e231c3-5e35-46c8-91b3-5f305135ac8e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38aa09f0-3d0f-436a-afc0-fe796387af64", "sighting_of_ref": "indicator--7be8ea55-77e1-4260-9a06-9f5b25ad95f8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1669a51e-371c-4a3f-bf72-d19102442b28", "sighting_of_ref": "indicator--ab21d960-e020-40b8-80e0-1f56df7bbc56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddb3860-0972-480e-8ade-9da349693674", "sighting_of_ref": "indicator--38199346-02bc-43df-96ed-33ca5f7fdcf3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970658dc-3e4e-4d44-8130-61da7627c2d4", "sighting_of_ref": "indicator--38199346-02bc-43df-96ed-33ca5f7fdcf3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fac2d6-a46d-491d-a34e-f2408cc2a9a5", "sighting_of_ref": "indicator--d7561e18-a499-473d-a007-8a610d2bb5eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad9774f-00e9-436c-bd64-0b331e50491c", "sighting_of_ref": "indicator--c3ee1a9c-164c-4c0c-84ce-583fd8ccec8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af71267f-acfb-41b7-838b-a634b8b421aa", "sighting_of_ref": "indicator--5147323f-85f7-4eca-86c4-8786f7ee74a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b32ecc-b5d8-4684-a8c6-7f3454b471df", "sighting_of_ref": "indicator--0212f827-6a60-43f1-afc1-e1bbf132334c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eed04d-acb3-4335-af99-99e508f51d9f", "sighting_of_ref": "indicator--ea384297-8853-4242-82e1-547a93787d04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef6141c-b6ea-4c60-9474-2c8a35d70ee4", "sighting_of_ref": "indicator--1f1d9736-44f4-4ebb-acdb-f7de696cb6fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8de31a-2ca2-47a2-8879-9e2385484031", "sighting_of_ref": "indicator--1f1d9736-44f4-4ebb-acdb-f7de696cb6fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4dd6a9-71e6-4083-a549-e125f561bdae", "sighting_of_ref": "indicator--4b30a040-a02c-461f-a373-742224fbd2a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4f9969-57ec-4777-a93c-f9bf2e2ca010", "sighting_of_ref": "indicator--4b30a040-a02c-461f-a373-742224fbd2a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db5ab11-505c-4a1b-8d62-e23b1b777f62", "sighting_of_ref": "indicator--2f011284-852f-4b08-a27f-8faa96d61672", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d5f4ef-be5b-4d9b-83cf-4f4a9e3f792c", "sighting_of_ref": "indicator--d25fc98c-0b2f-4ce3-aaf5-4f1e4deba4d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab84e64-9a04-4c1a-8c7e-bc884bd45e3b", "sighting_of_ref": "indicator--507f0f37-0afd-4329-a97b-5e534a4fa764", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07b252b-054e-43dc-95bb-a57ab7548d05", "sighting_of_ref": "indicator--3f6d01b0-f5b5-444d-aa23-1606bd5a442c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f07e683-18d9-4a8d-b2e5-cf1630c0c3ab", "sighting_of_ref": "indicator--4ca2f6a8-b5f0-4f3b-b1f9-86cece2da88e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720f3a37-0958-45e9-a5a5-405e93431dc3", "sighting_of_ref": "indicator--98e37271-3aa8-4a60-addb-d95f3948c621", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acd8547-154d-4a60-96aa-4da933d408ca", "sighting_of_ref": "indicator--8eb85c63-0ffe-4237-89c7-75e48150b9f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d0d6f9-4a04-47a6-84d4-98f80afcd74d", "sighting_of_ref": "indicator--5f71260b-ed34-41ec-b65a-2eb60c65af58", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0688216e-2120-4a18-8623-8f0b23d2b8fa", "sighting_of_ref": "indicator--5f71260b-ed34-41ec-b65a-2eb60c65af58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18874af1-bc11-45f3-9231-4387a2da348b", "sighting_of_ref": "indicator--f0490cd7-dc48-4236-acd1-debad8423364", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f27b4b-fdbf-4fd3-b9c8-200433c326f8", "sighting_of_ref": "indicator--6c61445e-2609-4fba-8214-50c03fb0a22b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbde5231-75ce-448b-b72f-f88b68b6e9d6", "sighting_of_ref": "indicator--6c61445e-2609-4fba-8214-50c03fb0a22b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94e1c30-5894-40b7-8629-115e091df372", "sighting_of_ref": "indicator--2e4cab9b-7d73-4f08-8039-278805b71573", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4674ca47-d5e0-4711-bd0e-dd09f38afc7c", "sighting_of_ref": "indicator--2adaac28-b49a-4189-94da-ec40c46911e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e00fd99-9d4f-4cca-94ff-aa519ea540b4", "sighting_of_ref": "indicator--1d9e4f4a-2653-4e0a-b0a7-585dc6d56420", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04008c9e-3dde-4005-8b2e-d027802b335d", "sighting_of_ref": "indicator--769fff74-1d8e-4ad4-91c4-bfd8ea9f80e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0d4c89-7d26-49b9-b14c-e1a47f3a0161", "sighting_of_ref": "indicator--d542ed78-f310-4a80-8eab-0ca6eabf217c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754659e5-ab6a-4ef9-8dfc-f40edcb1d85a", "sighting_of_ref": "indicator--e92a4433-1119-44e6-a759-9c567cec76d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38559dc-ddf5-48c7-8056-0dd9d5e56d72", "sighting_of_ref": "indicator--a96f9acb-fc62-4308-9f31-1f1b97ca45d5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9141eab7-31ed-47ea-96f8-7caf58b6706c", "sighting_of_ref": "indicator--4188127f-435d-466e-a048-e61d29d1ddde", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08745fd5-6a75-40ae-95d8-fb84dc018dcb", "sighting_of_ref": "indicator--839f8b13-0bc0-4e77-a9e9-0cc602a8748b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67d8d8a-e880-457c-bf40-199292457495", "sighting_of_ref": "indicator--ba3f9a26-1c49-49e9-a4c8-c38203fd680a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f982ac-38bf-4f19-9a01-ec373ca780da", "sighting_of_ref": "indicator--22201f32-a74e-4381-99f4-d64b7f95ca57", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6491e5-e8db-483d-9bf1-1a64acfbcb41", "sighting_of_ref": "indicator--4614b338-82c7-4264-8724-2ef319f691c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaff9c2-3d4c-42b3-bb4d-a6a773230099", "sighting_of_ref": "indicator--5cfeaa9f-b658-457b-bb04-07367520ebdd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6192d241-c07a-4677-a1f5-8474aa6503e5", "sighting_of_ref": "indicator--1e0be9ee-a7db-447a-a977-8a47c3e33fdf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567f28e7-f0ed-4dc6-99fb-d436ef645da4", "sighting_of_ref": "indicator--1e6a9fca-200e-4adf-8e53-92b9477dd6f5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdffb215-f476-4a2b-9668-0c720f92005a", "sighting_of_ref": "indicator--1e6a9fca-200e-4adf-8e53-92b9477dd6f5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a26de09-381a-4ca4-983c-f4affafe9ac3", "sighting_of_ref": "indicator--1e6a9fca-200e-4adf-8e53-92b9477dd6f5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e000dca4-9340-4d82-b34c-ab30d988858d", "sighting_of_ref": "indicator--796f45a8-d5aa-47c1-a9b9-c0264b6d5c51", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146e18b8-f069-41be-aee3-c2cebd0196c0", "sighting_of_ref": "indicator--796f45a8-d5aa-47c1-a9b9-c0264b6d5c51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afffcfb7-3009-413f-b92e-4dc716782b7a", "sighting_of_ref": "indicator--796f45a8-d5aa-47c1-a9b9-c0264b6d5c51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b7e356-82ca-421a-a212-628c3415e846", "sighting_of_ref": "indicator--6eb13df9-63fd-47de-aa6e-f8bd506d89a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa70dd1-efed-4b76-8307-44ea5ce36f1b", "sighting_of_ref": "indicator--6eb13df9-63fd-47de-aa6e-f8bd506d89a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30b8ead-6d46-42c8-aa67-af9198a5d2db", "sighting_of_ref": "indicator--86994f66-dc27-48f4-a6c1-7ac3ea80eb08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e94ed9e-939d-4a60-a939-86d177dcae7c", "sighting_of_ref": "indicator--86994f66-dc27-48f4-a6c1-7ac3ea80eb08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7528253-36b8-4af6-b864-507f998ca8de", "sighting_of_ref": "indicator--ba16c09a-28c4-4628-b8d6-e5188901ce73", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827e7af5-7aa0-4ef1-aab5-70d1a0e7f224", "sighting_of_ref": "indicator--ba16c09a-28c4-4628-b8d6-e5188901ce73", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871b156e-521e-4470-bacc-5904e0c7097f", "sighting_of_ref": "indicator--ba16c09a-28c4-4628-b8d6-e5188901ce73", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b2845-b038-423a-985e-3c6c25f116f2", "sighting_of_ref": "indicator--725491a4-6485-4817-8b1f-efecfa25f675", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388fd9a3-7077-44f4-a1b4-31d066550ffb", "sighting_of_ref": "indicator--725491a4-6485-4817-8b1f-efecfa25f675", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941f234c-0ed2-4d81-bace-9df06c5614be", "sighting_of_ref": "indicator--725491a4-6485-4817-8b1f-efecfa25f675", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908c4917-c069-4e29-8f1d-863333097856", "sighting_of_ref": "indicator--b08c5d6a-0a64-4678-b42a-571f71bd04bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1376b27a-d448-4ec0-ae3d-e9f4b29d7a0d", "sighting_of_ref": "indicator--b08c5d6a-0a64-4678-b42a-571f71bd04bf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8841692-e812-4a05-ab64-fea4b8923e08", "sighting_of_ref": "indicator--b08c5d6a-0a64-4678-b42a-571f71bd04bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a0e5c7-b62b-4ef3-b934-65b546925d08", "sighting_of_ref": "indicator--69f70cfc-3a39-4a39-8384-a92535e7befb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd62736c-c3b6-4ab6-b0de-81470e8ef381", "sighting_of_ref": "indicator--69f70cfc-3a39-4a39-8384-a92535e7befb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f525b4-3394-4cfe-bfca-819ab8cb6a12", "sighting_of_ref": "indicator--69f70cfc-3a39-4a39-8384-a92535e7befb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ae6ce0-e8c2-4c92-bd34-4593474bd7f1", "sighting_of_ref": "indicator--2f41448c-0bc4-4834-9f38-23904d4cc0b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9611924-bcf2-4ea9-9f20-3f500060f5d7", "sighting_of_ref": "indicator--2f41448c-0bc4-4834-9f38-23904d4cc0b9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d8a5ec-53be-4621-a8bd-2dae42c765e7", "sighting_of_ref": "indicator--2f41448c-0bc4-4834-9f38-23904d4cc0b9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ab20a4-fd3e-4162-9c51-9db6f272904a", "sighting_of_ref": "indicator--2becf2d9-3f60-4d2d-be26-1edd13c51a5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc20d50d-7d32-451e-9d62-a5f7ae1c808a", "sighting_of_ref": "indicator--2becf2d9-3f60-4d2d-be26-1edd13c51a5a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff853163-404d-4820-8d3c-2a00c61f75b4", "sighting_of_ref": "indicator--2becf2d9-3f60-4d2d-be26-1edd13c51a5a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e7aed2-2e46-4137-857f-49f1ba74f711", "sighting_of_ref": "indicator--ee42cab4-d014-410b-b7a5-62bcf99514c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0816040f-0d9d-40e6-9390-d995913b1899", "sighting_of_ref": "indicator--ee42cab4-d014-410b-b7a5-62bcf99514c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4b39ca-bf0f-486a-b499-4617b5e66ec0", "sighting_of_ref": "indicator--ee42cab4-d014-410b-b7a5-62bcf99514c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de198e15-bbda-4b7e-8a4a-cc7dd656ec53", "sighting_of_ref": "indicator--3359a597-e2f8-4f7b-9422-96142fc149e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4df75a-a0b6-4dc9-9d49-ccf0291e5160", "sighting_of_ref": "indicator--3359a597-e2f8-4f7b-9422-96142fc149e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0ada5b-5101-45be-8d81-d068be46577c", "sighting_of_ref": "indicator--3359a597-e2f8-4f7b-9422-96142fc149e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728c2faa-d2e5-4073-b590-43fc21132e26", "sighting_of_ref": "indicator--5b0c6153-91cd-4a6f-90bd-01e065689c59", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1612282-f7be-4670-a79e-8a5c7826ccd8", "sighting_of_ref": "indicator--5b0c6153-91cd-4a6f-90bd-01e065689c59", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e591aeac-ef22-47da-a123-feee2526e637", "sighting_of_ref": "indicator--5b0c6153-91cd-4a6f-90bd-01e065689c59", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6092d8a-35e8-4659-861d-b4d02c40b2a2", "sighting_of_ref": "indicator--dd6df477-802b-44a5-9e7f-8c7827ff7bba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f46e69f-db87-4ba6-a09a-4ab74fe13d57", "sighting_of_ref": "indicator--dd6df477-802b-44a5-9e7f-8c7827ff7bba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a84ecee-15cb-487e-b53a-6458afe23622", "sighting_of_ref": "indicator--dd6df477-802b-44a5-9e7f-8c7827ff7bba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905263a6-2fe8-44c7-9bd2-24b6a1c5d215", "sighting_of_ref": "indicator--8880351b-a7f4-4cdf-b585-1424a168f89f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0591a344-85aa-49a5-a295-0e1b0ed4303e", "sighting_of_ref": "indicator--8880351b-a7f4-4cdf-b585-1424a168f89f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735ab368-736c-441e-bb73-30f209befe6a", "sighting_of_ref": "indicator--8880351b-a7f4-4cdf-b585-1424a168f89f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e07aef3-8f84-4ac3-bec2-ed2ad8a72726", "sighting_of_ref": "indicator--079a6eea-0eb6-47b6-89b8-18177bdd9bff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519780cc-ce47-4bd5-8ef1-de640e69a5c9", "sighting_of_ref": "indicator--0eca52fc-5945-4bac-b8ae-5d01c3389359", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba558ec-5799-4fa8-8e30-33185e211bec", "sighting_of_ref": "indicator--0eca52fc-5945-4bac-b8ae-5d01c3389359", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6b7539-6da3-4161-bc40-43af932ca8d0", "sighting_of_ref": "indicator--0eca52fc-5945-4bac-b8ae-5d01c3389359", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7cd2f1-d5d9-4487-961b-97c069662bc8", "sighting_of_ref": "indicator--ac34b2d8-89d5-427f-9f14-306d3800d6fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce58bdae-e411-41de-a6dc-c7a65c5013f6", "sighting_of_ref": "indicator--ac34b2d8-89d5-427f-9f14-306d3800d6fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad62f7e6-7c8b-4b02-8d63-614b21f226c5", "sighting_of_ref": "indicator--ac34b2d8-89d5-427f-9f14-306d3800d6fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ad4ea3-5d95-4a1b-b676-9ce32a82b3a5", "sighting_of_ref": "indicator--a6983810-01a2-4dd2-9292-afa8eb650de2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1402d0-2623-424c-bd6a-686a9b94de82", "sighting_of_ref": "indicator--a6983810-01a2-4dd2-9292-afa8eb650de2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894e54c7-498d-4951-b646-24565aec75ca", "sighting_of_ref": "indicator--a6983810-01a2-4dd2-9292-afa8eb650de2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bd61e3-28fd-4ffa-b4e5-7d1db9e61f68", "sighting_of_ref": "indicator--d9730799-f592-49f6-b2dc-62d6dbeeff02", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67fc193-ed41-4af5-af09-b551ddaa1160", "sighting_of_ref": "indicator--d9730799-f592-49f6-b2dc-62d6dbeeff02", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9359b3-cb6e-43bd-b1cd-6df7070a5759", "sighting_of_ref": "indicator--d9730799-f592-49f6-b2dc-62d6dbeeff02", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dc1a19-a3d0-4d1e-8ba7-d84ee0ea6db5", "sighting_of_ref": "indicator--511d2084-9923-459b-a899-c8095dd87b0b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62346b5-5c09-4741-a390-33e201c5875b", "sighting_of_ref": "indicator--511d2084-9923-459b-a899-c8095dd87b0b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f7942e-278a-4c69-8632-dbb01cfdf9fa", "sighting_of_ref": "indicator--511d2084-9923-459b-a899-c8095dd87b0b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784cdb48-fe68-4f65-bd5a-a50b350c2836", "sighting_of_ref": "indicator--f74d9664-a247-4614-ab16-a518d52eefc9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9328975-6df1-4208-81a1-d3cef2a5665d", "sighting_of_ref": "indicator--f74d9664-a247-4614-ab16-a518d52eefc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e0a5a-679a-46bd-849f-60000792e79b", "sighting_of_ref": "indicator--f74d9664-a247-4614-ab16-a518d52eefc9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc304180-a67b-4ef5-8481-a86568549e17", "sighting_of_ref": "indicator--98f98372-f17e-485d-9ae2-5b430643c705", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9716de5-9152-4966-b6ad-d88ddf13309b", "sighting_of_ref": "indicator--98f98372-f17e-485d-9ae2-5b430643c705", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f32e29-32aa-43a8-8555-8f01b72735bb", "sighting_of_ref": "indicator--98f98372-f17e-485d-9ae2-5b430643c705", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac82bc60-6ae1-48ab-8b0b-21c77b05c657", "sighting_of_ref": "indicator--9c6496b3-e046-42e2-a4ca-09b6df8cf66b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224f95da-78ef-4a17-a70a-9439a17bc1b7", "sighting_of_ref": "indicator--9c6496b3-e046-42e2-a4ca-09b6df8cf66b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4769ba1-5083-4848-bd75-0a9db8e63481", "sighting_of_ref": "indicator--9c6496b3-e046-42e2-a4ca-09b6df8cf66b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551650e8-3ce2-4758-ae8b-bf073781cdb5", "sighting_of_ref": "indicator--cd74e7ff-ad15-4de2-a284-54a506b5241d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4dc3ae-ebe6-43aa-9fe4-22645b9c0f08", "sighting_of_ref": "indicator--cd74e7ff-ad15-4de2-a284-54a506b5241d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc01ad9-8c19-4280-9c52-0cd3b2800d89", "sighting_of_ref": "indicator--cd74e7ff-ad15-4de2-a284-54a506b5241d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4e9958-0242-40bf-b999-bb0c68804c76", "sighting_of_ref": "indicator--0c6b2b1f-3d17-46c7-ab20-9a59ccd21700", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662d06a4-deb5-4989-9f64-e1a23c8e21c2", "sighting_of_ref": "indicator--0c6b2b1f-3d17-46c7-ab20-9a59ccd21700", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bef2d95-5466-4c45-b96d-ea8a8f9a60e4", "sighting_of_ref": "indicator--0c6b2b1f-3d17-46c7-ab20-9a59ccd21700", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599f9678-6a79-46b5-9be4-12fc244c2a7b", "sighting_of_ref": "indicator--0ead11f0-950d-4fab-8889-1adad25d0310", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648d4240-cafc-4bd7-bef2-32c3bf35a46d", "sighting_of_ref": "indicator--6cad5802-b123-48a7-85fd-52677278ba50", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6d8a98-384e-4657-8d13-e2ced7e9d6ca", "sighting_of_ref": "indicator--e6cba7ad-3ed8-4d99-bfe7-771290947c84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ace7ec1-34c3-4552-901b-abfd7dfef8a8", "sighting_of_ref": "indicator--e6cba7ad-3ed8-4d99-bfe7-771290947c84", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020e2115-c44a-4f9a-8a36-3be7d611c813", "sighting_of_ref": "indicator--e6cba7ad-3ed8-4d99-bfe7-771290947c84", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efab316c-cd73-4662-9e53-e22ba20102c0", "sighting_of_ref": "indicator--c50f3843-9878-41f5-a866-a58eb498bec1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1e88a0-02e2-41f2-9518-20a73ceb68eb", "sighting_of_ref": "indicator--c50f3843-9878-41f5-a866-a58eb498bec1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfdff82-edbd-40ac-95dd-fba2c56c7709", "sighting_of_ref": "indicator--c50f3843-9878-41f5-a866-a58eb498bec1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b571a50-a061-4605-b24b-e6f5f47019ff", "sighting_of_ref": "indicator--f3bc3405-131c-4af4-9591-e128f9e79f83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a895b7-a77c-4837-be9a-ed2bbfdf23b3", "sighting_of_ref": "indicator--f3bc3405-131c-4af4-9591-e128f9e79f83", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d28db86-ba7b-45d8-8d79-f5c4e98bda62", "sighting_of_ref": "indicator--f3bc3405-131c-4af4-9591-e128f9e79f83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3483d2f-1973-4f49-92d2-b98bbe80ce33", "sighting_of_ref": "indicator--f6b2f77b-af23-49d7-bd6c-bc487ba4150b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76eecf3-c7bc-4534-a66b-140fc5030962", "sighting_of_ref": "indicator--f6b2f77b-af23-49d7-bd6c-bc487ba4150b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9116be47-b48a-4106-aae8-a65eee3e4521", "sighting_of_ref": "indicator--f6b2f77b-af23-49d7-bd6c-bc487ba4150b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2253a971-d126-4347-8c0e-d197ef433dad", "sighting_of_ref": "indicator--202037b1-c973-447c-b084-089e18c54bb3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0c7997-2493-489b-90ee-c88a2702f747", "sighting_of_ref": "indicator--202037b1-c973-447c-b084-089e18c54bb3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53aa56de-304d-4be2-8c39-6b4f514acd7b", "sighting_of_ref": "indicator--202037b1-c973-447c-b084-089e18c54bb3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464778b3-e4bd-4cf2-b2a7-5678e792953d", "sighting_of_ref": "indicator--b87b6495-7dd5-4ee5-ae6d-338aac812a98", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bca9137-6a2d-4531-82f5-3c54a644a89a", "sighting_of_ref": "indicator--88cd03fb-04ea-4511-b80d-cd765ed0381d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d049ae-31ce-406a-9e8b-cc36464198ac", "sighting_of_ref": "indicator--88cd03fb-04ea-4511-b80d-cd765ed0381d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981e2e16-777b-4504-9a27-ab80f66cdc6e", "sighting_of_ref": "indicator--88cd03fb-04ea-4511-b80d-cd765ed0381d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65052a8-86b5-4f91-959b-2618a5812056", "sighting_of_ref": "indicator--cb72dc80-95a7-4fb1-9a47-467fcd7a72e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375c30f0-a43e-40c5-b609-3142442db05c", "sighting_of_ref": "indicator--cb72dc80-95a7-4fb1-9a47-467fcd7a72e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f6d095-98e4-4b35-9c94-0d117b569f37", "sighting_of_ref": "indicator--cb72dc80-95a7-4fb1-9a47-467fcd7a72e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b615cb2e-56eb-4639-853b-8d9dc3a2226b", "sighting_of_ref": "indicator--b61f1b14-cb28-4b8b-ad23-286538bfe600", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a437950f-ae4a-4b24-b1d1-ff5d37b70e1e", "sighting_of_ref": "indicator--b61f1b14-cb28-4b8b-ad23-286538bfe600", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cf63d4-8d26-4972-a357-15f7218898ee", "sighting_of_ref": "indicator--b61f1b14-cb28-4b8b-ad23-286538bfe600", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee01dcbd-5e6d-4ff8-ab56-1c6acdf88de6", "sighting_of_ref": "indicator--9cf4139a-3b33-47c0-9645-c78af259bdd1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d16c54-1fa8-45bc-9206-30c0dca6349e", "sighting_of_ref": "indicator--352b0dfb-4934-4d5a-93f9-629a2ea43f66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efb5b7a-f83f-45fd-83e5-3336b8efea17", "sighting_of_ref": "indicator--1e729e3d-9806-43a2-91f6-f343ef7879b0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394846be-9a26-4523-9d49-29102fe89441", "sighting_of_ref": "indicator--0265ba84-7d19-4641-a083-7c970f0bec25", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30505b1a-0708-4b3b-9dcb-5f935247e0a7", "sighting_of_ref": "indicator--d6975b97-53b1-4b48-bb5b-8ae754ec81a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d1731b-9fef-4d1e-a273-34d47d25105c", "sighting_of_ref": "indicator--9ae22ab6-ad5f-4461-8251-538b4a9ed861", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4a5f6a-ba01-4dcf-8f7c-d1e840691d90", "sighting_of_ref": "indicator--277a55cc-5e50-415a-9a65-7d8d4d865d55", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abd6b4a-2e2f-47f3-8983-43c4d3c722d7", "sighting_of_ref": "indicator--9e0c2411-9695-46b7-b2a9-d78488fe04bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145b6c36-a7fb-4db7-aed7-a8ad96e1bd79", "sighting_of_ref": "indicator--db3c0a2b-2e65-4b85-abfd-0154fa17df4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8602a511-016c-4597-9670-8727ea0e5ba4", "sighting_of_ref": "indicator--db3c0a2b-2e65-4b85-abfd-0154fa17df4e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e16207f-a6d5-4d6e-96bc-15521bc0dccb", "sighting_of_ref": "indicator--db3c0a2b-2e65-4b85-abfd-0154fa17df4e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6e1aed-82e2-4fd1-ae18-0f460730a02d", "sighting_of_ref": "indicator--402d425e-e22b-4c1d-aab7-e8defef2f11a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c3ce46-3e0a-4afa-8abb-0c38a740552f", "sighting_of_ref": "indicator--402d425e-e22b-4c1d-aab7-e8defef2f11a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbe8687-07f5-4c45-801d-b09dc52e5b89", "sighting_of_ref": "indicator--402d425e-e22b-4c1d-aab7-e8defef2f11a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b870f77-3682-4b0f-9042-16fe26274a76", "sighting_of_ref": "indicator--7ce9dba2-d499-46c3-85d4-cd030dfb8e59", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb18c93-7c25-4fd8-b2a1-abe3f36fafab", "sighting_of_ref": "indicator--7ce9dba2-d499-46c3-85d4-cd030dfb8e59", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dab293-5ba1-4857-b758-fc8d4b2143ad", "sighting_of_ref": "indicator--7ce9dba2-d499-46c3-85d4-cd030dfb8e59", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86af6469-30e7-4d3f-8dbe-2f2213d0abe0", "sighting_of_ref": "indicator--40c761fd-6d8a-4060-ad6a-29c3a0b63222", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a3c868-43a8-4cf8-b3de-d145dc77e6d2", "sighting_of_ref": "indicator--40c761fd-6d8a-4060-ad6a-29c3a0b63222", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5da1885-6da8-41e7-bcd8-76d024e0d599", "sighting_of_ref": "indicator--40c761fd-6d8a-4060-ad6a-29c3a0b63222", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc492e21-57ca-4fef-8f96-dc624120f529", "sighting_of_ref": "indicator--ec0c2e63-66a0-4e83-a55b-9dd19ed48a7c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e5acee-2c46-45b2-867c-3c4db88aa216", "sighting_of_ref": "indicator--ec0c2e63-66a0-4e83-a55b-9dd19ed48a7c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ca3e11-fcab-4ef0-a39f-682a7a191b4b", "sighting_of_ref": "indicator--ec0c2e63-66a0-4e83-a55b-9dd19ed48a7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fc971d-d7bb-4bbe-8188-665758fda049", "sighting_of_ref": "indicator--e5b70cb3-59ed-4db6-8318-1457a538bd6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35d4305-5887-407e-9533-f0f1e4ba859d", "sighting_of_ref": "indicator--e5b70cb3-59ed-4db6-8318-1457a538bd6b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44522542-ee1f-44d0-81a6-adfd151325b3", "sighting_of_ref": "indicator--e5b70cb3-59ed-4db6-8318-1457a538bd6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4cfefa-98b9-44d0-9da8-49ea074029c2", "sighting_of_ref": "indicator--b1f0f6d1-7b39-4ee6-9e9d-c0114fe78019", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500e327f-e925-4ee5-9203-e17c468a45fe", "sighting_of_ref": "indicator--b1f0f6d1-7b39-4ee6-9e9d-c0114fe78019", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1655cd7-26af-4254-aa08-7977e9a3d3e0", "sighting_of_ref": "indicator--b1f0f6d1-7b39-4ee6-9e9d-c0114fe78019", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a438e512-d2d5-437c-86b0-e477fa6e09b8", "sighting_of_ref": "indicator--75af9d8b-c59e-4c6a-a04b-e534850fc5be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f586758-b44d-45e3-85d1-fbc699df76de", "sighting_of_ref": "indicator--75af9d8b-c59e-4c6a-a04b-e534850fc5be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7920a0-94b4-4f72-b27a-cf79ac3e1f3e", "sighting_of_ref": "indicator--75af9d8b-c59e-4c6a-a04b-e534850fc5be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ad7f55-9717-42f3-9369-682cf513fedf", "sighting_of_ref": "indicator--7d382b87-d2e1-438c-97d2-c0af78a42d53", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4206c21c-3838-4c25-824b-3bbf7fc6f363", "sighting_of_ref": "indicator--7d382b87-d2e1-438c-97d2-c0af78a42d53", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6138e79-921f-4f4e-bac7-92a0a2a5767e", "sighting_of_ref": "indicator--7d382b87-d2e1-438c-97d2-c0af78a42d53", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6383274-58e7-4afe-b68c-c011a5e00918", "sighting_of_ref": "indicator--e2f25959-44c0-4a0c-86be-60009312f1e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f23e6c-44a3-44a3-b485-33e323bb3558", "sighting_of_ref": "indicator--e2f25959-44c0-4a0c-86be-60009312f1e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf41fc4b-0568-4654-8da2-4e7d55eff38d", "sighting_of_ref": "indicator--e2f25959-44c0-4a0c-86be-60009312f1e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3337db-c12d-43c6-bbea-3a843d6e0c7a", "sighting_of_ref": "indicator--6cad54c5-7e76-47d8-aaf9-e01603d9ea07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fb5e7e-f4e7-43ba-a838-378cb02adf94", "sighting_of_ref": "indicator--6cad54c5-7e76-47d8-aaf9-e01603d9ea07", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d607540f-a6e8-49ef-a8bc-19cff53600ad", "sighting_of_ref": "indicator--6cad54c5-7e76-47d8-aaf9-e01603d9ea07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a193dbb1-26fa-407f-ae63-72cd4170d987", "sighting_of_ref": "indicator--13844101-06d7-4c0a-9551-bdc8e5a458d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cad0dc3-33c7-477b-b13c-6eeb320751ac", "sighting_of_ref": "indicator--13844101-06d7-4c0a-9551-bdc8e5a458d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ae7c05-2e6d-4771-8602-2bb357ba7085", "sighting_of_ref": "indicator--13844101-06d7-4c0a-9551-bdc8e5a458d4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f737de9-5556-43e8-ba22-53436ceedef2", "sighting_of_ref": "indicator--0a3c9a79-c365-4596-a11e-8b0e35cfd315", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5c761a-293f-42c7-a2ba-3e89bdf05c3e", "sighting_of_ref": "indicator--0a3c9a79-c365-4596-a11e-8b0e35cfd315", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1718720-3220-4e55-90c7-6217d2a90c4d", "sighting_of_ref": "indicator--0a3c9a79-c365-4596-a11e-8b0e35cfd315", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86692bc0-6ee9-4f22-8960-560514a310b8", "sighting_of_ref": "indicator--9482f018-39a0-4b48-bdaa-732237fcd6c8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6dbdf7-e677-40f8-8f33-241189fbb970", "sighting_of_ref": "indicator--9482f018-39a0-4b48-bdaa-732237fcd6c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce0eb85-ab80-4da2-82ec-d361fbd35357", "sighting_of_ref": "indicator--9482f018-39a0-4b48-bdaa-732237fcd6c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426daadf-e880-4342-bd4e-e7fad5d18252", "sighting_of_ref": "indicator--21efd1f2-110a-4988-9e4a-4b2c01c9860c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fe39b0-401f-4813-a34b-117b010141b3", "sighting_of_ref": "indicator--21efd1f2-110a-4988-9e4a-4b2c01c9860c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689cd18d-47e8-4268-8f5a-d2996b9bf2ae", "sighting_of_ref": "indicator--21efd1f2-110a-4988-9e4a-4b2c01c9860c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6618d8-33ec-406f-b9ef-d596f2bca724", "sighting_of_ref": "indicator--5e12946c-ae55-47dd-81a3-d77dbf825563", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59e42c8-3a88-4c9b-908d-5bcf747e8f01", "sighting_of_ref": "indicator--5e12946c-ae55-47dd-81a3-d77dbf825563", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1671bdc3-bf05-476e-95a5-42e2efc40175", "sighting_of_ref": "indicator--5e12946c-ae55-47dd-81a3-d77dbf825563", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20d332b-f4b0-4ef6-a12c-f5ead16dbab5", "sighting_of_ref": "indicator--3c633758-ee8e-4929-9739-41c569568b5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa624b0-5474-4d2c-8bed-cb3cd5bb3d4e", "sighting_of_ref": "indicator--a8747691-5169-4eaa-b871-d0dd89c3a564", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3a6301-f339-4cf2-baf9-ad188525c8dc", "sighting_of_ref": "indicator--a8747691-5169-4eaa-b871-d0dd89c3a564", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf26e21-436b-4ea8-9edb-975c2e144aa6", "sighting_of_ref": "indicator--93862447-ff4f-4d90-b7bc-06591a38959e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85e83ca-8c82-40dc-a722-635b89f9352c", "sighting_of_ref": "indicator--3d35d928-eb48-42be-ac20-f289b978b827", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3778cd60-1fce-4e71-a88e-c0d5fecde45d", "sighting_of_ref": "indicator--3d35d928-eb48-42be-ac20-f289b978b827", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c31086-78bc-4ee1-bf2f-8f3b5954ce6e", "sighting_of_ref": "indicator--d1b878e0-b33e-4e9d-aa49-ec6d6e227e70", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e102b48-3440-4b14-a922-e8c7ecf21e0e", "sighting_of_ref": "indicator--238336fc-f848-47a4-b37c-e0e381f2d8cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96edc7b-a3fa-414e-9de0-8ce46aa0a85f", "sighting_of_ref": "indicator--82a39f00-cc4f-490d-b8c4-f0cf3fe85890", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1b51f6-9b80-4e4b-8485-04990a3a85ff", "sighting_of_ref": "indicator--d050434e-faec-42dd-8ac9-5b8e9f959a9d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5414713f-740c-4fd7-8f73-16ebef8787f4", "sighting_of_ref": "indicator--3fbdf18e-c2fd-4b68-b11e-d99ad38c82f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c99a605-007a-4250-830e-25c7aa07ef3d", "sighting_of_ref": "indicator--d539dbdd-f840-433b-b7c3-cc2f586cfaa6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126949aa-894c-4fc6-bb9b-7c8ac82e7967", "sighting_of_ref": "indicator--3a2ed036-4197-4958-ab28-afb2937d11a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f28d6a4-af2b-44e0-8b7b-ede1e95480b7", "sighting_of_ref": "indicator--8a9fddf0-ee7f-453b-b34e-0c371384ea2e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4890b8-1b9c-455d-8e19-7d99f29cfbe0", "sighting_of_ref": "indicator--8a9fddf0-ee7f-453b-b34e-0c371384ea2e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21ec1e1-4b3d-4bf1-8684-4a81aa715860", "sighting_of_ref": "indicator--8a9fddf0-ee7f-453b-b34e-0c371384ea2e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477a505f-61b9-4248-a0d7-78f183aaf6fc", "sighting_of_ref": "indicator--1a7b21c3-4783-40da-8291-0c1863a2e61b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534a4539-d7ee-4600-a9c1-75e1ac4eaa68", "sighting_of_ref": "indicator--1a7b21c3-4783-40da-8291-0c1863a2e61b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438974b5-31db-4e74-a061-19d5809ecd9f", "sighting_of_ref": "indicator--508b8645-d19f-4179-b709-57acabec39f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd910ba-e884-4424-a31b-7df3cfb804c7", "sighting_of_ref": "indicator--515fbaf9-f6e0-43eb-bd6d-c274b14a2ad0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2515b41a-ddd6-49ac-a72b-c2dc66b97b87", "sighting_of_ref": "indicator--515fbaf9-f6e0-43eb-bd6d-c274b14a2ad0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0fe6ff-5b21-439a-92c5-523df4b79f65", "sighting_of_ref": "indicator--d92615c8-b060-4663-8673-192e14abf02b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119fd01a-0863-4ac4-8864-a7d2ab8b30df", "sighting_of_ref": "indicator--d92615c8-b060-4663-8673-192e14abf02b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cee0ef3-6aac-48b1-a05a-a01996e4eece", "sighting_of_ref": "indicator--de7504c0-557f-498e-bb66-1243bbe0eaf2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fd9599-4a6b-41da-a045-b297b87d009c", "sighting_of_ref": "indicator--ad811ec3-24a4-4585-8070-cee36509625f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6826667f-3078-456b-8bb2-4eeb7a9eed3d", "sighting_of_ref": "indicator--51f23ade-070b-4d1c-8a82-e7eb76c06a56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbb6f9a-c8d0-4f21-a941-24a16020b5b7", "sighting_of_ref": "indicator--56c14b82-27ee-46d5-8813-f33e8f2604b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394580cd-ac9a-4645-a217-e007d5bd7d53", "sighting_of_ref": "indicator--8e703a10-a466-4bf3-8f79-aee2ee5c50a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536db189-7196-4414-adba-dd86c4f263e5", "sighting_of_ref": "indicator--bfb4ccf6-f0e4-49c2-ae66-dac57b6738ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4659177e-9173-4495-83ce-78e584eaa789", "sighting_of_ref": "indicator--111501f8-1e04-4c15-a1f6-b3a4d636a742", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca487d1e-5b13-4f51-8d3a-b66e653e4bd6", "sighting_of_ref": "indicator--bec5b591-dccf-4fad-b304-5ec141a836ec", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfd644b-1498-48d5-b310-d50e4b297f88", "sighting_of_ref": "indicator--f7436b95-301f-4774-ad55-b5124b0b5b99", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faf9af6-dd66-4276-bec9-db7e45ded077", "sighting_of_ref": "indicator--35fe5fad-974b-480a-851e-f9488e474836", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993baaa2-3948-412a-b8d8-234ce4d5610b", "sighting_of_ref": "indicator--35fe5fad-974b-480a-851e-f9488e474836", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60070113-657d-4039-ad12-5df73f52607b", "sighting_of_ref": "indicator--410b98a0-d020-4b1e-8618-ee0455f68a65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852f9ada-7949-4381-beef-fd0257dfdcf7", "sighting_of_ref": "indicator--410b98a0-d020-4b1e-8618-ee0455f68a65", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127295d0-0060-48e4-a67c-ab148d27f88e", "sighting_of_ref": "indicator--b0bfb35e-f43b-474c-8af6-646199d173e6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181cc7fe-2cee-4e30-9c25-4e9caf0cb4e2", "sighting_of_ref": "indicator--cfcd7d50-9029-487f-8c0a-e55e345f16e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f948e60-3fde-4333-9ad5-9499d9c9658f", "sighting_of_ref": "indicator--cfcd7d50-9029-487f-8c0a-e55e345f16e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cc17a4-a7d1-419c-a67d-ca3b232fd632", "sighting_of_ref": "indicator--53a7083a-9f1b-4631-819a-cdd0d60044e7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8e3ef7-83e4-47cb-9a10-88b3f78dbc52", "sighting_of_ref": "indicator--4a8ecdfb-f041-4c0f-a35f-addee54fe724", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3feff23b-5628-4381-a921-3c4e8a2b5d53", "sighting_of_ref": "indicator--4a8ecdfb-f041-4c0f-a35f-addee54fe724", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1867dfa3-c704-4359-bed8-60e932e5478a", "sighting_of_ref": "indicator--4a8ecdfb-f041-4c0f-a35f-addee54fe724", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd4e033-bd20-4856-8183-b74e7ea41b4e", "sighting_of_ref": "indicator--e59ac48c-0d62-431d-b830-0452f52609c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8087734a-5177-4c2b-8be9-3c846ee9a0e0", "sighting_of_ref": "indicator--2764b0d9-7b0f-4d39-9cca-71dff008bfde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33d77f7-9cc3-4d62-ae7b-8df00b97b411", "sighting_of_ref": "indicator--dbde609f-ae1c-44a1-a85d-dce159946c85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6955e7-df48-4e85-8602-a879f096e66e", "sighting_of_ref": "indicator--dbde609f-ae1c-44a1-a85d-dce159946c85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9ee5de-bf0d-48aa-8ece-f853ca5e5dd5", "sighting_of_ref": "indicator--5e2c8f37-85d7-4f45-bbdd-6f136b31c9aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b4e1b8-42b7-4498-bb93-2016d216a8c2", "sighting_of_ref": "indicator--5ebd2f38-5449-4730-b4f5-32001bea748b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685fae6d-a305-431c-9516-337308e1f021", "sighting_of_ref": "indicator--5ebd2f38-5449-4730-b4f5-32001bea748b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ae2358-8b78-4af9-9168-b736ea276d03", "sighting_of_ref": "indicator--5ebd2f38-5449-4730-b4f5-32001bea748b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48db0ade-a297-40c5-b9d1-1188f1e8c5bb", "sighting_of_ref": "indicator--ebe15652-34b4-402b-aea3-0e4c0de350ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26379769-21e4-464a-bc71-ddca190b36c8", "sighting_of_ref": "indicator--ebe15652-34b4-402b-aea3-0e4c0de350ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95f3a95-2fd1-4b1d-9784-d75b8d167653", "sighting_of_ref": "indicator--e7f4eb2e-45d2-439b-aaf8-67d841320a02", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbea3d9-6866-44d7-b23e-dbbd19297650", "sighting_of_ref": "indicator--68bbb9ef-2488-47d7-9d7a-ca54fdb1a0ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1df630-2b92-4c47-bcf9-5def2759eece", "sighting_of_ref": "indicator--68bbb9ef-2488-47d7-9d7a-ca54fdb1a0ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc97639a-f858-4c95-a16f-173ee32c5232", "sighting_of_ref": "indicator--66ac4849-7494-44b4-9c78-2fed03c9aceb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89487a7-e720-4dee-8853-5732bd996c18", "sighting_of_ref": "indicator--66ac4849-7494-44b4-9c78-2fed03c9aceb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74699a2d-1fb1-4580-ad76-3913b18d941e", "sighting_of_ref": "indicator--66ac4849-7494-44b4-9c78-2fed03c9aceb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47523cb-2da8-4591-bcb9-eca8c8baaa1a", "sighting_of_ref": "indicator--1abc8eb1-831e-4cec-bb11-dfc79af9b4d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3500439f-de85-4bf3-a3fd-d7448d3b0e71", "sighting_of_ref": "indicator--1abc8eb1-831e-4cec-bb11-dfc79af9b4d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e542b28b-5874-4d99-b3ac-9b388e9759e1", "sighting_of_ref": "indicator--1abc8eb1-831e-4cec-bb11-dfc79af9b4d4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe71bcf-43c0-4de8-b6af-be9da397e675", "sighting_of_ref": "indicator--ae7fee18-3f36-4bbd-b4e4-5bdd6a4cdbab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ee4a38-4f7f-402f-afee-ecb20b8c425e", "sighting_of_ref": "indicator--ae7fee18-3f36-4bbd-b4e4-5bdd6a4cdbab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927bf190-c150-4e85-a8fa-feec5e64d54b", "sighting_of_ref": "indicator--ae7fee18-3f36-4bbd-b4e4-5bdd6a4cdbab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7690b2-c9d0-43d6-8f3b-16bf26b9452b", "sighting_of_ref": "indicator--1e973292-3562-4562-8054-95aea665d616", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0369ffbf-feb8-4387-9640-3df0c396cba3", "sighting_of_ref": "indicator--1e973292-3562-4562-8054-95aea665d616", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2e7e9b-8540-4c5e-9c51-631e183b4151", "sighting_of_ref": "indicator--1e973292-3562-4562-8054-95aea665d616", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7144002d-b829-425e-b884-5a8de3046597", "sighting_of_ref": "indicator--9be32526-05d1-4155-9ed8-1f5f9d2cd850", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f5d9b5-c362-4295-bec4-a252591c8d11", "sighting_of_ref": "indicator--9be32526-05d1-4155-9ed8-1f5f9d2cd850", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed6dc6a-97fc-41f4-8a10-0de013b73e57", "sighting_of_ref": "indicator--9be32526-05d1-4155-9ed8-1f5f9d2cd850", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3a96ce-7205-4001-b611-6af93e3196cd", "sighting_of_ref": "indicator--9eed8d2b-48de-4f06-bc59-da9a52d4d19c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6497e757-642c-4eb2-9fc0-d03cac5066ef", "sighting_of_ref": "indicator--9eed8d2b-48de-4f06-bc59-da9a52d4d19c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dc1af3-fc2a-4e83-b4c1-07f48d0f848d", "sighting_of_ref": "indicator--9eed8d2b-48de-4f06-bc59-da9a52d4d19c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5daea1-ad16-4254-98a2-264e138a558a", "sighting_of_ref": "indicator--e6c5ee93-d972-4452-9efe-3aabe3deb7a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2885cc44-4f9e-4bc8-ae76-d9b9a332d95f", "sighting_of_ref": "indicator--e6c5ee93-d972-4452-9efe-3aabe3deb7a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e562cd-32b8-4315-a4cb-b6c87245ccc5", "sighting_of_ref": "indicator--e6c5ee93-d972-4452-9efe-3aabe3deb7a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1744f760-fd7b-43b7-a6f9-e942adbf6b59", "sighting_of_ref": "indicator--c031dfdf-9140-4aeb-8d27-dde0996f9652", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcd944b-d5db-4c0b-a2ad-d1994f24483d", "sighting_of_ref": "indicator--c031dfdf-9140-4aeb-8d27-dde0996f9652", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091ecadd-94cb-49e1-acd5-76523d6f39b6", "sighting_of_ref": "indicator--c031dfdf-9140-4aeb-8d27-dde0996f9652", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bf8c7b-a3e6-4be1-82eb-27bf72f05925", "sighting_of_ref": "indicator--ec4a5d3e-1458-4666-9c2a-5427c9f15ebf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6699ac-c702-4471-9f56-4344a4d520bd", "sighting_of_ref": "indicator--ec4a5d3e-1458-4666-9c2a-5427c9f15ebf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252d6c57-ea16-4647-87d8-57705bc347e0", "sighting_of_ref": "indicator--ec4a5d3e-1458-4666-9c2a-5427c9f15ebf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e18e68a-b086-4ac6-ab9f-dc04b4060e36", "sighting_of_ref": "indicator--31927c47-871e-4261-ae69-8069119955e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eec2a7-88f6-42ae-b0f3-377a3ffb7ca5", "sighting_of_ref": "indicator--31927c47-871e-4261-ae69-8069119955e6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d258a4-d86a-4a83-92be-0fb47d22fbb6", "sighting_of_ref": "indicator--31927c47-871e-4261-ae69-8069119955e6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7656f084-babf-4699-b168-66de15aa0976", "sighting_of_ref": "indicator--4fea9f72-f82f-49f5-a3e1-f3754e7b256c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b485b6f-13ed-4d17-a4ef-34abe45f322a", "sighting_of_ref": "indicator--4fea9f72-f82f-49f5-a3e1-f3754e7b256c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49105029-84a4-469d-b981-aa962fb0b3ab", "sighting_of_ref": "indicator--4fea9f72-f82f-49f5-a3e1-f3754e7b256c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f408db8-65af-4fd0-8330-037d1b63c4d1", "sighting_of_ref": "indicator--af29794c-3453-40b0-85cf-480008f236b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff07e041-3d9a-4738-a26e-540d7adcb73a", "sighting_of_ref": "indicator--af29794c-3453-40b0-85cf-480008f236b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe40acbe-b8bc-4c91-838f-d9ec66bd3222", "sighting_of_ref": "indicator--af29794c-3453-40b0-85cf-480008f236b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68134950-409f-45dd-8860-fef39fdecbc0", "sighting_of_ref": "indicator--ef578bcb-d120-461b-aeb4-a4b6d6b5067a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b341b6-fd98-433e-81cf-6073e563fb75", "sighting_of_ref": "indicator--5e587699-a756-44d2-8391-312e297cddd5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055425a1-56c4-427b-9bbb-36f1768c6e40", "sighting_of_ref": "indicator--049cde66-6b3e-465c-a60b-b620736db25d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65396f04-8cfb-49c4-8ad2-12f4d090483d", "sighting_of_ref": "indicator--1a2c2443-bbb1-4a87-bbcd-31b54b64f9d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a6627e-8315-4a54-8215-35fd8edaf841", "sighting_of_ref": "indicator--f96a385c-e324-41a5-9adf-9df071de2b2f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8704422a-a78a-4d5b-9901-95358ecb44ca", "sighting_of_ref": "indicator--7a719a9e-dd5a-408d-95ce-723a1ace68bb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c63dc98-ead0-4bca-84fe-e53f1ba54965", "sighting_of_ref": "indicator--7a719a9e-dd5a-408d-95ce-723a1ace68bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9638a946-7944-4811-8135-e5f3e08ff151", "sighting_of_ref": "indicator--ccd94f28-2986-4711-9b8b-d51c863d1cd9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb93067-5c22-4650-8508-25a1e1b52a09", "sighting_of_ref": "indicator--4c72a444-3593-4cd4-a193-60b29d55cb38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e17dc57-782f-4adb-b827-1307791b85e2", "sighting_of_ref": "indicator--4c72a444-3593-4cd4-a193-60b29d55cb38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b221ab-897a-4837-8ce8-9ccd2e2f213c", "sighting_of_ref": "indicator--36587178-9335-4313-b3e4-eed87c5bf3b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9389ca-3b88-4e19-b1bb-d7307ba6326a", "sighting_of_ref": "indicator--be01315a-b038-4592-9169-5d0df9106714", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f61068-639f-4c56-bdbc-7d9252dca549", "sighting_of_ref": "indicator--be01315a-b038-4592-9169-5d0df9106714", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2082e06e-c033-4437-965b-d7dcbd2d3ffa", "sighting_of_ref": "indicator--1961ce20-d592-4d5f-be0d-25544646657c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6f40cb-4688-4170-86eb-4e80b2a6e7c3", "sighting_of_ref": "indicator--a920cc18-a0b7-4834-af18-944508d57390", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a134716f-f0ba-4b64-bd34-ce0418391896", "sighting_of_ref": "indicator--e408562b-0d25-49b7-a0a5-cd0d9abb3414", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a159e0-f2ba-4d5c-a384-ddf7045e7c2b", "sighting_of_ref": "indicator--e408562b-0d25-49b7-a0a5-cd0d9abb3414", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6511fde-652b-402a-bdc1-ae964debc08d", "sighting_of_ref": "indicator--7d35a0c8-7abb-4f62-bc28-5574fcac6643", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc8513e-5574-4b70-a720-3db4f9e943b3", "sighting_of_ref": "indicator--367045bf-3642-4074-91bc-6fc8f60bd0fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa00224-3268-4e33-9b5b-433b7527899f", "sighting_of_ref": "indicator--367045bf-3642-4074-91bc-6fc8f60bd0fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d7349d-20b1-4062-a5d5-37a0685f3f13", "sighting_of_ref": "indicator--6097b0b9-ccd6-49b1-bc2c-2a82cf9924b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fb1739-dd83-475f-977b-8683fb3c283f", "sighting_of_ref": "indicator--6097b0b9-ccd6-49b1-bc2c-2a82cf9924b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d7fbcb-053a-4602-968b-1c980ef97140", "sighting_of_ref": "indicator--67588d2e-84ff-41d1-a1c5-fbead50c5531", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5871b9-bc40-4016-a351-be63ab46e9ce", "sighting_of_ref": "indicator--7744adff-8b02-445a-91a6-59eac03d372e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f66a685-cc8e-41b6-bfb1-da0a029f5304", "sighting_of_ref": "indicator--a84bceff-30ad-4432-a0d8-5e899a35bfb7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e032458-5ef9-4267-8167-33a74342e7e1", "sighting_of_ref": "indicator--43e7c4c2-3b7e-4bd8-a627-442345860780", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b97435-d65e-4369-8b35-1f7041d8d93d", "sighting_of_ref": "indicator--778ec362-8c37-47d0-b21f-415483bde5cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a185a1-31e5-4738-92bf-74b891de83d3", "sighting_of_ref": "indicator--0849f80a-b22e-408d-a4d7-447dd4b0c9ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9eb8d00-8637-4659-9a8a-1e260c35fc4e", "sighting_of_ref": "indicator--7fb33f6b-63f6-4112-9391-3b43cde72133", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17afbac0-7554-4370-9e15-314a98f65aac", "sighting_of_ref": "indicator--badccd3c-d78f-4b10-aa13-dc0d4d98bf69", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33747cc-4388-46c5-8211-841b622ed6db", "sighting_of_ref": "indicator--badccd3c-d78f-4b10-aa13-dc0d4d98bf69", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270d3e9b-ec7c-40a4-a73a-7185485daada", "sighting_of_ref": "indicator--c6506985-1b68-48cb-b547-c9f17af7c038", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72daa8af-6c0b-4f9e-b56c-4c90a457b87e", "sighting_of_ref": "indicator--c6506985-1b68-48cb-b547-c9f17af7c038", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7eb67eb-ef98-4766-82e3-680042254269", "sighting_of_ref": "indicator--c6506985-1b68-48cb-b547-c9f17af7c038", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207a5c25-2e97-437e-930f-993ed4c3f105", "sighting_of_ref": "indicator--e556d133-f374-4a59-8fa8-037955eefe1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182d9e75-e361-4591-9ec6-8d0db0701ed4", "sighting_of_ref": "indicator--e556d133-f374-4a59-8fa8-037955eefe1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d6f2a4-676a-41ba-a92e-19c4ccf6d018", "sighting_of_ref": "indicator--e556d133-f374-4a59-8fa8-037955eefe1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd2e9c1-2148-4042-a461-c9b51d53f3db", "sighting_of_ref": "indicator--06893b18-c2a8-4974-a228-369d97f697fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7e76ad-3f67-4d1a-9916-47b2dd1c59f8", "sighting_of_ref": "indicator--06893b18-c2a8-4974-a228-369d97f697fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0eb4af-b531-485c-80a2-9d0b0fc40ef9", "sighting_of_ref": "indicator--17d29a6e-6b54-47cc-bd90-7b7f28acba1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53947c0d-42fd-426f-9b09-9c618a46ca6d", "sighting_of_ref": "indicator--f3a813dc-455f-4812-8f60-9b66c96aa0eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510e56a4-2c84-43c3-bea8-147bcc5b84db", "sighting_of_ref": "indicator--c1910a2c-bcae-45ae-9b80-218ed9caa4fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97026fa-ded2-4a4a-9113-c0a2caacb72a", "sighting_of_ref": "indicator--c1910a2c-bcae-45ae-9b80-218ed9caa4fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02989ebd-4c56-4965-bff7-17c54f5b262b", "sighting_of_ref": "indicator--c1910a2c-bcae-45ae-9b80-218ed9caa4fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2f7b76-7ae5-405c-8535-6c1e049c0c6d", "sighting_of_ref": "indicator--d788cca1-bed0-4d55-8f81-e8632b7f544e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fec4d86-aa20-4be6-874e-2a9acaf809ac", "sighting_of_ref": "indicator--2bcdc97f-54b0-4646-b9ce-a0f554451e19", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43c59c1-2505-402d-a7a5-5da839793d12", "sighting_of_ref": "indicator--fa76fe3e-1da7-4743-9155-c332b2cbbaa9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7436f13d-7511-40d3-b35f-519d85c8baab", "sighting_of_ref": "indicator--8de1f4e5-7247-4ce6-8ba2-e55207edb5fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee383e6-2a35-4f8b-9281-06680dbd8ed0", "sighting_of_ref": "indicator--aa3e7e3c-ff05-4c59-8cbc-b1a87a8af010", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f0093e-63be-44a0-a539-1be615f68853", "sighting_of_ref": "indicator--a8989163-207a-435f-9325-4e244708625c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b130c142-0656-4385-9f97-10f7dfd8e74d", "sighting_of_ref": "indicator--a8989163-207a-435f-9325-4e244708625c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627da6ad-8173-44b6-abd9-c4633cf9b378", "sighting_of_ref": "indicator--69f5e3e5-56f9-4e5a-97f6-faa16209d860", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bdd40b-2bde-4068-afc9-6eb9e20e6113", "sighting_of_ref": "indicator--2368ef3c-a4bb-4064-87c6-1fe36e3e5357", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3c176d-0db1-4f8a-a05d-33e4cffbe386", "sighting_of_ref": "indicator--3141a6e4-edb2-4f0d-b34e-776624f60f69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7d5469-fc11-48f4-b78b-6ce736c6d037", "sighting_of_ref": "indicator--76f6fc8a-74e4-4437-8b50-000b9ec3d1c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844fa155-89fb-4621-9c5e-3d8982ee5b1e", "sighting_of_ref": "indicator--c1ef0387-3b21-46d8-a5c6-819c4c7fea8c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c85388-5aac-43d6-8b70-63a115608091", "sighting_of_ref": "indicator--c1ef0387-3b21-46d8-a5c6-819c4c7fea8c", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01ad131-f3c9-4280-907e-44ed2c11fbb0", "sighting_of_ref": "indicator--e9580c9a-2783-4532-a1b7-cf6b9336a9a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0315197-3a79-441c-8cc2-8c3d94f9dbca", "sighting_of_ref": "indicator--14a369cc-7912-4c10-be9d-223f3d4a803f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b08882-37c8-4e4c-a444-dfa249262ab9", "sighting_of_ref": "indicator--14a369cc-7912-4c10-be9d-223f3d4a803f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e73cef-51f8-497c-9dc1-a94b3679a617", "sighting_of_ref": "indicator--14a369cc-7912-4c10-be9d-223f3d4a803f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c5b7d7-8eb3-44bb-9f62-a8799be81a6a", "sighting_of_ref": "indicator--24c3c757-6c03-430c-8ff7-aec46441401d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7fbc06-b9e6-4213-8b16-eadc73302f46", "sighting_of_ref": "indicator--24c3c757-6c03-430c-8ff7-aec46441401d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a56d66e-95c7-421e-842f-33a23e0f3a74", "sighting_of_ref": "indicator--24c3c757-6c03-430c-8ff7-aec46441401d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2669040a-99a6-4aed-86cf-86dab54dfa03", "sighting_of_ref": "indicator--fb0f10e6-cee0-4336-bc74-fac864de33b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a3902c-d1d2-44da-8369-e84a7ad42734", "sighting_of_ref": "indicator--2b360fc0-a7b9-4b3a-813e-5ccd3292c2c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f372d7-a5b0-426e-86c5-0862d227402f", "sighting_of_ref": "indicator--02dd496f-26bc-4588-b16a-5ab6904ee1d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb12877-e568-404c-9e83-773285a13b04", "sighting_of_ref": "indicator--f91c6478-3fe6-4e2a-b9a8-57af13c0baec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a0a6b2-1500-4096-9866-14195ca3aef4", "sighting_of_ref": "indicator--f91c6478-3fe6-4e2a-b9a8-57af13c0baec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a48eae-32da-4d2c-8e4d-eecd825698f7", "sighting_of_ref": "indicator--f91c6478-3fe6-4e2a-b9a8-57af13c0baec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce3945a-1eee-4379-90bd-894435757709", "sighting_of_ref": "indicator--a794da94-1bbc-4df3-85e5-1de4b24436b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456608fe-5216-4a52-877f-c98cc38d6c67", "sighting_of_ref": "indicator--a794da94-1bbc-4df3-85e5-1de4b24436b9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5719f247-1a3c-4f14-b09a-3044586e2ac7", "sighting_of_ref": "indicator--a5db72c2-4abf-4527-a276-78b954ad1764", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc91a5f-53d2-41a5-859c-f09c532f7e59", "sighting_of_ref": "indicator--a5db72c2-4abf-4527-a276-78b954ad1764", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5236104-b393-4c69-a6d3-c650b03563f6", "sighting_of_ref": "indicator--444413a7-292f-4024-b152-5aa276f629c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36166fc9-3f15-432b-a9a2-4994506df511", "sighting_of_ref": "indicator--444413a7-292f-4024-b152-5aa276f629c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcc506f-f9ac-4937-9c36-22a630a7f299", "sighting_of_ref": "indicator--2c3967c9-ee66-47e1-b002-542a27c24682", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97030a56-5337-4a89-8952-fba41c5a16f6", "sighting_of_ref": "indicator--1210fac9-670a-410b-bff1-fcf1d5e5dae0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65cc86b-9f22-4dcf-b531-b538876ac343", "sighting_of_ref": "indicator--839677e1-f7f0-49a9-855c-69ddf8f76ec2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef274c7-780e-4eff-9e0e-08742645f078", "sighting_of_ref": "indicator--1b47e2dd-119f-4b64-965a-020cb5b846a2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7254c1c-8063-4d1c-8332-4ddf8e3aba19", "sighting_of_ref": "indicator--1b47e2dd-119f-4b64-965a-020cb5b846a2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d17277-2b6d-41f7-904e-57dfd72fe3a1", "sighting_of_ref": "indicator--a749a1da-3ced-456a-91af-dc7be6e39a3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df16f543-3580-42f8-a614-85ad9d576212", "sighting_of_ref": "indicator--a749a1da-3ced-456a-91af-dc7be6e39a3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6315c23c-ab93-4051-92ec-4e7c21789e9c", "sighting_of_ref": "indicator--a749a1da-3ced-456a-91af-dc7be6e39a3e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f58dbc1-42c6-4be3-a69a-029b91ddc22b", "sighting_of_ref": "indicator--b1cbb701-cb66-4cce-97c5-42ec22137218", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d109268-9f11-4bd8-b3fb-30933e736ae8", "sighting_of_ref": "indicator--b1cbb701-cb66-4cce-97c5-42ec22137218", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69c73e2-f844-456b-8b44-3bc6d4ae4742", "sighting_of_ref": "indicator--ef420fa0-1f7a-4be6-b10f-7b494e39a526", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dac734f-a8cc-4526-a788-c8f18d3789e9", "sighting_of_ref": "indicator--ef420fa0-1f7a-4be6-b10f-7b494e39a526", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cf26c9-63b5-4c2d-96ae-77b4fb664c7d", "sighting_of_ref": "indicator--ef420fa0-1f7a-4be6-b10f-7b494e39a526", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584f1ae3-2637-4b62-9161-ce3fca07ac11", "sighting_of_ref": "indicator--14d66870-5e4d-4606-b81c-621490b6dfa4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67270f0-e4a9-4bde-a6a9-c874b4e3d941", "sighting_of_ref": "indicator--14d66870-5e4d-4606-b81c-621490b6dfa4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a814eb13-cca4-4bac-b1f5-9bbac591c6a9", "sighting_of_ref": "indicator--14d66870-5e4d-4606-b81c-621490b6dfa4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1676952-9ce3-443d-a9ec-b1141acd9413", "sighting_of_ref": "indicator--ba09dc9f-377a-4ead-8b98-9f32eaea6fd3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf25fb0-5a47-44dc-8db0-65b4fa1728ba", "sighting_of_ref": "indicator--ba09dc9f-377a-4ead-8b98-9f32eaea6fd3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db22ada4-40f6-4fa5-a1e3-66a1ae8fe91c", "sighting_of_ref": "indicator--441350f7-625b-488f-ba96-59c777207828", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142bdca3-8fef-4491-bab0-206abf7a5868", "sighting_of_ref": "indicator--1e9278e6-cd8e-4ace-bb1a-7b2357ee6182", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a348a9ef-16ac-41d0-8661-1aa80a867519", "sighting_of_ref": "indicator--1e9278e6-cd8e-4ace-bb1a-7b2357ee6182", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088df601-3055-4eaf-b2cd-70c1447ff9ba", "sighting_of_ref": "indicator--1dfcec4e-9e11-4781-966d-ed12f7ee9ac3", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5067fb9c-9c83-482a-9116-a42dd0497c1b", "sighting_of_ref": "indicator--5cf4f78e-6915-4e4c-becc-12ab52bbd492", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4ccfed-6adb-47dc-bae6-37307e6bb5ec", "sighting_of_ref": "indicator--5cf4f78e-6915-4e4c-becc-12ab52bbd492", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32001433-5bf9-48b2-9ded-2937af462b36", "sighting_of_ref": "indicator--5cf4f78e-6915-4e4c-becc-12ab52bbd492", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e998ff4-a205-4794-8d68-7e13e992c71d", "sighting_of_ref": "indicator--08bdf142-7972-4b53-9ff2-071ec7d151c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c98991-413b-491e-9876-f738f43bdf43", "sighting_of_ref": "indicator--08bdf142-7972-4b53-9ff2-071ec7d151c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74172170-2cec-4e9b-9cc0-86e044defeeb", "sighting_of_ref": "indicator--08bdf142-7972-4b53-9ff2-071ec7d151c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e71702f-c0ef-4669-a127-bad1769f5287", "sighting_of_ref": "indicator--a99fbe6a-198a-46ca-93ce-d7cc63914e62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3f52ac-e24d-4baa-bc41-d88f42f53f79", "sighting_of_ref": "indicator--a99fbe6a-198a-46ca-93ce-d7cc63914e62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e8af23-2751-4d0f-affc-56cf9b9aa84e", "sighting_of_ref": "indicator--a99fbe6a-198a-46ca-93ce-d7cc63914e62", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb258a58-812a-46a9-933d-0a7b78f2d977", "sighting_of_ref": "indicator--05d6b5ab-6726-4d28-b06f-27f08368459d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828e31b8-5501-4f2a-81eb-98fa1493dca3", "sighting_of_ref": "indicator--738515a4-4ac8-416c-95f2-7720e62f1b01", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54ea0cd-b3d1-462a-8377-7cc7892d4080", "sighting_of_ref": "indicator--a72c0c17-c4ed-4f62-9178-6fd0f34ec6b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939ce47c-ccde-4dbe-97f4-465a86940121", "sighting_of_ref": "indicator--47574e47-5795-4294-a032-d4e96ade2fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa651bf4-9ff4-41ed-bb93-16fae5fe089d", "sighting_of_ref": "indicator--e9c62b2e-17fd-4b0f-93ab-309ef644b31f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1debe5d-7ac6-426c-b2ba-f3d5dab86ea6", "sighting_of_ref": "indicator--ef860ee7-a271-4f75-abfe-6b315182b6cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb67c684-b01f-4e59-b96f-a3bd83168906", "sighting_of_ref": "indicator--cf0b41ea-b9f1-4b3b-a095-ea240a2da5a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80c77f6-a106-43df-b7a2-43d1c1ced7a3", "sighting_of_ref": "indicator--cf0b41ea-b9f1-4b3b-a095-ea240a2da5a2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48525f54-6c61-4637-8fac-dfb77b183ec9", "sighting_of_ref": "indicator--cf0b41ea-b9f1-4b3b-a095-ea240a2da5a2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245549b0-0ee2-4eae-840a-7fdf9ec5b37d", "sighting_of_ref": "indicator--81557c2b-318f-48ef-b3da-d9d19a190fdb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba5f13a-4b62-453f-bb20-0ee6f5155989", "sighting_of_ref": "indicator--81557c2b-318f-48ef-b3da-d9d19a190fdb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e816dec1-143d-4af0-b6ce-43689d0c257c", "sighting_of_ref": "indicator--81557c2b-318f-48ef-b3da-d9d19a190fdb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87784012-ef29-4d75-a7c9-13162b296fca", "sighting_of_ref": "indicator--3b3612a6-9422-43a1-87ea-223ccf564eb3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382c071d-f0b7-4a02-9bf6-0754af85f4a9", "sighting_of_ref": "indicator--3b3612a6-9422-43a1-87ea-223ccf564eb3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2214b573-f90e-4ae2-9d7c-0c6611e1d4f8", "sighting_of_ref": "indicator--3b3612a6-9422-43a1-87ea-223ccf564eb3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aa410a-2e4a-4e60-87b4-13ffd4bfaf3a", "sighting_of_ref": "indicator--7e0f27bc-020d-4b1d-8970-d61719eafea4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68af0451-1c31-4643-bf42-f8602107b986", "sighting_of_ref": "indicator--49b4af6f-de76-4b07-8990-06c25700fba0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58972044-1aba-4cd3-bd8a-3ac8f1f2d00b", "sighting_of_ref": "indicator--49b4af6f-de76-4b07-8990-06c25700fba0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc5774b-b839-499e-889b-0e3ab6e6df35", "sighting_of_ref": "indicator--49b4af6f-de76-4b07-8990-06c25700fba0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8350cc2e-1f85-427d-b99e-c53e2a4e08db", "sighting_of_ref": "indicator--847e2b78-63ab-49a3-9c9e-46cf9e629a5e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b01b97f-35be-4608-ada3-23d92cc79af2", "sighting_of_ref": "indicator--847e2b78-63ab-49a3-9c9e-46cf9e629a5e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c8c6d2-ea55-47ef-9c69-39eff5347fa8", "sighting_of_ref": "indicator--847e2b78-63ab-49a3-9c9e-46cf9e629a5e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b7f910-07cc-4122-9053-2b7712f40bc1", "sighting_of_ref": "indicator--a852af3f-101b-4eb5-84db-2a221ccd9f01", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa28d71b-cb12-4a73-97f5-4ed26a0d3662", "sighting_of_ref": "indicator--a852af3f-101b-4eb5-84db-2a221ccd9f01", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394e16d2-b532-4286-ad09-4b09a973c3b6", "sighting_of_ref": "indicator--6ae8ec2e-73da-4e43-a04d-6fa73962fb1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14cf43e-e8fe-451e-b8dd-711241eff376", "sighting_of_ref": "indicator--6ae8ec2e-73da-4e43-a04d-6fa73962fb1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a78e897-63ef-434a-94d8-5310543ca93d", "sighting_of_ref": "indicator--6ae8ec2e-73da-4e43-a04d-6fa73962fb1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef126cc-79ad-4084-902b-983101812435", "sighting_of_ref": "indicator--c4bb55ec-4866-45bd-995c-272753bdf360", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168db339-414c-4729-922c-66436952897c", "sighting_of_ref": "indicator--c4bb55ec-4866-45bd-995c-272753bdf360", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9507efc0-dd74-442c-916d-e54e16b6613a", "sighting_of_ref": "indicator--c4bb55ec-4866-45bd-995c-272753bdf360", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984a35f1-9667-415b-9e3d-30de9b505f82", "sighting_of_ref": "indicator--a973dff7-2aa6-4e5c-b24e-d4b11c42b1a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9a8747-f95a-4ab8-b397-5fb51bbfc951", "sighting_of_ref": "indicator--8173ab57-d2c7-422b-8044-b6a7433ddb67", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd143a47-1dba-4af5-a764-54202f7f49a2", "sighting_of_ref": "indicator--8173ab57-d2c7-422b-8044-b6a7433ddb67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526e458c-f276-4616-b6fc-df74fe5b34e3", "sighting_of_ref": "indicator--8173ab57-d2c7-422b-8044-b6a7433ddb67", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a514c2dc-45e3-47e2-90c3-863e589c3078", "sighting_of_ref": "indicator--0a303434-34f1-4a7f-8271-f6ef725b1a1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e613c2c1-06ad-4a1d-abbe-319b563ef51d", "sighting_of_ref": "indicator--0a303434-34f1-4a7f-8271-f6ef725b1a1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12a296a-9e7d-4db3-a3d5-1ac0d14077a8", "sighting_of_ref": "indicator--68f68fef-54e5-4d3d-a8a0-ac826753f7df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ad2e70-b48e-4764-a6f6-ebf2212c5678", "sighting_of_ref": "indicator--68f68fef-54e5-4d3d-a8a0-ac826753f7df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61328bc-2d4f-4bf4-b8dc-4df282732582", "sighting_of_ref": "indicator--68f68fef-54e5-4d3d-a8a0-ac826753f7df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f0dc71-e61a-415c-bb46-76b05fd49369", "sighting_of_ref": "indicator--ad3dd7d8-f358-46c3-8667-d545dc68d984", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829c33b1-b8f8-4909-b480-d81a0c5b3dc0", "sighting_of_ref": "indicator--ad3dd7d8-f358-46c3-8667-d545dc68d984", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb9da1e-7049-4892-a5bc-55413dad3d96", "sighting_of_ref": "indicator--7291a2eb-d0c1-4299-8de6-655b249e5d73", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e463ee-0346-4083-9d1f-cb699a45ba76", "sighting_of_ref": "indicator--7291a2eb-d0c1-4299-8de6-655b249e5d73", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e2bf33-8048-4e3a-959b-37e2ceaafe42", "sighting_of_ref": "indicator--7291a2eb-d0c1-4299-8de6-655b249e5d73", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43467bc-6306-45d0-b26f-e9c9d3d72b46", "sighting_of_ref": "indicator--bb52d2f3-4491-4f8f-8b9c-edabab10a6ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8e85be-5cb0-4848-9246-6ea7d314b26e", "sighting_of_ref": "indicator--bb52d2f3-4491-4f8f-8b9c-edabab10a6ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eadc4bb-2a57-4a6d-88ad-5447cbb3e025", "sighting_of_ref": "indicator--bb52d2f3-4491-4f8f-8b9c-edabab10a6ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56ae5cc-1528-4431-acea-2c408b6d2ed9", "sighting_of_ref": "indicator--c1fbc94a-9dfe-42b9-a2df-da355b6f3038", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944fe5f0-bd03-4d3c-94b7-675d856f3e94", "sighting_of_ref": "indicator--c1fbc94a-9dfe-42b9-a2df-da355b6f3038", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a738e57b-11f1-466b-ae61-fb8d14ba0688", "sighting_of_ref": "indicator--fc82e16d-40de-4a82-a449-237a2d5ec01e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db8f244-3b46-4650-958f-c3bcbacc084f", "sighting_of_ref": "indicator--fc82e16d-40de-4a82-a449-237a2d5ec01e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ef6da0-ba3a-4fed-ac44-f6d16e4862a3", "sighting_of_ref": "indicator--fc82e16d-40de-4a82-a449-237a2d5ec01e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c052c7-0658-4003-9acc-28e5f428b310", "sighting_of_ref": "indicator--9042b546-4a30-4490-8b8b-21dc2cb8ef68", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1d87b0-0655-4f16-a962-6e6004857f64", "sighting_of_ref": "indicator--1838dd66-92c2-4ad3-9b19-9377b5720f90", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c45511-bcdd-492f-ad19-8d54edd0e254", "sighting_of_ref": "indicator--1838dd66-92c2-4ad3-9b19-9377b5720f90", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c907d1-6832-4265-be8a-796c5b71804c", "sighting_of_ref": "indicator--1838dd66-92c2-4ad3-9b19-9377b5720f90", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acb2dd9-2bd5-4698-a09f-bcf2eb52ba3b", "sighting_of_ref": "indicator--7d638fe6-ead5-4e04-ace2-78f8c92b09ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ce4a9d-8c8d-4862-90dc-b5618fad477a", "sighting_of_ref": "indicator--7d638fe6-ead5-4e04-ace2-78f8c92b09ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497b36e4-fad3-4b6c-bcfe-733f03186517", "sighting_of_ref": "indicator--7d638fe6-ead5-4e04-ace2-78f8c92b09ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc23f7ae-808a-4930-b335-e7764d7238fb", "sighting_of_ref": "indicator--ab9fec5c-ad75-4b25-879e-70e5a1df1e84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a99a769-54c9-444b-a855-d2b3c00fea24", "sighting_of_ref": "indicator--ab9fec5c-ad75-4b25-879e-70e5a1df1e84", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb1a016-8f55-47a7-aa8a-de8b876031b7", "sighting_of_ref": "indicator--ab9fec5c-ad75-4b25-879e-70e5a1df1e84", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ded907-d925-4b7f-a2eb-3cad24bee834", "sighting_of_ref": "indicator--c1da4213-959b-4b05-95a9-cdb666ab73a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0b9b22-a73b-4bab-b002-3f6cf511e9e3", "sighting_of_ref": "indicator--c1da4213-959b-4b05-95a9-cdb666ab73a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a1311f-bad5-4610-8657-8d60683e69c6", "sighting_of_ref": "indicator--722ce88a-1ba8-42b8-a28b-a8a1866b2a93", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af3dde9-2dae-45a2-a5d4-81252b1fa07f", "sighting_of_ref": "indicator--722ce88a-1ba8-42b8-a28b-a8a1866b2a93", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e640a66-5780-414e-a023-356cb1fc8b51", "sighting_of_ref": "indicator--722ce88a-1ba8-42b8-a28b-a8a1866b2a93", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5ae535-9903-4dc4-a201-2750cb1135a9", "sighting_of_ref": "indicator--0d8d87de-24bc-4214-8f20-62f7e65f1cee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435f1db5-5ff4-45ea-b249-021aac4f5100", "sighting_of_ref": "indicator--0d8d87de-24bc-4214-8f20-62f7e65f1cee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba52084-4b07-4fbc-93f0-c342f0046530", "sighting_of_ref": "indicator--0d8d87de-24bc-4214-8f20-62f7e65f1cee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45828093-fd79-4e79-b29f-4606ea1c84c8", "sighting_of_ref": "indicator--7a6ce2bb-cdad-4e2c-94b1-7acc722086fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54e3b09-5927-45be-b7ea-805233253a4a", "sighting_of_ref": "indicator--34656df9-4586-4f19-97ab-28249c670d60", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320a72a1-8756-40f9-84b9-72b16de35be7", "sighting_of_ref": "indicator--555a9dc4-c99b-42b4-be5b-97a3797e3b26", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f87a06-ac81-4838-bca2-58856bd0fb2b", "sighting_of_ref": "indicator--555a9dc4-c99b-42b4-be5b-97a3797e3b26", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46e0c69-3eab-45ff-846c-5a6036167cad", "sighting_of_ref": "indicator--555a9dc4-c99b-42b4-be5b-97a3797e3b26", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa82032-015b-46ce-8e86-88f1b13831dc", "sighting_of_ref": "indicator--354a3f33-b5c6-495f-b522-3a73bb4eb49f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bcc53b-881f-470e-8242-2426c7852009", "sighting_of_ref": "indicator--354a3f33-b5c6-495f-b522-3a73bb4eb49f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd9fdc1-f48f-40f6-87aa-5350f4806acc", "sighting_of_ref": "indicator--35cdac13-2cb9-4ea7-8a49-de6e9f724f7c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dacdb2-76de-419a-859b-e7d881a2ed04", "sighting_of_ref": "indicator--35cdac13-2cb9-4ea7-8a49-de6e9f724f7c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8499015-d88a-45dc-bcfe-5221b4dd4e6b", "sighting_of_ref": "indicator--35cdac13-2cb9-4ea7-8a49-de6e9f724f7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561c6760-5b0f-42ae-89a3-cb29e30bc4e5", "sighting_of_ref": "indicator--6ec17c80-22aa-4df2-b32b-f809047edfda", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b95c57c-e946-43ca-be52-2241342492c6", "sighting_of_ref": "indicator--6ec17c80-22aa-4df2-b32b-f809047edfda", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce6139b-d671-4634-8f19-a4cd53c75c47", "sighting_of_ref": "indicator--6ec17c80-22aa-4df2-b32b-f809047edfda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094ca096-fe75-4dfc-9f99-67f490f0351f", "sighting_of_ref": "indicator--0aef7ca6-1070-47ad-a2b9-26fcdb75774d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1041ee73-fba3-4659-b858-746ea62d4fd5", "sighting_of_ref": "indicator--0aef7ca6-1070-47ad-a2b9-26fcdb75774d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d649f3cc-d779-4946-bd18-71e2b4d22d4b", "sighting_of_ref": "indicator--0aef7ca6-1070-47ad-a2b9-26fcdb75774d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eeec7a-d420-4993-88eb-b8824a78bc27", "sighting_of_ref": "indicator--105ebb55-3610-4793-8454-cc428eff27c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16f09e9-dda4-41d2-bbe5-9937285f65cd", "sighting_of_ref": "indicator--105ebb55-3610-4793-8454-cc428eff27c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a7e6ec-5776-4fe7-b7f7-bd81743c8249", "sighting_of_ref": "indicator--105ebb55-3610-4793-8454-cc428eff27c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2aef49-e853-4921-8d1a-41080ad4d5a7", "sighting_of_ref": "indicator--cb428e7d-14ad-4a9e-9941-dfa327470301", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4b172e-9cea-4516-8a12-eb2470f6d225", "sighting_of_ref": "indicator--0cf8c6ec-535a-4d6e-9afe-fac4ac9db936", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43aecc00-f6a9-4a01-88fd-18de71514d10", "sighting_of_ref": "indicator--052d75c3-9021-4060-8238-617f39eff0fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeaf37e-eb89-452a-85e5-e7bdd4e4d23e", "sighting_of_ref": "indicator--590ce85d-7eb5-4545-ba98-be134baf41df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf67fc9-21b0-4394-87f6-59fe9ed2058e", "sighting_of_ref": "indicator--2cf7bb9d-fcc8-41f7-a48b-a411788f4f04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80545c15-7843-42e7-bdcd-131d6bf91bcc", "sighting_of_ref": "indicator--512eab04-dde3-4fab-9155-0d8b053c8600", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5db496c-438f-401c-a96d-0ad278f5ba65", "sighting_of_ref": "indicator--28ad6509-25d0-4c1b-b105-1ee1924005b0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a659e3-6b48-484a-b22d-14167290edcc", "sighting_of_ref": "indicator--c95aa479-5d61-483f-9a82-f70c672c2909", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c3161b-6fe6-44fd-ad0f-014ed8798904", "sighting_of_ref": "indicator--10102243-1c10-4869-bedd-a12f2e20a0b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735e88e1-9670-451f-877a-5ac77309358c", "sighting_of_ref": "indicator--10102243-1c10-4869-bedd-a12f2e20a0b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091bfd7f-6236-4474-9e56-d7e5c60da379", "sighting_of_ref": "indicator--ce14b310-e0e8-43f2-a32c-c4caa6810e4f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec98f749-8c7d-41b8-b2e9-c7f19ca435a4", "sighting_of_ref": "indicator--a2406b26-0677-463b-a9ad-ca7bad939bcb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c9d70e-5dda-42f2-a680-0dcbb6f785c9", "sighting_of_ref": "indicator--a2406b26-0677-463b-a9ad-ca7bad939bcb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70075f55-1dac-4709-b1dc-b4a33d91964e", "sighting_of_ref": "indicator--21ee76d0-2345-40fd-b7ea-390ed21a87c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fd224c-792a-4fea-a9d4-83d2236e9d89", "sighting_of_ref": "indicator--21ee76d0-2345-40fd-b7ea-390ed21a87c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f065a4-3e54-4588-a1b9-9879173efd4c", "sighting_of_ref": "indicator--ef57a26e-4571-4d76-8c21-fa877fb5b644", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc484587-9ef8-485c-85aa-7942d853f0fe", "sighting_of_ref": "indicator--eaa7a973-c333-4b31-bdbc-9c13b60c2095", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9916a25b-5c70-4a7c-beb1-50f42cb89f5e", "sighting_of_ref": "indicator--81918b81-a7b3-41f0-9271-62f4ac47e033", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747047fe-2b46-4776-87a6-c79f1a02849c", "sighting_of_ref": "indicator--5f38c24b-da2e-4150-87b5-37add0aeeffe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e478f183-e614-433a-9d59-ff135176a10a", "sighting_of_ref": "indicator--8d4cb945-7f93-472c-85aa-c1f4be76b709", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49704d47-acaf-4b1d-b46c-413c46a8f29a", "sighting_of_ref": "indicator--ac1ee7ea-67c8-4dec-9364-f688358627d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2c49c6-0322-4bd1-a6e5-3895c22d69ff", "sighting_of_ref": "indicator--4b3767eb-a82c-4d2c-9c23-28d7f68f31f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb35c3c-086c-491f-b011-6a62c5a248b2", "sighting_of_ref": "indicator--0edb9d4d-67d0-4b80-9763-41dce98a64c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a5dc79-7515-4c28-a2e8-f633ccf02caf", "sighting_of_ref": "indicator--f5fe69e8-e632-4154-bea1-1e2730134d71", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d165fa-27c3-463a-b369-b305d8165408", "sighting_of_ref": "indicator--bc7fec3a-705e-467a-8db0-530191a2cacf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8e5ec3-ddd3-41b6-85ab-daf63686b63f", "sighting_of_ref": "indicator--bc7fec3a-705e-467a-8db0-530191a2cacf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e736671-e25f-40ca-bbb1-c66a1a526869", "sighting_of_ref": "indicator--bc7fec3a-705e-467a-8db0-530191a2cacf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43322399-2d64-46c9-bbc2-07f4b9893249", "sighting_of_ref": "indicator--c3eff90c-a088-4981-af29-55a86f9d00ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3374a4-ea5f-468a-9645-8deb17b284b9", "sighting_of_ref": "indicator--c3eff90c-a088-4981-af29-55a86f9d00ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ecf606-a0c5-4c75-a7e3-6b49db273118", "sighting_of_ref": "indicator--c3eff90c-a088-4981-af29-55a86f9d00ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24cbd34d-0348-44b4-992f-0a6b8a24322c", "sighting_of_ref": "indicator--069caa9c-03f0-4d2a-96f5-3342772d09a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b74047-0051-4c80-9e30-a9a389e855d5", "sighting_of_ref": "indicator--a2e82c60-e288-460f-9fa6-f66b146ca9b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a82456-95b0-45e8-9e29-03484d9c1f04", "sighting_of_ref": "indicator--81bc0fb0-b9f2-432e-9acc-ed460b2d1668", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7afc23-8508-4ccb-b27e-9bc090e6d60b", "sighting_of_ref": "indicator--81bc0fb0-b9f2-432e-9acc-ed460b2d1668", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a370cc6-af60-414e-b6ae-1c0f252485f2", "sighting_of_ref": "indicator--81bc0fb0-b9f2-432e-9acc-ed460b2d1668", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03af451c-80e4-4feb-862e-263a28c1bdc4", "sighting_of_ref": "indicator--5040a39a-25cb-4d3d-929d-b2766c6ce629", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696e5aae-d5a8-4848-aced-d8bff626e702", "sighting_of_ref": "indicator--1eba8bff-eb66-424c-90e6-90a6c2f97e7e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31bb28b-ac82-49ca-972e-9846459a9017", "sighting_of_ref": "indicator--7a38c07e-ce4e-49af-8b00-8463d8bd0da5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce3e5ba-d528-4b43-bb9c-5ec801e317ac", "sighting_of_ref": "indicator--313efc6c-ee8a-4893-a79a-935b92daaa99", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558eb87d-c9fe-4d2c-b884-9352f838405a", "sighting_of_ref": "indicator--aa32e84b-12c1-4b28-9039-f35f9538d217", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2baa10-f327-450d-9f2e-92d0483d599e", "sighting_of_ref": "indicator--10258feb-edb0-4cc1-968c-df7991a36b1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fab8bb-b64a-41d1-b230-3f355ad35ef9", "sighting_of_ref": "indicator--07cb2337-3806-4c96-98c5-0db5055819ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6a2733-178f-44a5-be7f-f0c3a67e245e", "sighting_of_ref": "indicator--4eaaa1ea-9378-4abf-a694-064bd5645ac0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f897d0d-96e0-44f6-a080-7047bee20b26", "sighting_of_ref": "indicator--e272c4de-3ed1-4079-8d1e-9b10e6caa29b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0759bbaa-4c11-4ae6-826e-444e5bdfaaa1", "sighting_of_ref": "indicator--e272c4de-3ed1-4079-8d1e-9b10e6caa29b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f24531-b7f2-4b66-8e4d-83d7f9a4259c", "sighting_of_ref": "indicator--e272c4de-3ed1-4079-8d1e-9b10e6caa29b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0861632-ea06-4c22-8e9d-5beeffe2ece7", "sighting_of_ref": "indicator--23be0cdb-caaa-4792-afac-3d36372a8f81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2d90aa-0f6c-456f-9c13-c93acc1b7c39", "sighting_of_ref": "indicator--cfad36d9-8bac-4875-a652-975944b98228", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d85bd4-04c5-4382-8c11-f726e1e6ecb4", "sighting_of_ref": "indicator--cfad36d9-8bac-4875-a652-975944b98228", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8597e882-57cf-4374-93cf-8f524366c618", "sighting_of_ref": "indicator--cfad36d9-8bac-4875-a652-975944b98228", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70a3f71-33de-4ab3-814c-94045c2bf725", "sighting_of_ref": "indicator--fdbaf7f7-55a7-4984-aa61-cb0cf488a8b2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98df6883-54b1-430c-9b54-71979e2c6708", "sighting_of_ref": "indicator--fdf2df7f-67a8-4f0a-bbdc-47ea2f302fce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debe5344-cdbe-413b-8c9b-fecf6e43296b", "sighting_of_ref": "indicator--b5929c8e-6b31-41ca-8983-f1f4f5a5aa68", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f184cf-f026-424f-b763-3924f193695d", "sighting_of_ref": "indicator--0ee7d495-4484-4ef5-b575-0b26379375bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bc130d-0019-450a-82be-909290569a35", "sighting_of_ref": "indicator--9a30cec9-287b-47ba-a37b-9271e7de5e36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81e031d-df5b-4faa-9102-a7136b198c8f", "sighting_of_ref": "indicator--cb193077-3e7a-4042-9429-ded390ce8942", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7659adf-2d80-4772-81d2-34bc933f6865", "sighting_of_ref": "indicator--cb193077-3e7a-4042-9429-ded390ce8942", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b037b687-7adb-40c2-9de7-3c36ec9e9745", "sighting_of_ref": "indicator--cb193077-3e7a-4042-9429-ded390ce8942", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8697c9d-ffc6-4128-9180-8d377f82eca0", "sighting_of_ref": "indicator--ef01d220-16b4-4da8-b84f-6886e27c7149", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89f6c15-a07a-4d63-bc84-a632a5aaea10", "sighting_of_ref": "indicator--85345ca0-4380-440e-914b-ae92a96de364", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f0057f-3eaf-4896-97ca-711c8cd2ade6", "sighting_of_ref": "indicator--6e6189a9-4f37-4889-98cb-659c7fe05ffb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b352585-701e-4228-80c9-31a678403bf2", "sighting_of_ref": "indicator--6e6189a9-4f37-4889-98cb-659c7fe05ffb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df4bba1-2aa7-4dba-9311-ebe2f957ad44", "sighting_of_ref": "indicator--6e6189a9-4f37-4889-98cb-659c7fe05ffb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6e0557-86e3-457c-a2d1-b72f5211eda8", "sighting_of_ref": "indicator--80f5d62f-a44d-4276-85bf-c56ef82ad76b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa377c0-b51c-4210-941a-63e8a0035e1d", "sighting_of_ref": "indicator--80f5d62f-a44d-4276-85bf-c56ef82ad76b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2d0ae4-c549-4df9-9639-79cb06a9a547", "sighting_of_ref": "indicator--80f5d62f-a44d-4276-85bf-c56ef82ad76b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb804b8-2f99-4e85-8678-d4f1b4484751", "sighting_of_ref": "indicator--54f559cf-a396-4555-bed0-4be363140562", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60faffac-caf0-4d65-8d21-c95e4e2f44f6", "sighting_of_ref": "indicator--54f559cf-a396-4555-bed0-4be363140562", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e396944-68cc-44d7-ab4e-daa9db192660", "sighting_of_ref": "indicator--f45537bf-9430-4914-ab17-25dff94b1ecd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6379cce4-6025-40ec-8174-47ae20f96367", "sighting_of_ref": "indicator--709aac05-29aa-4d8d-b955-9c47c68507d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fd2cba-89a3-4b28-8291-74f7e8f9ff5e", "sighting_of_ref": "indicator--2b5305c4-85a0-4748-83a5-40527429b518", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25720a66-860f-43cc-9df4-9cbd4f596d89", "sighting_of_ref": "indicator--2beaad2c-3911-40b6-a4e8-f95203b2e5b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2546e6c-72fc-4968-aa7a-12784e84fbc0", "sighting_of_ref": "indicator--2394548b-62b5-4e30-9303-009355700f6a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da541b53-1e73-4dbd-b7b8-debd79a44fa3", "sighting_of_ref": "indicator--0a3a0952-ff39-4fcc-971e-c3c386e781e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5556f722-905e-42b0-9771-1567564b1d83", "sighting_of_ref": "indicator--2a0945c3-4ae4-4261-8ed3-3a9941231ac6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ad5017-3839-4076-935e-d64bb13dab82", "sighting_of_ref": "indicator--6a0f7898-beee-4ae4-86fe-3ffb7219a285", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010baa47-2e03-4b21-b4bd-7ba9e35c6c4a", "sighting_of_ref": "indicator--6a0f7898-beee-4ae4-86fe-3ffb7219a285", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a75a24-ec7e-40c5-9bdc-f898f4b3b63a", "sighting_of_ref": "indicator--c390792f-0af7-41c8-9e26-4804f3e0ca5b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec350a4d-5fcf-4114-92bb-b4192d2513ab", "sighting_of_ref": "indicator--feb4ad3b-6d69-49e0-bd31-28d83ae4b24f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de51e224-0a8c-431e-9298-aded2c398e65", "sighting_of_ref": "indicator--4ac8fb95-acba-4124-9520-627faa813fcf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6781071c-0888-4f00-ad69-99e0acd40ca2", "sighting_of_ref": "indicator--4ac8fb95-acba-4124-9520-627faa813fcf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771815e0-eceb-470b-9011-aca4b4042a0c", "sighting_of_ref": "indicator--4ac8fb95-acba-4124-9520-627faa813fcf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb41b0e4-8cbc-4994-8003-3f13498ac644", "sighting_of_ref": "indicator--3fe16dd3-0d75-4ea5-934e-cba8580bbadb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61891ecb-9e15-43ef-ae29-bd6580d0d98c", "sighting_of_ref": "indicator--3fe16dd3-0d75-4ea5-934e-cba8580bbadb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaac3f0-6728-44ad-a748-93e875c18c7d", "sighting_of_ref": "indicator--97ad3bd9-e786-4bd2-a4e4-5f6f7f6d4f8e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e560705-f496-4922-850b-0e540bf17a40", "sighting_of_ref": "indicator--cbcacfd9-e3ac-4e14-b7c5-053abb715f23", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c3693b-e028-4be5-aeb4-c5918387d2d6", "sighting_of_ref": "indicator--cbcacfd9-e3ac-4e14-b7c5-053abb715f23", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643e4011-6873-47f7-addb-b0227b3b873c", "sighting_of_ref": "indicator--cbcacfd9-e3ac-4e14-b7c5-053abb715f23", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6311e0e1-e771-4189-b505-5325f0364542", "sighting_of_ref": "indicator--adaa2c1d-1709-48c8-8ea8-6e6d4e8aab81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d52e0b-ab13-49f0-95ac-f53fbb0edd11", "sighting_of_ref": "indicator--adaa2c1d-1709-48c8-8ea8-6e6d4e8aab81", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2fd315-85ef-4030-a210-eeef2070e97b", "sighting_of_ref": "indicator--7a773a48-939e-4f94-86fa-a9d3fc1a60d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf8d9f4-9e91-48a3-a091-4856b4d0dbe0", "sighting_of_ref": "indicator--3a1ff9f3-5ae1-478d-878d-4ab3e3001e45", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dbf7fa-3dfb-4228-8faa-6b15241f9c33", "sighting_of_ref": "indicator--3a1ff9f3-5ae1-478d-878d-4ab3e3001e45", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc479389-bee0-4fa6-aee8-041ac54a700d", "sighting_of_ref": "indicator--b4249446-7057-453c-85bf-11d948a9ddac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef91f0e2-d90e-4617-9a45-4f01e5f405f4", "sighting_of_ref": "indicator--b4249446-7057-453c-85bf-11d948a9ddac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd70562-e97b-4b15-a94e-f23c96d1bd04", "sighting_of_ref": "indicator--f4ccd214-5449-417b-aecb-c9c1aa8bdc46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66388633-752d-4781-93af-be242a2d51f6", "sighting_of_ref": "indicator--1dd9d92d-7a60-4b2c-b447-364ac19b8af3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f51426-8aa1-47ae-9ddf-39ea7a9e47ae", "sighting_of_ref": "indicator--1af7c82c-4348-4e6c-ba77-c7282b8349e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0584b03f-164f-40b3-920b-b3761719ec0b", "sighting_of_ref": "indicator--b88f54b0-c273-44c9-986c-efa3f7a14614", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e66e34-aa57-4052-afde-97ee80b4d973", "sighting_of_ref": "indicator--83231879-83ec-4346-928e-06fec787802e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c57e3d-30af-48a6-9cfb-6eda7b032cbe", "sighting_of_ref": "indicator--83231879-83ec-4346-928e-06fec787802e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278e39e0-60f8-4ec0-9be8-63cf6ce75287", "sighting_of_ref": "indicator--83231879-83ec-4346-928e-06fec787802e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbbaea5-8121-40e6-8dd8-8a5da04513a5", "sighting_of_ref": "indicator--dba6f6f2-bf11-41d7-b3e8-c59e2d2193ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae015f1d-b76a-4305-aebf-b03c461e5686", "sighting_of_ref": "indicator--dba6f6f2-bf11-41d7-b3e8-c59e2d2193ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0187e1ad-4572-442f-a299-321698667ca8", "sighting_of_ref": "indicator--dba6f6f2-bf11-41d7-b3e8-c59e2d2193ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d017cd7b-1eb5-4b2f-bda7-f751f673d76f", "sighting_of_ref": "indicator--81213862-efc0-44f4-a1d7-6f1f48aa2792", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81549a5e-8adf-44c1-a292-8ca5248bf2f2", "sighting_of_ref": "indicator--575b0717-5cd2-49b0-9882-9d67fee80ed8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22945ce9-48b8-425a-a1cc-f66bb582a9b3", "sighting_of_ref": "indicator--66ddac4a-9abc-4836-965d-38dba2c0d895", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d2c44e-df9e-47e9-b056-210faaa418b4", "sighting_of_ref": "indicator--66ddac4a-9abc-4836-965d-38dba2c0d895", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c01e852-9034-4c8a-a357-7533a71427ec", "sighting_of_ref": "indicator--28d91471-d34e-41a7-bf20-d807785791fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec3ff6e-cf2a-4bb4-a89f-dac749e3c215", "sighting_of_ref": "indicator--d588565c-e23e-4029-b03b-4fd3fbd391d3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df36fa23-8460-4605-93ac-f1158e8b3d9c", "sighting_of_ref": "indicator--1b4c8ee6-ad64-41ac-bdb4-873cb6567d58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6de2c7-9f2e-4ff7-aace-4558be7e9dda", "sighting_of_ref": "indicator--89c1a95a-8d9f-4f22-b61c-839f0cf20394", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67f6acf-542e-429b-9e19-644c7ec14bf6", "sighting_of_ref": "indicator--f7f2edcf-64a2-40b4-addd-c7723a418284", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f140ae98-a4dc-4f85-8acf-0716c82f7520", "sighting_of_ref": "indicator--f7f2edcf-64a2-40b4-addd-c7723a418284", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5a389f-25e5-4208-8c02-f9db0f3955e7", "sighting_of_ref": "indicator--ea022d99-59db-4e78-8347-2141e74f9b54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb488ca-7f5d-4f72-b1e6-1d893be5238f", "sighting_of_ref": "indicator--2d149119-f208-405d-86ce-42f0ebb716a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ad4883-514b-4bf3-b821-d7c4f295922b", "sighting_of_ref": "indicator--fbfb9d29-497e-4ddb-9638-07ca2964e661", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be886787-b1e6-4bd9-a2b8-eabc28bd40b6", "sighting_of_ref": "indicator--f9a2d4ff-a23f-430c-ac3e-fe5bcefe8b01", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3beeb628-ba73-4f3d-8424-78eae593b77c", "sighting_of_ref": "indicator--b911f0bd-8943-4566-a244-030dbd2cf8d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09395e46-e86c-4e73-9a63-07964e751fae", "sighting_of_ref": "indicator--b7ae9a90-47cb-46f2-bd30-96edbdf0a2af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2127bd5-ccca-4b2c-a667-caae69ea8b48", "sighting_of_ref": "indicator--98023171-b6b7-4339-a5ad-b49159fcc1be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9694737a-da32-46ae-b8f1-2cda23fde58b", "sighting_of_ref": "indicator--eaf1f71f-95ab-456c-af98-5c32fb8a64e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05960f02-727e-44b5-a25f-830080c832c9", "sighting_of_ref": "indicator--bd7b035f-3dd6-4b5d-8a25-191f807c8227", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f29c0f-d0ef-4843-91b9-ad716d7b038f", "sighting_of_ref": "indicator--bc8715fb-9222-448e-91ff-c0139752bb16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ffe2ff-bee4-4a86-ab5b-ce607e3465ec", "sighting_of_ref": "indicator--b84dca33-96b7-4afd-b5d3-4f7110b31101", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc85a72-5ad6-44f9-8753-17c88bd05c93", "sighting_of_ref": "indicator--c44b46bc-a193-40c4-931c-2d97d7288687", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8f262d-fdb2-41a4-a0fe-252fe019ff87", "sighting_of_ref": "indicator--086973b5-2034-4d89-a713-193d83460370", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2786830-e1b8-4dae-a355-42eba031fc8c", "sighting_of_ref": "indicator--3ff9bd21-ec30-495e-914d-ace5983da304", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febe5868-7334-4275-8e7a-eeb19a5eb982", "sighting_of_ref": "indicator--cc21d64b-6e03-44d8-b1e2-1533e1d6a820", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e74d5db-81c7-430d-9b29-a32a3300eb01", "sighting_of_ref": "indicator--fd8725d6-4a02-443d-8a12-a648c5f8e569", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cac3d8-b0e6-4997-9818-00d5161e3cad", "sighting_of_ref": "indicator--0ceeedbe-bd15-4cfd-a808-d99161b83cea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a991e88-2e65-4db1-925d-8cd4124b46cb", "sighting_of_ref": "indicator--0ef5af67-1b85-4ce9-a7ce-38cebd1948e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034a79f8-1208-4c1a-a437-f5a8e345e044", "sighting_of_ref": "indicator--ed8c675b-6560-44e1-b967-cc99801d8aa6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc771b96-c9f7-420b-9a01-8b1be3139627", "sighting_of_ref": "indicator--08a4cf61-f092-4478-bfa7-0ac4a0a497f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd914832-933c-43cf-ad86-ba4878a6c506", "sighting_of_ref": "indicator--1d7cc8c2-c554-4b39-840f-6316d9f3c1d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fea103a-fdbb-4efc-b632-c6f65c68de35", "sighting_of_ref": "indicator--9f39a51a-8f52-4ecb-85b2-782d887e4697", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801a735a-ea8f-4f28-acf8-411f4fdf4b5d", "sighting_of_ref": "indicator--bd944d63-2e0a-4971-b3c6-ff2cb8dadcc2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afefc107-b814-4656-9541-87a2a3baacb1", "sighting_of_ref": "indicator--c02d385b-78e3-4d1e-aad0-5678b813f8f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4214b100-0c27-4f8b-b769-9d5ca484a22f", "sighting_of_ref": "indicator--943df5a6-eca3-4489-85f0-b00a5a4d5a48", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4879647-b2e5-4504-8b32-75ad29a03afa", "sighting_of_ref": "indicator--c71f74cb-4e52-4c52-882c-29a2260e182f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe8ffd5-1a9d-46d0-a364-8ac3aeef10c5", "sighting_of_ref": "indicator--28eb083b-f972-4e6f-bbe6-52de76c1e504", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b3afbb-2c11-4bed-84c5-cfbb2fed408e", "sighting_of_ref": "indicator--0deb2a91-86d7-46b8-91c1-f3155dd25814", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebde09e-8ee4-4807-a2b6-9583117782da", "sighting_of_ref": "indicator--5e72fb81-3dc0-49a4-bbe9-83d9597d8d80", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd175ec9-907b-47cc-9b9f-f0e67f5c2c67", "sighting_of_ref": "indicator--be2a99a1-0bf4-40e4-a4eb-959bfde4a4f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bf459b-d912-4a5e-ab88-17af332c1919", "sighting_of_ref": "indicator--9e66f609-fe8f-4211-9007-80bfb2f586a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa8157f-2ee0-440e-b2ad-143bb3a65d9e", "sighting_of_ref": "indicator--3ed93ca0-c3e9-4250-a74c-6978d52b9a15", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c943d5f-6eb2-4ac5-a7b8-e0d079a1ad91", "sighting_of_ref": "indicator--53138eb2-8ba9-47e4-a4e8-918ba22fd388", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c827b355-c320-41e7-8400-4659b2dc4697", "sighting_of_ref": "indicator--c8eab8bf-d7ff-44c5-b50a-4309878cd01b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c2f65e-f927-405e-83c0-7784b1001056", "sighting_of_ref": "indicator--c8eab8bf-d7ff-44c5-b50a-4309878cd01b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8874af76-7e10-4fda-90fd-a57362525182", "sighting_of_ref": "indicator--193d4f6a-8574-400f-947b-ec07ad4a3528", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ded35a-92ca-4cf4-bc54-048350fcc4ec", "sighting_of_ref": "indicator--68e51a6c-3de5-40e3-a24f-0ff9f41924a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb565e5-051a-49f0-8a93-a56f645dbda7", "sighting_of_ref": "indicator--9554ece4-7bca-4c29-92df-19782e8ea393", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1464d466-4ab2-4015-b4e5-4e798aa46742", "sighting_of_ref": "indicator--9554ece4-7bca-4c29-92df-19782e8ea393", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449bfc82-6c52-47d3-9486-f1c777758ff6", "sighting_of_ref": "indicator--f333d67e-b1ef-4251-af91-6a8d1f71a7b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83e8617-d3b9-4626-aa7f-c2a6f4892f68", "sighting_of_ref": "indicator--a0e5a341-98ac-4ced-b056-b19fb7a3d24c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636d803b-aaa0-4679-b84a-f354d4226477", "sighting_of_ref": "indicator--802f17a0-fd93-4f38-b9bc-56525eed80a2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde60f91-705d-4bb4-9880-9d18eba77513", "sighting_of_ref": "indicator--5eb84c60-c762-4956-b79b-bb7d5c468df8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4aa72f-6b0b-4bbb-ae94-659e623ab5fc", "sighting_of_ref": "indicator--bb7d19ac-49fd-4a11-853b-1c0aa6c59145", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87eb488e-6fd4-4c82-ba3e-89c094ae4ffa", "sighting_of_ref": "indicator--3c660311-8bfb-4e55-b0ea-253b6815a2ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d0d718-4190-4eaa-aad2-bf00f32756fe", "sighting_of_ref": "indicator--89ee7d3b-9314-4f60-b73d-0a8b2d10c41e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab865b0-36c0-416e-9b23-90cd0559584e", "sighting_of_ref": "indicator--28e6690d-bf49-4917-8443-b6237b8de3fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732e1053-52a0-42dd-8191-5d0a48ae4fe4", "sighting_of_ref": "indicator--75befcc8-cafc-4188-b0cc-66e28c39ae3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc3cac2-d8b6-430b-ade3-9de23a0da315", "sighting_of_ref": "indicator--f1f0613a-bc6a-48f6-92b4-48ebfa3c0eb5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fff04b-07d1-4d2f-b7ba-98b1348660be", "sighting_of_ref": "indicator--af2445cc-c62d-4237-a641-25f5fa0eb07e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a136f0f3-3eb2-42de-a15a-8f2bd4f917b6", "sighting_of_ref": "indicator--c886f5f6-3402-4ae4-b54b-8b34d74da821", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb9d2d2-4b00-41ca-aca9-3b68a419a3e0", "sighting_of_ref": "indicator--b3d639a8-7c1f-47b2-ae58-b2898f920590", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7386a95-7227-4f80-a840-4349174d27da", "sighting_of_ref": "indicator--b3d639a8-7c1f-47b2-ae58-b2898f920590", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1e8d23-c2b0-407e-9813-df4012d0c942", "sighting_of_ref": "indicator--ab962a67-11f8-43d3-bbda-ecafe6d7a942", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2327e10e-7d4a-42a2-95bd-de57f3872b19", "sighting_of_ref": "indicator--bb890a0f-fde8-4b5e-a736-7069ddc36a69", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94735b2-622d-401d-a91e-1034d624103b", "sighting_of_ref": "indicator--575284dc-492a-48bf-9cd4-9d362ffad796", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f8e2c4-f518-4cde-85ce-a369dfd77a2f", "sighting_of_ref": "indicator--045f6f68-9b74-4e44-b3df-a8586a642450", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6887b6cd-d7d0-4f9e-ba32-18f2cf9f063d", "sighting_of_ref": "indicator--41534f38-747d-4147-821c-dba621afe492", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063ac11f-214f-4550-b7af-9333ddb809f5", "sighting_of_ref": "indicator--3c1b7af1-0922-4475-be12-cc873ac8030f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5374ed4-9024-4a20-8da2-8901cdee0456", "sighting_of_ref": "indicator--589d1c4f-38ba-4903-851a-97269724ade2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00038e3d-88df-4ed5-831d-68d5701c2f96", "sighting_of_ref": "indicator--9dcf6f74-378f-41da-90c2-3f029c29ee75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dc3d3b-12eb-425a-8179-b67536f61f53", "sighting_of_ref": "indicator--f69a9f01-81aa-4c46-9dde-f8b6dde60921", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef1e9ff-6972-4030-a197-bdf43c949dfc", "sighting_of_ref": "indicator--fe40b06d-40f1-473d-b8eb-848931f28169", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a8208d-bdb3-4fe0-a060-0483a3033be2", "sighting_of_ref": "indicator--98dc7270-09ba-4360-9122-2c99d7f3926e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c818d393-bdad-4ec9-8a2c-01d57160a513", "sighting_of_ref": "indicator--121b32c7-b2b8-45c6-8ec0-1b256e08378f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadea088-ecd3-40ed-9f4b-659cf38b5c68", "sighting_of_ref": "indicator--69cf5a4e-9f84-4884-a753-c291831ab619", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1c4fd3-c1ef-4746-9504-54a63f8aebf6", "sighting_of_ref": "indicator--e9987186-276b-4cfb-8175-953358479a4f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7cc36e-4655-4ea4-b0d8-3ca7e55598aa", "sighting_of_ref": "indicator--e9987186-276b-4cfb-8175-953358479a4f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ebcecd-3ff4-4a3d-8762-9326b14a79f0", "sighting_of_ref": "indicator--04f8daa5-4c10-4092-8ce0-2190ca3dbb3d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57636700-4752-425d-b7dc-daaeff02cbaa", "sighting_of_ref": "indicator--8e6b4bfc-77bd-476c-b9e8-29724a976261", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b295e77-4425-409a-be32-ecfea152130d", "sighting_of_ref": "indicator--db335acc-0e8d-4bfe-a8db-69b75f1178e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ec339c-849b-4ffe-9fd5-82b305e5c08b", "sighting_of_ref": "indicator--db335acc-0e8d-4bfe-a8db-69b75f1178e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a2a2b3-37f9-4939-a920-479e76725d0e", "sighting_of_ref": "indicator--b14ed804-8e11-4d1a-b5f3-ff9b43a31c89", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f691aed-7763-4573-a853-7306008cf169", "sighting_of_ref": "indicator--8cc985e6-277a-4d34-845b-491ab2ab6197", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073638eb-bb07-45b7-9363-3457b15a5ffd", "sighting_of_ref": "indicator--1172ded5-eee2-4003-8324-12355217e9ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ba737b-a71e-4529-84a1-0a1a15dc0379", "sighting_of_ref": "indicator--f010c3c1-009b-43d8-9fad-b446bd166b9a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d12f8b7-260f-47c6-aae3-f759c3fab6ca", "sighting_of_ref": "indicator--17fcef1e-15dc-4edf-9354-54dbf9b5df57", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c429fb11-d1d6-4e49-aada-a6cdb567f5c0", "sighting_of_ref": "indicator--5cbd2b8f-0700-4ba9-b00d-d975e7181e18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e8e844-df23-465f-88e5-b3d01d6360d8", "sighting_of_ref": "indicator--5cbd2b8f-0700-4ba9-b00d-d975e7181e18", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f735c19-f771-4e3a-be7e-ea2bb33a7d3d", "sighting_of_ref": "indicator--6f5bd7d5-445c-4d30-8227-a2e11e6e6787", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb716b89-6bbe-411c-ae1b-35e2aaeae094", "sighting_of_ref": "indicator--f08375f3-91f0-44b2-a55d-fb1ad8cfdfd9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877124b7-88aa-47a6-af03-94f574cd9cea", "sighting_of_ref": "indicator--47a085e8-5224-47f0-a00b-99553a98612c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f6bda3-ef6e-4986-991a-fd2e5622c476", "sighting_of_ref": "indicator--47a085e8-5224-47f0-a00b-99553a98612c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a135d87a-0c64-4c21-ae56-f0dbf67821b8", "sighting_of_ref": "indicator--bc140485-e645-4e79-b8f7-3a8726d54936", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be81772-e92f-4ecd-b4e3-3d675663ca02", "sighting_of_ref": "indicator--bc140485-e645-4e79-b8f7-3a8726d54936", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4ab5fa-8546-47e9-8b86-0d43d9f39780", "sighting_of_ref": "indicator--bc140485-e645-4e79-b8f7-3a8726d54936", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f3ec3d-4957-4cbd-a179-4ddb8a31e4d8", "sighting_of_ref": "indicator--dc7150a9-e227-466e-9a72-23e32d5e5c34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5108b4-81a9-42f3-a51a-56f3f927ae78", "sighting_of_ref": "indicator--e7a7d1b9-65a6-462e-af79-6cd3c6176051", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8a6064-a472-4104-bdef-c8683690cfc6", "sighting_of_ref": "indicator--e7a7d1b9-65a6-462e-af79-6cd3c6176051", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35738391-b5ad-46eb-9730-fea218bf21e5", "sighting_of_ref": "indicator--e7a7d1b9-65a6-462e-af79-6cd3c6176051", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cb4f5b-8a06-4d0b-bb3b-618d27e73681", "sighting_of_ref": "indicator--d4b682a9-440e-4838-b827-81eaaaaec924", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6583d17-772b-4e24-aa03-f3744d73ad89", "sighting_of_ref": "indicator--8ce7d8cc-4122-485f-a08e-91b316bfb621", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5dca17-4812-4c37-ade6-5995431a7e74", "sighting_of_ref": "indicator--8b8e5fff-5af9-4b67-bfb6-1bf5ad05a2af", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f95e30a-f5cb-4316-bbb7-f5c081720858", "sighting_of_ref": "indicator--8b8e5fff-5af9-4b67-bfb6-1bf5ad05a2af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe79556c-1a7d-49cb-a089-bafa9650f975", "sighting_of_ref": "indicator--bc8b81c7-a43c-49ad-a6dd-ce7a0ab41f30", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566d9142-cc82-449a-a9f2-595cd5550554", "sighting_of_ref": "indicator--9f6ca036-edd3-48d8-ab64-42f0c4d8b517", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71eed6e-d3db-4d63-a56f-1c265f602a97", "sighting_of_ref": "indicator--9f6ca036-edd3-48d8-ab64-42f0c4d8b517", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd69b1e-393c-4cf2-843a-c3ff30435dcc", "sighting_of_ref": "indicator--9f6ca036-edd3-48d8-ab64-42f0c4d8b517", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d9879d-6912-40c0-8add-a530ac0dbf9e", "sighting_of_ref": "indicator--9354838b-8eed-4eaa-afaf-0d849b03d35a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fba738-ccd2-4c1f-8019-1bf71bd1a3e8", "sighting_of_ref": "indicator--78e421fe-460a-4321-991e-5b385a9b18b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc822aa-1707-4fc0-8d71-c35e611374ef", "sighting_of_ref": "indicator--519e21f9-22a0-4137-9962-1931c84fdb24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7375f102-63c0-45e7-9635-1b4df4414d8f", "sighting_of_ref": "indicator--f11f5aaa-714d-4ae1-acdb-e90a55960184", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac4b996-bc64-4e39-a08b-fc496653ccba", "sighting_of_ref": "indicator--8f3a821f-e5d4-4165-bf41-9631cd47ef9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49898bd0-eedd-43dd-9454-ae6ade4187c5", "sighting_of_ref": "indicator--8f3a821f-e5d4-4165-bf41-9631cd47ef9f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68c125a-fda6-4535-a9c0-daafcc725a77", "sighting_of_ref": "indicator--695e3e7c-2f62-4c4f-98fd-7d2ef77aa8ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369b81e0-a3da-409c-a81b-e0bb9c8a0253", "sighting_of_ref": "indicator--c2013e66-a89e-4f04-ab7b-1ae5aeca77e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fa6f20-c5c7-4f97-9d54-2d0db3414dba", "sighting_of_ref": "indicator--054df46b-9391-49f3-971d-5bfed58a5475", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d77132c-7d10-4c36-937a-e395c3c8f24f", "sighting_of_ref": "indicator--18d18a66-868f-4545-866d-9039d288fdd3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de9ebf7-76fb-4605-950e-a0daf1c4023f", "sighting_of_ref": "indicator--f3f7b2d3-545a-49c2-a554-9e3fc4f012e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b8de55-c2f7-4f48-90a0-faaac089341e", "sighting_of_ref": "indicator--b1ad5dc8-e503-443d-ae5a-43a02750f008", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa123ccd-197c-4a25-9e2d-16f62c30ffeb", "sighting_of_ref": "indicator--b1ad5dc8-e503-443d-ae5a-43a02750f008", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214c48c0-67b0-4ede-b494-d721cc594cc9", "sighting_of_ref": "indicator--c1a05351-2926-418d-803f-26aee87b2727", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb231315-efd6-47c4-baec-2f51c06f932c", "sighting_of_ref": "indicator--c1a05351-2926-418d-803f-26aee87b2727", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facfff53-ec0e-4721-b3f3-27195baf0da9", "sighting_of_ref": "indicator--c1a05351-2926-418d-803f-26aee87b2727", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c1d017-bec1-40ae-8cf6-f024b438010b", "sighting_of_ref": "indicator--330c8af7-6d72-4179-8349-e44a0110d392", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d544a7bb-f364-4fc9-81b0-31cedf5bdd18", "sighting_of_ref": "indicator--3c0b7dab-1371-43b5-9858-0396135787f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d6f0ff-448a-4ff4-b556-5f803e40da2d", "sighting_of_ref": "indicator--d78fc352-ddaa-49b4-8039-ffb3e953ec96", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d21c84c-6aa4-473b-86f4-7d86c19a3dcf", "sighting_of_ref": "indicator--f2b988fb-970a-42bb-889b-8f75ba67a620", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975e7420-0797-46c4-b795-8b3625bf789d", "sighting_of_ref": "indicator--f2b988fb-970a-42bb-889b-8f75ba67a620", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e25db5-edff-4332-895e-df7c47168d48", "sighting_of_ref": "indicator--f2b988fb-970a-42bb-889b-8f75ba67a620", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a9d0e1-13e4-4230-b040-757151d0de56", "sighting_of_ref": "indicator--6648eafa-af70-444c-8114-2e4148963be3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c04356-e265-45d3-8995-af1c23753b74", "sighting_of_ref": "indicator--0a41123f-0d39-41b3-b367-83b7ef3fcf9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea13ac3-23e6-4302-9f44-6c887f30a3a0", "sighting_of_ref": "indicator--0a41123f-0d39-41b3-b367-83b7ef3fcf9f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab0a319-daa7-4cbb-9e80-4752203e307e", "sighting_of_ref": "indicator--0a41123f-0d39-41b3-b367-83b7ef3fcf9f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3041631-5ec2-45db-8f8b-92ca99024960", "sighting_of_ref": "indicator--1d34fc65-0ee0-4fe1-b657-1abbb47a23b7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a809f7-e2f7-41f0-b175-891f7b8bcdf8", "sighting_of_ref": "indicator--dacdb992-f29e-4980-acc5-d99254f77600", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d2cbcb-531a-473b-abbe-6e5cca494f97", "sighting_of_ref": "indicator--dacdb992-f29e-4980-acc5-d99254f77600", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413925d6-69e5-4533-a7fe-68d4f9bff9b2", "sighting_of_ref": "indicator--40a31278-afa8-4e24-b66d-c26c87751561", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911af242-cbf2-4970-9979-a67d87a1c881", "sighting_of_ref": "indicator--40a31278-afa8-4e24-b66d-c26c87751561", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5ebe53-5e2d-4d48-bcec-fe9b21fbd2ac", "sighting_of_ref": "indicator--500fcd3a-2926-4dae-a80e-2a21665de9e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a91b0e0-817d-45d2-8eae-95b994253eb2", "sighting_of_ref": "indicator--bbbd84a0-e00c-47ec-abaa-d071c1452e00", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afda6e0e-67bd-4c11-88cc-b009f87a2c1b", "sighting_of_ref": "indicator--bbbd84a0-e00c-47ec-abaa-d071c1452e00", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38866735-f69c-480e-8bbc-6a410c57dcb1", "sighting_of_ref": "indicator--bbbd84a0-e00c-47ec-abaa-d071c1452e00", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4e5186-ff14-4b16-9d90-12a0111b36b9", "sighting_of_ref": "indicator--433cfe36-49b1-4d2a-bd60-1c2e983c31b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a143d670-3f33-4c2f-8067-f7a68d2317ad", "sighting_of_ref": "indicator--433cfe36-49b1-4d2a-bd60-1c2e983c31b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5791676a-4d86-4f79-bfe5-d9be02216042", "sighting_of_ref": "indicator--433cfe36-49b1-4d2a-bd60-1c2e983c31b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9a03f1-8687-4183-8d97-ebdb8a50d6ba", "sighting_of_ref": "indicator--bda8ef57-c134-48ac-b7be-caaf29581dff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8796dd67-9c5f-4ca2-9bfb-f512695f9375", "sighting_of_ref": "indicator--3d2d7981-cef7-494f-9d61-70290ba2c7a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730ef23d-57f1-44f5-8f2b-a1f8c5aee789", "sighting_of_ref": "indicator--3d2d7981-cef7-494f-9d61-70290ba2c7a4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c68ad6-341a-44cb-a035-6fddf21ba1f9", "sighting_of_ref": "indicator--3d2d7981-cef7-494f-9d61-70290ba2c7a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2afeee-4e6a-4302-ac8a-9ee131dc67ed", "sighting_of_ref": "indicator--4c98bcca-bc91-4213-848b-f8ed175ca4da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8c7e58-a0a6-4df4-b99c-537d31786ed3", "sighting_of_ref": "indicator--61badc0c-76df-4e26-92b7-240489812f09", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927681af-12b5-484e-ae51-20ae83d99454", "sighting_of_ref": "indicator--0604df82-d660-4556-bfbd-2413bc03985d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d81c231-fa8e-407f-915b-b3fed02530c4", "sighting_of_ref": "indicator--92f1ecbd-0447-4ffa-b9f6-b60474514986", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90a587a-c801-42d0-88a4-115f9548a3a0", "sighting_of_ref": "indicator--92f1ecbd-0447-4ffa-b9f6-b60474514986", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71556ec2-c8b2-44f2-898a-a037b7ca798a", "sighting_of_ref": "indicator--92f1ecbd-0447-4ffa-b9f6-b60474514986", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5508208a-dc8b-47ed-ae34-2855dfe0bb9f", "sighting_of_ref": "indicator--12efe732-6ab5-45bc-83b1-9e3ecafe3c12", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f683df-4330-45a2-9e4b-5740b4b8a6de", "sighting_of_ref": "indicator--e5e7429d-584a-4277-9926-f34a767274ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aef5b96-488a-4ef7-84af-973a25472241", "sighting_of_ref": "indicator--77293920-94e4-4e68-a27b-b7211d4e0445", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0c1cad-0a74-43a6-ba04-9add4c697f72", "sighting_of_ref": "indicator--1fa05683-7c56-4db2-8b8d-79bb25a6297d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b0e90c-e7d2-4cbf-a909-5ef51c6b4a89", "sighting_of_ref": "indicator--1fa05683-7c56-4db2-8b8d-79bb25a6297d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdfff42-c354-4607-86cf-848fc0138e65", "sighting_of_ref": "indicator--1fa05683-7c56-4db2-8b8d-79bb25a6297d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aec94d-d9f2-415c-8142-3acba100da32", "sighting_of_ref": "indicator--1c5e58ff-d06b-446f-8a40-ee33c8bd6ad5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f31636-bdf8-4b9f-9a72-30274fe736fa", "sighting_of_ref": "indicator--1c5e58ff-d06b-446f-8a40-ee33c8bd6ad5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0c9c2b-a932-4614-943f-8fb01e174072", "sighting_of_ref": "indicator--1c5e58ff-d06b-446f-8a40-ee33c8bd6ad5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e40a89-4bbd-43b9-8e17-c57033486ce3", "sighting_of_ref": "indicator--9d34fce1-2433-43fb-b9ea-f7c481b5179d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed53f7c2-2638-4ea0-86c3-b1fc626fbc6b", "sighting_of_ref": "indicator--9d34fce1-2433-43fb-b9ea-f7c481b5179d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd26e3b7-8510-43a7-9d90-0e91a58fe442", "sighting_of_ref": "indicator--9d34fce1-2433-43fb-b9ea-f7c481b5179d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dc4ef8-17c3-40c5-b947-aaf13716178f", "sighting_of_ref": "indicator--48f5be30-2676-41b7-9787-86ffff64613d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ea2d0c-28e1-4af3-a3fc-4e9b553670c1", "sighting_of_ref": "indicator--48f5be30-2676-41b7-9787-86ffff64613d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea20cd1-d3a5-4bc8-afd9-2bf30483dc6d", "sighting_of_ref": "indicator--48f5be30-2676-41b7-9787-86ffff64613d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24f65f2-9d2e-42a6-ace9-5bdca35c532f", "sighting_of_ref": "indicator--82cd380e-ff28-4e13-9add-4b03b2f3e068", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefb586a-0f94-478f-88ab-6179d6f44a03", "sighting_of_ref": "indicator--82cd380e-ff28-4e13-9add-4b03b2f3e068", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a077dc-41a4-4a5d-914a-376fdc486111", "sighting_of_ref": "indicator--ca4d0434-52e0-443f-839c-48fdec069aa9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd5ae76-f2a5-4ce2-8674-b76371e96756", "sighting_of_ref": "indicator--a1468301-bd0e-4f41-a393-13aa26a85858", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40a3eb8-59f4-4231-82b3-8ab4cb84f2c9", "sighting_of_ref": "indicator--a1468301-bd0e-4f41-a393-13aa26a85858", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c7fcf-268f-4004-a1dc-48591f9403bb", "sighting_of_ref": "indicator--a1468301-bd0e-4f41-a393-13aa26a85858", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caeef780-177a-4768-bf2f-eb26c6dec54b", "sighting_of_ref": "indicator--b5278da5-6b31-4bac-aaec-b46292c21413", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ecd074-7966-47b6-aa84-783e46e8e4d5", "sighting_of_ref": "indicator--7cb4adba-3ba9-4f11-b583-50b855e1012a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b0e07e-cd4e-4be3-a59f-2c0d2109ad50", "sighting_of_ref": "indicator--8dff3b95-0ca3-438d-9c9c-a7dd08007d11", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a462a4e7-d582-4501-85d0-e4f20c7c4a4c", "sighting_of_ref": "indicator--03fc323c-0c6e-4d90-9ad1-c00755e75c6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfc9c9d-e313-4209-86c6-1f74ccbfb270", "sighting_of_ref": "indicator--820d9502-0a96-4d39-89bc-4979bce48407", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f82348-432d-4dba-9e99-9a88701bf58e", "sighting_of_ref": "indicator--8f1405ac-a65a-4fb2-9e87-278689e5863b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277ab4fb-e721-438a-b440-95a608835703", "sighting_of_ref": "indicator--f1eeebdc-b0ea-4dfd-89ef-db913df5b3c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95bb244-e971-4554-89e3-03b684872ac2", "sighting_of_ref": "indicator--93fac66e-39ad-47c8-9904-95f8fc77e7ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1206e6-4b41-4362-bc5f-b2c97f3ee80f", "sighting_of_ref": "indicator--6ceccff7-df29-4f58-954a-49533625e670", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb87835-fe81-43f3-bd91-e928e1ebbd4c", "sighting_of_ref": "indicator--20a2430b-0f46-43a0-816d-633be4547c7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69151aa1-c340-4496-b5b4-2d8d7309dfeb", "sighting_of_ref": "indicator--9090915d-9df1-4f06-985d-9bbcdfa35538", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d599ac9-6153-4b6b-9301-abdbea483425", "sighting_of_ref": "indicator--7c8bc316-fb14-4a30-9187-d49270d8d71d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1b1e3a-a8a6-4cd7-90f3-058815a3178f", "sighting_of_ref": "indicator--bd7ea5af-c03f-4dd9-9a1b-b19ec88afc5b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b89d37-2708-4b4b-bea3-305ca0836299", "sighting_of_ref": "indicator--56895c8e-fe6d-4873-a621-6d58ca4b10cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a362bf-935a-4a3b-bb8f-5a564d4e874c", "sighting_of_ref": "indicator--56895c8e-fe6d-4873-a621-6d58ca4b10cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bb506a-8c9e-455b-b271-65abf65f9826", "sighting_of_ref": "indicator--56bbe553-6f08-4487-ac1c-a0a20d03c837", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6d709c-ba90-4bc9-9198-786b0a4be928", "sighting_of_ref": "indicator--129311b7-0507-479a-ba21-b5f517b490ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eef759-b32d-4d0c-831a-4741f6af84af", "sighting_of_ref": "indicator--129311b7-0507-479a-ba21-b5f517b490ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a87f0e-b947-4f13-8945-519536d91aca", "sighting_of_ref": "indicator--5061c3e7-2824-4437-92f3-be73f5cc6fbf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01b201d-9bfb-41e8-84b4-3e964e8e61b0", "sighting_of_ref": "indicator--6d8a0dcf-f701-4f54-ad33-81552f32ccda", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354a3505-f630-420a-b0f7-9b4d48eca7af", "sighting_of_ref": "indicator--6d8a0dcf-f701-4f54-ad33-81552f32ccda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b664e0-7780-40ac-92eb-1dda921b59ab", "sighting_of_ref": "indicator--921dddd1-693f-4dd3-90a8-04ca482a7a2c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bfbc15-83fa-4a7d-b480-409e63ff52cf", "sighting_of_ref": "indicator--921dddd1-693f-4dd3-90a8-04ca482a7a2c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1719b4-29d6-463a-92af-7584d6c519c0", "sighting_of_ref": "indicator--d09181e9-5543-4536-a411-c270e7837fc4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92c40ab-ca44-4ee6-b891-08d8b21be7db", "sighting_of_ref": "indicator--d09181e9-5543-4536-a411-c270e7837fc4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15655def-28b8-44b7-8088-4f0b269b22c1", "sighting_of_ref": "indicator--d09181e9-5543-4536-a411-c270e7837fc4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb53e67-bf6d-4c91-bae5-671f6c07c50e", "sighting_of_ref": "indicator--a5977a13-7f3c-4b71-a4fb-c2dc1c24c4db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6982dbc-ac71-4148-9c0b-bff3f21ae0bb", "sighting_of_ref": "indicator--a5a4aec3-7eaf-4440-9032-1c76678097d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f218bca-0304-479d-9eb1-929043130712", "sighting_of_ref": "indicator--4bb2d1ed-a371-4c6b-838d-2d1486120dc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b17ce79-0569-468f-a126-920e9ee4f52b", "sighting_of_ref": "indicator--52ea6912-0977-49e3-8bc6-d1afdd7a05ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adb7e80-cede-4867-b655-88833d2af426", "sighting_of_ref": "indicator--737c98ac-f75a-4e18-8c27-e2e100f28dd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a2ef8d-08d6-4628-bd41-1865833dfcd7", "sighting_of_ref": "indicator--85a4a57d-a840-4947-8f79-566a323a4cff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d436e3ca-29dc-4b83-be7d-5f2e793bb174", "sighting_of_ref": "indicator--da30ebd7-7f82-4b78-b17e-6a496d8b28ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62365a08-5bee-42dc-b92f-fd33ed30b19b", "sighting_of_ref": "indicator--0485b8fc-4677-44d4-9472-57d2d8b46d9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aca09f-29d1-4893-996c-710328d0e24d", "sighting_of_ref": "indicator--5ad0d49b-c192-45b7-94d8-5877171fff86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5078760c-4539-4974-941d-80c1dec51c0b", "sighting_of_ref": "indicator--6f51d76c-4720-465c-bee2-81882bad6ba2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc28586-6567-4500-a485-ea524067ed10", "sighting_of_ref": "indicator--081b404f-91e6-46bf-b09d-82f10b43035b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba29502-46dd-473d-8708-6dd7f3566be9", "sighting_of_ref": "indicator--76a15976-305f-42cf-b278-7bc9b3e72c84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e7d3cc-ca50-4bd2-b2a6-05547cbde490", "sighting_of_ref": "indicator--3333a62d-4506-47fa-80e2-ff3d014b231d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a569522-cbac-4217-bb4e-4d89325c9c56", "sighting_of_ref": "indicator--708446a6-7e8d-4b5f-8ab1-7ca4751da1ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602925a4-fa02-46fd-b754-ec4efefd07d5", "sighting_of_ref": "indicator--fb273aaf-ae79-472b-9289-2fcc50a1ba7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df65c902-fbd0-4a35-840f-6ba561d2459b", "sighting_of_ref": "indicator--cc1f5bef-9183-4df8-ba54-ce0895386c80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e51912-72fb-41f6-a7da-19776e185e33", "sighting_of_ref": "indicator--08b85771-6419-43d5-89cb-c3b2a927689a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8826a508-3194-428e-bb97-9462b1ac1ded", "sighting_of_ref": "indicator--591bf8e9-1f29-4212-ab84-d0dbef3257cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d20223-720b-48aa-a372-3cd4f49872d2", "sighting_of_ref": "indicator--e2a51374-a209-4497-894f-6b057c63466c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7ee1d9-4a46-48e7-93dd-6c7ffe5ab392", "sighting_of_ref": "indicator--42ad41fd-8ad9-493c-9d0c-d4c6c11eff97", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05537a11-aef9-4c54-b58a-0da6d8b704ca", "sighting_of_ref": "indicator--fad10a7e-3796-4c53-b5c6-135b6da1ce1e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e5623c-a1ab-48e3-95ba-49e4539c9ab6", "sighting_of_ref": "indicator--6934adf2-6284-41fd-a3b5-2ba52e7b9d74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f49f52-2569-40b6-93fe-3a87fa333cab", "sighting_of_ref": "indicator--6934adf2-6284-41fd-a3b5-2ba52e7b9d74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20737ab-7ef8-4210-b7d2-098d1130cd92", "sighting_of_ref": "indicator--6934adf2-6284-41fd-a3b5-2ba52e7b9d74", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c8bd89-e57a-4659-b32f-ff422f07cfec", "sighting_of_ref": "indicator--2150e943-f94d-4d27-873c-c7dd08066471", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fe660d-667d-414c-bcb6-d0644000ac17", "sighting_of_ref": "indicator--2150e943-f94d-4d27-873c-c7dd08066471", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00362795-2598-46c2-adee-6ad935a4a679", "sighting_of_ref": "indicator--32c512da-d9ac-4f4d-b454-03542eff38f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958fba41-9b32-4aa8-8f1e-0b1fa5065756", "sighting_of_ref": "indicator--32c512da-d9ac-4f4d-b454-03542eff38f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec64ea91-8db2-4774-a81c-1abae7d3dc2c", "sighting_of_ref": "indicator--32c512da-d9ac-4f4d-b454-03542eff38f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cf0347-46b9-453c-bf10-89146ce6a66a", "sighting_of_ref": "indicator--fc3ef8d5-c387-42e8-b067-0e43d68006bb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde88781-8fb7-4056-83ae-2a2e0aecba21", "sighting_of_ref": "indicator--fc3ef8d5-c387-42e8-b067-0e43d68006bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6c620f-625e-4e07-b967-f0d46664a1cd", "sighting_of_ref": "indicator--fc3ef8d5-c387-42e8-b067-0e43d68006bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3c66c1-78cf-48d1-92d6-e08ffacb86d7", "sighting_of_ref": "indicator--8c34bf35-aade-45b4-b83f-c85650792cbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb38d0a3-5907-4788-a4f1-7a034c82debd", "sighting_of_ref": "indicator--8c34bf35-aade-45b4-b83f-c85650792cbb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b18869-9e89-4226-ab47-b739fb21776f", "sighting_of_ref": "indicator--d70dac1a-c78d-43d8-a47b-30da681b5393", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2920e94-41a3-407c-a3f5-8cb4b0404b96", "sighting_of_ref": "indicator--d70dac1a-c78d-43d8-a47b-30da681b5393", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cec8c2-0a1d-4e62-91e2-1c9a6ef3d8ac", "sighting_of_ref": "indicator--d70dac1a-c78d-43d8-a47b-30da681b5393", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e50f54-5faf-4b91-a140-1e5b57574a25", "sighting_of_ref": "indicator--5dba88af-a19b-44d5-aa7a-dc641afc634c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f080e0b-229b-4da3-bbc5-b56281ee9fb0", "sighting_of_ref": "indicator--a12ecefe-d88b-457a-8408-0d3733bbbad4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e850e534-f841-4ac7-bead-bde1007290a3", "sighting_of_ref": "indicator--8e9c8394-b6c1-4c5b-b318-d96950f03c38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0065b462-ca7a-4d5e-86fa-61217a2a4af1", "sighting_of_ref": "indicator--8e9c8394-b6c1-4c5b-b318-d96950f03c38", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2acaca-adeb-419a-9594-bfefc4fcab42", "sighting_of_ref": "indicator--8660cdca-3a74-47f5-b66e-4e5e7e42ff6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5821adbe-f814-4c71-917f-4f86ff4da037", "sighting_of_ref": "indicator--329feaf4-f64d-4937-a2ee-88452f48846e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0c051f-9539-410e-b3b4-deb21c3f379c", "sighting_of_ref": "indicator--329feaf4-f64d-4937-a2ee-88452f48846e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f6429b-75c7-407b-95f3-f55d79618cf6", "sighting_of_ref": "indicator--d57ba89a-07d9-456a-9072-b597a7758e04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ac1f17-804c-4377-a638-4e8158ddb9f4", "sighting_of_ref": "indicator--06603307-508e-4c17-ade0-dccf8f2f6ace", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e62a275-623a-4e45-9c0b-45c9bdbdb817", "sighting_of_ref": "indicator--72a56f20-bb3f-45b6-9b53-750f4316a1a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e70bdc-2d75-43cf-864c-e4ad7a512b27", "sighting_of_ref": "indicator--72a56f20-bb3f-45b6-9b53-750f4316a1a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d009b20b-5d0e-4623-9829-60ea493b3573", "sighting_of_ref": "indicator--20e22e82-1d11-47a1-ba19-a474a3a60daf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd05eac-55f7-4587-b631-8a16bf88ed67", "sighting_of_ref": "indicator--20e22e82-1d11-47a1-ba19-a474a3a60daf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbd64a8-591d-4bfb-aef7-8db109731fc8", "sighting_of_ref": "indicator--20e22e82-1d11-47a1-ba19-a474a3a60daf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1f9c8b-38a0-474e-b27a-d2166bf58a42", "sighting_of_ref": "indicator--47f961b1-aaa1-4f27-93c0-2dbd7129f45c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b20c854-e1a8-4e3f-8a76-22559230602c", "sighting_of_ref": "indicator--47f961b1-aaa1-4f27-93c0-2dbd7129f45c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433fc69b-af29-49f2-b110-e8259b5088f9", "sighting_of_ref": "indicator--d77a1b84-3931-4efe-b20c-44a4bd239918", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba1be07-f8aa-4b60-8e34-979c454415b9", "sighting_of_ref": "indicator--d77a1b84-3931-4efe-b20c-44a4bd239918", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca4d6d2-8b40-4e07-8114-0bf69a754a5b", "sighting_of_ref": "indicator--b0b8746d-bce5-4f5c-b6e6-4881f9734ba9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564fb612-7286-487b-9ff7-5b69569417b9", "sighting_of_ref": "indicator--6e8f79a6-0267-4aab-8102-fc11cfd55ea2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76e1de6-7c7a-49db-9bab-e6f4b0f82d17", "sighting_of_ref": "indicator--6e8f79a6-0267-4aab-8102-fc11cfd55ea2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18655b09-64c1-44cc-99dc-0579913db19b", "sighting_of_ref": "indicator--521e927c-e3b0-4c4f-b3a6-bad2e5960c8d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed22ede3-d699-47b8-ad00-ca8bf21d9af5", "sighting_of_ref": "indicator--521e927c-e3b0-4c4f-b3a6-bad2e5960c8d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6126b0ad-dd41-4251-99b1-e377899d3575", "sighting_of_ref": "indicator--521e927c-e3b0-4c4f-b3a6-bad2e5960c8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877ff90e-b703-4129-b0ef-1629d0c67eef", "sighting_of_ref": "indicator--f3ca1c6c-aa08-43e0-992d-20135e4c73a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da2cd97-b8cf-4b82-a4ac-38fc16f47040", "sighting_of_ref": "indicator--f3ca1c6c-aa08-43e0-992d-20135e4c73a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c71308-2b33-4360-8e55-8867fed2c8d1", "sighting_of_ref": "indicator--f3ca1c6c-aa08-43e0-992d-20135e4c73a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0caf86d-4ed9-403b-8b50-59d11f219b8a", "sighting_of_ref": "indicator--63e48d73-b134-4c58-8e4a-2a5555291d0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cf2a3a-1539-4eb5-a62f-f7622ae2b071", "sighting_of_ref": "indicator--63e48d73-b134-4c58-8e4a-2a5555291d0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca3150c-54f9-402b-9ddd-44f7e6f0fb06", "sighting_of_ref": "indicator--63e48d73-b134-4c58-8e4a-2a5555291d0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e6dc31-40c1-4473-828d-acafb6a89264", "sighting_of_ref": "indicator--297c5dac-7b0e-4e0c-bb71-6072506f45a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3f6a19-8e4b-40b3-941a-56606d878018", "sighting_of_ref": "indicator--fbe0148d-d924-4255-89f9-f3f54a8acbf8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b915b37a-adf9-41a6-a68c-021e51c69959", "sighting_of_ref": "indicator--fbe0148d-d924-4255-89f9-f3f54a8acbf8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d728d4c0-00f6-4e90-88dd-b37b0af661aa", "sighting_of_ref": "indicator--fbe0148d-d924-4255-89f9-f3f54a8acbf8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160247ac-9a25-4d74-ad4f-2a7001aaf92c", "sighting_of_ref": "indicator--0586e06c-46cc-456f-b2e2-cac7987fafd5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0281d702-25a3-4a11-9498-ef10d4738e79", "sighting_of_ref": "indicator--00549ab3-3c72-431a-963e-412b79015def", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b7bb71-dfdb-4360-9c91-b734b5c997e2", "sighting_of_ref": "indicator--00549ab3-3c72-431a-963e-412b79015def", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68b3854-63eb-42fc-a4a4-05e15710b641", "sighting_of_ref": "indicator--10378c5b-9ffe-41a8-8797-c7cfac65e0a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a5e52a-7fcd-4876-8449-32c7d1cd0ce4", "sighting_of_ref": "indicator--d116ddee-8eb6-40d2-bedb-000c5acf434d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9556f476-6f37-47b0-8d30-c4872adddb36", "sighting_of_ref": "indicator--d116ddee-8eb6-40d2-bedb-000c5acf434d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd705ee-4144-4399-b946-18a8969e7b88", "sighting_of_ref": "indicator--d116ddee-8eb6-40d2-bedb-000c5acf434d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda77aae-a587-47d2-a25a-d82aeeff3bab", "sighting_of_ref": "indicator--cad89aa8-725f-4941-8c9f-dec105886527", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b72986-6b02-4782-af6b-f729ef7077a3", "sighting_of_ref": "indicator--cad89aa8-725f-4941-8c9f-dec105886527", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd4db19-96d8-4ee3-a58d-870f4da29b21", "sighting_of_ref": "indicator--cf2306f2-ebeb-409b-8adf-4cbbb759a991", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45960f0-4684-482e-8cc7-7391a00670e3", "sighting_of_ref": "indicator--cf2306f2-ebeb-409b-8adf-4cbbb759a991", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd548bd-c708-4d45-8088-d4cf903557af", "sighting_of_ref": "indicator--cf2306f2-ebeb-409b-8adf-4cbbb759a991", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af637190-9c72-4fb6-a7d6-4de87b8d6007", "sighting_of_ref": "indicator--4c0cfa1c-f540-419b-b1dc-f62ba7e5f11f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c945d4f-1b02-472b-8363-85ef0bc1a375", "sighting_of_ref": "indicator--4c0cfa1c-f540-419b-b1dc-f62ba7e5f11f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50303a99-081e-486f-9718-59136ae781d5", "sighting_of_ref": "indicator--4c0cfa1c-f540-419b-b1dc-f62ba7e5f11f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73485db2-884f-4b88-9091-1fbb0234906e", "sighting_of_ref": "indicator--97764621-47d4-4a1a-a6f8-8d785471e2b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5fa650-c58f-406c-85b4-905f39ca6c5a", "sighting_of_ref": "indicator--97764621-47d4-4a1a-a6f8-8d785471e2b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d79f04e-79bd-45fd-bc1f-ce4fefa54401", "sighting_of_ref": "indicator--97764621-47d4-4a1a-a6f8-8d785471e2b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6010c9-77ee-45b9-9ede-a51a0a6869f8", "sighting_of_ref": "indicator--5848881a-e717-4429-a07e-f9e367b42f9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b12413-0723-44c5-8dc6-e3212c860053", "sighting_of_ref": "indicator--5848881a-e717-4429-a07e-f9e367b42f9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57615e1-7565-4e37-b890-4b8372d83720", "sighting_of_ref": "indicator--5848881a-e717-4429-a07e-f9e367b42f9d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d756bcd-84bf-4021-a69f-66b8323fd586", "sighting_of_ref": "indicator--e3f0b763-5426-44eb-b9ab-19ef074f5689", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2a7221-f988-4c1b-b496-bcb91efc9d40", "sighting_of_ref": "indicator--e3f0b763-5426-44eb-b9ab-19ef074f5689", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553ee4c0-d4ce-4db2-97f4-7dc4905c5a24", "sighting_of_ref": "indicator--e3f0b763-5426-44eb-b9ab-19ef074f5689", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3283007f-faf8-4233-8b99-eee2d1ba6c10", "sighting_of_ref": "indicator--ef99fb84-ff7c-4a7c-984f-09968cf03325", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b02006d-83c7-45a1-b449-f920403f2c06", "sighting_of_ref": "indicator--ef99fb84-ff7c-4a7c-984f-09968cf03325", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6005536-122f-425f-9ac8-88613c0c03ca", "sighting_of_ref": "indicator--ef99fb84-ff7c-4a7c-984f-09968cf03325", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc78812c-ecd8-458f-8482-ce10f2786276", "sighting_of_ref": "indicator--ee5d95f7-7f08-432f-84ef-f65d160adb2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eae187-bebe-431b-a965-b2cbb4a04502", "sighting_of_ref": "indicator--ee5d95f7-7f08-432f-84ef-f65d160adb2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfd56f7-76eb-488f-a7fd-55061fcca4ff", "sighting_of_ref": "indicator--47a34b6e-644a-4837-8936-fee0f6e5aa10", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdfabb8-99be-4a8e-9621-614454a51420", "sighting_of_ref": "indicator--63f53c8a-b8cf-49b7-a4f9-9afc29e1e577", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512db073-cb27-43e7-b9b2-e615b953eb8b", "sighting_of_ref": "indicator--63f53c8a-b8cf-49b7-a4f9-9afc29e1e577", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5626d9e-229d-4ebf-9f3a-8ae96663e460", "sighting_of_ref": "indicator--95e83b5a-7df4-4806-89b1-591184c463cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c87b20-9205-4e61-9401-b48b9d05eee4", "sighting_of_ref": "indicator--95e83b5a-7df4-4806-89b1-591184c463cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c3418c-0b8a-41cb-b833-28b0288d74af", "sighting_of_ref": "indicator--95e83b5a-7df4-4806-89b1-591184c463cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaee402-f83b-43dc-9050-44af63f88479", "sighting_of_ref": "indicator--2a435009-0fd9-42f3-be27-0dd08648ad10", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9ad1a4-e568-4850-aa4a-7096afc5c4d8", "sighting_of_ref": "indicator--2a435009-0fd9-42f3-be27-0dd08648ad10", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa23e7f0-dd88-43e3-8cdc-39157bd60080", "sighting_of_ref": "indicator--2a435009-0fd9-42f3-be27-0dd08648ad10", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f342ef1-8bf1-4db2-8146-9448f350d179", "sighting_of_ref": "indicator--bafc2737-46b5-4118-bf53-fffbc5063aa7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a9688-8ed7-44ea-b0ed-e362d04ac4c9", "sighting_of_ref": "indicator--32b6a47b-2b6a-4c3a-9be2-ae49179aad2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48f6cda-ffa6-4607-b272-5ced4c19f9cd", "sighting_of_ref": "indicator--32b6a47b-2b6a-4c3a-9be2-ae49179aad2d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ee507e-d09d-417f-a0f2-2df7bc374f51", "sighting_of_ref": "indicator--90367f6b-47b1-4dbc-b9b5-6c382cdd1460", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82e8824-2f99-4739-ad45-bd3052f59755", "sighting_of_ref": "indicator--90367f6b-47b1-4dbc-b9b5-6c382cdd1460", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4776639-cb2b-4e30-a659-13b709bbd114", "sighting_of_ref": "indicator--90367f6b-47b1-4dbc-b9b5-6c382cdd1460", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eeff9b1-0e6c-4185-a5c9-6f90ccaaea2f", "sighting_of_ref": "indicator--bea24ada-f8c0-427e-a040-a773c2133b9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bb0bb6-5121-418a-a9c0-f51ec9aa7265", "sighting_of_ref": "indicator--bea24ada-f8c0-427e-a040-a773c2133b9a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ce1b42-bdab-4713-9af7-f60fb12d6c6b", "sighting_of_ref": "indicator--bea24ada-f8c0-427e-a040-a773c2133b9a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4481cb-13be-44fe-a2a7-9c02135b6255", "sighting_of_ref": "indicator--8ffd4d01-f4fd-4197-a38c-6e1bc2e2355e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfc2be8-9c1a-40c3-b42a-15296f1ad6d4", "sighting_of_ref": "indicator--8ffd4d01-f4fd-4197-a38c-6e1bc2e2355e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02be9c2-9286-4f9c-9256-d345a62680ba", "sighting_of_ref": "indicator--2ae45886-5944-4a57-bdc5-fb33e3e1c9bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a6297b-bc61-47a1-acda-cbff82554206", "sighting_of_ref": "indicator--b7673b5a-2844-47bd-a178-640a0da28838", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6737670-7d19-4490-adc3-d7852d2c95f6", "sighting_of_ref": "indicator--b7673b5a-2844-47bd-a178-640a0da28838", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf6fae0-49c7-4330-94c1-b7cd40e67fde", "sighting_of_ref": "indicator--8f50219c-a9a6-43ba-8d6b-c765fbe7a6e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e5b40e-96d0-446e-a958-f3f488b7b8b2", "sighting_of_ref": "indicator--c59cf072-59a3-4e22-9edb-ee387c517746", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a048f1b8-6e9d-427e-8d47-6f7e82a96730", "sighting_of_ref": "indicator--c59cf072-59a3-4e22-9edb-ee387c517746", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff16e71-9dcf-48fc-bfe7-b42f9a3149da", "sighting_of_ref": "indicator--c59cf072-59a3-4e22-9edb-ee387c517746", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69191fac-2211-4ff8-a0be-e98c7b1eb36b", "sighting_of_ref": "indicator--0d6a48e2-4c07-4ad2-aaea-dbb49c4a2313", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51503567-a784-47aa-821a-697b35b68778", "sighting_of_ref": "indicator--0d6a48e2-4c07-4ad2-aaea-dbb49c4a2313", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7cc9bc-210e-4466-82d5-0abb06547883", "sighting_of_ref": "indicator--66d8510b-b653-4580-b4f2-a8d047652c56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636034fa-8557-4fb6-8ab5-237c1d8a9668", "sighting_of_ref": "indicator--971ae6de-1d36-49f5-9e27-a12876a2078a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb083f76-d79f-4308-89fe-8e001a6207be", "sighting_of_ref": "indicator--971ae6de-1d36-49f5-9e27-a12876a2078a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157f788a-0b60-4456-93b9-feb3a2bdd50d", "sighting_of_ref": "indicator--971ae6de-1d36-49f5-9e27-a12876a2078a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee1c4d4-192b-4852-b0e6-f4527c40a7a1", "sighting_of_ref": "indicator--b9285d37-d894-4f73-a0c4-d8b3b188ad67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad6ef9d-568b-474f-951f-aeb47dffd85b", "sighting_of_ref": "indicator--b9285d37-d894-4f73-a0c4-d8b3b188ad67", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df5ed3c-3ffc-4b8f-842e-5cb0749cd20b", "sighting_of_ref": "indicator--59952ac8-8a1a-40e2-b275-57af080b3f5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767f7049-bcce-4189-8722-ca6b0f0ab7cf", "sighting_of_ref": "indicator--59952ac8-8a1a-40e2-b275-57af080b3f5d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a02a0c-d737-4e8d-bc10-be427f78bd08", "sighting_of_ref": "indicator--59952ac8-8a1a-40e2-b275-57af080b3f5d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a81b7f5-a069-4fcd-9d1d-b423cd386c50", "sighting_of_ref": "indicator--a998ec68-385f-4164-b12f-eb4be673e7d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64189260-fab7-4609-8af0-f01fbfd5a00a", "sighting_of_ref": "indicator--a998ec68-385f-4164-b12f-eb4be673e7d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491c8a3b-4710-483b-bb35-1856e80a3f03", "sighting_of_ref": "indicator--fe9c1c7f-c942-4eee-a5f5-956b0b44411f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5f7345-9c2a-4433-bfaf-4bfc408702d8", "sighting_of_ref": "indicator--fe9c1c7f-c942-4eee-a5f5-956b0b44411f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d4f5d1-5ced-4ec0-a7d1-11149ebb8d66", "sighting_of_ref": "indicator--fe9c1c7f-c942-4eee-a5f5-956b0b44411f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4867ffa2-4c77-4b44-9b52-86b504e2193a", "sighting_of_ref": "indicator--982b3639-07ff-4a7a-8885-d1d9621b5ebe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe6e38b-8119-4276-9f4d-1ac9cc6b040d", "sighting_of_ref": "indicator--982b3639-07ff-4a7a-8885-d1d9621b5ebe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27753e91-bfce-47cb-8151-70c16b47921a", "sighting_of_ref": "indicator--b9e737ec-110d-44cb-a0c1-9310ced0f89f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2d34c6-af3d-4aa1-a3ff-947ecc517d62", "sighting_of_ref": "indicator--b9e737ec-110d-44cb-a0c1-9310ced0f89f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a2c84d-7b33-4c40-8493-31083d229e1e", "sighting_of_ref": "indicator--b9e737ec-110d-44cb-a0c1-9310ced0f89f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c6ecc3-54dc-4a6b-9bd0-489978eaac96", "sighting_of_ref": "indicator--f039f4c8-673a-4464-8932-609a5f259c94", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56f6cdd-74a4-4faa-aed3-e239a727633f", "sighting_of_ref": "indicator--f039f4c8-673a-4464-8932-609a5f259c94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51faf296-8bf0-4843-bf84-687ab124be0f", "sighting_of_ref": "indicator--f039f4c8-673a-4464-8932-609a5f259c94", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42530e02-15ec-4dd8-89dc-37d60cb15fa0", "sighting_of_ref": "indicator--b8569844-f62b-465a-96a2-4184ec723f3d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deab6856-5626-4479-8558-b209aad7537f", "sighting_of_ref": "indicator--b8569844-f62b-465a-96a2-4184ec723f3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e275d7-45ac-4071-80a6-11ac0f4da7ec", "sighting_of_ref": "indicator--b8569844-f62b-465a-96a2-4184ec723f3d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae59b40-078e-4de9-9d15-127709348082", "sighting_of_ref": "indicator--a6b9ab46-d5e8-4473-a090-2a5f0f57cc0d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc290de0-33f0-4d8f-92f5-66d09a9b4399", "sighting_of_ref": "indicator--a6b9ab46-d5e8-4473-a090-2a5f0f57cc0d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6ff9c5-237a-4b89-9527-f072d60a40b8", "sighting_of_ref": "indicator--a6b9ab46-d5e8-4473-a090-2a5f0f57cc0d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7416c5b5-431e-4436-9eb2-ec93af5a0559", "sighting_of_ref": "indicator--674c3a80-820d-4d0f-9608-4caba15b6fed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943fbc5e-3481-4b70-824c-62171b3f21ee", "sighting_of_ref": "indicator--674c3a80-820d-4d0f-9608-4caba15b6fed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb467882-5a3c-4afa-9a8f-20fdd7e0dc2d", "sighting_of_ref": "indicator--5ef3fe8d-2b19-4b9f-8766-6f3f41338539", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64c0570-b3dd-4aa8-ad7c-50e4022f4a51", "sighting_of_ref": "indicator--5ef3fe8d-2b19-4b9f-8766-6f3f41338539", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92f27df-0a90-4a79-9b66-64c85a5f5a7e", "sighting_of_ref": "indicator--5ef3fe8d-2b19-4b9f-8766-6f3f41338539", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6072e0-1e44-4bc3-a50f-01ddff26af81", "sighting_of_ref": "indicator--df16aa30-d13f-409d-886a-08c2cf45a26a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9b62df-d963-4785-a74c-d407804e8755", "sighting_of_ref": "indicator--df16aa30-d13f-409d-886a-08c2cf45a26a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a9a9da-9f09-4f2b-bf81-f1ad54792a69", "sighting_of_ref": "indicator--df16aa30-d13f-409d-886a-08c2cf45a26a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176fe6c8-bdab-4932-a4da-ca96b72817d2", "sighting_of_ref": "indicator--bb081a63-7f9a-4e2d-81c7-8182d2c5059e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c2dfe5-f42f-4e2e-a70f-9a60e5433b38", "sighting_of_ref": "indicator--c592cd5d-a2b5-4c37-922a-1438cd5f0f07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dec0626-af09-4bd2-a9c1-32f4390de9fb", "sighting_of_ref": "indicator--c0d393ab-4ba8-4244-a521-82c67f2e7ad7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7730e4b-b0b7-4b99-b3d7-4857823e2f32", "sighting_of_ref": "indicator--a096181e-00d6-4572-8591-a1a50b263463", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b5446c-bd4d-422d-9b9c-ae5f86b77c9f", "sighting_of_ref": "indicator--a096181e-00d6-4572-8591-a1a50b263463", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eee684d-fa2c-4566-8c2d-5bac824b63d4", "sighting_of_ref": "indicator--428eba6a-eae0-477f-bc60-3cef983125b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a05fe7-b3ef-4b75-a517-a9cbc6ec9c0f", "sighting_of_ref": "indicator--f656145b-52d8-4d7c-baf0-97559e035066", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77baa07-d3db-4824-ad34-1d575ce91857", "sighting_of_ref": "indicator--910a1160-38ff-4209-ab57-fa63a49cfacc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f88fae-14ca-4841-ac0b-8063478ac2ac", "sighting_of_ref": "indicator--644c3e8b-fdbe-4859-bce9-47b8ef3d8294", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14734992-8437-4c8e-87cc-677f22ba45e3", "sighting_of_ref": "indicator--ac716b2f-bf96-45d3-b97e-82eee8613ac5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17160c64-46ae-4ba4-bdfe-a89d8bc1d431", "sighting_of_ref": "indicator--822880a6-32b6-4578-8d18-50cca9af366a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ae7d05-9c67-46b0-9018-80bd28f4f681", "sighting_of_ref": "indicator--84784173-b165-4ce5-a410-61fd8deb8db8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29586c4-c513-4d46-8190-4b310be0ea65", "sighting_of_ref": "indicator--8fd6fde6-cdba-4861-a43c-b1bc228fdf93", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d5c526-41d9-468c-b24d-48f65d455380", "sighting_of_ref": "indicator--d9b6fe5b-e38c-44a8-b077-db74bcd7297d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f13ffd0-05d6-4529-a3c0-23049daba452", "sighting_of_ref": "indicator--6794550d-a134-4ff0-905f-d392852cf981", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbf0490-fb2b-4ca9-9261-b9f86c87386a", "sighting_of_ref": "indicator--3a3bac1c-bbcf-49ac-b7c2-5ee515c7dbcb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9f571c-9bc7-4735-95af-277421e73bdc", "sighting_of_ref": "indicator--14d2771c-026d-44b2-81bf-d02db36a6f54", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3b6562-2729-4783-b181-94a0611f5e60", "sighting_of_ref": "indicator--18d8080b-86df-4d6c-971e-44e5cdb158bf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91995a67-6d87-4471-8133-70fe50aa8f1b", "sighting_of_ref": "indicator--373efaee-98dc-496b-8f5b-fba997284063", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc2eb53-b25b-45e2-a964-5dff1e343bbc", "sighting_of_ref": "indicator--373efaee-98dc-496b-8f5b-fba997284063", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf102684-b2b3-43f5-bc4d-dcee72a8878c", "sighting_of_ref": "indicator--373efaee-98dc-496b-8f5b-fba997284063", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e143d92d-b86c-4c52-9bc2-9ac505c2a3cd", "sighting_of_ref": "indicator--5904ee9a-c39c-4454-b87d-4c88d712981f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a898ff-b07e-40c0-b5b7-bf0ae0c04c9d", "sighting_of_ref": "indicator--060560d7-5f43-42de-a9a5-0d8ec097a0da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fc2c2c-1c90-4adf-830b-a6a0e375095d", "sighting_of_ref": "indicator--060560d7-5f43-42de-a9a5-0d8ec097a0da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b0b46e-b953-4800-8004-905b32520276", "sighting_of_ref": "indicator--1f83fe97-b99d-435c-bdcb-91400436ce23", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4bd7e7-497f-4e7c-a723-2d4bc0e82c0c", "sighting_of_ref": "indicator--9aa30e39-72f7-4be6-9b89-1ddd3807a6e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eeab0e1-9908-4063-8aef-f7dec8d3235c", "sighting_of_ref": "indicator--9aa30e39-72f7-4be6-9b89-1ddd3807a6e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1fd20a-4104-4d4a-8623-e8f8006c3432", "sighting_of_ref": "indicator--932a02f7-348b-4ded-9e77-442c4feb6974", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea277652-7d93-422f-9525-475e1fd1c1cf", "sighting_of_ref": "indicator--932a02f7-348b-4ded-9e77-442c4feb6974", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b5608c-ba53-4a22-909a-dfad5f3d7db8", "sighting_of_ref": "indicator--7188e15b-8441-46b7-8ab0-736329522c6f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab135f3-c032-42b5-8894-fe4f9f4026b0", "sighting_of_ref": "indicator--7188e15b-8441-46b7-8ab0-736329522c6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af423f5-4b60-4f97-87d6-bbdd0416fbf2", "sighting_of_ref": "indicator--7188e15b-8441-46b7-8ab0-736329522c6f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c956d967-0c22-436b-b0bd-418df1de361f", "sighting_of_ref": "indicator--a9fbb546-b4f0-4592-bf9d-9f665f67f2f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b8984c-6e0f-4b94-883b-e161dda84727", "sighting_of_ref": "indicator--a9fbb546-b4f0-4592-bf9d-9f665f67f2f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927ccaee-73e5-4da0-a691-4423d7c480e0", "sighting_of_ref": "indicator--a9fbb546-b4f0-4592-bf9d-9f665f67f2f8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b312205-1440-477e-bc7d-33b9ec51861b", "sighting_of_ref": "indicator--8b4e8724-7af9-4641-a65f-1796f3a01458", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c4352e-08cd-4754-bb37-85937afcd909", "sighting_of_ref": "indicator--2c9d8da2-9007-4eba-950a-208611498874", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173a0c7a-ca16-41de-bfae-25f9b80e7d6d", "sighting_of_ref": "indicator--3b2861f7-b514-4658-9345-0a2d16a299d4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24a3e50-368a-41b7-85fe-c5341bebff0b", "sighting_of_ref": "indicator--ff326b60-c0e0-4045-b82a-12214c23a7db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a486e1a1-a133-4fe7-8137-363ab93ee64a", "sighting_of_ref": "indicator--ff326b60-c0e0-4045-b82a-12214c23a7db", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957432bf-5041-4265-b8f0-88406560da96", "sighting_of_ref": "indicator--ff326b60-c0e0-4045-b82a-12214c23a7db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899889ec-dba3-474e-8655-6791487555b7", "sighting_of_ref": "indicator--8ba146ca-8847-43b9-a73d-bb326b3d2c8b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5323f424-ddb7-4491-82e0-dc1ce506b403", "sighting_of_ref": "indicator--8ba146ca-8847-43b9-a73d-bb326b3d2c8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b24465b-ed9f-48a8-9001-874512f8aee0", "sighting_of_ref": "indicator--8ba146ca-8847-43b9-a73d-bb326b3d2c8b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8fd8c5-5968-4935-a362-42265ce14e20", "sighting_of_ref": "indicator--1df40b8f-cf86-48bc-b94c-7bff91b9de3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa287eba-205e-4b3f-9526-1862838202ad", "sighting_of_ref": "indicator--13ba58e8-8ca0-4696-a088-b76e37eab54a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76764f4a-380c-4a28-bc7e-2bcd324e32d4", "sighting_of_ref": "indicator--13ba58e8-8ca0-4696-a088-b76e37eab54a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56a944c-689c-40b2-93b4-c4a14e519946", "sighting_of_ref": "indicator--13ba58e8-8ca0-4696-a088-b76e37eab54a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daee413-306b-4428-a910-a0064bb9c272", "sighting_of_ref": "indicator--b35e790c-504e-4bb6-95a6-64971779264e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a86ea5c-058d-4f9c-9904-0465b8b068c8", "sighting_of_ref": "indicator--b35e790c-504e-4bb6-95a6-64971779264e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c9e250-6960-4dd0-8730-d2c626c7ef2a", "sighting_of_ref": "indicator--b35e790c-504e-4bb6-95a6-64971779264e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e306f94d-8a02-491e-8bad-fd4c1b085100", "sighting_of_ref": "indicator--a42929ac-ae76-4fb0-91e2-c7283886fdec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd849064-c0f9-49d0-be20-4a3422787c05", "sighting_of_ref": "indicator--5b1bb668-a182-4012-8301-6e9d89bd2dee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5738263-ab00-4655-94ce-9afc93c047ee", "sighting_of_ref": "indicator--49b607c7-8182-420d-a788-3b62557ef645", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309e6ba0-fb98-49ad-b064-75a6e168d50d", "sighting_of_ref": "indicator--35ee668b-724a-4615-b0e9-e3b0b4cd9efb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0df4c1d-ccf8-478a-982b-d4a779fb602f", "sighting_of_ref": "indicator--9b40210e-381d-45d0-92ae-937f500c56fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ebde36-1f56-4c90-ad09-767b73f9719f", "sighting_of_ref": "indicator--9b40210e-381d-45d0-92ae-937f500c56fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00806f58-8404-4f44-a18c-5f9140efde94", "sighting_of_ref": "indicator--9b40210e-381d-45d0-92ae-937f500c56fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03bf74e-0a8d-4d06-9c9b-e812f36d8a5f", "sighting_of_ref": "indicator--140af5c5-d128-4536-83de-fbd9754413f5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213fa7ef-3e09-454a-9e29-5cb34b4ba560", "sighting_of_ref": "indicator--765a8179-5a48-407c-ab25-6888c29c407c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d6db1c-5fbd-4edf-a202-cc57fbb2c8f3", "sighting_of_ref": "indicator--765a8179-5a48-407c-ab25-6888c29c407c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01bbe41-5cf1-4cba-93c7-e566edd1e631", "sighting_of_ref": "indicator--765a8179-5a48-407c-ab25-6888c29c407c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f739600-85bb-4db6-8f8c-1bc50e0eb675", "sighting_of_ref": "indicator--0877f764-203d-4975-9d75-bc83ee9c9977", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6096f7-68ec-4fcc-821e-b5e790d0154c", "sighting_of_ref": "indicator--0877f764-203d-4975-9d75-bc83ee9c9977", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04650663-91b5-4be0-933a-be878087b8b1", "sighting_of_ref": "indicator--01fc186c-4e6d-4441-8ebf-35ffdf55025b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664cffd2-9ce5-4989-a964-a16c261eaffc", "sighting_of_ref": "indicator--558a2921-689a-4e98-83a5-f31b0bb6ff3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd719cd-013c-400c-92b9-523748328498", "sighting_of_ref": "indicator--558a2921-689a-4e98-83a5-f31b0bb6ff3a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fc7b46-235d-4d5c-9035-51c7d133986a", "sighting_of_ref": "indicator--932b4c91-73a0-40d3-bc31-0d4e8618b981", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73242c87-d979-43a3-bd73-12410480c7d3", "sighting_of_ref": "indicator--3df4d145-de20-47f5-9f43-2a02ad8ea470", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d94629-1666-4870-8fd1-2306ba2d0a37", "sighting_of_ref": "indicator--3df4d145-de20-47f5-9f43-2a02ad8ea470", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dd2eed-9927-48a0-934e-27958a4df2e3", "sighting_of_ref": "indicator--670d07e3-ca29-43c6-abab-e5963bac337b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3a330f-4412-4c39-8c41-dd59407ad64b", "sighting_of_ref": "indicator--a33b5059-9ef7-45f9-be13-3c90d01332aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a415c567-6f13-4a1d-815e-c3b981be0eb9", "sighting_of_ref": "indicator--b0fe6129-4224-4039-b7e4-729f03f7ff98", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e898ca-95ab-4915-bd60-a2e4f7e8debd", "sighting_of_ref": "indicator--b0fe6129-4224-4039-b7e4-729f03f7ff98", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc1fff0-0039-4cf4-bb2a-458ec8a2cf93", "sighting_of_ref": "indicator--b0fe6129-4224-4039-b7e4-729f03f7ff98", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4496a3d5-d054-4d40-b5ac-d73d5a3cbfa6", "sighting_of_ref": "indicator--6c296876-abf4-4648-8a1c-d37998758658", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac44b72-42a4-4301-a808-fe05686bd6e2", "sighting_of_ref": "indicator--6c296876-abf4-4648-8a1c-d37998758658", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e581297-3c10-4440-a61d-7f07bae868ad", "sighting_of_ref": "indicator--6c296876-abf4-4648-8a1c-d37998758658", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ddf855-7be2-4cfc-b873-7deca4f9656b", "sighting_of_ref": "indicator--eb4a8313-660a-4d7b-a57f-7a91ad728841", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516ccfc4-7135-44c8-8751-cb44cb2abac5", "sighting_of_ref": "indicator--eb4a8313-660a-4d7b-a57f-7a91ad728841", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437cf722-f359-4d14-87b1-67b49264f143", "sighting_of_ref": "indicator--95271b84-45db-451a-b7a5-d8b387e85b0b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315f549f-14bf-479a-93ce-e973b25591f5", "sighting_of_ref": "indicator--057fd4e4-1a01-43f9-b03c-a0bb441f268c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb23a4ad-021e-4b86-a5d5-880bb5b0298d", "sighting_of_ref": "indicator--057fd4e4-1a01-43f9-b03c-a0bb441f268c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9183b231-0316-4399-85d9-0d01b9caecac", "sighting_of_ref": "indicator--93ec6789-1dbf-4e45-916f-9e3ac65a6908", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975c6c3f-6a9c-404d-9ac8-52fdd3a0b158", "sighting_of_ref": "indicator--2836f258-150a-453f-978b-08d3d89dfc43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f402921-0e48-4bb4-aacf-23c5e0e92999", "sighting_of_ref": "indicator--181b0b3b-682e-47ea-9911-83f38232bcc8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeaa32e9-9540-4d07-abc1-9344e21c73b4", "sighting_of_ref": "indicator--0947d070-0770-4743-ac47-5047a9d966cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08612967-3213-4220-81b4-5111b0f53966", "sighting_of_ref": "indicator--6d383fc9-a0cf-41ad-8a82-6d4d0035c6d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c03f799-3c77-4b7a-83be-bb7df5751239", "sighting_of_ref": "indicator--1394ac16-2c4c-4425-ac54-50d81cc4cc9e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510ef448-b519-4d98-add8-8dbc316d9945", "sighting_of_ref": "indicator--9fb477f0-f733-46f2-9822-722baf1bb8ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cfddfa-db4d-4c97-b063-361c659a501c", "sighting_of_ref": "indicator--f6846483-00da-4f5a-a292-e7f983c24615", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956157f2-ba91-4cb3-8865-8cc92fe7fb89", "sighting_of_ref": "indicator--b40ef2a3-6215-49fd-9130-1838954e036c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f780b137-02ae-489e-ab93-efb973e81c58", "sighting_of_ref": "indicator--38599b1c-d401-4225-bbba-47c6abbf41fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d03df2-9b88-4f14-ae05-2a848058e622", "sighting_of_ref": "indicator--38599b1c-d401-4225-bbba-47c6abbf41fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563d4286-8897-481c-9ec2-f5b40fdf9d36", "sighting_of_ref": "indicator--414eaf60-336a-48d7-8373-9f806ba2626d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008c23c0-3186-48b3-9c45-57f48bab8ebf", "sighting_of_ref": "indicator--414eaf60-336a-48d7-8373-9f806ba2626d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227ed168-719e-4c66-9a11-182423f361b7", "sighting_of_ref": "indicator--c5f1ad4f-8536-4fc0-880a-04f8015b46ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b556df-00ff-4437-86b1-f2fe03fb9aa7", "sighting_of_ref": "indicator--c5f1ad4f-8536-4fc0-880a-04f8015b46ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6ed41d-58fd-46d0-ac95-e5adf2354c39", "sighting_of_ref": "indicator--dde96d16-16aa-47fc-bb5b-16ac2344e61a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22a170a-623b-4c5b-9424-16eed563cb64", "sighting_of_ref": "indicator--cb1573c2-0eec-433f-916f-359a2add5191", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd5c5a2-6fca-453b-a6dc-8c254436c083", "sighting_of_ref": "indicator--3ae6f264-52ae-47e2-9ae4-9262de700be0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf5f002-0563-4de3-ac3e-5e8620a2bb10", "sighting_of_ref": "indicator--e3a5cc47-c060-4d4a-8072-befe3b564b91", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39761c48-f5f9-4712-99e8-aef4708a416b", "sighting_of_ref": "indicator--302c8978-3fd9-4b19-8e93-cd90f866a729", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ee0651-7343-4324-bb69-99b5ac1e4b26", "sighting_of_ref": "indicator--0579bee7-a4c8-40f2-bc50-85528665ace3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c116d9-63bc-48f5-a35d-cf0142186d72", "sighting_of_ref": "indicator--14bd003a-d803-447a-b016-cab18d8cf143", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46770f2a-f4e5-4ff5-8d11-afbcf6d9bc8b", "sighting_of_ref": "indicator--14bd003a-d803-447a-b016-cab18d8cf143", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7064f1bb-3a81-424f-b677-938e30fe4850", "sighting_of_ref": "indicator--14bd003a-d803-447a-b016-cab18d8cf143", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2a1606-7e04-400b-897a-6a2f12c0c433", "sighting_of_ref": "indicator--88898643-c039-40d5-bb24-19e63dbaaf68", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb2c221-01b9-4406-8eef-0aec512b8df2", "sighting_of_ref": "indicator--88898643-c039-40d5-bb24-19e63dbaaf68", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73f1d29-a082-4bac-b4ec-e34a1ade3020", "sighting_of_ref": "indicator--88898643-c039-40d5-bb24-19e63dbaaf68", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341aed91-d1ea-4140-b0ef-cd72d2cf24fd", "sighting_of_ref": "indicator--4e5aaeec-d3d3-464e-967d-d0fcf5e4cca2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f34c891-6dcb-4a3c-86f4-1c45716a4e0b", "sighting_of_ref": "indicator--c1caa7e7-0c5f-48db-b491-e172990c2f11", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae0d6c2-a4a2-4b97-a575-4ec7426d4bb1", "sighting_of_ref": "indicator--3ba453ba-1e13-4d7d-b402-dcf149fc65e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b851b10f-1325-4a4f-bd41-e6614f58e8b7", "sighting_of_ref": "indicator--c7b0c4c7-c957-4894-acf0-a327b1d786e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed90d7f2-97a9-48fa-a137-a9833c0706fc", "sighting_of_ref": "indicator--a58e4010-3a81-45ca-97b8-130804420687", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59498000-e5d4-4847-b691-ed17fd526c07", "sighting_of_ref": "indicator--a7a3e8d0-b2be-4bd6-8c29-e637e492d927", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2626fb-3408-4d35-8623-b9ce6cacee0a", "sighting_of_ref": "indicator--af2209b7-1e9b-446d-b635-62328e76210d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9852477-e964-4bf7-998c-2707837bc330", "sighting_of_ref": "indicator--1e7e0c0a-25d4-484b-a455-a52b637d2596", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0615a7e2-c119-4d6c-a2f5-1d0cf93cf044", "sighting_of_ref": "indicator--1e7e0c0a-25d4-484b-a455-a52b637d2596", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38b2df4-4ae1-44cc-8a6b-c8964eb94424", "sighting_of_ref": "indicator--1e7e0c0a-25d4-484b-a455-a52b637d2596", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7ea49b-1589-4fbe-8cbd-d0b04768b604", "sighting_of_ref": "indicator--c392fff6-fc94-4fa4-bbed-020ea973b21a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ca7502-8afa-4ab9-831a-72784a5fd0ba", "sighting_of_ref": "indicator--b3ff5856-7ca2-4dea-a9c4-77c7f7da0d62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccbc8cb-f9ae-4da4-9c82-c7795ae6ce59", "sighting_of_ref": "indicator--fe9be529-09a9-44dd-9b18-d7180e3ba511", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8cb9ff-aac1-4562-8c1f-8b89da4da079", "sighting_of_ref": "indicator--5fb61d4e-6597-4336-949d-eb694fa2d8a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae16398-2c26-47b8-813e-1cd3c70b4b93", "sighting_of_ref": "indicator--6090c7b1-8dda-440f-a6ab-cda076ecb1f5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d1c2a2-7981-4552-8a58-c7cba4263bb4", "sighting_of_ref": "indicator--37b8fcb5-1aa3-49d9-bf6d-35965bfeae6f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6332ad11-407f-40ad-83a3-356a616243ff", "sighting_of_ref": "indicator--ffe560e3-1c3b-41af-a377-cba1551a33a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca33750-f6d5-49cc-b1dd-5b88d4a69995", "sighting_of_ref": "indicator--3b98325e-5fd6-4fd9-be90-7141c859fdba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdb8a2d-b5df-4e3c-b6ef-3eb043537673", "sighting_of_ref": "indicator--f83b0853-6929-44e8-97c3-a86b51573af7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4937e06c-958f-4843-adb7-b7a15b0e7111", "sighting_of_ref": "indicator--c562ffd7-80e0-4f49-a88e-e2bda3478354", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957f9a7d-865f-4282-859f-ea8bdd6605a0", "sighting_of_ref": "indicator--225bcd05-7a2d-4f5b-991b-7c7aa59e7dec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce37fd4-449a-4d26-91e5-9d478c347222", "sighting_of_ref": "indicator--b89d8496-a17f-4123-8073-ed3cfdcf4a36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b08dbc-b91a-418d-a9b4-3bd7201d4081", "sighting_of_ref": "indicator--b89d8496-a17f-4123-8073-ed3cfdcf4a36", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920dfbbe-4bce-4c44-afa5-d295847510e6", "sighting_of_ref": "indicator--f5776739-abeb-42f7-a056-3ff91071bc92", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5319d1-0ff0-45c2-acbc-967c95d7cb44", "sighting_of_ref": "indicator--99cd906d-fd6f-4994-a58e-d36ac93228fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206309e5-6269-4495-b998-cf34e1947f64", "sighting_of_ref": "indicator--bb0530a6-0faa-4e14-949a-12c59e0b08d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ee5df5-8a26-428a-a67c-61e644c978dd", "sighting_of_ref": "indicator--bb0530a6-0faa-4e14-949a-12c59e0b08d5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e381cd3-a004-4ff0-b09c-31be533f900c", "sighting_of_ref": "indicator--bb0530a6-0faa-4e14-949a-12c59e0b08d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cef57a-380c-40b9-8fdc-18a689bf22fe", "sighting_of_ref": "indicator--feb9750e-0cc8-44c0-b6ca-0822396cadfb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643878e4-4a30-4ed7-b57e-c32728ebfc28", "sighting_of_ref": "indicator--ca3716d5-e9df-429c-af2a-a2ac4d240061", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea85adb8-7871-4c8a-85ab-6b23229d10e7", "sighting_of_ref": "indicator--0c14448b-cc69-4f9b-b37f-fc685b6e2d90", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33c5ced-f5e7-4795-b966-036ec495d244", "sighting_of_ref": "indicator--e1b20899-74ed-450d-b8df-933c2372c595", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36746802-344f-44fe-af68-431ad09038db", "sighting_of_ref": "indicator--db3f4ad0-01ab-4910-9c61-437bdda845cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e164528a-4cfb-4e4d-9aa1-f812e31945db", "sighting_of_ref": "indicator--736fbf74-47fe-481f-a352-72e6ccea42e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fcd9a9-03c8-4a50-b4f9-a054fa7211dd", "sighting_of_ref": "indicator--9db9444e-3b2b-474a-a1d2-78d966cccf66", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b35908e-419a-471c-8ca6-c89bb03dcc4e", "sighting_of_ref": "indicator--9db9444e-3b2b-474a-a1d2-78d966cccf66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0776a0-a95d-4e59-9828-597a91973a4c", "sighting_of_ref": "indicator--9db9444e-3b2b-474a-a1d2-78d966cccf66", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c376b7ee-040e-4ded-8b42-f99a2626e3d8", "sighting_of_ref": "indicator--e1e150a0-9a52-47ae-8d5a-fee004d534c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39eb8d3-5678-41e4-aac8-079363cf16b5", "sighting_of_ref": "indicator--117b3bdb-3053-4bcd-b966-963739cb38be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669c0b11-617b-42ea-8fef-d6a1a011b3b7", "sighting_of_ref": "indicator--92be4370-4971-4ddb-8238-ea545094c2ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64a64ae-e182-464a-8f42-b6b1fd07d403", "sighting_of_ref": "indicator--32f36abd-b9ab-42f2-8f6c-3e98ac50372e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ac9aa0-a171-46c0-8776-3ea6f64c3365", "sighting_of_ref": "indicator--32f36abd-b9ab-42f2-8f6c-3e98ac50372e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a05a48-3795-4e1f-a102-325ec4391e75", "sighting_of_ref": "indicator--1ad4ac4f-ae60-4554-a10f-048d23fa4a52", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2db7fc6-936b-40cf-abd6-d4972a5419b7", "sighting_of_ref": "indicator--eef4fade-6142-4788-bf20-2fa285de2beb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6dc83f-d772-43d4-ae04-3f249ce26f8a", "sighting_of_ref": "indicator--8d4e7d72-2205-4a5f-880f-e7954ce8799f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db51bf93-7780-4e1b-bdba-6fd63a999164", "sighting_of_ref": "indicator--8d4e7d72-2205-4a5f-880f-e7954ce8799f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeed62b4-c30c-4d7c-9533-d2b2e219c6bf", "sighting_of_ref": "indicator--8d4e7d72-2205-4a5f-880f-e7954ce8799f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656d957c-9414-48c5-aed5-2455770e7e4b", "sighting_of_ref": "indicator--974b2dba-2c76-4e3d-a924-5eded8b4b122", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e989a488-c440-40f9-a875-4a439daf9e93", "sighting_of_ref": "indicator--18cb61a5-5ab8-47d1-9654-e46b08dbc5f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde24e1a-bcd0-4548-a1e6-8e9ad1d99ca3", "sighting_of_ref": "indicator--18cb61a5-5ab8-47d1-9654-e46b08dbc5f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46949530-7352-45bb-8f70-6dd3d8d67abb", "sighting_of_ref": "indicator--18cb61a5-5ab8-47d1-9654-e46b08dbc5f8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0300ad8-5c03-478a-98cf-9e3943ede44b", "sighting_of_ref": "indicator--9111dcb2-4520-40d3-9167-e88a3b52ba21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a481a9-e93f-44a8-9cfd-1b4953d7c36f", "sighting_of_ref": "indicator--9111dcb2-4520-40d3-9167-e88a3b52ba21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941e2032-3c6d-4ce7-9327-6c5eab786711", "sighting_of_ref": "indicator--9111dcb2-4520-40d3-9167-e88a3b52ba21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272e48b3-1885-48da-b1e6-f5a85b0dc7ee", "sighting_of_ref": "indicator--0669e895-d804-416b-af61-0f1382e6947d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762cd7c5-fb1e-4708-84fb-cece2cbb2d1b", "sighting_of_ref": "indicator--0669e895-d804-416b-af61-0f1382e6947d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f38916d-afc2-4c87-8666-b7dab7e6135d", "sighting_of_ref": "indicator--58c1d886-c637-4cf2-9e4e-4d8911660e4a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7215e5ed-018d-4ab5-86c6-7c46029ac3bc", "sighting_of_ref": "indicator--bfd91e47-8bab-4bae-8119-738a81043ed9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707b8e57-add3-4df0-92cd-3e327816f5da", "sighting_of_ref": "indicator--619ec359-38ef-4b46-9b81-6ab502c4e2ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5521a180-dcb6-4686-951c-824b601e4ec4", "sighting_of_ref": "indicator--619ec359-38ef-4b46-9b81-6ab502c4e2ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472c743d-160c-4842-8cac-6ab0fbb82d5e", "sighting_of_ref": "indicator--6fa8519f-61e6-4748-a6f4-1dbf480d8db0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dff7a2-d474-4d43-bbdf-1e4f7087de6f", "sighting_of_ref": "indicator--6fa8519f-61e6-4748-a6f4-1dbf480d8db0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c436ff57-606d-47ca-807f-4eb59b4823d3", "sighting_of_ref": "indicator--8cb88882-5aa0-468f-a595-6664d5215ea4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e11fda0-eb51-4ecf-ac8e-6c5ab3fb1e97", "sighting_of_ref": "indicator--f7c779cd-13d2-4556-a64f-c0bafe12a744", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cffa5e-1d1c-46bb-a6b6-834cba102d77", "sighting_of_ref": "indicator--528c5030-6a81-4794-9347-c59cc79eaff0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338fb06a-b752-421b-813f-bb5f13a4c4d6", "sighting_of_ref": "indicator--e106f28c-4eae-402b-a6b8-1b0f3089e43c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc236910-30ba-4cbb-b966-a6a052282232", "sighting_of_ref": "indicator--e106f28c-4eae-402b-a6b8-1b0f3089e43c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb774cdd-a17a-4820-88a0-43849756f1b6", "sighting_of_ref": "indicator--58d2d214-63dd-4702-a690-e6d43d31739c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda198de-26aa-400c-b4f3-9a866fb902f5", "sighting_of_ref": "indicator--58d2d214-63dd-4702-a690-e6d43d31739c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08a85e7-00ba-403d-8d7b-86ae7b7f8087", "sighting_of_ref": "indicator--90ba77bf-6072-495f-9c77-beb4bb9e7aaf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b580cc-8324-4af3-b7ec-cdbab70be736", "sighting_of_ref": "indicator--31c85709-01e5-4299-a03e-d3052221cc41", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db9caae-3291-4192-b61b-2564411ae6f0", "sighting_of_ref": "indicator--8250bbb1-13e0-4d92-bf9e-16ca0e9a17c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91f69f2-1a43-4624-bd45-d6a8a7a65093", "sighting_of_ref": "indicator--a7fe7386-e4e0-4023-94ca-2dc30c5d7d64", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738806cd-fa09-4b43-8039-51960fb6f19c", "sighting_of_ref": "indicator--b012faf2-a121-4bc1-a1ad-41ae4110070d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa082279-913b-408a-81c6-be3698455804", "sighting_of_ref": "indicator--84152cd6-bf8a-4ca9-9785-5f08c867f214", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca47cc10-d18a-42ef-99c0-4bb99468221f", "sighting_of_ref": "indicator--93d0caa5-17d6-447d-b92c-907d72aa9a57", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10d69c2-6936-4990-b316-9d9ee1e12c0b", "sighting_of_ref": "indicator--59f759bb-7929-4044-bcf5-9746d2131aef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecf7eb4-29c8-4a33-9f19-cfa6ded15d26", "sighting_of_ref": "indicator--384eca7e-e06b-4d49-98f7-1e7b4e5b17b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d938e9b6-8bd2-45cc-a7d3-1cd88d95da5a", "sighting_of_ref": "indicator--8da23bac-199a-4dbc-9687-c11fb2f1905b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73c0079-290f-4396-936a-3f8965d19ec3", "sighting_of_ref": "indicator--b24fb2be-60d5-4082-917a-f50373713a85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e765a25-af64-4249-8638-1def9e0e3de2", "sighting_of_ref": "indicator--0f36507c-1bd3-4bb7-ac32-cc5368335fcc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acfd0aa-27e2-4c55-bc7d-6b5446b487b4", "sighting_of_ref": "indicator--391faadd-66ba-485e-88e3-06f5572b04f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb54e9b8-a47d-4cd5-807c-e8fc0d6e5a09", "sighting_of_ref": "indicator--5229af1b-9a06-43fe-91df-4ba7357ea3ed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b3d8f5-6779-4189-9ff9-8c4ff6c753a0", "sighting_of_ref": "indicator--5229af1b-9a06-43fe-91df-4ba7357ea3ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49a6d8a-c207-4ce7-bca2-3dfce64f756c", "sighting_of_ref": "indicator--5229af1b-9a06-43fe-91df-4ba7357ea3ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721181a5-69a3-4154-948a-cd19f2bd50c4", "sighting_of_ref": "indicator--2bbb8674-d6b4-4456-a7e1-7bec6138e615", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1025b0fe-99ce-48d7-a42b-6a6e36413d49", "sighting_of_ref": "indicator--afb8b1b0-0677-4997-a638-46ccaff4634f", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b07182d-4f04-42d4-8982-7a7061059ae6", "sighting_of_ref": "indicator--5a1f7cfb-283f-4a74-9ec2-9feaa9b5baad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f010421f-1c18-4bbf-b381-ebb48c03012e", "sighting_of_ref": "indicator--ccbcfb19-fb55-4240-a045-7349c109f3fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0465a22c-4876-4fec-a25c-4ddb0978e1c5", "sighting_of_ref": "indicator--72cddcc4-9aca-4485-a42b-99f5ba0fc890", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19038a77-b75b-490f-8d60-f7d9b6e431d3", "sighting_of_ref": "indicator--5f879f3c-b3d5-4039-b4e9-c01b7bbae68e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5156542-2ac2-4f74-a30a-4c872decd157", "sighting_of_ref": "indicator--ba09afbe-79fa-4a92-99ed-bab78ac96db3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad20149f-07aa-40b5-888d-1d11efd13c18", "sighting_of_ref": "indicator--b9c911fc-7947-4bac-aca3-446b4a0183d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bf6e10-3d72-47f7-8fb9-2f2aa4b3c2c0", "sighting_of_ref": "indicator--b9c911fc-7947-4bac-aca3-446b4a0183d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59d71f3-2921-40d8-b644-c1113fd60b32", "sighting_of_ref": "indicator--81c57164-ae00-43ed-b171-07da8060369e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccc407e-17cf-463e-9050-7952e3fe4e0c", "sighting_of_ref": "indicator--b09414b6-99e7-4402-b8ed-cde55448862b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fbcdb6-5fde-4ce0-9b41-4a9a1d40d3a9", "sighting_of_ref": "indicator--b09414b6-99e7-4402-b8ed-cde55448862b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d45a9ce-4cbc-4851-8107-15c184159c7f", "sighting_of_ref": "indicator--387e5840-6ccf-4b10-b45c-f4f7ff902748", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19af5887-5076-4023-905d-c42b2ebbb27a", "sighting_of_ref": "indicator--5f2b3249-6a89-43a7-bb55-879ab6eee429", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8772ffd1-1c54-4e84-af3c-01fcca78e556", "sighting_of_ref": "indicator--5f2b3249-6a89-43a7-bb55-879ab6eee429", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57274968-5abd-4be2-8def-083375820892", "sighting_of_ref": "indicator--5f2b3249-6a89-43a7-bb55-879ab6eee429", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d02194-e92f-47b2-8815-5513d52cee01", "sighting_of_ref": "indicator--d79004e5-6f00-4d59-a735-a393efcc6f0f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d5b35d-18ba-4294-8fb6-631735dbdbca", "sighting_of_ref": "indicator--ada0ac61-5ebc-40d5-a267-ff6591db0ab2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1c8e95-1ace-4c29-a32b-8ef8d84b19d2", "sighting_of_ref": "indicator--da302a93-be72-4108-8ac0-1a0be9a0f94d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf1c632-c39a-4c62-8023-1a86c30e0ea3", "sighting_of_ref": "indicator--2829c6de-b6a4-4ea1-9c90-56b4173140ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7316574e-d41b-4e9c-8eb1-0c06b214c2d4", "sighting_of_ref": "indicator--552a4f36-7093-4cf0-be5b-80c9258a7d10", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccba3db5-fa2a-4b91-bf55-a206e5c80301", "sighting_of_ref": "indicator--552a4f36-7093-4cf0-be5b-80c9258a7d10", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d2d1cf-0b75-431f-97be-2bb34b59e69c", "sighting_of_ref": "indicator--552a4f36-7093-4cf0-be5b-80c9258a7d10", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de646c22-4d45-4449-b293-ba96be63b45c", "sighting_of_ref": "indicator--61087874-f63b-49f9-aa9e-d1f47c5f9c2a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f3ebaa-ead7-4d2f-bd49-94d0a3579864", "sighting_of_ref": "indicator--cc52896c-dda3-4182-982d-3de819f3ba58", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c57376e-5bce-4dc1-b6f9-9b12b548d184", "sighting_of_ref": "indicator--cc52896c-dda3-4182-982d-3de819f3ba58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4459d8e1-aa4d-4026-a25d-1ef1d17614a1", "sighting_of_ref": "indicator--33177a42-1553-4968-8d87-0c442c2980d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd46ffd6-6b04-4136-926d-3fd808e7dc29", "sighting_of_ref": "indicator--33177a42-1553-4968-8d87-0c442c2980d9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ab900d-0018-47d5-a963-c800f0202010", "sighting_of_ref": "indicator--33177a42-1553-4968-8d87-0c442c2980d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac12d154-10b8-49f2-a032-6e0fc99abf8d", "sighting_of_ref": "indicator--86d5f2a5-d428-4ec1-a38f-6a0e13d8037e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c94ebf-78db-41d5-9f36-8d8da756be7b", "sighting_of_ref": "indicator--6bd3362c-3f5c-4767-a657-8e461a855c84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761240c5-ebe1-42da-8099-4dd5d711eae3", "sighting_of_ref": "indicator--7a3d8e13-d8a5-4544-ac89-e67bed156d51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560123e0-b4b8-4ea3-92c4-addcbcd33836", "sighting_of_ref": "indicator--1f6bdf73-a2cb-499e-a027-6e51ae989864", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8db5c7-8973-4e29-919d-1c7a09ab6b0c", "sighting_of_ref": "indicator--ab590474-ebb8-40f0-ad83-049a8dc82751", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72178faa-0160-4ec8-8f1f-e5250d5fd209", "sighting_of_ref": "indicator--b2b006ab-fb9f-45b6-acbb-1a650f535387", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49313d92-e63a-4085-bafb-fe00ec843522", "sighting_of_ref": "indicator--c531deb7-5a56-4c31-9183-299979e2b39c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9851c11-6df3-4a33-a95a-c57ff29570c0", "sighting_of_ref": "indicator--844ec925-8187-474a-afe5-c75d69e11043", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295bddb3-7321-4bbb-998e-c0978db2b079", "sighting_of_ref": "indicator--8b7f864a-d75f-48dd-987f-06b4449b676c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9531e5f1-6d4f-4c67-97cd-b775915d2c23", "sighting_of_ref": "indicator--2b17179b-2c18-4407-938f-abc92ef8821b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a9fce9-a457-4545-b88b-ba3c65952c85", "sighting_of_ref": "indicator--c9f90153-a57e-4dd7-9bd4-421535d01555", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4e9bdf-acd9-4e86-97a0-f61be825da8a", "sighting_of_ref": "indicator--95fc08e6-da6f-49f7-b41f-f1cea991886f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70262ed4-4976-4e61-bfe6-ec057f3c965a", "sighting_of_ref": "indicator--53c9a5a8-c419-4edc-b2e7-1cb0318ef6b7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f2b65a-0cb1-4ca8-8c70-01b0d7ca50a7", "sighting_of_ref": "indicator--53c9a5a8-c419-4edc-b2e7-1cb0318ef6b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65d7331-a5b4-4cfc-ae6b-e43ce12257e5", "sighting_of_ref": "indicator--53c9a5a8-c419-4edc-b2e7-1cb0318ef6b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2871f57-59a2-401a-9ace-0e6997b35b94", "sighting_of_ref": "indicator--f7542c96-b2fb-434c-bf16-d667d9628a49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14392596-f884-4638-b6d3-c257e1dbf791", "sighting_of_ref": "indicator--09ae9f97-f498-4455-94af-92a304127769", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c6d5a1-3181-46ea-8d83-2f48c94af3ea", "sighting_of_ref": "indicator--09ae9f97-f498-4455-94af-92a304127769", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946f12d1-dace-4260-b084-30b1cfd7ccf9", "sighting_of_ref": "indicator--d456e50b-cef0-4b27-bd26-ba2c263f0a13", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a43ff6-775b-4119-90f2-b97520787146", "sighting_of_ref": "indicator--d456e50b-cef0-4b27-bd26-ba2c263f0a13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86202deb-9e2f-488d-974b-363ccb9f5aad", "sighting_of_ref": "indicator--d456e50b-cef0-4b27-bd26-ba2c263f0a13", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce12df01-2be5-467e-8ad5-f09a4e445ca2", "sighting_of_ref": "indicator--8eff7298-281d-45ad-b44f-3f233c19ed16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d19b92-9957-44f6-b3b0-abe425477f9c", "sighting_of_ref": "indicator--8eff7298-281d-45ad-b44f-3f233c19ed16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f8350d-a488-4cff-8195-26ec6678387e", "sighting_of_ref": "indicator--201168f0-a068-4248-8ceb-d590491e2476", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa692f1-e707-41ab-b827-026de97dc316", "sighting_of_ref": "indicator--2a6174fc-ef30-4562-ab97-311fd74b24f9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ce22e7-9200-4af5-bff8-f2a34e7f8559", "sighting_of_ref": "indicator--2a6174fc-ef30-4562-ab97-311fd74b24f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddddca8b-8d5d-4fb5-8002-fcc9eada02ad", "sighting_of_ref": "indicator--08a7ffec-f927-4ced-8206-eebfe9a671cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46339eeb-f7fd-42f3-9f16-fc36e0621f0c", "sighting_of_ref": "indicator--65d6a15f-af4d-4772-97ef-2c0f89331cae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad47457-144d-4438-b455-5a57f4118fce", "sighting_of_ref": "indicator--ff9d56ad-8da2-4f84-8ca8-453779cc4bab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb7ae1b-aba3-42e7-92dc-77e30586d7ff", "sighting_of_ref": "indicator--d4e15923-c56a-4867-96da-29e93565e3a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e242de-a4ee-4595-b086-bced261d600d", "sighting_of_ref": "indicator--45ffa319-b71d-4924-9c51-8b24775df691", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856f1614-f034-4c1d-9ccc-075e84152603", "sighting_of_ref": "indicator--4af9b970-5cfd-43ac-a0a7-f022c79ca775", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86f24f2-509a-44f5-8ec4-a5de3ff5dc3a", "sighting_of_ref": "indicator--d0c3a028-1c71-4736-a8b8-06a4efd12163", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029f3cee-7404-4636-83fa-b3cd90a3573a", "sighting_of_ref": "indicator--dac9820e-a61c-4466-ae24-51171c8a84af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e3306c-5a60-4b96-bfa1-41cc764d885e", "sighting_of_ref": "indicator--63dd1935-2e7b-49c3-995e-a8ad15eff0fc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e1bcb2-8d20-41e2-a24c-707382d77dbe", "sighting_of_ref": "indicator--03137d94-7006-4646-8e6a-e4b1a2057b26", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486067d5-ef21-4e61-b183-2b3cbcad196d", "sighting_of_ref": "indicator--e5d01791-1f59-4eb8-a29c-427e11ac5b99", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff9e862-427b-4c9b-a9db-72c2e6b52f42", "sighting_of_ref": "indicator--e5d01791-1f59-4eb8-a29c-427e11ac5b99", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ee5a60-824e-43ef-80d7-8313b9c72d5d", "sighting_of_ref": "indicator--a6db1483-e254-42ba-9cfd-1f8d7625beb9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f8ff25-7727-4b73-b304-8dd948e7f715", "sighting_of_ref": "indicator--a6db1483-e254-42ba-9cfd-1f8d7625beb9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8386523-0943-4dbf-8364-6a5570e5f50e", "sighting_of_ref": "indicator--4171c199-a930-48ee-adb7-f817cb06fd2e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5e4319-8aaf-42c3-8425-3b3e1ed82194", "sighting_of_ref": "indicator--4171c199-a930-48ee-adb7-f817cb06fd2e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83060b4d-9f15-4af7-9b6f-d3c2b0ed7dd1", "sighting_of_ref": "indicator--aea6dd05-eb30-4280-92d7-0aa0593d0e77", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc3c44c-94c5-498a-9a90-f43b83c14ccf", "sighting_of_ref": "indicator--aea6dd05-eb30-4280-92d7-0aa0593d0e77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badcabf7-d1bf-4b29-a525-5300d3cd039b", "sighting_of_ref": "indicator--92582768-f4a9-45ba-958d-843accf76cd1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2763bd8a-fdcb-46f3-816a-0a2d16568293", "sighting_of_ref": "indicator--92582768-f4a9-45ba-958d-843accf76cd1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2514d45d-fbbe-43e9-8418-4fa310a5641e", "sighting_of_ref": "indicator--2934dab2-1321-49cb-86a6-4c24fb9f0107", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe31800f-630c-4e25-acef-c299aabe2220", "sighting_of_ref": "indicator--2934dab2-1321-49cb-86a6-4c24fb9f0107", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044347aa-3f19-4828-8207-d5a61eb59d74", "sighting_of_ref": "indicator--2e46ae87-303f-4d89-a092-a81cd38fcb70", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d8c36b-4ab5-4eb1-bc3b-cc768f2b414c", "sighting_of_ref": "indicator--2e46ae87-303f-4d89-a092-a81cd38fcb70", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b767885f-f5d0-4148-8681-0d0beea4ebbf", "sighting_of_ref": "indicator--065865d2-f85e-422b-bf54-385cf5c389a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9414a719-8219-46d7-806b-1b29f88af11f", "sighting_of_ref": "indicator--065865d2-f85e-422b-bf54-385cf5c389a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174b9cf3-8a5c-457a-8381-814cff8b3d2e", "sighting_of_ref": "indicator--86316bf6-1868-4acc-9cb5-4016e40c083d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fe1596-fc08-440d-8123-36f19985bb37", "sighting_of_ref": "indicator--86316bf6-1868-4acc-9cb5-4016e40c083d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32be539-c8da-4418-863a-11a2efdf47cf", "sighting_of_ref": "indicator--a588f2f5-a26d-4180-b4db-21cf9f4cf930", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8c212e-7774-4524-a38d-ebea3672c680", "sighting_of_ref": "indicator--a588f2f5-a26d-4180-b4db-21cf9f4cf930", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54154aaa-7ad0-4c33-92f1-a0c8df9df19d", "sighting_of_ref": "indicator--66054076-a507-43da-b044-9c78c4818758", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5390fa6b-be6d-466c-be5a-3fbf704b355b", "sighting_of_ref": "indicator--66054076-a507-43da-b044-9c78c4818758", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677dd9c4-050b-41de-9b00-4f6860eedfc3", "sighting_of_ref": "indicator--597f3d6a-b5e6-4b7d-a87e-2b5bdb97ceea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850bde8f-0917-4e6b-8d9d-edc42206d505", "sighting_of_ref": "indicator--597f3d6a-b5e6-4b7d-a87e-2b5bdb97ceea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2a0bb3-f4c3-431b-9075-a0fab46fa660", "sighting_of_ref": "indicator--0bf78819-23b9-47b6-9fd4-77832279b6e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9e5084-f7ea-4cf4-8f50-c584b43d1f22", "sighting_of_ref": "indicator--0bf78819-23b9-47b6-9fd4-77832279b6e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d68f2f-eb0d-4a07-8632-57d2e866354e", "sighting_of_ref": "indicator--8f0cbd8b-b71e-4958-b2c7-ad63c3746822", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fa059e-55b3-4741-bc0f-252105226861", "sighting_of_ref": "indicator--8f0cbd8b-b71e-4958-b2c7-ad63c3746822", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5934b64e-551e-47e5-875a-f88ec6e4b6a8", "sighting_of_ref": "indicator--be62df9e-e90c-4883-8109-a34f38cdc9fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7353de04-219a-4d06-9973-8532179dd7b5", "sighting_of_ref": "indicator--f1a4a9c6-8cda-4fa8-a0e4-91d7bd3736a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4902fa34-ee5e-4463-b4c1-ba72d4f3e1b2", "sighting_of_ref": "indicator--f1a4a9c6-8cda-4fa8-a0e4-91d7bd3736a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087556fc-efbf-4406-9389-a4ec9686c33f", "sighting_of_ref": "indicator--dbb361a0-fe2a-49cf-8270-4ceb0649a8f0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2db44c-30bf-4119-85d2-3e9ff57807cd", "sighting_of_ref": "indicator--dbb361a0-fe2a-49cf-8270-4ceb0649a8f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009c698f-2e01-43f5-a21a-aae474099ef2", "sighting_of_ref": "indicator--8d0cd899-4e09-4696-8993-a40dd2c397c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb3d723-f6d5-4e74-820a-c235fc9177ac", "sighting_of_ref": "indicator--8d0cd899-4e09-4696-8993-a40dd2c397c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ddd6de-29f0-4aab-a292-604551050ff2", "sighting_of_ref": "indicator--b33af6be-1beb-4dce-8173-78533b322b2f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6c36c5-e60c-406a-9c4e-67fc9d292fcf", "sighting_of_ref": "indicator--b33af6be-1beb-4dce-8173-78533b322b2f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4815819-431a-4906-ab20-7832cbfee964", "sighting_of_ref": "indicator--b33af6be-1beb-4dce-8173-78533b322b2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c1ec1f-c7a0-4b55-a04d-be19525aa7f1", "sighting_of_ref": "indicator--589a3534-7bde-42ae-9c62-e565305ef8e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4424a9-4ef3-4f48-a349-64c2dae888e4", "sighting_of_ref": "indicator--97e2d66c-0336-4053-9bfe-134c863ab7f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e7a9fa-e98b-4ceb-b0ae-8b9941c9b463", "sighting_of_ref": "indicator--97e2d66c-0336-4053-9bfe-134c863ab7f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c2f216-0a85-48a3-bf65-7e80d5d2784b", "sighting_of_ref": "indicator--37f539f9-6b47-4369-901f-24af5ca54ba5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a482db0-0df8-4c2b-b225-51b21d721643", "sighting_of_ref": "indicator--37f539f9-6b47-4369-901f-24af5ca54ba5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc6b24b-f0de-4879-a10b-4e636b3f6748", "sighting_of_ref": "indicator--fa80a5c1-e961-436a-a31a-aff7ff5e4a06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f0d9b5-85d8-49df-91e8-5a225981b758", "sighting_of_ref": "indicator--fa80a5c1-e961-436a-a31a-aff7ff5e4a06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f863a844-9975-4d0f-a62d-e333f5acd594", "sighting_of_ref": "indicator--826bd736-cbbc-40b0-a93e-d56e157e0c41", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0572d509-dbd1-4a16-bb5d-3d1c77455437", "sighting_of_ref": "indicator--826bd736-cbbc-40b0-a93e-d56e157e0c41", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d96787-e0e4-4e82-b906-0f3553bb4804", "sighting_of_ref": "indicator--d53a383f-9d6d-424b-9a03-5a27a07ad313", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273c5bb1-258f-409d-8fe1-45f96b7e38a5", "sighting_of_ref": "indicator--d53a383f-9d6d-424b-9a03-5a27a07ad313", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b62e919-b1a1-47e4-abb4-f00431f6350d", "sighting_of_ref": "indicator--d4750765-2da7-487d-a84e-4d094af2a8ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78294c3-be55-48ed-984e-59d7691e55b5", "sighting_of_ref": "indicator--d4750765-2da7-487d-a84e-4d094af2a8ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41e7dd0-50c8-45d5-92a8-2c921c065b83", "sighting_of_ref": "indicator--073c83f6-f9f2-491f-af89-a304b65f0a72", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298a192a-89e8-4f3c-9e49-a893eb4943c0", "sighting_of_ref": "indicator--073c83f6-f9f2-491f-af89-a304b65f0a72", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa8082a-bde4-4834-91e6-d86c281290d5", "sighting_of_ref": "indicator--e6c26997-c322-4e2e-8b3e-e69fcc2f32ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6a10c0-470a-4fdf-97ea-e5aa37361a4d", "sighting_of_ref": "indicator--e6c26997-c322-4e2e-8b3e-e69fcc2f32ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facefc92-ec17-4b4c-a7bd-31ea8cf4eb72", "sighting_of_ref": "indicator--9a100d4e-e94f-4c29-83ef-3fba132a5d1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a509976-44f9-445e-9737-def484086a20", "sighting_of_ref": "indicator--9a100d4e-e94f-4c29-83ef-3fba132a5d1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c41d6d-b384-4039-ba39-ab573bacc368", "sighting_of_ref": "indicator--57ff43fe-dcef-46a0-856a-9d8ccc92c061", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb826f1-a655-4f26-abc5-a0aab154e729", "sighting_of_ref": "indicator--57ff43fe-dcef-46a0-856a-9d8ccc92c061", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cfc472-ccaa-419b-9dfb-7f96cd3e91d2", "sighting_of_ref": "indicator--52fa2bb2-2501-46b6-abef-652f3762fcff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0aa365-8e72-4c5d-808d-879aa23953c0", "sighting_of_ref": "indicator--52fa2bb2-2501-46b6-abef-652f3762fcff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e936656e-e12c-485f-8854-1faa159a7359", "sighting_of_ref": "indicator--ae29f0e8-eb35-4077-a218-a6c95b6db58a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55faff2e-5ecf-4290-a72f-df522c371fdd", "sighting_of_ref": "indicator--ae29f0e8-eb35-4077-a218-a6c95b6db58a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443c29b2-f7d6-4c8b-b1f6-6592d4f133ce", "sighting_of_ref": "indicator--10d77214-f481-4f6c-825e-c76f8378f94a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe44d92-ea35-488c-a3cf-5086dac0fb04", "sighting_of_ref": "indicator--b170785b-d83b-4c74-83ab-57307ade648b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc181584-0972-4fdb-a3b6-9618dcdede3b", "sighting_of_ref": "indicator--f71e2dcd-d8af-40a7-b2be-48c746cc7107", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8641a27a-b730-4cb3-afa0-bc5b7784c76b", "sighting_of_ref": "indicator--f71e2dcd-d8af-40a7-b2be-48c746cc7107", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c1aa52-0f76-4087-810f-9a29fdec93c2", "sighting_of_ref": "indicator--a0c9ab84-ca59-4eba-8e3a-b20228e56e05", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90867df7-33a9-46be-9191-2e868efa2d0e", "sighting_of_ref": "indicator--79ea820c-3174-4035-bbdc-eaeb5ab7356a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb80263-5bad-4fd5-927a-acfe3645fa88", "sighting_of_ref": "indicator--b9c3eef8-edd2-4390-a9f8-9d4512841a55", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2787b4-9eaf-486d-b0ef-067b973a700c", "sighting_of_ref": "indicator--354ad139-642e-4af2-9541-f2dfeb7db030", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f19321-3000-48d9-8527-de39dcd6d316", "sighting_of_ref": "indicator--19eb5645-c9a4-4612-bb76-8e11584b0bae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90bca7a-8846-46ee-a04d-264b0ab12c94", "sighting_of_ref": "indicator--9f90cb96-b0b5-42c5-ae74-1d68a4934b91", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55478c6a-2c1f-4264-8b56-3e4ea4c712b3", "sighting_of_ref": "indicator--fd505ea4-6424-410c-8bff-982fa64042b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8674260-d380-45ba-b237-33afafa19f04", "sighting_of_ref": "indicator--532138fd-70fd-4030-bbe3-c03e16dd5e52", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec23eec1-2118-4747-99b5-a8e1860dc7ff", "sighting_of_ref": "indicator--297569ea-3419-4a2b-8181-90db493da87f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c6040d-e671-4b60-8985-4af51289df47", "sighting_of_ref": "indicator--312efbc2-7ffe-4e4d-ba66-5ca5e192f6b2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6f0ee9-42b1-4cde-bbbd-8707b7964b9c", "sighting_of_ref": "indicator--bf23aa08-437f-487a-83be-91f80fd8a21f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1faa4957-e916-453b-9378-4b945c44461d", "sighting_of_ref": "indicator--bf23aa08-437f-487a-83be-91f80fd8a21f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdec56d6-acb1-4f57-b386-98c7f1d4f1a8", "sighting_of_ref": "indicator--8c5116ae-ef4b-4d94-a66c-64b3791ecd6e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cdaf34-cf07-437e-b118-98acdd587328", "sighting_of_ref": "indicator--35efec3a-4d5a-4602-a8b3-8f243a307ded", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d0d4b2-bfb6-4d59-a847-8c6244e2ece6", "sighting_of_ref": "indicator--e7e37e67-f2b3-47a5-9249-622acfde5f13", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b918dd41-aaeb-44b1-a5d7-8117ecab754f", "sighting_of_ref": "indicator--73ba3980-f307-4f85-9ff5-e2012530bbf5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a260f4-2d0b-45c5-90c3-8d8d49ed3501", "sighting_of_ref": "indicator--33e14cbe-ac7c-4265-9f48-c674bbd149c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798d81b4-49d2-4ce2-bc36-e13753ea5928", "sighting_of_ref": "indicator--b484e88a-3596-4024-9876-299c6513e03a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0642c449-48a9-46b6-abfa-32d460891636", "sighting_of_ref": "indicator--481eca99-5d59-4079-b8bc-a9d94c71df72", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d07adc-759d-4610-a93c-ca9e408afa53", "sighting_of_ref": "indicator--2fce2d13-a87a-4cf8-84ce-bf968d869d83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a014a9a4-cf8d-4059-9efd-c51549339c83", "sighting_of_ref": "indicator--eed95f85-ce8b-44b8-b86f-e05542ee2a47", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72364de-6121-4dc5-95e4-164a281d31aa", "sighting_of_ref": "indicator--1545c5bf-7096-410c-bab7-239d30a4d809", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef9fc11-94d9-4dba-b597-5022e5717502", "sighting_of_ref": "indicator--1545c5bf-7096-410c-bab7-239d30a4d809", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398c1e91-75c0-4cb5-b2ca-657a47139335", "sighting_of_ref": "indicator--19b6920a-5362-48e8-a473-8dea48cac788", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf22753b-706c-45a8-b854-40b1323fb5f5", "sighting_of_ref": "indicator--3a364f0d-efbb-4c09-a6f9-73045d37aae4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e938a7-fb8d-4447-866c-132f30aee2ef", "sighting_of_ref": "indicator--aa9cb5a4-9e4c-49bb-afe3-1de53994075f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576afd05-9ba6-475d-9f44-78c7e3fce489", "sighting_of_ref": "indicator--3d6647c4-e83d-4d18-be81-45c2067962e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb2425f-bb0f-4d75-a21e-c1e96b51efee", "sighting_of_ref": "indicator--02559ec7-c4d4-4925-9961-cdaff7fe55c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42887c6b-4d91-44e2-a0b7-960560d32447", "sighting_of_ref": "indicator--ab1283a4-8fce-4a3e-8e7a-f75d774094f6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cd1652-19a7-4893-a4f9-a7ac8321bab7", "sighting_of_ref": "indicator--994c23f9-2029-41f8-a7f1-e68d154fd703", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dbba88-e322-4da1-ac11-ca00207f1cc2", "sighting_of_ref": "indicator--2a356cda-316a-407a-8dcb-3ed566ee709d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dce1e8-2dcd-4b38-8979-aafc391f0d51", "sighting_of_ref": "indicator--3e37aa28-5512-4c3f-a875-9d894dca1f02", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ad560e-8337-413d-b7ec-e24cad40d5dd", "sighting_of_ref": "indicator--9fd665e2-62c3-4c1c-9599-979bed35c4a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e45431-681c-4dfd-83db-96a1f29b9dd8", "sighting_of_ref": "indicator--b30a76ea-d461-4b40-babc-29fb8c60d064", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef1ebd1-018d-4c81-9fc9-19e8048cc46c", "sighting_of_ref": "indicator--b30a76ea-d461-4b40-babc-29fb8c60d064", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b0222a-a3ec-4dcd-a95e-446d19f0b4ff", "sighting_of_ref": "indicator--be9864b7-5d10-48b9-8c57-4ab15ae51f41", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7df22b-523d-4d9d-b459-c62cd904397a", "sighting_of_ref": "indicator--a6e18284-bcc7-4ab7-a1c7-4b7f6d2f87d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fd20e4-31e3-483c-bf70-d7b265e9e85a", "sighting_of_ref": "indicator--8353dfd8-6ce0-456c-a6a8-39585f4dca86", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd3e4f3-bffb-4af8-92ad-b3a9ab378c5c", "sighting_of_ref": "indicator--748ed6fb-5108-4cbc-8625-5680cfd4527e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba80f49-6381-4f84-a06f-8a03ac541621", "sighting_of_ref": "indicator--d165df74-320f-4742-bb81-fdd9e41a446a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aac80d0-9b42-4fcc-b813-245760ee6f4f", "sighting_of_ref": "indicator--d165df74-320f-4742-bb81-fdd9e41a446a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19acdc0-b244-4994-bc17-be68de347bcd", "sighting_of_ref": "indicator--ae68acc7-6a60-4327-8a01-daa50f654510", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f70ddc2-57af-4381-9ba2-5e7ea59714f8", "sighting_of_ref": "indicator--ae68acc7-6a60-4327-8a01-daa50f654510", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08579803-d046-49d3-bbde-56ccc5a1a7b4", "sighting_of_ref": "indicator--b72391f7-6399-4537-975f-9bb23050530d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d037bd-b112-472b-b3f3-6ac09a5df609", "sighting_of_ref": "indicator--b72391f7-6399-4537-975f-9bb23050530d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcedfab-571e-4b1e-b201-2bcab44ccaca", "sighting_of_ref": "indicator--b72391f7-6399-4537-975f-9bb23050530d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e65f13c-8e4e-46d4-92a4-49f1b3a73c5c", "sighting_of_ref": "indicator--2596d93d-c8ab-483c-9736-094c781b29df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911db53c-f616-42ae-bd32-7c1dd981dbb4", "sighting_of_ref": "indicator--2596d93d-c8ab-483c-9736-094c781b29df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5b3942-ca63-45cc-bcf7-28544b1a1c40", "sighting_of_ref": "indicator--af183941-11e5-4de8-97ec-9ce8a8ab565c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877ca2e2-985b-451b-869a-342d7335cae9", "sighting_of_ref": "indicator--af183941-11e5-4de8-97ec-9ce8a8ab565c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a200728-4aa2-4f70-a926-be552af5c995", "sighting_of_ref": "indicator--8db6f4ec-8b98-4d9b-b6da-584a477ccd39", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7cde4e-2e38-4872-868c-9a347a364102", "sighting_of_ref": "indicator--8db6f4ec-8b98-4d9b-b6da-584a477ccd39", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9792f60e-94fe-47ba-841a-8f13d846d30f", "sighting_of_ref": "indicator--76971e8c-72fe-4194-8d4f-1020a159b739", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d38a0b-cdde-4684-86fc-73f7beef8505", "sighting_of_ref": "indicator--76971e8c-72fe-4194-8d4f-1020a159b739", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb44002-85cd-44f4-9db0-b2d2fb4c360c", "sighting_of_ref": "indicator--a8e71931-98be-404e-80a8-64dfb93e6526", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5bcbb4-c401-4531-9244-2a1ca3173896", "sighting_of_ref": "indicator--a8e71931-98be-404e-80a8-64dfb93e6526", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1681d908-972d-4fcc-bb41-db69890914a4", "sighting_of_ref": "indicator--db0ec937-e813-49b5-bb98-9d8bd3717d40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305efdea-9272-429f-bc2f-fa6d9efe91b0", "sighting_of_ref": "indicator--db0ec937-e813-49b5-bb98-9d8bd3717d40", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeff91f-b3e5-4957-b555-16e8ab6597d8", "sighting_of_ref": "indicator--db0ec937-e813-49b5-bb98-9d8bd3717d40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e373fd24-193a-4f5d-9d0f-3e8bb9962ddf", "sighting_of_ref": "indicator--e1567e7d-a595-482f-aede-0ac45d0a9681", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340aefb1-b2e7-4ee1-9d09-261cd0f39d00", "sighting_of_ref": "indicator--e1567e7d-a595-482f-aede-0ac45d0a9681", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a64c7e-2257-44b8-9b29-64fd27f76f0c", "sighting_of_ref": "indicator--e1567e7d-a595-482f-aede-0ac45d0a9681", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13e089a-96f3-4042-8c40-402b9c869ae3", "sighting_of_ref": "indicator--740ae26e-c9d5-40d4-b97e-be7744c6ede1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c9b58d-3593-4fcc-b4e8-c067bad9df4b", "sighting_of_ref": "indicator--740ae26e-c9d5-40d4-b97e-be7744c6ede1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deeaa64a-9c68-40d2-9432-34d42f8c196c", "sighting_of_ref": "indicator--740ae26e-c9d5-40d4-b97e-be7744c6ede1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3ddcd1-26fa-47f0-a841-2d711bd79bff", "sighting_of_ref": "indicator--0d7f4197-11be-4deb-bdd5-43b2ecdfe237", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7632872-3478-42a2-8d77-fc8444178af6", "sighting_of_ref": "indicator--0d7f4197-11be-4deb-bdd5-43b2ecdfe237", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c83f4a-163c-4c3c-840f-10762f7e93a2", "sighting_of_ref": "indicator--51623c2e-3695-4c58-9efc-824cebb6191d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e564e9c-eefe-405e-9633-a6d7ec1b33f4", "sighting_of_ref": "indicator--f7219ee3-ec70-4b9f-8d6f-dc6d8de3559a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3fe8d1-e7bf-4529-a733-1f7c284b24fe", "sighting_of_ref": "indicator--f7219ee3-ec70-4b9f-8d6f-dc6d8de3559a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb3f4ee-ec30-4330-b7d0-f3d358ab8b07", "sighting_of_ref": "indicator--acb493f4-0bfc-4feb-a72a-cf6a58181fa7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378c30fb-4147-44b7-a7a3-457e3d154ecb", "sighting_of_ref": "indicator--acb493f4-0bfc-4feb-a72a-cf6a58181fa7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0607f51f-eb52-4680-9b00-5f0b07a88440", "sighting_of_ref": "indicator--acb493f4-0bfc-4feb-a72a-cf6a58181fa7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0a8af9-f4d7-4c06-949c-68973c6e0863", "sighting_of_ref": "indicator--f7096193-391a-4efc-8675-ada86d07e241", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4d9a4b-9a31-4ff7-8b95-6a3dd34bc45f", "sighting_of_ref": "indicator--f7096193-391a-4efc-8675-ada86d07e241", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2b0346-ba5e-4bc6-81b3-e78f69033ad6", "sighting_of_ref": "indicator--f7096193-391a-4efc-8675-ada86d07e241", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df6dabb-75db-4ae0-8b25-64293e4ae620", "sighting_of_ref": "indicator--84da3999-1a94-4600-9973-eddbf9638dab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380a242c-cfb6-4549-aad9-a7fdadae144f", "sighting_of_ref": "indicator--84da3999-1a94-4600-9973-eddbf9638dab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91d3cc2-1490-424f-9531-83a46e2a6974", "sighting_of_ref": "indicator--d29c1ddd-a5d1-4a14-8ad4-b610b41f3656", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db70131-ae67-40ec-a41b-0a4e0bf58f35", "sighting_of_ref": "indicator--48b37916-9241-4955-8365-5a6a1b706803", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d6879b-1b41-4e0f-8e54-2a228a8fa168", "sighting_of_ref": "indicator--48b37916-9241-4955-8365-5a6a1b706803", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b711b521-f47a-4f59-ab3f-51a0d0b00469", "sighting_of_ref": "indicator--48b37916-9241-4955-8365-5a6a1b706803", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5442ed-2db8-4ae7-89bc-dab73a768851", "sighting_of_ref": "indicator--19ca8257-ecf1-4078-b991-8096d256d8f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d458254-cd41-48e0-a85d-8cbd1c789609", "sighting_of_ref": "indicator--19ca8257-ecf1-4078-b991-8096d256d8f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e692fd19-c1b4-402b-9751-7807bf2c28d0", "sighting_of_ref": "indicator--19ca8257-ecf1-4078-b991-8096d256d8f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9ffa76-c7e0-41fb-a9e7-2869bdfb6ca0", "sighting_of_ref": "indicator--519b2219-f133-4923-83f7-dc77e5a2da25", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31009073-ec78-4cac-99bd-5cdd276f4aa8", "sighting_of_ref": "indicator--519b2219-f133-4923-83f7-dc77e5a2da25", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea18b33-291b-4d78-94fc-6caf5698b7a7", "sighting_of_ref": "indicator--74e77c3e-0649-40a9-9afb-d21b7655ebb4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48456332-9341-4663-b570-258e9eff768d", "sighting_of_ref": "indicator--74e77c3e-0649-40a9-9afb-d21b7655ebb4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfdc088-8496-46cf-8363-424b05ceed08", "sighting_of_ref": "indicator--7581721c-fb78-4152-94cf-5d96a118b5c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd84ea7-4183-4dc8-83e8-7af102767774", "sighting_of_ref": "indicator--7581721c-fb78-4152-94cf-5d96a118b5c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb67eb47-f765-4045-a962-1659edba5a1c", "sighting_of_ref": "indicator--56feb4e3-279f-4d3a-885d-6290db1145ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5d11c1-87a5-4044-aa53-336713aaacf6", "sighting_of_ref": "indicator--56feb4e3-279f-4d3a-885d-6290db1145ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7bf5d7-2292-4273-a455-0f52d79f43ee", "sighting_of_ref": "indicator--53e3e7de-10ec-4211-9c31-a3ee984a15f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce2af71-3dbd-4c04-8248-0903418a0f34", "sighting_of_ref": "indicator--53e3e7de-10ec-4211-9c31-a3ee984a15f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733e6a0a-23cf-4936-bdff-38e7d64d38a0", "sighting_of_ref": "indicator--53e3e7de-10ec-4211-9c31-a3ee984a15f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662dce03-359c-4285-99df-19c979aead95", "sighting_of_ref": "indicator--df79b6d5-8da1-4ad4-8a52-1d5bdc28e53b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1455d37b-e604-42cb-97e8-94afd0ff326b", "sighting_of_ref": "indicator--50417cb5-9408-426b-b2dc-d45335054ce8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7fa93-51f3-4163-af20-18c8c04fddf7", "sighting_of_ref": "indicator--3e7293ae-f91a-4653-a92d-8dd7fb38fe7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d371117-3021-478e-b9b9-f287dd562c04", "sighting_of_ref": "indicator--3e7293ae-f91a-4653-a92d-8dd7fb38fe7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162428d4-d134-4f21-a6c1-207dcf8f2dfc", "sighting_of_ref": "indicator--30574a04-be9a-481f-9111-edca093e96cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6a313c-e6a1-465f-be1e-cd6ceb19f6f6", "sighting_of_ref": "indicator--30574a04-be9a-481f-9111-edca093e96cc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95341e12-afe6-4bdf-a3bf-302f1276ff91", "sighting_of_ref": "indicator--d07671a0-e969-4f9b-8828-0ac5cee5d3b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55ddf7e-8fca-4a9a-9a04-3706566b79a2", "sighting_of_ref": "indicator--d07671a0-e969-4f9b-8828-0ac5cee5d3b9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c362ce-2232-4cf0-9ee6-0eb4802fe71b", "sighting_of_ref": "indicator--92f36090-05ab-4beb-9769-59c0fbf34019", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87ac1c9-e7f5-4bdb-8548-2d242f10f310", "sighting_of_ref": "indicator--92f36090-05ab-4beb-9769-59c0fbf34019", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87a5ee3-0e37-4f7a-b858-92f715e0f53f", "sighting_of_ref": "indicator--4338c1f5-b30f-4703-af66-f2fd1cd49b54", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71938cf5-8904-4818-b2eb-83385aa1efeb", "sighting_of_ref": "indicator--4338c1f5-b30f-4703-af66-f2fd1cd49b54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b89153-fc47-48ae-bd8b-27f01e70f4cb", "sighting_of_ref": "indicator--4338c1f5-b30f-4703-af66-f2fd1cd49b54", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8631c961-7ac0-4f47-97ea-2df250063dba", "sighting_of_ref": "indicator--3126a45a-5668-49a2-a978-89606bd341c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0087273-288c-415a-97ea-9ac460196f07", "sighting_of_ref": "indicator--238268d1-f7c5-44fc-aec9-ac4907f56250", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23ed969-f8dd-4c35-b334-abd034718c6a", "sighting_of_ref": "indicator--238268d1-f7c5-44fc-aec9-ac4907f56250", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5a3e7f-c9c5-4a72-ac1e-4e029ea5cb5c", "sighting_of_ref": "indicator--e64d6fba-3ccc-4dd3-a932-2b5f2082381f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c29a463-49fa-44fd-b995-863ec4bfc9be", "sighting_of_ref": "indicator--e64d6fba-3ccc-4dd3-a932-2b5f2082381f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcccf44a-cfd9-4999-a285-b3ba4dd2436c", "sighting_of_ref": "indicator--faf2ebdd-b8c8-4033-939c-b6ffd5c5c604", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261ff0c6-ba54-4eae-a87f-53626b5ab210", "sighting_of_ref": "indicator--502e7cbd-a5aa-473b-8334-5fbf860e9721", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230594dd-6001-424e-b6cb-8adee96b7c35", "sighting_of_ref": "indicator--502e7cbd-a5aa-473b-8334-5fbf860e9721", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e166fb-f198-4110-a0b4-f0249ed2ad09", "sighting_of_ref": "indicator--502e7cbd-a5aa-473b-8334-5fbf860e9721", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e402b19e-70b2-4819-ad64-36898157d073", "sighting_of_ref": "indicator--b0514641-9b0e-4869-85f8-3cddc0c64e55", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d9882a-81f3-4217-92cb-70a7d9167c4e", "sighting_of_ref": "indicator--b0514641-9b0e-4869-85f8-3cddc0c64e55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d43740-85f5-4d92-a734-d010d1570ec6", "sighting_of_ref": "indicator--b0514641-9b0e-4869-85f8-3cddc0c64e55", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276287de-2df7-4de5-be5c-1f6827035762", "sighting_of_ref": "indicator--bd6b12ad-88f3-4e18-af51-a8da64b17bfd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f6b2d1-3d97-4c8c-bccd-341493c09e64", "sighting_of_ref": "indicator--bd6b12ad-88f3-4e18-af51-a8da64b17bfd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efad316-9846-4604-a6c3-9cebd8f9e1de", "sighting_of_ref": "indicator--bd6b12ad-88f3-4e18-af51-a8da64b17bfd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0881f917-2903-4928-a08a-ad7cc2a2e321", "sighting_of_ref": "indicator--bf08780a-44c5-42b2-b47e-2ef59d30ad69", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2762c9c5-1e84-4324-bfcd-938bfc39c1bd", "sighting_of_ref": "indicator--bf08780a-44c5-42b2-b47e-2ef59d30ad69", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f54c2c2-6174-427a-83bb-59a2a57d4a83", "sighting_of_ref": "indicator--7b525498-4b60-49d4-bd05-e8ff3efc00b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb70571-0a8d-46b8-a876-8fe12588fef8", "sighting_of_ref": "indicator--7b525498-4b60-49d4-bd05-e8ff3efc00b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb8e9ab-f4ce-4b98-93df-665e098c25ee", "sighting_of_ref": "indicator--1a56775e-654e-4751-a196-ad5fe190dd3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52318007-29de-44be-a747-0718cd2ce956", "sighting_of_ref": "indicator--1a56775e-654e-4751-a196-ad5fe190dd3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28afd2ff-b501-4e19-a4c2-5d336cda4dac", "sighting_of_ref": "indicator--d50cfa49-98c3-4d79-8b2f-5f56de6d832c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccb8c01-d08d-4fa2-9876-37807fc056ed", "sighting_of_ref": "indicator--c127b53e-98c7-47a2-8232-59e5933cf7eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276a7f53-d52e-43ab-b43a-22b648f6c348", "sighting_of_ref": "indicator--83c11288-f026-4d62-a274-8a98325a1a61", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412469a8-2508-40ec-be97-c60f75b02c11", "sighting_of_ref": "indicator--83c11288-f026-4d62-a274-8a98325a1a61", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e41288e-4bed-4ee8-8476-a1a1c66e5ecb", "sighting_of_ref": "indicator--b26f5a8f-0fbc-4388-87ff-3d0eb6f70421", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d854b646-2449-44d1-a199-851389ff9218", "sighting_of_ref": "indicator--b26f5a8f-0fbc-4388-87ff-3d0eb6f70421", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90afce2-2c57-4bf1-adf2-f453d96bbc5c", "sighting_of_ref": "indicator--b26f5a8f-0fbc-4388-87ff-3d0eb6f70421", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b5306a-29aa-4586-977f-d5d9a17d6ad0", "sighting_of_ref": "indicator--578d8a2c-5f27-4103-81de-18ef13cd20cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b765a0d5-3024-48bc-badc-61c1e2605f31", "sighting_of_ref": "indicator--7a789b46-30a9-4a95-8b5b-9f841cd9b2b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5423ca-d445-4ca1-a11d-e7caa9b62c72", "sighting_of_ref": "indicator--62ddcf4f-a947-4bad-b5ba-cc3e79d2622b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864e2398-2c68-4584-aa39-061985c3441d", "sighting_of_ref": "indicator--62ddcf4f-a947-4bad-b5ba-cc3e79d2622b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cd5e44-278f-4d77-b676-62fa8d3ac405", "sighting_of_ref": "indicator--b47f9f41-e33f-468b-8178-267ad85c9a76", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99c082a-61fa-4bd6-8c80-6450fcde40c9", "sighting_of_ref": "indicator--b47f9f41-e33f-468b-8178-267ad85c9a76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380c54c2-6d5b-428f-a98b-863317954933", "sighting_of_ref": "indicator--ba9aed3e-b2ff-47ec-a10e-cbf1138dd26c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c2db81-e12b-4347-b4c6-5eda0a39d022", "sighting_of_ref": "indicator--a85041a1-2b86-421b-bac1-be9c9e81d834", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8763d63f-b680-440e-9bfb-4f1fa7af303b", "sighting_of_ref": "indicator--a85041a1-2b86-421b-bac1-be9c9e81d834", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7a9c9f-b6f6-4e17-a7f9-67b9aacc035d", "sighting_of_ref": "indicator--64c1d46f-180e-499b-8a08-539756356058", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f075f45e-cf28-4c01-9ddf-d32c966632de", "sighting_of_ref": "indicator--64c1d46f-180e-499b-8a08-539756356058", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08db20f-bb49-4519-90fd-9a481af8b24d", "sighting_of_ref": "indicator--64c1d46f-180e-499b-8a08-539756356058", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eb95cc-d334-476c-88a5-d993c60a1822", "sighting_of_ref": "indicator--1d1dda91-b208-4e44-bf11-a9fd0dda3ffb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab15df26-0eaa-4ff8-9a3c-97e03c9fde4b", "sighting_of_ref": "indicator--0d880b9e-8fd3-441e-b195-dd29bbf28ece", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267ef22d-a063-47e9-9ac9-6e1ef1b2e89c", "sighting_of_ref": "indicator--0d880b9e-8fd3-441e-b195-dd29bbf28ece", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e0f55c-e119-4690-867b-289964d2b014", "sighting_of_ref": "indicator--f2f7eb7f-e9ae-4c86-912f-b873780d26e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78cb6b0-b2ba-4b6a-8f3d-f3eb5ed35b94", "sighting_of_ref": "indicator--9a170cbe-cfc0-4296-9ed7-b75a1b961c17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b82f2f-6f9e-475e-b0bc-ac433ab7a7c8", "sighting_of_ref": "indicator--9a170cbe-cfc0-4296-9ed7-b75a1b961c17", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b54172-4818-4f92-9eb1-f08664125b63", "sighting_of_ref": "indicator--9a170cbe-cfc0-4296-9ed7-b75a1b961c17", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e63641-485b-48ed-888f-056bdf0bf7e3", "sighting_of_ref": "indicator--cbb4d5ff-822d-4fad-9584-539b3f743db2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e6aec6-7cad-4974-b8e9-a369532a912e", "sighting_of_ref": "indicator--cbb4d5ff-822d-4fad-9584-539b3f743db2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9d7d79-4ad6-4d82-a758-ce277222d177", "sighting_of_ref": "indicator--e0ba8b1f-7aac-4bca-b9bf-6b2103368cfe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad079538-d023-4648-879e-7446f024a3f2", "sighting_of_ref": "indicator--e0ba8b1f-7aac-4bca-b9bf-6b2103368cfe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd599837-4e35-4057-bc43-0c193a441605", "sighting_of_ref": "indicator--82f67d11-b3c0-447c-b06e-acd3363bb27e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d548301-1b4b-4070-ab67-d7b81f9e9d46", "sighting_of_ref": "indicator--82f67d11-b3c0-447c-b06e-acd3363bb27e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774c1898-3f7e-4b0d-9b18-6eeb80eaa6f8", "sighting_of_ref": "indicator--dfadbb7f-cf1c-4feb-8d4c-87a58d12baa6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48a5cb4-7ff2-4855-b49e-0a7c37fa744f", "sighting_of_ref": "indicator--dfadbb7f-cf1c-4feb-8d4c-87a58d12baa6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5691fb-e89f-48cb-a423-e926dd8a541a", "sighting_of_ref": "indicator--dfadbb7f-cf1c-4feb-8d4c-87a58d12baa6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70cad2b-a543-45aa-972d-6582ef0ed9af", "sighting_of_ref": "indicator--cf2b20a6-a613-47a3-8c4a-fa090fe55f72", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f88bd9-7c04-4dd8-8d10-33ff99405ca2", "sighting_of_ref": "indicator--51c1791d-2ff0-4cd5-ac51-3b71ad34f1b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895a1915-200f-46e5-b032-d0d8bcedea02", "sighting_of_ref": "indicator--51c1791d-2ff0-4cd5-ac51-3b71ad34f1b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ca4f9e-8b8f-4306-ba9e-ea31e8387906", "sighting_of_ref": "indicator--0036a293-e940-47dd-9c25-a342e81027c3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017d7a6e-615f-485a-b47e-11ced764b200", "sighting_of_ref": "indicator--a26db227-0e68-46cb-95bf-f28c40790729", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a35a657-53c6-4041-83d9-2437cf6b7e3e", "sighting_of_ref": "indicator--ff816422-cca9-40c4-9a00-b81160c65217", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a3770d-905f-49ed-90f8-b94604e124e9", "sighting_of_ref": "indicator--ff816422-cca9-40c4-9a00-b81160c65217", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa93ed8-9397-435f-bdee-b9fa02120697", "sighting_of_ref": "indicator--da778b31-70aa-4b4a-bda8-a72ad2745438", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df84295-392f-49c2-ae73-0156b978884c", "sighting_of_ref": "indicator--ca0301d6-da86-4c68-a376-4b3fb50782c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd157e6f-8df5-41d2-aa5f-0b628605232f", "sighting_of_ref": "indicator--ca0301d6-da86-4c68-a376-4b3fb50782c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d2e59e-36c3-4f9e-997b-7119c2ec11e1", "sighting_of_ref": "indicator--11c282eb-e690-47de-937f-68872c66d825", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac7ffb0-79c4-4b6c-83ff-961a20b1839d", "sighting_of_ref": "indicator--11c282eb-e690-47de-937f-68872c66d825", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cae32a-78be-4361-981b-68ae5eb5649d", "sighting_of_ref": "indicator--11c282eb-e690-47de-937f-68872c66d825", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7f42c7-cc61-4724-8ff3-d4a0ae1bc5bc", "sighting_of_ref": "indicator--23b5f2ca-60b6-46d0-91aa-c096a024f171", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464db1c9-936c-4321-b604-95577406d3e5", "sighting_of_ref": "indicator--23b5f2ca-60b6-46d0-91aa-c096a024f171", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45396a7b-f0d4-4e59-829b-36a779097c04", "sighting_of_ref": "indicator--23b5f2ca-60b6-46d0-91aa-c096a024f171", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93676f31-df92-4d82-ae91-ac325b2dee25", "sighting_of_ref": "indicator--e4e40faa-9f8e-42ce-9d38-4389e7114b83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfe1775-4d36-4449-a9df-6f9745eeba41", "sighting_of_ref": "indicator--b5348eed-3884-46e6-8874-ede4b752f088", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d76d4d-f2c7-4dbb-a1ce-cf8e02f89b5d", "sighting_of_ref": "indicator--0dcfbcbd-f6a7-4d98-9aef-9c4d5c9b645d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752a95ca-d83a-4a3c-bddf-740ba845c73f", "sighting_of_ref": "indicator--0dcfbcbd-f6a7-4d98-9aef-9c4d5c9b645d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46f9839-86d9-4272-8644-b6e7fb3cf7f7", "sighting_of_ref": "indicator--20c93889-0c49-4211-baa8-7a8ee80c8ec1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70e5936-df30-4634-9cc9-04b220c645df", "sighting_of_ref": "indicator--20c93889-0c49-4211-baa8-7a8ee80c8ec1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c19317-0817-437f-877a-d8946ce190d9", "sighting_of_ref": "indicator--20c93889-0c49-4211-baa8-7a8ee80c8ec1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c94027-5122-44db-af7c-8880c0b6a17a", "sighting_of_ref": "indicator--2a85628e-d891-41fb-adb1-4239393e6185", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bac0836-8f49-407c-b543-162a92cd1ad5", "sighting_of_ref": "indicator--2a85628e-d891-41fb-adb1-4239393e6185", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08a7c8a-5bc1-46a7-a931-7af980596f75", "sighting_of_ref": "indicator--2a85628e-d891-41fb-adb1-4239393e6185", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eec4d5-4f33-4772-b380-968649d1706e", "sighting_of_ref": "indicator--6f9af532-a755-4504-b0f6-924605d7997c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8afdd4e-f67c-435f-81b2-b69169fef7f0", "sighting_of_ref": "indicator--6f9af532-a755-4504-b0f6-924605d7997c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bf97ec-4fbc-49cc-9e64-631961d1bd12", "sighting_of_ref": "indicator--273a03f2-bd51-436b-a8c8-8af05c95bd87", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8901b9-e8fe-4b60-a7fe-c99e6293ab30", "sighting_of_ref": "indicator--5b66c5e0-07d8-444a-8861-b1144fe9a3a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6035d7cb-79f9-40d9-bbc2-fa2cd1630653", "sighting_of_ref": "indicator--5b66c5e0-07d8-444a-8861-b1144fe9a3a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf0c2ec-7cb9-4126-9071-467dc369feae", "sighting_of_ref": "indicator--11d97bc2-78e7-493f-8580-62f5b3f244e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f178a08b-7488-475c-b675-039708305019", "sighting_of_ref": "indicator--13bfb2a5-48dd-4f2b-8fef-6428ade66392", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398fa4d3-30d6-4764-a71e-536d811e05fb", "sighting_of_ref": "indicator--31e1771b-4f90-45fa-aefb-952c6494f83d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f9cea1-4343-4874-8557-52eae611fcc5", "sighting_of_ref": "indicator--ac0cf958-3fcc-4884-a708-87a4f9c8acc8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef31f5e-8e35-4b03-b0f5-4dc24cecac7b", "sighting_of_ref": "indicator--ac0cf958-3fcc-4884-a708-87a4f9c8acc8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3aa1d3-c0e5-42be-8f71-3d18aa85e68a", "sighting_of_ref": "indicator--befcb208-b4a4-452d-a7a5-70407fcbffc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e872e62b-3a09-4093-9e3d-7489509e18fd", "sighting_of_ref": "indicator--3ccaa8aa-ec5a-4ea8-881b-dac7341d0d61", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efa34c6-03e0-4a86-b823-c2b443cd3ccf", "sighting_of_ref": "indicator--b6e8fa47-b3dc-4f4f-8afe-21cd429c3001", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdb30c2-ea11-488d-95a0-a0a68a0fc89a", "sighting_of_ref": "indicator--a59db3f3-6dfc-4f91-9324-3857337af7fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95991be-8a4a-4d6e-8790-99f7a6de8730", "sighting_of_ref": "indicator--e691bdb1-3603-41ea-939d-1500ac37e4c8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea1a027-2a0d-40a1-82ea-b961397e2b7c", "sighting_of_ref": "indicator--7da3911d-8109-47a8-a3c9-53ffa47d4c3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0099a422-7bf1-420c-8e9a-3043dff5d71b", "sighting_of_ref": "indicator--53dffd08-37e7-418f-b238-c250bd5561a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a2a29f-658e-4330-bb62-0e0f92cd6df6", "sighting_of_ref": "indicator--60f8f1c5-884b-4716-b23b-0d49f4b3ee0b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8c4e99-c086-4841-b826-900d7af5c390", "sighting_of_ref": "indicator--090c8e84-510e-45df-b324-4f7309d0789a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd2827f-4bb2-4799-a6fb-b020e7651f0c", "sighting_of_ref": "indicator--e244180a-9591-432f-9f3a-7ca343ede8fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cc88cb-94f3-4c3f-a1dc-66986deff0ee", "sighting_of_ref": "indicator--59e8d1e8-5d7d-4cce-8ebc-cb84e41def85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e44adc-ac54-4090-9dd8-464ad66b50e5", "sighting_of_ref": "indicator--59e8d1e8-5d7d-4cce-8ebc-cb84e41def85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08166a7e-f004-4911-a2f7-b8a379d82716", "sighting_of_ref": "indicator--3c328c80-b35f-43fa-b804-fc5ce0468f3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8ffa92-f4e9-4a2c-846c-17648a0ae0eb", "sighting_of_ref": "indicator--3c328c80-b35f-43fa-b804-fc5ce0468f3f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8adeb75-6fd7-4114-bf04-d11a37979c26", "sighting_of_ref": "indicator--3c328c80-b35f-43fa-b804-fc5ce0468f3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50ac114-974c-405a-a63b-31731f0d607c", "sighting_of_ref": "indicator--11974e28-cd00-46f3-8270-fb854ab42bfb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5111fc-bb64-4385-bbca-3ebfab756d80", "sighting_of_ref": "indicator--b028f35a-d86b-4dbf-b7dd-7023211223e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d3f2cd-7f30-43c3-b791-5987df8c12ed", "sighting_of_ref": "indicator--16e52df3-f6f7-4003-80bd-f0a68562990d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2786c369-20a3-4bb9-aa77-95852b75593f", "sighting_of_ref": "indicator--16e52df3-f6f7-4003-80bd-f0a68562990d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bc47bd-b63c-4f63-b68e-fc40c730334d", "sighting_of_ref": "indicator--16e52df3-f6f7-4003-80bd-f0a68562990d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63b7076-7733-4ef2-94dd-762ab23cbae0", "sighting_of_ref": "indicator--67abfc6c-710b-4bf8-9df5-52fec1dcdc00", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0da334-1d33-4b32-a8c5-8a2d83f10a76", "sighting_of_ref": "indicator--67abfc6c-710b-4bf8-9df5-52fec1dcdc00", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4735ec29-0a95-4443-b70b-c99817e7f5d8", "sighting_of_ref": "indicator--67abfc6c-710b-4bf8-9df5-52fec1dcdc00", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9ab2b9-8bf5-47bc-af01-ff8ce93b420e", "sighting_of_ref": "indicator--b34ec4ff-f521-44a4-87c7-1fe35c73987e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022e18c9-2e66-454e-8784-8db98658c89a", "sighting_of_ref": "indicator--b34ec4ff-f521-44a4-87c7-1fe35c73987e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329337bf-dec5-4331-948c-0d2dd15fc586", "sighting_of_ref": "indicator--b34ec4ff-f521-44a4-87c7-1fe35c73987e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d092b0-45c2-4f7d-888b-dc2cea622584", "sighting_of_ref": "indicator--d85ff6cc-81a0-433e-8afb-1e89a525c78a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020be580-9e8d-49a9-913a-c97a59a2b140", "sighting_of_ref": "indicator--1463b129-11fb-444f-b7ab-50e70ca57d79", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b63675-fd51-4e41-a66d-9198c7bc1736", "sighting_of_ref": "indicator--e793e01c-bf76-48ec-bdab-865530569f8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345ec6a0-f6ff-41a7-905a-4cf8b2b4f619", "sighting_of_ref": "indicator--183bb83e-9f4e-4e25-943c-615ed3d5e8a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d656b70-29c7-4b04-8f01-3283aafe44a5", "sighting_of_ref": "indicator--884a96d4-b289-4629-9c69-382353a2041b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b6e4c9-57d9-47b7-874d-5e6dd2103b1c", "sighting_of_ref": "indicator--8fc1cfb7-44a8-45ab-ad54-832e50edef02", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1bbee7-2f11-4780-b584-8f4d63f4e55d", "sighting_of_ref": "indicator--5902d8be-47da-4ddc-8511-e9459405597c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aac5c13-b665-4c2f-a3de-eeba21527691", "sighting_of_ref": "indicator--5902d8be-47da-4ddc-8511-e9459405597c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391f6e09-3205-436f-93bd-35c7a9f8591c", "sighting_of_ref": "indicator--5902d8be-47da-4ddc-8511-e9459405597c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc79fbd-2150-4867-b1f1-915bec89bc5a", "sighting_of_ref": "indicator--07a7c180-9466-4999-ac53-662364216d5e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658cd9e0-b51f-4afd-ba62-ea323d4b51d9", "sighting_of_ref": "indicator--07a7c180-9466-4999-ac53-662364216d5e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bf0cf6-943a-467d-b0ed-c1f032db6a0c", "sighting_of_ref": "indicator--07a7c180-9466-4999-ac53-662364216d5e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3313d980-f438-4318-bc9a-aa5bfa77c935", "sighting_of_ref": "indicator--9bb3440e-7d0a-436c-9834-7fac5b183493", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a13aac6-0a35-45e2-bb51-4b44934f4998", "sighting_of_ref": "indicator--0fa19f26-aa73-4a57-b516-1379bd4b2af6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c5e912-96e5-4985-bf8d-fd1854238000", "sighting_of_ref": "indicator--db990d22-9541-42a0-a9e8-ae7eaf65b628", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40eb27ff-5569-4437-8271-6eee686b4e1c", "sighting_of_ref": "indicator--79c97c62-0c1c-4330-a66e-7dceeb9ab569", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436280cf-b56f-4c17-bb6e-dd70767c7d54", "sighting_of_ref": "indicator--5b4bf4e7-24f6-4956-9db3-d4b21479562b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bc605f-b110-441e-ba38-3957d76a7f6c", "sighting_of_ref": "indicator--69f392e4-d31a-4804-8f15-b2a277dc310a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fcc166-48a5-4344-b167-ed9fdc0b8049", "sighting_of_ref": "indicator--20ae730f-43d2-40bc-b538-80c82ae3d0ce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834194a0-c291-4391-a6fe-a028e046cbb3", "sighting_of_ref": "indicator--2972571a-e1c1-46dc-a8f2-282e068aad86", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa3e22d-d04a-486c-bc56-3be7ca97a461", "sighting_of_ref": "indicator--efa3df74-afdf-4044-b309-6fb68475f225", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34e205c-ddb0-4fe7-a87f-a9ee03925e36", "sighting_of_ref": "indicator--efa3df74-afdf-4044-b309-6fb68475f225", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cd546e-aa9a-4e05-a38c-56266e5f0e09", "sighting_of_ref": "indicator--efa3df74-afdf-4044-b309-6fb68475f225", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1b6e60-6547-49ec-a232-02ff14a39d32", "sighting_of_ref": "indicator--fa0bf4d8-c7ee-431c-bae0-cd5d81f83b8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa07337b-787b-4092-b742-b85763a5c217", "sighting_of_ref": "indicator--7628360d-d6f2-440e-8afb-c4be124adcb4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751ad3f5-8e43-4ce9-918c-f2f7fcef75d1", "sighting_of_ref": "indicator--5c6148eb-6d3d-4e93-b9f6-475c768bf2f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb85119-4955-4331-9242-3f560c24c4ab", "sighting_of_ref": "indicator--5c6148eb-6d3d-4e93-b9f6-475c768bf2f8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1967596f-15d5-45bf-b8d1-7b8465d5cf37", "sighting_of_ref": "indicator--f937a875-7bbb-434a-9ec6-60eb183b2c20", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70010d48-9b05-4034-9b19-b49bf8b28cc7", "sighting_of_ref": "indicator--02d1b49e-2999-471f-a208-956bd67322b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b7ee90-2e2f-4874-9fab-8cfd1c6afb32", "sighting_of_ref": "indicator--02d1b49e-2999-471f-a208-956bd67322b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efab105-3694-4bf2-9279-d5bf1238b283", "sighting_of_ref": "indicator--d4b8eeba-e730-466f-956e-c8e15d9517ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316d321f-a473-4ab1-a878-6065dd8407df", "sighting_of_ref": "indicator--d4b8eeba-e730-466f-956e-c8e15d9517ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a73bc-76ad-4f78-8e6b-22e748a9cbe2", "sighting_of_ref": "indicator--46777bd2-8ad2-4338-a67a-e0e9e6311dd8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae2f0c7-feea-4901-b1b5-9aad21e29f6e", "sighting_of_ref": "indicator--46777bd2-8ad2-4338-a67a-e0e9e6311dd8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87481b82-4cac-4887-a32d-b7c575e2bd85", "sighting_of_ref": "indicator--46777bd2-8ad2-4338-a67a-e0e9e6311dd8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a233eb-9d58-4080-8b75-4a8de494d9ce", "sighting_of_ref": "indicator--2959b021-4204-4bec-b7fd-80bf39d24dde", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef1e600-b201-4178-a412-564b23d2e766", "sighting_of_ref": "indicator--11cf6b8c-facc-4b79-a737-4dec29fc15b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e3a379-ef6b-4e0b-a20b-b76c6a590584", "sighting_of_ref": "indicator--52c82f59-6453-4fac-aee7-bfd6c5d79c76", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd41cf05-dd2b-45eb-8b05-fe0d74d407cd", "sighting_of_ref": "indicator--76fe6dbf-fb76-42f8-bd78-f29a495daa08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189aaccd-955f-4acd-bdaf-f644bade66c0", "sighting_of_ref": "indicator--76fe6dbf-fb76-42f8-bd78-f29a495daa08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fdd4ed-5cdf-4769-bc35-989a3be291b5", "sighting_of_ref": "indicator--cc2f04b6-5c7b-4414-a680-7d10a08800c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b903b2-91ee-4cc5-bd93-bcbeda16eb30", "sighting_of_ref": "indicator--cc2f04b6-5c7b-4414-a680-7d10a08800c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e33b60-4282-4271-a644-b93c8319186d", "sighting_of_ref": "indicator--cc2f04b6-5c7b-4414-a680-7d10a08800c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f4eee5-d3a1-4000-91e3-e2b7ab9b6029", "sighting_of_ref": "indicator--48b6e426-19af-4c35-8884-fe020d36969a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80d0055-e873-478d-81d2-f0aa1691f1fe", "sighting_of_ref": "indicator--ebc86a24-284b-4319-a4f6-dc564f401b9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a230264a-b791-48a7-a38b-7a710fa13275", "sighting_of_ref": "indicator--ebc86a24-284b-4319-a4f6-dc564f401b9f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17312972-ebbe-4a8a-ab43-c354b37c5da6", "sighting_of_ref": "indicator--ebc86a24-284b-4319-a4f6-dc564f401b9f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df77bbb2-9f45-4dcc-a56c-95a88265980e", "sighting_of_ref": "indicator--fbbbe3ee-2fdf-45ec-a152-8472763af156", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61d3aa3-e176-4eeb-8e30-40816c07b26e", "sighting_of_ref": "indicator--fbbbe3ee-2fdf-45ec-a152-8472763af156", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01901586-0073-4ffe-a6c8-820ad33e0307", "sighting_of_ref": "indicator--fbbbe3ee-2fdf-45ec-a152-8472763af156", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0593883f-8781-4cf4-9f79-2eb315faf3ad", "sighting_of_ref": "indicator--410a9de3-ac68-493a-af6f-b03b1ed30119", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d33350-e1da-478f-a29b-1278cc36d3f2", "sighting_of_ref": "indicator--410a9de3-ac68-493a-af6f-b03b1ed30119", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450fc373-2f97-4b90-b617-0b06708c1760", "sighting_of_ref": "indicator--bed7582a-f4a7-4806-981c-f85c53740dd2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b023605-fa16-49b2-82a6-26fde172a427", "sighting_of_ref": "indicator--bed7582a-f4a7-4806-981c-f85c53740dd2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fd9680-c3e3-47d9-81d5-923433e2acf3", "sighting_of_ref": "indicator--bed7582a-f4a7-4806-981c-f85c53740dd2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7770e7-b54e-41a7-9db3-e9b28b5b2219", "sighting_of_ref": "indicator--e62c20ae-1cd9-492a-9e0d-ae3aaae0896b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9d9fc1-4c2c-4ebe-842f-eae645fe21d8", "sighting_of_ref": "indicator--a34f7951-2aa5-4beb-ae8e-d0ebbec12a5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3feaac8a-4b23-4f6e-b8a3-27dca1d7554d", "sighting_of_ref": "indicator--9f645000-4481-4c20-929e-76b38b666571", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7aca882-49bb-40cb-b21d-c85b9d254dcd", "sighting_of_ref": "indicator--9f645000-4481-4c20-929e-76b38b666571", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dac5a8f-4af8-4c10-b6e9-3adb9896263c", "sighting_of_ref": "indicator--752fb0fe-6d33-474c-b319-4eab5abaa2e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b353ecd6-7f89-47a6-afe2-ee0aa806e546", "sighting_of_ref": "indicator--752fb0fe-6d33-474c-b319-4eab5abaa2e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0ee29f-5350-4bae-aeef-2cc3c00ef20c", "sighting_of_ref": "indicator--752fb0fe-6d33-474c-b319-4eab5abaa2e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4c6bb4-e531-4b41-a84d-10877211af64", "sighting_of_ref": "indicator--9e467ee8-753c-4e4a-87e1-046df3723148", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5aa043-8150-4a7a-aad2-9f6899ca711a", "sighting_of_ref": "indicator--9e467ee8-753c-4e4a-87e1-046df3723148", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9615a5b-8bd6-4806-b056-1a1e51da6436", "sighting_of_ref": "indicator--9e467ee8-753c-4e4a-87e1-046df3723148", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690c1013-1f46-45c9-a3c0-95f027610728", "sighting_of_ref": "indicator--8cd41076-d3c1-4fdf-b666-7e9ddfb210b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb17129-079f-4618-a077-00031e2f66fb", "sighting_of_ref": "indicator--8cd41076-d3c1-4fdf-b666-7e9ddfb210b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfdcd83-f058-43d8-8492-cbbc7d883236", "sighting_of_ref": "indicator--3c726cfb-7183-4a2a-a446-778bec364df3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe9ccf8-b015-490d-92eb-52f235d92b51", "sighting_of_ref": "indicator--e1825dde-d42b-463b-9e20-72c79c9105ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177c2d72-d6cb-429b-b042-603c8b937381", "sighting_of_ref": "indicator--e97cf263-2a1a-4e84-b37e-22f8ff47b7ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595d78eb-c534-459f-ae88-c8a41451c842", "sighting_of_ref": "indicator--e97cf263-2a1a-4e84-b37e-22f8ff47b7ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af10763c-29ad-4f00-ba2f-a0a490d826a5", "sighting_of_ref": "indicator--e97cf263-2a1a-4e84-b37e-22f8ff47b7ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b242408-8878-4697-8c8c-94925b7c8f73", "sighting_of_ref": "indicator--c0207e10-3353-4773-bf5e-f83cfa10d349", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aad47c8-6e90-4d00-b39a-94ec3b7cb329", "sighting_of_ref": "indicator--c0207e10-3353-4773-bf5e-f83cfa10d349", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5448a2f-744e-4f30-9bb5-11bd35fe28d4", "sighting_of_ref": "indicator--c0207e10-3353-4773-bf5e-f83cfa10d349", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e698c477-6926-4cf4-abd4-b45da807e38c", "sighting_of_ref": "indicator--6bf0a747-961a-4c0d-a3b7-df067d326226", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96e3a4d-5baa-4390-8798-012dd69923d1", "sighting_of_ref": "indicator--6bf0a747-961a-4c0d-a3b7-df067d326226", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8a6475-b865-4345-b2cd-8eb1bbcc6a09", "sighting_of_ref": "indicator--34a2c728-b754-4530-a627-995b973fc920", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bd11e2-ea25-46f8-a325-b29e13152d57", "sighting_of_ref": "indicator--274cfb9f-aefa-455a-8307-4d5245e38430", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a838c69e-ffbe-4856-b3c1-17ba4226e7ac", "sighting_of_ref": "indicator--695b2832-281e-460b-8cf2-2061297aaac8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd368e4-3df7-41ee-b108-a68dc0312a88", "sighting_of_ref": "indicator--695b2832-281e-460b-8cf2-2061297aaac8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c9aff9-a0fc-4745-a218-75e9a776fda2", "sighting_of_ref": "indicator--695b2832-281e-460b-8cf2-2061297aaac8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ce95b4-fb41-4586-af1e-2ccfdf93c7f5", "sighting_of_ref": "indicator--d1e88ce4-6ca0-4b32-9f94-06437158d2cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f433bca-3a9e-47a4-9b9a-9190a724fd5a", "sighting_of_ref": "indicator--a68207ba-ee66-4587-b39f-ba6091e2d5d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b1e89f-8aef-4aec-8b2c-24d62d703e4f", "sighting_of_ref": "indicator--3b8073f8-b6b4-4bd1-b1a3-2d2f8161b1a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc4367e-8c30-43ae-b4c3-7b0a843ba55e", "sighting_of_ref": "indicator--6f74389f-e8c7-445c-9c8e-3cb706b04251", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fd0a47-285b-44d7-ae85-7f9715474338", "sighting_of_ref": "indicator--9091da93-2b8d-4451-b40a-191a97e4ab1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1e1b8b-4ab0-4821-be4e-12fc6d4656b4", "sighting_of_ref": "indicator--97018940-1958-4038-a38b-74143d1603e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7091949-fca2-49c4-bd2d-556f095c8ef0", "sighting_of_ref": "indicator--b329ddc3-0aee-493e-b23f-318cb8096fcb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6af255f-ac5d-441f-abd5-c6b98e76f758", "sighting_of_ref": "indicator--e8a385ba-8a12-4764-9f05-f6bf6228c8cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898bf98b-76af-408f-9d77-be81d943e8bc", "sighting_of_ref": "indicator--379acb8e-4abc-463d-a93f-3fbe9006abae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cc5137-e6f4-4f3c-a299-80cb8dd6b1ee", "sighting_of_ref": "indicator--cad4cf8f-6466-4c7a-9610-df1569347cb5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cce31f8-7e53-452f-9133-963bed0faf7b", "sighting_of_ref": "indicator--9b56bcf8-f6f4-4f83-9dd9-831d8e00d0b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecd136b-2f99-4734-a9d4-b4987371d31e", "sighting_of_ref": "indicator--562df095-6eff-4eb7-bd39-d0bc9ea3f2de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6354237d-b297-407c-8399-3d0c8ccf86a8", "sighting_of_ref": "indicator--251da683-5dc7-4496-ae74-58d8a92194b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002b5b3f-45c1-4c77-87ad-8e21783756ea", "sighting_of_ref": "indicator--93209ce2-bff5-49c8-a8cd-261370463e37", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de45035f-82b3-470d-8560-19d417090d18", "sighting_of_ref": "indicator--34fea5bc-a4ec-4663-824c-42b839331cb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd20d1f-fc06-4ab3-8482-0f61b4ed9f91", "sighting_of_ref": "indicator--10b61c17-1c89-4f9c-9e42-fbdc3b8fe5e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4a8418-2b0d-4cee-b92c-906a67bf82cb", "sighting_of_ref": "indicator--22f883f3-e4f5-47a0-8d12-353cf2438e2c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25533009-cc76-4352-8f65-4e6abb88bcdb", "sighting_of_ref": "indicator--0007b5d9-c2bf-4660-836e-f83a0991afc3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712c6c1c-6b48-44a0-bf00-7a11a3204a30", "sighting_of_ref": "indicator--e46e1116-71ef-482c-9fcb-628b2b2ee230", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf200af0-c51e-4dfb-9add-a4461a19a212", "sighting_of_ref": "indicator--761dd915-65e8-4623-932d-71f6866b921e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86a3bdf-2d5b-4e31-9fb8-bad44020f922", "sighting_of_ref": "indicator--27308131-eca3-4a7c-b1a4-b4e2df81c005", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6a5929-a6af-40ee-9fea-e64bc83b100e", "sighting_of_ref": "indicator--51585911-11be-4522-84ca-c18807efd3b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815225df-6593-41c2-8f52-1a90124f6d94", "sighting_of_ref": "indicator--78d0d837-fb8a-4ba6-982d-66aa2343a89c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644a2e6e-1a27-47ae-a44d-2cca2e4a302c", "sighting_of_ref": "indicator--4e8bc257-03f7-4f18-91ca-28b66e79687b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bef20e2-8316-4d2c-94cd-bbbfac9675a0", "sighting_of_ref": "indicator--bdfc7cb9-c382-4675-ac74-37cc73298db7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292e04d9-6646-423d-bda5-2d68b3dad27d", "sighting_of_ref": "indicator--fa6b14b1-3aea-44ea-b8da-98cf5bd5a1c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa36fe87-5003-41a1-a44a-43a16feb4784", "sighting_of_ref": "indicator--87832859-d893-4fd1-8364-5b7dec3fdae1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb13174-c39f-4760-9a8b-5a80d4a037b2", "sighting_of_ref": "indicator--2255ba5a-dc3b-4279-89e9-62dc00d420a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0d170b-7b2e-4d60-a084-463b5f999582", "sighting_of_ref": "indicator--2255ba5a-dc3b-4279-89e9-62dc00d420a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671873ff-972f-47d4-ba60-f58a5e2e5a5b", "sighting_of_ref": "indicator--e39e0269-e8f2-4de3-b03a-06ef3544c76e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b5d7e5-abf4-47fd-80dd-81f543def4bd", "sighting_of_ref": "indicator--e39e0269-e8f2-4de3-b03a-06ef3544c76e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f731fc-9ca2-4ec4-b54a-a1ca07a2a1fb", "sighting_of_ref": "indicator--e39e0269-e8f2-4de3-b03a-06ef3544c76e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cb8e55-7ec2-4a6e-8ff2-c2841756b3a1", "sighting_of_ref": "indicator--f5f3123b-d8e0-4858-bc1f-4676215a55f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d9fd1d-bbe8-4a4f-a51a-650f784cae6d", "sighting_of_ref": "indicator--f5f3123b-d8e0-4858-bc1f-4676215a55f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c77725-a0e9-4ec3-b8f0-279d4c96ee94", "sighting_of_ref": "indicator--6754ead4-5d5e-4f39-806b-54a8399300e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe05093-6918-4a6b-bc8e-ed448b6e2290", "sighting_of_ref": "indicator--6754ead4-5d5e-4f39-806b-54a8399300e7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaba4af-eb56-4d5a-899b-4d571fcec051", "sighting_of_ref": "indicator--7dbf92cf-260c-40aa-9a9f-00ebebfc0040", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24aedb0a-c085-4d95-acf4-37d8025db4bb", "sighting_of_ref": "indicator--7dbf92cf-260c-40aa-9a9f-00ebebfc0040", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248c03ff-4a27-47fb-a21f-7f5e01a69136", "sighting_of_ref": "indicator--7dbf92cf-260c-40aa-9a9f-00ebebfc0040", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0103941-f326-4eb8-8544-798c6351abba", "sighting_of_ref": "indicator--4d0dd03b-2e92-448c-a957-d04bbf6024ed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905f39dd-1d24-453e-ad53-98c74e5a564c", "sighting_of_ref": "indicator--4d0dd03b-2e92-448c-a957-d04bbf6024ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070dbb18-8469-48f7-9a08-c1bbb94b5792", "sighting_of_ref": "indicator--5605bcb2-547a-4d91-bc95-83f23f926b3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c60a7b-e50e-408d-ae65-3639d5946426", "sighting_of_ref": "indicator--5605bcb2-547a-4d91-bc95-83f23f926b3f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fef22a-37c6-4116-aeeb-f8fb121fc24b", "sighting_of_ref": "indicator--150765fe-e317-413e-b6c2-cf9d4daa03cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade81150-2d41-4c7e-a1d4-128b1f8760d2", "sighting_of_ref": "indicator--150765fe-e317-413e-b6c2-cf9d4daa03cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d5dcb8-e71b-43a3-a6c3-875ba8a496bd", "sighting_of_ref": "indicator--150765fe-e317-413e-b6c2-cf9d4daa03cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ad7399-fff3-43b8-83e8-9cc94db7730e", "sighting_of_ref": "indicator--ba31b895-d6e8-4bc9-921d-7ac93d2368f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9613cf25-1abd-4c56-b902-8649e2593570", "sighting_of_ref": "indicator--200f4454-b4cc-459a-b147-ee91d415f943", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3828ae-80bd-4bf3-835a-4a1bbe412049", "sighting_of_ref": "indicator--200f4454-b4cc-459a-b147-ee91d415f943", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6991ffe7-ffe3-4feb-9914-0ace9cec1566", "sighting_of_ref": "indicator--7629185c-ca74-4250-9295-5c8c168e3491", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfb2791-6cf3-4ade-a19e-4e0a8baf9c3e", "sighting_of_ref": "indicator--e1c3db5e-ad7b-46ad-8a51-271e9db1761f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d6bb23-8724-4939-af4f-79a16cc76da7", "sighting_of_ref": "indicator--f30c083e-ea70-4353-8df1-d0be838d5d13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a25bd0-f536-4d58-b796-e3b0bd9489e2", "sighting_of_ref": "indicator--1028a7e2-7d18-496d-9582-d3e9a988288e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14d47d4-719c-4f29-9bfa-286f391e6ef1", "sighting_of_ref": "indicator--4939a7a5-33e7-439a-85f5-7c4bea231036", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e982777c-4c0a-482a-863d-9a1c3df39a8a", "sighting_of_ref": "indicator--e5c042d2-7787-44af-887e-87692736a460", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02119bf-add2-4921-861e-687608a8af40", "sighting_of_ref": "indicator--24ee3d8e-62a6-48d3-8a37-f612ef48a573", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eed30e2-f377-469c-a19f-3753edb6a427", "sighting_of_ref": "indicator--24ee3d8e-62a6-48d3-8a37-f612ef48a573", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9631c843-f13f-46cb-8694-cd0366e96fad", "sighting_of_ref": "indicator--7c7b5201-0e99-4486-aae8-220a474afe87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689b2a89-e64a-40fb-b278-9dcf79313e54", "sighting_of_ref": "indicator--c9effbba-3e63-4eb5-bcbf-450cfd6b35fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b07d5f2-aa7c-414f-9de3-d81ad7682f88", "sighting_of_ref": "indicator--f77276a6-a594-476b-ac2e-2de72a8bb476", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9aca66-1107-4309-88dd-c4a514cdbfb7", "sighting_of_ref": "indicator--d76f429c-e8e2-411f-a5f5-26501b073342", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990855cc-93f2-43f6-b1c6-26c1f2b7f6eb", "sighting_of_ref": "indicator--d76f429c-e8e2-411f-a5f5-26501b073342", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e3e870-2cc1-47e9-933c-9e2248a0e7ae", "sighting_of_ref": "indicator--d76f429c-e8e2-411f-a5f5-26501b073342", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00aeb123-810c-46c0-9118-6a5b46ffa56f", "sighting_of_ref": "indicator--a19d0d65-f1eb-4f55-b75c-b012afea22ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960e90bd-fcf2-4a2c-9ccf-24c8ea6151cf", "sighting_of_ref": "indicator--a19d0d65-f1eb-4f55-b75c-b012afea22ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03781855-6f42-49be-b4a5-d9855e577cb3", "sighting_of_ref": "indicator--bc5b0e3c-0592-4ef8-875c-dc915e39686a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f2cd50-441f-4d6e-a452-f24f2a2e7fbf", "sighting_of_ref": "indicator--cb72f2c2-9633-4184-a734-b5613656ced2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0c8c33-6456-4022-a8d8-ed7aee277949", "sighting_of_ref": "indicator--27a1e611-daff-488a-b758-789f2c6fcf6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b98232-7e19-4cb2-81d7-7e3cd43166b6", "sighting_of_ref": "indicator--6f0ce903-366a-488a-bb13-4e437fbddeb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf09863-f0ea-4713-bbba-f3bbdba98857", "sighting_of_ref": "indicator--4e6c1d70-2622-4eaf-b778-e05acdfba7e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cec686c-b7c8-4881-834c-71622c71fbc8", "sighting_of_ref": "indicator--98a9e4f7-1f33-4277-ac35-d36f2315abd9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcbeaff-7856-4214-95c7-b7fec7004b4d", "sighting_of_ref": "indicator--f61b4aca-9872-434a-a8b5-23db9746a0c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfa87d5-94f5-4ada-8bb9-13c5f44e2659", "sighting_of_ref": "indicator--68fe513d-77c8-4ed3-93a1-f04a91e93224", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a483cf7-af03-4200-a881-814586424beb", "sighting_of_ref": "indicator--8b14884d-98bd-4a58-8ebd-41de0f576229", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1416b9e-c841-4a3b-ae4a-5ea2d14ff2a0", "sighting_of_ref": "indicator--c79c72d2-41b9-4410-aac5-761761ac0ec2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfb1656-3229-49f9-bcec-21fc05a029f3", "sighting_of_ref": "indicator--4407dd01-e8c8-4101-a1c7-70edc129ced6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70703757-3822-43b3-abf4-ef4e6592457e", "sighting_of_ref": "indicator--1a7caae1-5587-40a4-8bf5-58cd7b1c181a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54d1644-2dcb-42b2-8513-7c55d539df61", "sighting_of_ref": "indicator--1015b2e5-4b29-4157-a158-83817894d5b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b67b45e-a924-491a-a56f-cdcbdc1c61c7", "sighting_of_ref": "indicator--26f5955d-99eb-4b5f-bcba-61b76889ef04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36aeeb4-f090-4862-93c2-2acde638acfe", "sighting_of_ref": "indicator--ded3c6ca-25bd-4021-b0b8-64acd2833b8a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1f48da-771b-4701-957e-97b758fed57e", "sighting_of_ref": "indicator--e9a3dbe3-414d-4994-99ac-3336a09140ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbdf084-ae60-4c64-bd1f-2114e3cef622", "sighting_of_ref": "indicator--6452e5fe-d3cb-4980-bd20-2e9eae81329a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0472551-3013-4186-b50a-1cca40e9e098", "sighting_of_ref": "indicator--a56528ce-c2a8-468d-8af8-78cb5d9f9f04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58c14b9-ba77-4ddd-a40f-af68081eb837", "sighting_of_ref": "indicator--4264c2e0-4ef1-4205-8b5d-127796b7dbe2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8523c2e-706d-481b-b7bd-d8689bed5781", "sighting_of_ref": "indicator--9f446f6d-9c3a-4c4c-925d-6dc7b22015d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbaa32d-bc91-475f-8fca-40fb437e3528", "sighting_of_ref": "indicator--1f1d5502-cf44-48ba-83d3-e228d871cc86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2911df6e-2b5b-4d27-a092-c847d1de3280", "sighting_of_ref": "indicator--1f1d5502-cf44-48ba-83d3-e228d871cc86", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8e10cf-b9ad-48c6-83cb-e6e2723f9709", "sighting_of_ref": "indicator--00888735-5e93-4c7d-bd41-44a23616a274", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f8dab0-8563-4a75-a39b-41af3a5ab3b0", "sighting_of_ref": "indicator--00888735-5e93-4c7d-bd41-44a23616a274", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f77764-6117-437e-a0ae-77bc1bdb308e", "sighting_of_ref": "indicator--0073bbf1-83f7-490c-880d-1f1bb2177ddd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaa864c-fab4-46ee-a340-a434a2ccca35", "sighting_of_ref": "indicator--f2155a0b-1ae1-4b95-a5cc-6b42755cf853", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48895d71-5a05-40c1-8cbc-7c715a58c730", "sighting_of_ref": "indicator--b4d5062f-4d17-46eb-b0e7-a15a16ea3cf8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b14bdf-5bb6-467b-9758-9e71e545247e", "sighting_of_ref": "indicator--68620d6c-3d67-405f-9d8c-9db59d3b40af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a310eb77-93a3-4009-8691-ec57cc312b35", "sighting_of_ref": "indicator--68620d6c-3d67-405f-9d8c-9db59d3b40af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20f140f-a394-4eff-b571-3c0f6e39e007", "sighting_of_ref": "indicator--0e6f9e68-d3a6-45f0-88f1-2194cd398047", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03dcd368-0acd-4fdd-84d5-50406c7431c4", "sighting_of_ref": "indicator--0e6f9e68-d3a6-45f0-88f1-2194cd398047", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149c1491-c04f-42b3-a177-9646f4ebc21c", "sighting_of_ref": "indicator--f580a1a6-fc3c-441e-94c1-9726bae37232", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcacd812-461c-4f76-80dc-ee7027e739d0", "sighting_of_ref": "indicator--a59a9da5-75c0-4e94-8f7f-098a8c434ba2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7c4538-8100-4d94-b49e-2fc737a898c6", "sighting_of_ref": "indicator--c9a047e7-1500-4cfa-8d9c-3bc321063823", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec07272f-de2f-4253-9bff-7fa38d7f81ba", "sighting_of_ref": "indicator--ea435f53-1c4b-4a29-a1d0-229fcddddbab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ba7605-5022-4517-bdd5-7353b29729ff", "sighting_of_ref": "indicator--169126ba-6b89-4508-b802-f755b262f78d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6a5fa0-1291-462f-bdbf-7af6690dcfd9", "sighting_of_ref": "indicator--4ce2077d-c5eb-4f48-80dd-19175f1240df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a1ab5b-f8d9-4be9-8c88-6d867dc34fa7", "sighting_of_ref": "indicator--ae64c1ec-0d98-4521-8af9-1557b52e299e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6001a95d-921a-4032-aa2e-772b3ce078ca", "sighting_of_ref": "indicator--ae64c1ec-0d98-4521-8af9-1557b52e299e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1afa7c-2664-4976-a871-24b45ffc1ecc", "sighting_of_ref": "indicator--ae539e1b-5c98-43bf-aa65-164110b2a25c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab985ec-123a-4da7-b9dd-91e7bab6b6fc", "sighting_of_ref": "indicator--076ec1c3-8178-4f5f-b4f2-49cb16777345", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee4524d-0731-4575-a14d-badb48089f82", "sighting_of_ref": "indicator--a7e04ca4-64eb-48d0-9e28-beb48a627709", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c608f91-54ad-4733-9e92-e492d19016d8", "sighting_of_ref": "indicator--a7e04ca4-64eb-48d0-9e28-beb48a627709", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9218c9-8c7b-476a-8323-7b2eef693cdc", "sighting_of_ref": "indicator--6e81376e-b010-4dc4-84f8-06f8a73d052e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dd27da-e90c-482f-8b91-475db0e007a8", "sighting_of_ref": "indicator--6e81376e-b010-4dc4-84f8-06f8a73d052e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd03dbe9-ddc3-4b69-93f9-97ba6b6ccd62", "sighting_of_ref": "indicator--b9844b4f-da8e-4d92-9853-3f47cdfae75c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed0676b-5845-4315-8506-5bc4e9d977cf", "sighting_of_ref": "indicator--029e559e-e58b-4e85-bb7c-0b05e7e97657", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d90c34-71a2-4479-b2ce-83378a63554b", "sighting_of_ref": "indicator--029e559e-e58b-4e85-bb7c-0b05e7e97657", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c406ba5-7950-4ece-ab4e-d97d8f80e73b", "sighting_of_ref": "indicator--10267c1c-174d-4f5b-8b69-ec3a33a10d38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f765b6-642d-4ec6-8bf4-70b34f5229e8", "sighting_of_ref": "indicator--10267c1c-174d-4f5b-8b69-ec3a33a10d38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8cde23-dbe3-4c48-8ec8-7f389fa6bdc7", "sighting_of_ref": "indicator--10267c1c-174d-4f5b-8b69-ec3a33a10d38", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c728a6-04f3-4943-ba69-1fb36315b1a5", "sighting_of_ref": "indicator--4e00e903-9455-41c6-91c5-38471bd10dc6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213f4ba7-7db5-4b5d-a432-0ce334b808e4", "sighting_of_ref": "indicator--4e00e903-9455-41c6-91c5-38471bd10dc6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5882cb-57a6-468c-a722-cb86b616dbea", "sighting_of_ref": "indicator--70c29132-9f77-48e9-9116-bb3973251112", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce8ba48-0a32-4c11-aad9-6e29cc0a89f3", "sighting_of_ref": "indicator--70c29132-9f77-48e9-9116-bb3973251112", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3fff17-832a-4ae9-9ff2-2db04c693b4f", "sighting_of_ref": "indicator--8d8674ea-ff24-4083-ad40-220f91a90544", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a93d762-b193-4bae-be20-67a3d69e6751", "sighting_of_ref": "indicator--8d8674ea-ff24-4083-ad40-220f91a90544", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304fdd86-2de1-4e21-902f-d61af7bc858e", "sighting_of_ref": "indicator--72d7ac46-2ab6-4b96-b652-e9b45287db46", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3c56a7-f85d-4daf-a859-59fae34316b8", "sighting_of_ref": "indicator--72d7ac46-2ab6-4b96-b652-e9b45287db46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6c7355-b1bf-4503-a8a0-8fc22bb1c403", "sighting_of_ref": "indicator--e346a673-26a3-4eb4-8917-b256ce09535a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3290b0b5-ab7b-438c-860c-d54661a3bb50", "sighting_of_ref": "indicator--e346a673-26a3-4eb4-8917-b256ce09535a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe269504-5598-4339-8dfc-4ccee92dd1f8", "sighting_of_ref": "indicator--e346a673-26a3-4eb4-8917-b256ce09535a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589f2a43-36c0-4dc1-ad1b-410fc9e06f35", "sighting_of_ref": "indicator--2cefc10f-ea8f-4b4a-99cb-2272f42dbb93", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac74477d-acf7-424e-80e0-a2c452139bc3", "sighting_of_ref": "indicator--2cefc10f-ea8f-4b4a-99cb-2272f42dbb93", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4485afa6-5452-44cf-9f88-c6d6e0d75cdd", "sighting_of_ref": "indicator--2cefc10f-ea8f-4b4a-99cb-2272f42dbb93", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d5375a-451c-49b0-9003-2572343b3e14", "sighting_of_ref": "indicator--dede5f43-c9cc-49aa-9b95-8dea43b7c03f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6064ab57-ba40-4294-9386-6bf75938a1c1", "sighting_of_ref": "indicator--dede5f43-c9cc-49aa-9b95-8dea43b7c03f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affb49b7-d9d9-47a7-b2bc-6a74437f8dae", "sighting_of_ref": "indicator--756e77c9-ab7e-4409-85d3-9dec61ddd5c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a683cedc-792b-4238-b89f-117c4b0a8663", "sighting_of_ref": "indicator--756e77c9-ab7e-4409-85d3-9dec61ddd5c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec47bcf-e288-4458-bd73-412fc1e57927", "sighting_of_ref": "indicator--756e77c9-ab7e-4409-85d3-9dec61ddd5c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5e9bf3-b011-4cfe-8f06-5172e099802d", "sighting_of_ref": "indicator--bc1b65e2-8932-407d-b6f2-1343be7acfd6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc22fa9c-3058-4baa-a295-2ef88e2614c1", "sighting_of_ref": "indicator--fde7a423-69b3-4fab-8d0d-0ae215d86d58", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c205b2-42e7-4d27-a7fd-dcf29e6fbb6f", "sighting_of_ref": "indicator--fde7a423-69b3-4fab-8d0d-0ae215d86d58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be91614e-c5eb-4833-a9eb-c440b19436e4", "sighting_of_ref": "indicator--a2f60cd4-6b16-49ec-966a-57a0464892fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0608c8-7fb1-489e-a18d-776237e829c7", "sighting_of_ref": "indicator--a2f60cd4-6b16-49ec-966a-57a0464892fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b209c75-53d7-4609-ba06-d9ddd5839fbc", "sighting_of_ref": "indicator--7d7e678e-9b75-45a5-a81e-c9ce46ac7ce1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9043cda4-f6ce-4ff2-a2ae-aabfcdd9b0e0", "sighting_of_ref": "indicator--51e46a38-19b9-420f-831d-41468b3c54cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d089e9d-11d8-4eb9-b9eb-d276651882dd", "sighting_of_ref": "indicator--51e46a38-19b9-420f-831d-41468b3c54cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23999650-1d93-490a-9b77-44abfbaae58b", "sighting_of_ref": "indicator--51e46a38-19b9-420f-831d-41468b3c54cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee2a54be-c07d-4069-97e8-4159e358bda6", "sighting_of_ref": "indicator--44a79cde-5d2b-4bce-abfb-c4b9d6245a69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cf8b9e-1616-4d76-8d90-c661c66d40c1", "sighting_of_ref": "indicator--3c8cfb77-8ac7-493d-abb3-22b56a23dc12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d60e74-6a92-4026-b20c-c9fe45474690", "sighting_of_ref": "indicator--145ed30a-ea41-4052-bf72-a3b55ddddfd6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded24f09-df02-4fa7-913c-a48d3f7449ef", "sighting_of_ref": "indicator--836ff774-36ff-4149-9e9a-4fe0f0f779b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bd2f33-6ca1-4406-b47e-27761cc41899", "sighting_of_ref": "indicator--47a1d5f2-716c-48a1-aaa3-43e608177fbf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21571ccf-9e19-4815-a97b-730fe39fad6a", "sighting_of_ref": "indicator--f955d365-9516-4de8-b295-4c861f79f00a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5887cb01-03d4-4dd8-80d4-f5e31cc5bcff", "sighting_of_ref": "indicator--f8a62f48-ec78-499e-9edf-c429787ea39f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f43a02-27d7-4c11-ad8c-ea7f36cb066a", "sighting_of_ref": "indicator--f8a62f48-ec78-499e-9edf-c429787ea39f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde95748-dcfe-44f7-bdf8-94e10913fd81", "sighting_of_ref": "indicator--33bf5b64-e7a5-42dc-8dc5-759c4d5c5913", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e697561-2dce-4dc7-afbc-49e729c1a591", "sighting_of_ref": "indicator--33bf5b64-e7a5-42dc-8dc5-759c4d5c5913", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e2ba59-ec95-4f88-9a87-fc9f56217a89", "sighting_of_ref": "indicator--9169ed5c-cf33-417d-bd5a-0afd8209506d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5499e002-6679-4cce-94bb-ac63fa45e99d", "sighting_of_ref": "indicator--a9d98dfd-0960-4651-ba84-c6ffe1dd27b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecd6f9e-1c8d-4130-823f-4085c8b6973d", "sighting_of_ref": "indicator--3a558fee-4694-445f-9a55-184ec17e5202", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f204e5f0-c2e7-4894-b714-7af533fccaaf", "sighting_of_ref": "indicator--3a558fee-4694-445f-9a55-184ec17e5202", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c16e06-c410-41e1-9903-3959e223d5f9", "sighting_of_ref": "indicator--0acaa947-a88c-4aa1-b19b-00f90609a055", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f07cfbd-446d-4c0a-b5c2-2c33aa9f5ac7", "sighting_of_ref": "indicator--16003335-95f3-41bb-a8cb-89e4dfc697d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfb4570-b3bd-4f7b-9de4-fbbe4572c91a", "sighting_of_ref": "indicator--16003335-95f3-41bb-a8cb-89e4dfc697d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeb76e2-5780-49e4-9974-74083b1ce0e2", "sighting_of_ref": "indicator--16003335-95f3-41bb-a8cb-89e4dfc697d1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d76e894-649e-41c1-81a3-a8273f79ddc6", "sighting_of_ref": "indicator--dfdfb702-9296-42a6-baa9-de0250723ef9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f46dba8-011b-46cb-9dc6-a0d048c10406", "sighting_of_ref": "indicator--1266a90f-68fa-4652-b630-b9b76c6d532f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf81c05-7ae3-4cf3-9890-d5f4953fc9ea", "sighting_of_ref": "indicator--9d262dbd-55c2-495e-bf9a-fb94bd4a9ac6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600d86e2-96aa-4baf-b8f3-a4bf33899208", "sighting_of_ref": "indicator--9d262dbd-55c2-495e-bf9a-fb94bd4a9ac6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19d2e72-7927-4641-838f-8e9d2e9ba456", "sighting_of_ref": "indicator--91947fa7-8fb0-48ac-861f-7dd2a8266e1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509c3854-7fc5-42ed-a17d-2f7b90d3f672", "sighting_of_ref": "indicator--91947fa7-8fb0-48ac-861f-7dd2a8266e1c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af073cfb-7129-4025-8cf5-c9825141196f", "sighting_of_ref": "indicator--a6d80280-85ef-4567-be87-3f1e77d91cf1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d67489-adb6-43f7-bf1c-0bdd333de21d", "sighting_of_ref": "indicator--df8978a3-81c0-4591-b3e2-4d9dfbe4d962", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bbcbb7-9b3b-4ee8-a8c7-3c82e378f223", "sighting_of_ref": "indicator--df8978a3-81c0-4591-b3e2-4d9dfbe4d962", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a539aab8-b193-447e-9fab-38415572425c", "sighting_of_ref": "indicator--73299771-6aa3-4905-bc15-cda11fbcf848", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac9bcfa-7c11-4687-bf5b-a6ba32a95b4b", "sighting_of_ref": "indicator--6d84c8a8-92ef-4cf4-9bcd-ced563170137", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0232cf24-b3ee-4016-acfd-6a60e26d7634", "sighting_of_ref": "indicator--6d84c8a8-92ef-4cf4-9bcd-ced563170137", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5d94e7-f9b8-470d-8528-ef653f70b6f8", "sighting_of_ref": "indicator--0013a302-9135-4e0d-b379-97e25f8bff36", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918cae6a-1e76-4de4-a428-63d91ce6c8a9", "sighting_of_ref": "indicator--be90e1f2-4f72-4af4-a4fb-f9e124088805", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2136fa-0f8e-4fce-9aae-9e628e60cf50", "sighting_of_ref": "indicator--2f7982ba-c538-40dc-b6aa-6ad37c129ec5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e76e67-de44-4327-b21b-1f49af9d128b", "sighting_of_ref": "indicator--2f7982ba-c538-40dc-b6aa-6ad37c129ec5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb1df9d-5d24-45b9-b06f-79cfab2fdadc", "sighting_of_ref": "indicator--f75cf3a5-ad02-4621-93b0-3a3452b0961d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5050daf-d947-4d6b-86c7-15b955dbaab3", "sighting_of_ref": "indicator--f75cf3a5-ad02-4621-93b0-3a3452b0961d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c638470-f383-4722-a201-f010f5b12354", "sighting_of_ref": "indicator--623a0212-95e1-498b-a876-fdc38de6261a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1537e184-44c0-427f-949f-4b5cf0b8d71e", "sighting_of_ref": "indicator--623a0212-95e1-498b-a876-fdc38de6261a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c602cb57-90b1-4d34-ae39-df88717e54f1", "sighting_of_ref": "indicator--9b8fc6ef-aa94-4aef-81e5-665b14fef310", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917caaa3-624e-4476-8ceb-9ee071579015", "sighting_of_ref": "indicator--b57d98a5-f1a4-4bba-8d0a-f70f1aaee76c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8cb679-61ef-4494-989b-ef9ab4bebbeb", "sighting_of_ref": "indicator--b57d98a5-f1a4-4bba-8d0a-f70f1aaee76c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c5b0cc-4ee1-4a43-9e5c-f04c8f6e11f5", "sighting_of_ref": "indicator--257eb7d5-b04e-4df0-8dbc-81307bee3e06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8287e436-652f-4f35-8a70-47a0711f4306", "sighting_of_ref": "indicator--257eb7d5-b04e-4df0-8dbc-81307bee3e06", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1520c3f6-bd17-40e4-8413-1407cdff63a7", "sighting_of_ref": "indicator--c9010576-f764-4b47-9c42-6fc3edbd7c13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c06b196-a9c6-49ec-9fe4-f3624483112e", "sighting_of_ref": "indicator--380d71ed-ef80-4e44-b6d4-8ab35fac396a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0210b1-d4fe-4f13-b3f7-5fa6b05bd8a8", "sighting_of_ref": "indicator--c7156f29-e611-4a2d-b600-ea4d64ef4738", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2448971-7dd5-4c10-9327-cff949aedec7", "sighting_of_ref": "indicator--be73b19c-b741-4012-a9f6-0916adb35a5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b388b5c-01a7-47bd-883f-899ceccffd01", "sighting_of_ref": "indicator--0497ed3e-344f-4087-b705-953e8de884c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd13e6f2-d4c4-4694-9f8c-1b863bde6dec", "sighting_of_ref": "indicator--0497ed3e-344f-4087-b705-953e8de884c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e37f71-1ae7-4721-b33e-7bf633e68a56", "sighting_of_ref": "indicator--0497ed3e-344f-4087-b705-953e8de884c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4acade-ee7e-445c-b738-29eaa59450df", "sighting_of_ref": "indicator--cfaf7f13-3d7e-4174-aa25-f1d8eeef9cba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e36d8a-9d48-49ae-b44e-b0a955576aeb", "sighting_of_ref": "indicator--f3cbd94a-13e1-4595-8a06-fe97761f390a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86015b14-1022-444a-8f0f-bf34807d61d2", "sighting_of_ref": "indicator--f3cbd94a-13e1-4595-8a06-fe97761f390a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ad86c2-a079-4ef7-b06a-07d8ddf3d2b3", "sighting_of_ref": "indicator--f3cbd94a-13e1-4595-8a06-fe97761f390a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea95732-9461-4c72-acd9-c7c3ce7aa8d5", "sighting_of_ref": "indicator--8ac3b6a6-2aba-4388-a880-7e61552d3dcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b07406c-195e-4131-a4cb-e442c173a3f3", "sighting_of_ref": "indicator--8ac3b6a6-2aba-4388-a880-7e61552d3dcf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcd6b32-7c3a-4968-b16c-98373f03707c", "sighting_of_ref": "indicator--8ac3b6a6-2aba-4388-a880-7e61552d3dcf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f705e74-7ad5-42a8-a4ae-a03081b2f3e7", "sighting_of_ref": "indicator--5ec548d1-545c-4821-ac3d-bcef4e489391", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18f1e0f-63ee-4fcf-a293-138d05997dd0", "sighting_of_ref": "indicator--5ec548d1-545c-4821-ac3d-bcef4e489391", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a122d0-279c-4977-99cd-ad6ce9cfd293", "sighting_of_ref": "indicator--60e7a418-e3ab-4f1a-9a55-71cfb5efc8ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b65fe4-9d08-4384-88d9-a2376f065822", "sighting_of_ref": "indicator--92614b8e-c786-4c7e-8076-d4a0fb17aab0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c7fc57-b2c2-48c5-bc22-27f15928f7a3", "sighting_of_ref": "indicator--305d8662-99e2-4d63-ba69-abc50f2593e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1570987d-503b-4676-be87-746203b24596", "sighting_of_ref": "indicator--305d8662-99e2-4d63-ba69-abc50f2593e7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db306c2a-e974-4c70-9a15-07e1fff85dc1", "sighting_of_ref": "indicator--6d5458e8-5f1e-463e-8e17-ffaf7647d14d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b928eaf5-b38b-44ee-8f4c-5900c3a66b8c", "sighting_of_ref": "indicator--15ecbbf1-7f31-4f7e-95f4-2e75775c2424", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d890d74b-c516-4ffb-8639-dda1c244eb43", "sighting_of_ref": "indicator--15ecbbf1-7f31-4f7e-95f4-2e75775c2424", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace1f20b-968b-40cc-9665-a4a424b7756f", "sighting_of_ref": "indicator--15ecbbf1-7f31-4f7e-95f4-2e75775c2424", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dab79c3-1af4-4bb9-82e6-5737d197657a", "sighting_of_ref": "indicator--ccd527f4-3e72-4c94-b050-fc9c42a80a00", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829a02a2-b680-4421-8746-d9aa652c4e0d", "sighting_of_ref": "indicator--e4877ef5-df4d-449b-bc57-f2aefd5b3061", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4c97ec-2cd6-423e-90f6-d9abb731196a", "sighting_of_ref": "indicator--2b7b50ad-8aa7-4791-98e0-296ab362d4ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc128cf3-f81e-4e48-81a0-ad4cc17382a7", "sighting_of_ref": "indicator--2b7b50ad-8aa7-4791-98e0-296ab362d4ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200bbfa4-99e5-4cc5-b9ed-6248d520bc73", "sighting_of_ref": "indicator--528107d3-ab3c-48d3-95cb-c1a8ba115399", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137f3673-e3bf-4667-be47-63c0d5c102e1", "sighting_of_ref": "indicator--528107d3-ab3c-48d3-95cb-c1a8ba115399", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf88739-1577-48f0-ad9d-f496a0b8c2f6", "sighting_of_ref": "indicator--f666f85e-30d4-4a2f-8e91-9d4a5ff7f288", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e4d37b-ec1f-419d-8abc-1d27e15b5a09", "sighting_of_ref": "indicator--900a3c98-01a4-4dfd-a7e5-cebe8cf01a54", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02e70ba-3e18-42f6-8bbf-afd0a234d0e6", "sighting_of_ref": "indicator--900a3c98-01a4-4dfd-a7e5-cebe8cf01a54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727b264c-52b5-445d-8479-4dddef94e465", "sighting_of_ref": "indicator--8bbb07e0-64ec-4613-9d7c-7e53295370b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c118fd-0e72-41df-bd7e-e027653e2755", "sighting_of_ref": "indicator--8bbb07e0-64ec-4613-9d7c-7e53295370b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd7016f-a39a-4fcc-9510-182221683010", "sighting_of_ref": "indicator--4bfab487-2cb3-430a-8979-20c0699edb16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4743a773-7e1f-4b9e-a08a-4735c7237281", "sighting_of_ref": "indicator--a814bc03-2404-48b7-b2a4-7b3f1e5aacd5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421ca36d-ae73-468a-94f9-ed11d4afdc8b", "sighting_of_ref": "indicator--a814bc03-2404-48b7-b2a4-7b3f1e5aacd5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee9c9fd-bd39-40b8-aa90-c9462d05ce06", "sighting_of_ref": "indicator--3337552b-5e63-48c8-9232-ea546eb26404", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2397d3b-6677-416f-944a-9c969b367d69", "sighting_of_ref": "indicator--66181ee7-c149-48e4-a57e-5be44a9b7cb1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a819cb73-b835-4ae3-8dd1-6c007e48195e", "sighting_of_ref": "indicator--6f8da610-bb95-4b03-bf6b-8a0ec23a22b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695e483e-9e05-44ed-b109-e318f0d4857e", "sighting_of_ref": "indicator--6f8da610-bb95-4b03-bf6b-8a0ec23a22b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad7814c-0447-4a29-8939-7f860ff7588d", "sighting_of_ref": "indicator--862b4d3e-d982-4281-92ed-9f697787efbf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1bc81b-165d-4890-8e4f-5e7da7596f30", "sighting_of_ref": "indicator--862b4d3e-d982-4281-92ed-9f697787efbf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c7f5a3-2d9b-4360-97a4-7ddb5d33d33a", "sighting_of_ref": "indicator--904784a9-fa8c-4144-9119-0de0660770fc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba6afa6-1f95-4b40-8e97-ff9d5ac50800", "sighting_of_ref": "indicator--904784a9-fa8c-4144-9119-0de0660770fc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f358a0-0c12-4828-b0a9-0977edeb508f", "sighting_of_ref": "indicator--157625a4-4321-49f0-bca7-ea92852894fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed87a49-4ed0-41c3-a4fd-e9cfc38820fa", "sighting_of_ref": "indicator--157625a4-4321-49f0-bca7-ea92852894fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5180a6-8d99-48fb-92b2-925e1fade826", "sighting_of_ref": "indicator--a4695dff-ae41-4d1f-9b68-17502fecfc51", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbeb58bc-1a53-427d-bbe6-cf64073a2bfd", "sighting_of_ref": "indicator--a4695dff-ae41-4d1f-9b68-17502fecfc51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d5a56d-c8c6-4505-a81a-f5b1fe7a0e22", "sighting_of_ref": "indicator--a4695dff-ae41-4d1f-9b68-17502fecfc51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50966d45-6b98-4df0-b7d4-33b8bfc5580f", "sighting_of_ref": "indicator--4306a71d-6c59-4cf7-8caf-8532a4773daa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97d4621-4c04-411c-b34e-ce70830c2ed9", "sighting_of_ref": "indicator--4306a71d-6c59-4cf7-8caf-8532a4773daa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80379919-74ce-4e4d-9f47-237f2dffb1a3", "sighting_of_ref": "indicator--3b2f06d0-485f-4870-b1f5-7c416d8b67bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4681eead-8d10-4c2f-8afa-4198d0a7adfc", "sighting_of_ref": "indicator--aa2f35aa-ae24-4c0f-b808-4a9ad0082b49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a31bb40-0e35-4db4-939d-9dc6c0efcff0", "sighting_of_ref": "indicator--aa2f35aa-ae24-4c0f-b808-4a9ad0082b49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b4cbd5-72cd-4a18-b384-a592cf1d0371", "sighting_of_ref": "indicator--be960804-b437-4bf1-9540-f121dd5ace99", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4496e237-10ba-4bf1-ba02-a5b031c196db", "sighting_of_ref": "indicator--be960804-b437-4bf1-9540-f121dd5ace99", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdf7244-f553-4e95-a219-b46e813e17b0", "sighting_of_ref": "indicator--be960804-b437-4bf1-9540-f121dd5ace99", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dadc5c-8ac5-42ac-9d8e-1d2569d38f8d", "sighting_of_ref": "indicator--9390170a-09b7-43c2-a132-b0f165e04849", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19285f3e-2e1a-4e88-a7ef-398bf27559d6", "sighting_of_ref": "indicator--9390170a-09b7-43c2-a132-b0f165e04849", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80260bfe-d378-40c8-8859-a3fe47a99223", "sighting_of_ref": "indicator--a8baec51-ee2a-4521-a31d-4b03036d697a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ef3ee8-3d19-4dd3-aeae-e654eaeb8182", "sighting_of_ref": "indicator--f23ffe41-40d2-4676-8d7f-a9f86e880fc3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c851fb3c-1362-40e2-9bf6-9b26172bd263", "sighting_of_ref": "indicator--f23ffe41-40d2-4676-8d7f-a9f86e880fc3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e41b15c-d627-4021-bb67-10409ece68b7", "sighting_of_ref": "indicator--f61aa81d-30d7-4725-abb4-74a86990efb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba16e3c-3938-47c7-a46e-bd74b97bcad8", "sighting_of_ref": "indicator--f61aa81d-30d7-4725-abb4-74a86990efb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dff855a-56fa-4de0-b089-2ae405d92a17", "sighting_of_ref": "indicator--3c321365-7a7a-4f63-bd7e-8b1648353f60", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8304979d-42c4-4204-9254-e521f3707c69", "sighting_of_ref": "indicator--89438140-0f7f-4264-a450-30d9eb3ecd74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e79345-204e-42c0-afd3-4a116febe5d1", "sighting_of_ref": "indicator--89438140-0f7f-4264-a450-30d9eb3ecd74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84373475-2c64-464a-b426-3e92362201af", "sighting_of_ref": "indicator--89438140-0f7f-4264-a450-30d9eb3ecd74", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fad0f73-b881-400c-b10c-50bc74c532c8", "sighting_of_ref": "indicator--e41186ac-4301-4d6e-98a3-609cb98129fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2de918-00fc-44b4-b7fd-f5f3bf9381d0", "sighting_of_ref": "indicator--e41186ac-4301-4d6e-98a3-609cb98129fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8bf608-8be7-422d-85a8-af74c5f9f6ca", "sighting_of_ref": "indicator--e41186ac-4301-4d6e-98a3-609cb98129fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a556ffa3-50f5-47af-87d4-269b4d2aab66", "sighting_of_ref": "indicator--c3277373-af00-4be1-bac2-61461a7bf4ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b30712-5837-438f-9a4d-1432b26937fd", "sighting_of_ref": "indicator--c3277373-af00-4be1-bac2-61461a7bf4ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f79bf6-49eb-4bb4-8b24-995b2fe46353", "sighting_of_ref": "indicator--fdb0f700-39ed-40d4-bfba-5b2608f5471e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c82e935-ab33-404e-8729-6b9cbac90182", "sighting_of_ref": "indicator--fdb0f700-39ed-40d4-bfba-5b2608f5471e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c7b2ae-ed8f-4636-848a-46108d121940", "sighting_of_ref": "indicator--30fc877d-8b04-4448-948b-f41e84a8e8ed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1426bc6f-4c24-4e2b-8da3-34da46d13c7c", "sighting_of_ref": "indicator--30fc877d-8b04-4448-948b-f41e84a8e8ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0be1fb7-12c8-4e4b-9c4f-480c316b210d", "sighting_of_ref": "indicator--30fc877d-8b04-4448-948b-f41e84a8e8ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd54d8c-27a5-4c44-80a6-dcfe1db57a9b", "sighting_of_ref": "indicator--5229d0d1-7489-40ec-a64b-84f9de8930b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619f4163-cb2f-4cf6-a675-35a681da8c26", "sighting_of_ref": "indicator--117d44e6-7456-46ee-a3af-81872f0536f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b838cf73-e237-4309-adc2-83429f7bee28", "sighting_of_ref": "indicator--09c27057-18fa-4e93-a561-14dfaf763cfd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5535bccb-c7e4-47a5-b482-35c2047dfc5b", "sighting_of_ref": "indicator--df6afc33-acaf-4976-9a40-906a99e25bc4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cfe016-519c-497a-a1c6-264c884b94e4", "sighting_of_ref": "indicator--df6afc33-acaf-4976-9a40-906a99e25bc4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d468a7a7-f071-4b92-9b0f-f8cfa21378dd", "sighting_of_ref": "indicator--df6afc33-acaf-4976-9a40-906a99e25bc4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc1bc53-e727-424f-b0cc-99bc2a843162", "sighting_of_ref": "indicator--e9bbdcab-3fbf-4f00-b915-ed59850684ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed20237e-a501-4920-8bc3-43b33b3b1029", "sighting_of_ref": "indicator--e9bbdcab-3fbf-4f00-b915-ed59850684ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9fe7ec-ea52-4e6c-9d89-3edd039a9f2f", "sighting_of_ref": "indicator--08de251a-7669-466f-86f8-44611ead803f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff760ca-f1b8-4613-8bfa-7b2376846734", "sighting_of_ref": "indicator--08de251a-7669-466f-86f8-44611ead803f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07340a01-50a3-4670-b2ee-e93005fff5e2", "sighting_of_ref": "indicator--16d62e6e-7806-40cb-9dde-0ebf160ee49a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a73101-f989-4a7b-81f1-f840a7aa70d7", "sighting_of_ref": "indicator--5c6ffe3b-20be-43c8-b469-cc4d8bb6f45a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f648b649-e52e-4275-902d-3688c2904888", "sighting_of_ref": "indicator--5c6ffe3b-20be-43c8-b469-cc4d8bb6f45a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7079af29-2a46-41a6-9686-dedf4c2eb539", "sighting_of_ref": "indicator--b81a6b8e-6627-46b0-9ae3-b7ef39ad7483", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbed0dd-3734-4633-b22f-bacce5a86568", "sighting_of_ref": "indicator--aeaf708a-30e6-4b7a-a698-1fd797b72d14", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7e456f-c9e6-4212-baef-3e0a8064e207", "sighting_of_ref": "indicator--69e1cb29-713b-41c8-ab29-b8f3bed59714", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3d81f3-a27c-4ff0-9f15-034f01a06ec9", "sighting_of_ref": "indicator--69e1cb29-713b-41c8-ab29-b8f3bed59714", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0617c3-3dda-423d-be0f-6600768a3897", "sighting_of_ref": "indicator--1d23bb26-b257-4dd8-a669-3b31f025aa00", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fe1f57-1ece-4a68-ad71-b14455a10468", "sighting_of_ref": "indicator--1d23bb26-b257-4dd8-a669-3b31f025aa00", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0592f335-bfc5-4c1a-a0a0-b22f6b143e14", "sighting_of_ref": "indicator--91282735-ad76-4251-a4b1-280ef229eacc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6322e1cd-42dc-42f6-9c9d-fee1fe4de7ce", "sighting_of_ref": "indicator--91282735-ad76-4251-a4b1-280ef229eacc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1e2f97-48c9-46bb-8d1d-338a80ebc6ca", "sighting_of_ref": "indicator--91282735-ad76-4251-a4b1-280ef229eacc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bbfe96-1001-479a-ac20-a9b9d082f64c", "sighting_of_ref": "indicator--08c657d4-59fe-4358-a893-704fe702c606", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4fdfd7-33ff-42a9-b28e-0e23190bfd57", "sighting_of_ref": "indicator--2c92033b-de3e-4a4f-aa76-c2f396358222", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a342cd12-8929-41c9-8341-1a23660f3926", "sighting_of_ref": "indicator--2c92033b-de3e-4a4f-aa76-c2f396358222", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8e27a1-716d-4b79-9d4f-034aa1373e86", "sighting_of_ref": "indicator--2c92033b-de3e-4a4f-aa76-c2f396358222", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02419b29-6c19-4788-8d7b-1f85357919f9", "sighting_of_ref": "indicator--d0ad2908-680d-462a-beb8-fb45e3255c65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a58fd04-8dae-4cf1-a4f0-da202403c8d5", "sighting_of_ref": "indicator--d0ad2908-680d-462a-beb8-fb45e3255c65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaa0182-026b-4dd1-bf14-2dfc1e68daad", "sighting_of_ref": "indicator--7e8d22ae-c887-4cf1-b50c-e542d29cfd5b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b948cbee-a394-4f06-9f0b-f54c25604973", "sighting_of_ref": "indicator--8c2d2bef-c58f-448b-9f7f-6eb26e7b7a47", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12660902-f8cf-4f8c-b077-e5aa5a1f5b4e", "sighting_of_ref": "indicator--e822cabb-e8af-427d-9e77-46286929bfb4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85431d28-2aca-436b-b96f-f7f86385d0ac", "sighting_of_ref": "indicator--93965874-0e7d-4d0a-9491-447c977fbc55", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4987f570-c539-4cb4-b76d-452d620ab28e", "sighting_of_ref": "indicator--93965874-0e7d-4d0a-9491-447c977fbc55", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c53d90-492a-414a-ab17-fc3a771dd92a", "sighting_of_ref": "indicator--6224a8b4-f531-421f-92db-e626d942bc52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a77359-da9d-47c6-ad5f-ef8623328cb8", "sighting_of_ref": "indicator--6224a8b4-f531-421f-92db-e626d942bc52", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80225e04-68e2-4b40-9b75-0a47d71426e9", "sighting_of_ref": "indicator--cc62283c-e6fb-42a9-b7e8-bfd44ca86183", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6678c0b3-4874-42c2-9e37-2c4881f04832", "sighting_of_ref": "indicator--cc62283c-e6fb-42a9-b7e8-bfd44ca86183", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be92db2-bd2f-44ac-bb8d-4ff4cbf9c5f7", "sighting_of_ref": "indicator--cc62283c-e6fb-42a9-b7e8-bfd44ca86183", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1d261e-074e-4c41-8465-515bcfd69c79", "sighting_of_ref": "indicator--d593e5a0-c92e-4571-aff6-109dfc1ea574", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5553608f-38c6-432f-b376-7d714c84754d", "sighting_of_ref": "indicator--d593e5a0-c92e-4571-aff6-109dfc1ea574", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcbbed7-12b2-4578-902d-b303b28ea4e4", "sighting_of_ref": "indicator--7faff005-67b5-4a55-b163-c23ae1eaaeb6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d3176d-6f24-4026-a25c-c3285e2595a6", "sighting_of_ref": "indicator--7faff005-67b5-4a55-b163-c23ae1eaaeb6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf55c2b-ce23-4073-9821-e926cae328e7", "sighting_of_ref": "indicator--7faff005-67b5-4a55-b163-c23ae1eaaeb6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff21ecad-d3f3-4355-96c5-4f09e730d0b9", "sighting_of_ref": "indicator--92536ab3-4a6c-410f-b0f3-3a29e1f15a8e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b7ca8c-8482-47c7-af0b-dc27805aa118", "sighting_of_ref": "indicator--92536ab3-4a6c-410f-b0f3-3a29e1f15a8e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badbdc62-38a3-486f-a5c4-73983d2b3f38", "sighting_of_ref": "indicator--d820ab3a-7e12-427f-bb1a-855d5fa4a01e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b1215e-c41e-4e6d-abdd-00253647a0a0", "sighting_of_ref": "indicator--4e2a410e-9f91-44a9-b14a-3fbf8ef02c9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff175b53-f73b-419a-ac81-f4879556e225", "sighting_of_ref": "indicator--4c13ed74-bd58-435b-afea-2d2414822722", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b2b521-0878-41e8-ac4b-9950f007f4d9", "sighting_of_ref": "indicator--f503912a-53b7-47e9-8eca-2035ffeb5a43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e13f6d-1e85-4b88-960c-6c51284fe52e", "sighting_of_ref": "indicator--f503912a-53b7-47e9-8eca-2035ffeb5a43", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ddd012-9d17-47f7-a4c8-1beac2466caf", "sighting_of_ref": "indicator--0b492396-57e6-4199-84a5-5ccf600beacd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9dd7b4-ccad-40e8-93b8-41b8b4b514f6", "sighting_of_ref": "indicator--0b492396-57e6-4199-84a5-5ccf600beacd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1d31e9-c73e-4417-8d46-c2a9a8e02fe8", "sighting_of_ref": "indicator--00294759-3343-4f85-9a99-158368f7efbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f147e4f9-bff4-43fe-8a7b-d16cd2438912", "sighting_of_ref": "indicator--00294759-3343-4f85-9a99-158368f7efbb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7cb7dc-3a38-49f5-9742-290183b29e07", "sighting_of_ref": "indicator--00294759-3343-4f85-9a99-158368f7efbb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4155855e-88f6-48cd-be7f-61927d86d3f8", "sighting_of_ref": "indicator--7bab4bc3-c60c-4e37-9c3b-5cbe8e2f1be3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82f7e19-da36-490d-919a-5918664d28d4", "sighting_of_ref": "indicator--cfd7f5f2-cdb4-4bee-ada7-ce789a64dda8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d493badd-0e8e-4d4d-965e-6aaec78f6dc8", "sighting_of_ref": "indicator--cfd7f5f2-cdb4-4bee-ada7-ce789a64dda8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd22aae4-e97b-4007-8232-ad422089088e", "sighting_of_ref": "indicator--691c3fee-bdef-4fe5-b3f8-59c1e92defec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec795221-c074-421d-8c10-2a8e7187adf9", "sighting_of_ref": "indicator--691c3fee-bdef-4fe5-b3f8-59c1e92defec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd008da-fd12-4931-8d5a-d095188ddeb4", "sighting_of_ref": "indicator--691c3fee-bdef-4fe5-b3f8-59c1e92defec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cbf287-aeef-41e1-ab0e-d66dbc712b5d", "sighting_of_ref": "indicator--a9935d2f-1ffd-4d44-81d8-b3844e7bf92c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ecbd08-add3-4919-b7f1-ab10a1ac5320", "sighting_of_ref": "indicator--a9935d2f-1ffd-4d44-81d8-b3844e7bf92c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861d700a-7523-4bda-b6ac-4579f141b162", "sighting_of_ref": "indicator--b98751e2-8af3-40ad-a6fe-f5e709c78ab1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145a39fd-7d54-4ee7-aa60-8eb4a7bb9703", "sighting_of_ref": "indicator--6b2d19ef-2f56-45c7-9ecf-64d9ac5435f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5da58b7-d0b4-4967-9d05-45d6d74959d9", "sighting_of_ref": "indicator--6b2d19ef-2f56-45c7-9ecf-64d9ac5435f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836dcbb9-4cfc-4aec-9ab3-0ab88a3e0364", "sighting_of_ref": "indicator--b8b59c72-7e9b-4e98-886f-3fb6190308eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db40d270-0efc-4925-a5c7-93d7d75e4f8b", "sighting_of_ref": "indicator--8d1f3623-d678-4583-9503-08325ad735d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b96973-a1d3-4713-9f41-f9d12d4a3eb0", "sighting_of_ref": "indicator--edd294e5-d4f3-4a03-968e-a11ca26c1384", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48549771-dd9e-4339-86b6-240f0a3e5300", "sighting_of_ref": "indicator--edd294e5-d4f3-4a03-968e-a11ca26c1384", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c4b467-dc90-45f8-838a-611f8c8083de", "sighting_of_ref": "indicator--edeccc7c-08a8-4929-b400-7749db46c7b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995c4c51-dc92-4f4a-b51c-76ac01159aa6", "sighting_of_ref": "indicator--edeccc7c-08a8-4929-b400-7749db46c7b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a24f91-1b09-45ef-8248-c102879cbb38", "sighting_of_ref": "indicator--535d6d38-4c2d-4e3a-813e-699ce307852c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094ec988-338a-4af1-991a-7e18a7b55b7a", "sighting_of_ref": "indicator--f646828e-7f8b-4019-88d2-8a1428bf48d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7c89f5-fa03-4491-a28f-d39365b959c4", "sighting_of_ref": "indicator--f646828e-7f8b-4019-88d2-8a1428bf48d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dad05a-98fe-414d-b38a-cdb1bda0627b", "sighting_of_ref": "indicator--f646828e-7f8b-4019-88d2-8a1428bf48d1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0417133e-0dab-4996-9542-0ed513873bc3", "sighting_of_ref": "indicator--c5115bbf-d746-42ec-8846-8e706393f2fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83357d7c-1993-4a86-800a-37483692f93c", "sighting_of_ref": "indicator--c5115bbf-d746-42ec-8846-8e706393f2fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b737299-d0c0-4394-a37d-e2ed7c3e046e", "sighting_of_ref": "indicator--1600d189-8f67-45f1-b80f-ea58c9b69385", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6376f02b-7a35-4e9a-a20d-d2617826103a", "sighting_of_ref": "indicator--1600d189-8f67-45f1-b80f-ea58c9b69385", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dbdff1-b238-4c54-841f-72f935f4c928", "sighting_of_ref": "indicator--d7c68ca6-ced1-42d7-8575-6ee4e70eff7e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4bd3ea-bacf-46b9-917c-e562deb3d694", "sighting_of_ref": "indicator--d7c68ca6-ced1-42d7-8575-6ee4e70eff7e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e007b401-809e-4441-8c92-7aca78caa8b4", "sighting_of_ref": "indicator--0f20722b-5879-4bbc-b85b-7c5da3da1481", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b0e1f2-bfc1-4943-af4e-4767c63b0aaf", "sighting_of_ref": "indicator--0f20722b-5879-4bbc-b85b-7c5da3da1481", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57509e73-c0c2-4b66-97f9-752156724ae2", "sighting_of_ref": "indicator--e0ee789b-03fe-4dd9-93c3-684faf56cdde", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f7f993-9767-4a53-a088-9bc02a3553b8", "sighting_of_ref": "indicator--e0ee789b-03fe-4dd9-93c3-684faf56cdde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bae5893-1c4c-461f-af2c-5332602b1c19", "sighting_of_ref": "indicator--32e1d03d-4c08-4227-84ce-92a4f65e0125", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f6736d-0f1f-4a90-bcd2-70770204d76f", "sighting_of_ref": "indicator--0b796b35-9081-4fe1-8c85-9286482cd280", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa97289-10fc-4403-90c9-5da927080c75", "sighting_of_ref": "indicator--dbdacf28-cf43-4f49-b44a-857ae5b5fe37", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6ee2d8-4e36-405d-ad00-27a0ddf05173", "sighting_of_ref": "indicator--b4edc93a-84f5-4bbc-a042-1530940c04f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eec1c6-e382-4a94-a46b-594a83f6a4dc", "sighting_of_ref": "indicator--b4edc93a-84f5-4bbc-a042-1530940c04f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887a1c64-ff9e-4266-9ff5-a34a6203fe02", "sighting_of_ref": "indicator--c3757836-a708-46fc-afd7-224d9dea1b5c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b859900-a2a6-4a12-96e5-47ec30294c16", "sighting_of_ref": "indicator--c3757836-a708-46fc-afd7-224d9dea1b5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84a2478-ac6d-48a7-a9a9-88e5d1406b16", "sighting_of_ref": "indicator--1943af44-38ab-4783-92d7-02bac7d03ed7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0373e82-9a1d-430f-a114-ecfb0ae96316", "sighting_of_ref": "indicator--1943af44-38ab-4783-92d7-02bac7d03ed7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fc4765-3d6b-4824-a287-c446e29978a9", "sighting_of_ref": "indicator--e6c71757-de27-47ab-b935-9b63a9ef15d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68046298-a26f-4b54-9fe7-929d509f85c5", "sighting_of_ref": "indicator--e6c71757-de27-47ab-b935-9b63a9ef15d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d36eb29-8a49-4b64-8123-e1260886244d", "sighting_of_ref": "indicator--49df29cd-1a58-4b45-8846-35a4779b8971", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7647b8e0-5c7a-4c78-8d5b-be8f74119cfa", "sighting_of_ref": "indicator--3b54d354-efac-4292-8236-13ef22616aa0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828aa47b-e2a5-4176-92f3-f57749d213bb", "sighting_of_ref": "indicator--3b54d354-efac-4292-8236-13ef22616aa0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f2d3a1-6ab5-4e08-b763-9335fc7fd0aa", "sighting_of_ref": "indicator--d36c7a48-6dec-42d2-88f7-d26b59bfd39d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a027ce3-0e12-4009-9a07-b5f9eb2af8d6", "sighting_of_ref": "indicator--d36c7a48-6dec-42d2-88f7-d26b59bfd39d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57275886-c5d8-4fe8-9db2-9c14f4fbf77a", "sighting_of_ref": "indicator--eca2f75c-55e1-401f-a096-f707a635962d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d62cb3-4822-4b23-ac66-a495b28c5a26", "sighting_of_ref": "indicator--eca2f75c-55e1-401f-a096-f707a635962d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde349c8-9671-4b42-a251-be526fb8590e", "sighting_of_ref": "indicator--eca2f75c-55e1-401f-a096-f707a635962d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f8ddd1-b79f-4d65-b1d1-255358a50f01", "sighting_of_ref": "indicator--4bcbc2d9-a6b2-4ee7-8c69-419628940a3c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1c068e-9046-4892-b409-fadf641d0e89", "sighting_of_ref": "indicator--4bcbc2d9-a6b2-4ee7-8c69-419628940a3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de5b77e-61ad-476a-b065-62d77ac4d2ee", "sighting_of_ref": "indicator--4bcbc2d9-a6b2-4ee7-8c69-419628940a3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2408f60a-e184-4237-8740-6b96efa5d67f", "sighting_of_ref": "indicator--93020823-ad7f-4a49-bae6-0dd0efc45117", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afec659-06fa-40dc-b5fc-f2f3dc2d6910", "sighting_of_ref": "indicator--93020823-ad7f-4a49-bae6-0dd0efc45117", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8148d9-3a95-4bed-8f14-3e1ca3954d35", "sighting_of_ref": "indicator--135ab763-3c8d-432b-9656-610c2c04209a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3135cb2f-d20a-4fd1-9ab7-3aaf623a2f4f", "sighting_of_ref": "indicator--135ab763-3c8d-432b-9656-610c2c04209a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d24dc1-0282-4cee-af99-babb5a2de2bd", "sighting_of_ref": "indicator--135ab763-3c8d-432b-9656-610c2c04209a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a542545-aab4-4902-81d9-6aa9a9a314e5", "sighting_of_ref": "indicator--3283bb20-2e81-4c71-9789-8d05144b1ab0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fbbf04-f818-4462-873c-56d289c8ce9b", "sighting_of_ref": "indicator--f02afc59-d731-454b-8a97-a37234656a52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827f3e53-c528-4b42-9d4d-e1907babd9d3", "sighting_of_ref": "indicator--2411a015-00a8-46f1-b38b-085cd7281b32", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0df101-d377-4e33-a7de-bf2711dbb593", "sighting_of_ref": "indicator--e2c92148-8647-405b-b4d9-32a86ef0ceb6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274defa5-cb10-4c36-b0f6-960effcda81e", "sighting_of_ref": "indicator--e2c92148-8647-405b-b4d9-32a86ef0ceb6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740c1b4a-b277-4dc1-904e-2bb8301c06e2", "sighting_of_ref": "indicator--e2c92148-8647-405b-b4d9-32a86ef0ceb6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0633156b-c07b-4312-8c79-872183dc7e52", "sighting_of_ref": "indicator--5ca3cd01-9a9e-438f-be1d-1f2a0ff791aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ee38ad-9711-4843-8f89-5acea38abd00", "sighting_of_ref": "indicator--5ca3cd01-9a9e-438f-be1d-1f2a0ff791aa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44056eaa-c119-447b-bb5b-c2e600e59ee7", "sighting_of_ref": "indicator--5ca3cd01-9a9e-438f-be1d-1f2a0ff791aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3627ed1-f8a4-471a-9370-bd4407395bde", "sighting_of_ref": "indicator--701a42ae-303a-4f73-a7d0-00323846dc5c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6940411d-b7f0-4a1e-b8fa-0616210d3b47", "sighting_of_ref": "indicator--701a42ae-303a-4f73-a7d0-00323846dc5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9721790f-aff2-47ac-af16-4f866d5c2557", "sighting_of_ref": "indicator--701a42ae-303a-4f73-a7d0-00323846dc5c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3ec940-f990-4d51-a589-fceeadf1e753", "sighting_of_ref": "indicator--6bdbf0da-e879-4ae4-863f-6a61de54940e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dc1b63-d1a9-43cf-8ea1-e71ef259108d", "sighting_of_ref": "indicator--6bdbf0da-e879-4ae4-863f-6a61de54940e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f05b737-8861-4b0b-aacb-a5cb3c4d8382", "sighting_of_ref": "indicator--98e24d92-9a45-4fdc-8423-908ed967fe28", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0702c68-e15f-4400-a3cd-f4d875207ede", "sighting_of_ref": "indicator--b6a65651-058e-48d4-8e06-08d9d8602b2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0229a7-091f-4d41-853c-3042c2f36a44", "sighting_of_ref": "indicator--b6a65651-058e-48d4-8e06-08d9d8602b2d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5303bdd9-a916-4965-91cc-c35d0930f6e0", "sighting_of_ref": "indicator--b7501de5-71d8-49bb-a3f7-609f95c7a2e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e962dff2-ad75-4bb2-a94b-49ba27553504", "sighting_of_ref": "indicator--b7501de5-71d8-49bb-a3f7-609f95c7a2e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2e26d6-7257-4af8-bb69-1720659e9f91", "sighting_of_ref": "indicator--b7501de5-71d8-49bb-a3f7-609f95c7a2e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afc6f54-671e-4cd6-bb95-9e7ce91791fc", "sighting_of_ref": "indicator--e77fcb8d-9a84-4ebc-b81d-3d485de253c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63d84fc-07aa-4cf4-b78a-a2db2c89ce9e", "sighting_of_ref": "indicator--1ca64124-a9b4-4d50-bd59-6a6b912d8f21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8506c681-a5ab-4d60-b8bb-d0ad07dfd3d3", "sighting_of_ref": "indicator--1ca64124-a9b4-4d50-bd59-6a6b912d8f21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a09809-689f-4243-82de-ce8ab88ccfc6", "sighting_of_ref": "indicator--1ca64124-a9b4-4d50-bd59-6a6b912d8f21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44456d77-e8ea-4025-a82f-86fa3f07d7a5", "sighting_of_ref": "indicator--99d47798-73a8-407d-a346-f68e73a3b281", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58db97eb-35b1-44a2-a9a1-2e5580e32912", "sighting_of_ref": "indicator--99d47798-73a8-407d-a346-f68e73a3b281", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103567d7-c9a4-4f89-b4e0-8789e9dfc7ab", "sighting_of_ref": "indicator--bfb9f430-8680-4adc-8896-a3799d69207d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d969bb-35e5-4cb2-a382-33f26d077f1d", "sighting_of_ref": "indicator--5193fa35-1e9d-4ae2-9301-89d4df451860", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29562888-77c4-4689-af4f-4533b585315a", "sighting_of_ref": "indicator--4ee0a3a0-919e-4a8a-b807-305d660bc5e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84bcf9c-cb14-407d-938e-cac61c377ac3", "sighting_of_ref": "indicator--4ee0a3a0-919e-4a8a-b807-305d660bc5e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfc89e8-5361-49c5-bd45-34b4fa158ee8", "sighting_of_ref": "indicator--18987b88-d696-461d-a13b-f9d64be275f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7984ba-ae37-4ce5-ae5a-c013430ccdfc", "sighting_of_ref": "indicator--3cdb64b8-8a06-4e16-9b1f-cd139eb8b64a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792db590-5c45-4e77-8700-aeeee1a59678", "sighting_of_ref": "indicator--012d55ad-12bc-412c-b4f2-95e07f70844b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d25276-f5b0-46be-9c61-5b494b5c7287", "sighting_of_ref": "indicator--d21eba49-e3b9-4870-853c-60059d7bb901", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3ebf13-3350-49f2-8b3b-58244cabeba2", "sighting_of_ref": "indicator--0f28978f-77ae-48bd-9778-47b389f3c069", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1633b4d2-b998-4386-8713-0609b84533d7", "sighting_of_ref": "indicator--5fd9ab30-d928-441e-83a7-6ed3628e8a9e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62eba907-5951-42cf-a83a-3458e5587efd", "sighting_of_ref": "indicator--5fd9ab30-d928-441e-83a7-6ed3628e8a9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170d6054-2a02-49ed-aa97-0394c4d9012b", "sighting_of_ref": "indicator--5fd9ab30-d928-441e-83a7-6ed3628e8a9e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90267392-507c-4998-9aae-8539d982978e", "sighting_of_ref": "indicator--975713f5-9cc4-4472-87df-e69ebdf86867", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fff1c9-b73d-44b4-ae72-239dff4e3150", "sighting_of_ref": "indicator--815902c0-fe8c-408b-a71e-1b327d8f241d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f399ca8-482b-43cc-ae6b-13cbcf9bddd9", "sighting_of_ref": "indicator--dccbad26-5787-47f6-a2d3-8dd1061f5653", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90084b0-2d3e-44aa-b864-e09332a2b933", "sighting_of_ref": "indicator--aeb28250-0cfa-460e-a945-8122f6d8ff16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6cb14f-2854-45e0-aa9a-c5e57331f91c", "sighting_of_ref": "indicator--74bc2848-0e06-4c3d-8acd-20f6c41de4e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2e8f04-7980-4741-bba5-11f0e6c6584f", "sighting_of_ref": "indicator--a1c79a76-7a65-4861-b3e7-e5ec1c02e553", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940c43cf-b97b-476c-b6d3-e37864a7fcce", "sighting_of_ref": "indicator--0200ef7d-8fff-4d2a-8753-8ba5ac613f38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7515d9e6-63a6-4aa6-81bd-1c729f5f7a31", "sighting_of_ref": "indicator--96dbdb78-814a-491d-975a-2732eee61ee4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444d0fe8-9d80-420b-8f83-65e96ecdd14f", "sighting_of_ref": "indicator--96dbdb78-814a-491d-975a-2732eee61ee4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18312849-8e04-48fa-bef4-dc65f8c69765", "sighting_of_ref": "indicator--96dbdb78-814a-491d-975a-2732eee61ee4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b64a5c6-3663-4559-8631-6b404317c214", "sighting_of_ref": "indicator--ef8cc1a2-19a1-465e-b920-a2b427754187", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10908383-e263-4b2b-895f-fb6dc51c3438", "sighting_of_ref": "indicator--f31bf682-8ad1-49d5-8ea0-47fbae397672", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e18ee6c-0eb2-4d80-a19c-842e93f2c6e2", "sighting_of_ref": "indicator--42fe4b2b-8946-466e-816b-67f9d4f01a0e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e79ea7-ecce-43c2-9991-82a80870278b", "sighting_of_ref": "indicator--42fe4b2b-8946-466e-816b-67f9d4f01a0e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02b4f9a-28ab-4622-b73e-cd3f7fa9047a", "sighting_of_ref": "indicator--42fe4b2b-8946-466e-816b-67f9d4f01a0e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23da8ee-8689-4046-ad25-2e8e276be164", "sighting_of_ref": "indicator--7d04ad0e-4404-436a-b40c-bcf901b39672", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727c9459-4081-46c2-a2a2-62c5e8e72a06", "sighting_of_ref": "indicator--7d04ad0e-4404-436a-b40c-bcf901b39672", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384872e0-156a-40b5-a1b7-da0f264cb798", "sighting_of_ref": "indicator--cd97d5fc-6b94-4960-a0bb-3d8a351e5550", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020adf8a-02af-4dca-9fa1-c8e3950ddaba", "sighting_of_ref": "indicator--cd97d5fc-6b94-4960-a0bb-3d8a351e5550", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a0b87d-3263-43a4-819e-98083d43675b", "sighting_of_ref": "indicator--cd97d5fc-6b94-4960-a0bb-3d8a351e5550", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36204acc-7d64-456f-828e-986b8d7263bd", "sighting_of_ref": "indicator--5fa7a7d9-1476-44f9-acf5-0a91597b808b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bc4746-2bce-4ac0-aba4-1327358a3400", "sighting_of_ref": "indicator--ad36609e-bbe0-45f8-b8a6-9a37f819fc3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f38e5a-470b-4125-a163-4349c8408f4b", "sighting_of_ref": "indicator--cd6e328f-8844-42e0-918f-b3fb77e96729", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632afae8-9c48-4167-a547-55b00c48c800", "sighting_of_ref": "indicator--4f69a13f-3385-40af-8382-5fef1e1c71be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294be681-0c26-4aa8-924d-4daf6971f50b", "sighting_of_ref": "indicator--eeadb3d6-3325-4a92-8a64-b8c040a1b57f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7500ee31-5ef0-4e22-97d8-bcd45b69aed0", "sighting_of_ref": "indicator--eeadb3d6-3325-4a92-8a64-b8c040a1b57f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be69794-acaa-4f88-b9bd-2761061af4e2", "sighting_of_ref": "indicator--eeadb3d6-3325-4a92-8a64-b8c040a1b57f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b2b977-3130-4fc2-9358-5cf36ea57b93", "sighting_of_ref": "indicator--a76197a1-1cfa-46fb-a145-f2e9bbcf9ffc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704b53f4-3891-4762-aca5-cfa7ccbc23db", "sighting_of_ref": "indicator--a76197a1-1cfa-46fb-a145-f2e9bbcf9ffc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1071db5-a138-4d25-a78d-d982e88a2acd", "sighting_of_ref": "indicator--a76197a1-1cfa-46fb-a145-f2e9bbcf9ffc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b024407e-6442-4af8-a836-0ac71f8c6980", "sighting_of_ref": "indicator--47e76c45-fed9-4d9a-9246-a647b22ea7cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b233db4d-c8dd-4a7f-9107-a40da8e1b9b3", "sighting_of_ref": "indicator--47e76c45-fed9-4d9a-9246-a647b22ea7cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b4d489-3dc5-47c4-bd9e-142d33e7e8d2", "sighting_of_ref": "indicator--47e76c45-fed9-4d9a-9246-a647b22ea7cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a844a9-64a8-4500-9e04-589a39ae1041", "sighting_of_ref": "indicator--b727fbd1-3f57-41df-a7d4-f759318603f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d57c37-427d-4441-b409-eb2223d0f4b2", "sighting_of_ref": "indicator--b727fbd1-3f57-41df-a7d4-f759318603f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad580508-eff4-4fed-9126-48ba4f40961b", "sighting_of_ref": "indicator--b727fbd1-3f57-41df-a7d4-f759318603f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebf3c3d-c873-4f70-91cd-617f7cc9e5e1", "sighting_of_ref": "indicator--270e438a-cfb3-49d5-b7af-2da2d3bcf316", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010933b4-ceb3-436a-a8fe-aacaec8a068e", "sighting_of_ref": "indicator--270e438a-cfb3-49d5-b7af-2da2d3bcf316", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0034671-9210-4e35-9daf-060975a512b6", "sighting_of_ref": "indicator--270e438a-cfb3-49d5-b7af-2da2d3bcf316", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18e2e08-ceb5-4645-b871-d7e599bd2800", "sighting_of_ref": "indicator--69708fdb-4ab1-48f1-b43d-8d2673b9a026", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6288efd2-8988-42f5-9abc-ed700002346c", "sighting_of_ref": "indicator--69708fdb-4ab1-48f1-b43d-8d2673b9a026", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8406afbb-034e-4276-966e-57ba9c3ad53a", "sighting_of_ref": "indicator--3987e674-8928-4b6c-9168-498f7c3cc9d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f79aecd-fd0b-4228-875e-9687fd178be4", "sighting_of_ref": "indicator--3987e674-8928-4b6c-9168-498f7c3cc9d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e7f501-43f2-4269-b328-9bf298c75db4", "sighting_of_ref": "indicator--3987e674-8928-4b6c-9168-498f7c3cc9d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466781a9-ad81-4370-bebb-ea9ab8b019ab", "sighting_of_ref": "indicator--3d014d46-891d-4e1f-8228-ffcb97b4163e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24449eca-499f-42cc-9177-c4d8b82f0a9b", "sighting_of_ref": "indicator--b9a06130-4d01-423a-a7b4-972e38dadac6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21c0f1b-24b5-4fe5-b1e9-9b5ea8d10768", "sighting_of_ref": "indicator--b9a06130-4d01-423a-a7b4-972e38dadac6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d77c00-7231-424d-bc72-1561eb630e69", "sighting_of_ref": "indicator--b9a06130-4d01-423a-a7b4-972e38dadac6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b77ba4-545f-4ce9-aeb6-b74694e7e2ef", "sighting_of_ref": "indicator--2eefb9dc-e62f-4d1c-ba07-cf6ff2c5fe33", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fbb171-9c64-44e0-8a1a-2506eb5952e4", "sighting_of_ref": "indicator--2eefb9dc-e62f-4d1c-ba07-cf6ff2c5fe33", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f168b1e-89de-476e-9664-c8475ca94f2d", "sighting_of_ref": "indicator--2eefb9dc-e62f-4d1c-ba07-cf6ff2c5fe33", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23bac80-dc05-4864-a531-b9d280070268", "sighting_of_ref": "indicator--2d11ad6d-de14-4a1f-a36c-7e1847f2d2b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93cec3f-b7e6-4e93-9562-93f23989f3f1", "sighting_of_ref": "indicator--2d11ad6d-de14-4a1f-a36c-7e1847f2d2b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacb4d19-0c3c-40f9-ade9-585475990027", "sighting_of_ref": "indicator--2d11ad6d-de14-4a1f-a36c-7e1847f2d2b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4ef500-f76c-45e4-9c88-02f29c3ca898", "sighting_of_ref": "indicator--40488a84-e8f3-406e-b35b-3f0ab48c1c42", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079b805a-e44c-4e4d-8cf8-1e979ff06e6a", "sighting_of_ref": "indicator--dba1e8f3-4e17-4c8a-82b2-a939f61bdeb8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17873155-6ddb-494a-b390-779991b59278", "sighting_of_ref": "indicator--dba1e8f3-4e17-4c8a-82b2-a939f61bdeb8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4846647-1729-44be-a9c4-5ed5f1670cf1", "sighting_of_ref": "indicator--dba1e8f3-4e17-4c8a-82b2-a939f61bdeb8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29f95e9-18a0-41a7-9243-b4cb6bca4d89", "sighting_of_ref": "indicator--7d23097a-a0d4-4229-a3b3-63bbdc92c52c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3e466a-3b3b-4a58-b75d-56a2af1a4cdf", "sighting_of_ref": "indicator--7d23097a-a0d4-4229-a3b3-63bbdc92c52c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25916931-d496-42de-a5da-1ba0541eb380", "sighting_of_ref": "indicator--7d23097a-a0d4-4229-a3b3-63bbdc92c52c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37ca6cc-69a5-4a9f-90cd-4e06be5bead2", "sighting_of_ref": "indicator--5c53a6b0-a090-45e1-b94d-b8b427b8526a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe63036-3025-4b36-b9bf-233443068a2c", "sighting_of_ref": "indicator--5c53a6b0-a090-45e1-b94d-b8b427b8526a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c63d60-1b73-44ac-8227-722fdec21f97", "sighting_of_ref": "indicator--5c53a6b0-a090-45e1-b94d-b8b427b8526a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2028a009-dcc7-47d1-9f85-4e5cdea083c7", "sighting_of_ref": "indicator--d5a990df-f687-4802-b248-7a0ed2068595", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce08187b-b43c-4e48-bbce-b7437580f88a", "sighting_of_ref": "indicator--d5a990df-f687-4802-b248-7a0ed2068595", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18afb806-05f3-48de-ae78-07b0197e971f", "sighting_of_ref": "indicator--d5a990df-f687-4802-b248-7a0ed2068595", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe221681-fd67-4da4-8b6b-ab3cbbe93fc0", "sighting_of_ref": "indicator--0fc4d6df-c7f0-4678-b6e8-8e88e92db065", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aecbd82-846c-4081-b077-5dc077025348", "sighting_of_ref": "indicator--0fc4d6df-c7f0-4678-b6e8-8e88e92db065", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461ecf97-affe-46e8-aca2-b6c363ec1159", "sighting_of_ref": "indicator--0fc4d6df-c7f0-4678-b6e8-8e88e92db065", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb953ce-5ed5-450d-84f8-227ec48c2e60", "sighting_of_ref": "indicator--49337f0d-cbde-45e2-a837-c9d1f12a39c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d197ab3c-fd99-468d-b735-17456fe80443", "sighting_of_ref": "indicator--fd37e8b9-3a56-45d3-a3dc-72bb0e79f259", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551d7bdb-38ea-46a4-a922-fd690b1e3985", "sighting_of_ref": "indicator--3997cd3e-bbd6-48bd-971f-f065e1a0e161", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ec2a7b-dcbd-4ba2-8e85-87820a2ee6f9", "sighting_of_ref": "indicator--6600bfbf-5899-4534-ba0b-4489e3839951", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9505658e-e42c-4e77-9d86-9fe560d125d8", "sighting_of_ref": "indicator--6143d921-9a58-44d3-80ac-d533a5456b69", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f385224-23fc-4c21-ae69-d2a5029b8f8d", "sighting_of_ref": "indicator--29b49bd7-b56f-4622-a04d-0aa9035f993f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a24c266-1131-47da-8b9e-27cd6386b1a3", "sighting_of_ref": "indicator--50d50fde-62d1-42e2-af7b-56500afdccfe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17add16-fbd4-4825-84bd-28d1cbf8c0c8", "sighting_of_ref": "indicator--f6d21b44-bb55-4054-90eb-2e04d4a27840", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b5f1bf-aafe-4959-9afe-e2c9266f7eb9", "sighting_of_ref": "indicator--16906aed-bba1-4d5a-bbbb-e1e77431a31a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7d464e-6fe8-4677-a9fd-eb563f9c89ed", "sighting_of_ref": "indicator--fa96ff0a-45c6-4f1f-bc29-f2d92752d1f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a43883-ac5c-46e4-9840-004f5cc3425c", "sighting_of_ref": "indicator--0931da7c-2632-4d4a-8081-b3469a0f9f97", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3602ba2e-078c-4ff1-ae03-a7c6fac72dd5", "sighting_of_ref": "indicator--57d92b84-533d-4dd6-bec9-e14b6ebb25ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3d9fb3-63d2-42a9-a2b7-4dd505d45a57", "sighting_of_ref": "indicator--76879c4c-2cff-416c-9a52-466ad1063363", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749c232e-924a-48fb-a560-9dc09e37935f", "sighting_of_ref": "indicator--76879c4c-2cff-416c-9a52-466ad1063363", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc9b91a-4769-43d9-8933-801284d3592e", "sighting_of_ref": "indicator--76879c4c-2cff-416c-9a52-466ad1063363", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c80c17a-bde2-48d1-b633-c2f8612bc9d0", "sighting_of_ref": "indicator--76879c4c-2cff-416c-9a52-466ad1063363", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec4901c-3f02-42b2-bd9f-8e996d892eff", "sighting_of_ref": "indicator--21f04e0f-54c8-4485-aaa4-e01b46f99279", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384d722f-7a09-4018-bb90-29ab26a4a071", "sighting_of_ref": "indicator--21f04e0f-54c8-4485-aaa4-e01b46f99279", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f74b40f-e082-4a6c-8f96-86b404a207cd", "sighting_of_ref": "indicator--21f04e0f-54c8-4485-aaa4-e01b46f99279", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128c9678-c7b6-4853-87fb-5a0beec198db", "sighting_of_ref": "indicator--21f04e0f-54c8-4485-aaa4-e01b46f99279", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bfbb04-5412-4992-92cb-4e0e9482756d", "sighting_of_ref": "indicator--e4e12e71-9017-4e0d-9221-9b26e4e88a55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8c3ef1-0c69-49e2-84e0-b258320132e4", "sighting_of_ref": "indicator--a9499499-479e-490e-93e9-02cfa18bc32b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83112b33-0812-43c1-a20e-b80505c82944", "sighting_of_ref": "indicator--a9499499-479e-490e-93e9-02cfa18bc32b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698ffd07-7bb4-415b-ab9f-edd89f17dd5d", "sighting_of_ref": "indicator--a9499499-479e-490e-93e9-02cfa18bc32b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bab304-cb3b-425f-ba2e-4d5ef673d3ad", "sighting_of_ref": "indicator--a9499499-479e-490e-93e9-02cfa18bc32b", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0919056-1628-45e9-bb7c-b47859093130", "sighting_of_ref": "indicator--701e288c-3748-4adc-bab4-639f9621f8b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10160e12-7d05-4a1d-a7db-982e198ecb1a", "sighting_of_ref": "indicator--931d31f1-5bad-4afd-a7e0-13f98d4bfa03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6db9f4-ce28-4b6e-be3f-b3b06f0216b2", "sighting_of_ref": "indicator--931d31f1-5bad-4afd-a7e0-13f98d4bfa03", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49142aa5-2875-4bc2-92ab-aaaf279449a7", "sighting_of_ref": "indicator--6d52dd43-078b-4301-8bdc-05590da20c8a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fe6b76-156c-4157-ac2c-cb535a95175f", "sighting_of_ref": "indicator--5322c59b-c147-4a5c-bd13-f4c097f5856f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e429eb50-3aae-493d-8f57-1ada3ac4a4cd", "sighting_of_ref": "indicator--117b21f5-594a-4fe9-a21f-d725024bfc48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158775d3-4c57-4bd1-8cac-2b2892794aeb", "sighting_of_ref": "indicator--211af721-9ecb-4433-a673-3923bd6ae11b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d72808d-5d15-47d3-8527-a34d3ddff667", "sighting_of_ref": "indicator--eeb577ae-fa43-4ca5-bb37-db2a83c7ff91", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2853c82c-2a11-498f-822a-4e9d62aaddff", "sighting_of_ref": "indicator--a60bf644-169e-45f7-88be-4a2e1c53ee84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f09d55-518f-4cc4-a341-f5a5d9751a06", "sighting_of_ref": "indicator--473ac75a-b7ab-40d1-a40b-59937e310bc1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a205f9-8a35-4118-bdcd-16dad7d3ff03", "sighting_of_ref": "indicator--473ac75a-b7ab-40d1-a40b-59937e310bc1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e774a1-ef53-4e2e-9d64-202748ec0a6b", "sighting_of_ref": "indicator--66257b16-2bc9-4173-835b-d646b07aafe7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef034bb-413f-4b4b-8d4c-1ce54f6b655d", "sighting_of_ref": "indicator--40754d30-3e65-4573-8580-deda2c8a09b0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeebc2e-9836-4e79-ade3-50d89cb7fec9", "sighting_of_ref": "indicator--f716f8eb-41a0-4e0e-898b-7e10c2d7ff21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33089449-c48d-419c-b87e-94dfb4f5e3e1", "sighting_of_ref": "indicator--a7965f71-26a3-4370-a0d0-f499c00602c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a65686-1763-48f8-9f71-53dea54f52e4", "sighting_of_ref": "indicator--66e37eb4-b907-4f1c-b36e-75d82230a8c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b7c0e9-60a4-4a98-9e48-b0c6ff9bec21", "sighting_of_ref": "indicator--66e37eb4-b907-4f1c-b36e-75d82230a8c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054da4a1-7e7c-4a7d-9a21-45d8ba3effa8", "sighting_of_ref": "indicator--b12de276-5d89-479f-9f93-16531535eb34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244c208f-b0c7-44de-a329-7924150eecad", "sighting_of_ref": "indicator--6e767b59-3901-4b49-a796-fb61eae7e42c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a930c6-9818-42c5-a639-8316df4e0d31", "sighting_of_ref": "indicator--7b93c950-5a24-48f0-ae79-5f1811ad5a75", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a7b9e9-4fe6-4ffd-9085-bcd3f2384838", "sighting_of_ref": "indicator--a5e61a81-39c5-4bb6-8826-9faa23ce7b1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be9a51c-fb03-4dc4-9b70-f95722f8ca71", "sighting_of_ref": "indicator--e26ed995-39b9-4210-b82d-702b46546a7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd36f73-1d00-4c1e-94af-26978c5622d7", "sighting_of_ref": "indicator--068661d6-b92e-4f7d-b5e8-75e396ef4ea5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3584dc7-52d6-4628-a6f4-a82422ef7564", "sighting_of_ref": "indicator--8565fe0b-155c-4eaf-84c4-24a4a5f71071", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6c2373-41bf-4b0c-967b-033a45b45d72", "sighting_of_ref": "indicator--526e892b-c50e-419a-ad2b-9f806a85b6e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f2534a-aff8-4614-9bdf-0620fa79e909", "sighting_of_ref": "indicator--d65de826-5282-4f5d-a28c-3d17d8ce8587", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95965f66-62bd-4b9e-9fe9-35fd178637c4", "sighting_of_ref": "indicator--d65de826-5282-4f5d-a28c-3d17d8ce8587", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d75204-0319-401e-b2ad-bfd2f34ea207", "sighting_of_ref": "indicator--c2412b70-c92e-491d-9509-4e91b6016fa5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f473cd-3b70-4619-b55e-ec0786774edc", "sighting_of_ref": "indicator--9bf2b9ca-a3ce-4e84-a82b-fb336b7ac633", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd8d4d3-5a7a-4ed5-be20-feac86d9a531", "sighting_of_ref": "indicator--230368fc-15bb-421e-8ec5-dc0a0b0342da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181d6c3f-e1f5-420b-b60f-25f4a27e770a", "sighting_of_ref": "indicator--e1eaf936-687a-4858-aebf-1af94ad7af2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145a0cf3-6f67-4328-9f23-3377ad1fbdc1", "sighting_of_ref": "indicator--e1eaf936-687a-4858-aebf-1af94ad7af2d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9807d423-0ec7-42c4-959e-303a0de1526c", "sighting_of_ref": "indicator--7435ada0-3248-47f1-82c2-baaf3b3df659", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091bb43a-7688-4fcf-b861-8c97cba32da6", "sighting_of_ref": "indicator--24c7d02a-bba2-46e5-b6ba-c9f3a42c474d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ac0465-657e-41fd-98d5-d726c246e67a", "sighting_of_ref": "indicator--6289b35b-868f-479f-ad77-59936c5c3920", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b523014-ae89-439d-9df7-0c68f2f741b2", "sighting_of_ref": "indicator--a3b14968-6dc4-4e0c-927f-6665eca87267", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e77fb8-431c-4af3-bc29-02367f15ca8f", "sighting_of_ref": "indicator--a3b14968-6dc4-4e0c-927f-6665eca87267", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e476f8-c53a-4576-8a0c-9a66b5225ed5", "sighting_of_ref": "indicator--5f670b2e-4d44-4091-baf4-b36fc3772ba3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694270a0-5e04-4863-b8db-cdc8dc6a369e", "sighting_of_ref": "indicator--6c38bba0-58de-4317-9573-f8e0dc4b023b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41a35fb-4a4f-4908-b29d-6a83050806b9", "sighting_of_ref": "indicator--a3ee41b1-638b-4392-b422-cbbb59930431", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80b2c94-d18f-4f9d-9642-886495563e64", "sighting_of_ref": "indicator--a3ee41b1-638b-4392-b422-cbbb59930431", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8c67d0-43bf-4bd8-91e8-f408aa0ac8fa", "sighting_of_ref": "indicator--b5939f5d-9c52-4582-ab4b-1f76d9b25fb5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f469ca3-23f5-418a-b010-6c8a98b82d06", "sighting_of_ref": "indicator--7aa10ff0-f0df-4a89-abb4-ab9768814b7f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b415d335-abe8-413a-8e73-5e117349546c", "sighting_of_ref": "indicator--136919e2-ffc4-41ff-8af8-40e051fedea9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0e1420-8d77-4bb5-a372-904ebbf08e56", "sighting_of_ref": "indicator--187ad7bc-ce92-4cfd-9049-2ffc9cb847f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25db4af7-936e-451d-b325-a13d69a9fd32", "sighting_of_ref": "indicator--0fd73a00-4897-4963-b411-dcfdfbe78430", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbe38ac-b24d-4013-9949-dc7ed9cdbd9d", "sighting_of_ref": "indicator--0fd73a00-4897-4963-b411-dcfdfbe78430", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7b9243-d4c6-4213-b9bd-b15722245d9a", "sighting_of_ref": "indicator--f6bdfba8-410a-4a88-ad53-950ef5278756", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b6a77b-6d42-4cdc-a888-6339856285f4", "sighting_of_ref": "indicator--518b3c7a-e671-49a0-a0a9-9229ef5040d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b82d1a-c33c-43ca-a270-6f5f64aed890", "sighting_of_ref": "indicator--bccae2b0-9de2-4e19-81ce-bec1b82e1cb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3a715e-0fb0-4a65-a4a8-06fab5d382ca", "sighting_of_ref": "indicator--fadeb6ed-435e-49b1-89c3-7d60af39b059", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b63daa-9400-412a-b0f8-988b4203a890", "sighting_of_ref": "indicator--0ef97b8a-8f84-4f75-8ccf-6a8e09f7bdd6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16866807-ddf6-4c7e-a65e-8c920d4ccc89", "sighting_of_ref": "indicator--0ef97b8a-8f84-4f75-8ccf-6a8e09f7bdd6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defe55a9-1cc0-497a-9d72-a5a6c89e850a", "sighting_of_ref": "indicator--5c788e5e-3b99-4905-96a0-00f3e8d4cc48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229ce7fe-4cb5-4ccb-812f-c0b535b4e291", "sighting_of_ref": "indicator--f78e6ebb-82cb-4aef-93e7-c7575662a23c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e3f578-c7f9-468d-ba08-19b74d523138", "sighting_of_ref": "indicator--e7d5d6e4-910e-4d1b-a90f-07d2893a993f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b236908f-22c6-4f68-badb-272ccc61a5b2", "sighting_of_ref": "indicator--1c5107ba-606e-47ae-8551-b7ff359b9586", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00420f9-c25e-4a28-b0d8-c647e8b7d62f", "sighting_of_ref": "indicator--d23e1150-b496-47cf-8a63-65264cc1f19c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263379fa-3734-4a31-90ae-04d0139e2a64", "sighting_of_ref": "indicator--2928a19c-e1b8-4958-8672-00c6c8c446e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd72e70-7bb7-493b-8f97-833328828883", "sighting_of_ref": "indicator--0434a64e-e29e-4cdc-999d-9456b87ef69a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ad09e3-8d92-40e1-9a82-09ccc09fb673", "sighting_of_ref": "indicator--1d44d54c-ac38-49f2-aa20-b38644a19e8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c42a9c9-ac8a-43fc-ae13-4a3d6fea2031", "sighting_of_ref": "indicator--b6a0bc20-1cbb-461f-b92e-d3c4fc7d55a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe63beb6-efc1-49be-8a03-43bebeb3db48", "sighting_of_ref": "indicator--5ca6d6ab-ad09-4989-927d-dc95b46a2a62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1915ccb6-0ed9-4cdb-bec6-688dfa2527a3", "sighting_of_ref": "indicator--2a50d7f7-9dfc-4afc-a1d8-91a785260161", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357e8434-8261-42d4-82c1-f5a077d201c7", "sighting_of_ref": "indicator--b1faca48-db57-4caf-856a-88d05e6352ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d466dd7-dfd0-4149-84ea-fe048c0bbb82", "sighting_of_ref": "indicator--8c442947-44d0-4c37-81a9-0ef98f4a3246", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c456bc-150e-48e0-a94c-172e39d40fe1", "sighting_of_ref": "indicator--8c442947-44d0-4c37-81a9-0ef98f4a3246", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e35fbfb-f27c-4e2f-bd12-c4fbf57bc97c", "sighting_of_ref": "indicator--8deaf001-f689-435e-9554-153e1ae8a291", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cff972c-68da-4e0e-bbae-1e1f4089d0a7", "sighting_of_ref": "indicator--ec318945-b07f-46f6-8af5-7a2f494a4531", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bb227d-72fc-4ca4-90b6-d0ed81851040", "sighting_of_ref": "indicator--5bfdc56b-c5e5-4e37-a780-e9c0864ab54f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5e2e2e-9a50-43e8-8f5b-d679f2644263", "sighting_of_ref": "indicator--35d4532f-1f88-4894-a169-5cc5105e05a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee3886f-4880-4323-be54-12750e19ede3", "sighting_of_ref": "indicator--76c97448-fe73-4636-bc58-6d1eb6e69f52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e49e03-f38b-459f-b6fa-7ee42a2cf397", "sighting_of_ref": "indicator--166a1cfd-21ca-4d36-a476-1477d0c81c15", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d1bb57-a09e-444b-987e-57d298e6d5ea", "sighting_of_ref": "indicator--4539a6c2-909f-4c59-9829-369a7f435d94", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b964cc2-39cb-486b-8364-fe15a648c873", "sighting_of_ref": "indicator--0c2886c6-4fa0-4ece-9756-416280b11993", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62904a6-034b-4b1e-9895-23cadac94d64", "sighting_of_ref": "indicator--0c2886c6-4fa0-4ece-9756-416280b11993", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c64e4f-bc46-41be-992d-aa44526d9a59", "sighting_of_ref": "indicator--00642f62-38f9-4ac9-b23b-8989fdf1c400", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35af62c-120c-454e-8ee1-297de8e8e5b6", "sighting_of_ref": "indicator--562f4e38-f32c-4359-9788-35dfa9f71296", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c24ffd0-91e8-4e68-9ae2-80d484e54897", "sighting_of_ref": "indicator--277b4d87-ca40-4be1-8fd0-566adbe3c318", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450712b6-c1fe-4384-8a3a-1058daa760c4", "sighting_of_ref": "indicator--22446ad0-9139-4626-ae95-229dd7c33639", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9392f53d-6e12-4703-9564-b4e5a46306aa", "sighting_of_ref": "indicator--ab644e59-ccf0-4ef9-9ae0-082783f6a6a4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9ff64b-e531-4b20-a8af-db4c7449607c", "sighting_of_ref": "indicator--7934f153-b4d4-47e5-85cf-748fe6d9eccc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eff60b5-2285-4a4d-8085-09a203e39229", "sighting_of_ref": "indicator--f591f42c-4d5f-4e1c-a90f-0ef4a94257c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc82f172-becd-4def-968d-b89133cd98b0", "sighting_of_ref": "indicator--e44fe467-399a-44ce-80ab-3a6d68123441", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f88b0c7-cf32-4dd6-a569-e1c0adf79646", "sighting_of_ref": "indicator--482ad1df-d762-4f34-84d7-935569e135e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246306c6-74c9-47cc-80e0-514a61b77e9c", "sighting_of_ref": "indicator--047f044e-bb85-487e-b47e-c00d794f44b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311e807e-01b4-4ae5-9da9-71a521e6ad2b", "sighting_of_ref": "indicator--348b592e-9ea1-4607-b501-d898779c1deb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777dacb4-6a28-43b3-bc8a-4a048bbe733b", "sighting_of_ref": "indicator--c29dbf23-915d-49da-8a51-e6179c6d0fdd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d02f200-4f84-4a3e-ab95-616e6eac70c7", "sighting_of_ref": "indicator--233ad42d-886e-4aac-966e-0596b56df4fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c011c68-9175-4e53-a5fa-7fe4fa54a630", "sighting_of_ref": "indicator--0cdddfb0-2985-4eba-afb8-0e3bad38afec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2482affd-1d46-49bd-aa3f-c45f00110690", "sighting_of_ref": "indicator--0cdddfb0-2985-4eba-afb8-0e3bad38afec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8c6be2-1834-44f4-9ff7-16fc20f21722", "sighting_of_ref": "indicator--0cdddfb0-2985-4eba-afb8-0e3bad38afec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15765949-5540-4888-be34-95d6a3fbc888", "sighting_of_ref": "indicator--2d9301c7-3d4e-4dac-9df3-9318ce4cca0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f303b5-b4ee-45c6-b2fd-7c4062d42cc1", "sighting_of_ref": "indicator--2d9301c7-3d4e-4dac-9df3-9318ce4cca0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345ef8ba-da52-4b34-84fb-e8dc2209605f", "sighting_of_ref": "indicator--e8f1151f-0242-4c94-8b42-eaea506aeefb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c45e89-3fac-4262-a7a8-572ba00193e7", "sighting_of_ref": "indicator--c75a76d4-15e2-42de-b0ac-18f98e33fb6e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda90dcb-bac6-47b4-ab6a-64d0262c5295", "sighting_of_ref": "indicator--77266f05-492b-429b-9d3d-41aec857625e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff44c89-ab9c-45e4-bf75-d2570416e79f", "sighting_of_ref": "indicator--77266f05-492b-429b-9d3d-41aec857625e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0e7298-d87b-4ce4-b654-83ef8f74c519", "sighting_of_ref": "indicator--44ab43bb-fa74-4b14-aa85-fb8404e8db18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb722708-6c3d-4afd-bfb5-c37f871deb17", "sighting_of_ref": "indicator--05c80c0c-f969-49e2-800a-9c379d7b8068", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617f651a-3840-476d-a079-6a7751010e2f", "sighting_of_ref": "indicator--dd6f2b03-3351-4aee-a710-a18516003a0e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b109acb8-73b3-4612-aab4-3d589354838d", "sighting_of_ref": "indicator--f1703ead-4dd0-4f2d-bbd5-175bef40632d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7db245-4483-40cf-a663-c02cdc7659bc", "sighting_of_ref": "indicator--83936540-e277-470c-8e1e-b43f751750a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6661445-7043-40dd-b412-9abfc639d8a0", "sighting_of_ref": "indicator--f9b78f8f-ee65-4d1d-a712-da91eb5f48ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f517ee-947c-4349-9196-bc9b56ef1cd1", "sighting_of_ref": "indicator--a529a0e1-a0f6-4e20-9691-52fc3b8f81e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f205ad9-1808-439f-8aa7-fa11b98f1cf6", "sighting_of_ref": "indicator--43f60558-8623-4494-8186-d9bf1989944f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee972e7-c62b-40fd-83d3-1b02136f00c0", "sighting_of_ref": "indicator--e74cafef-d08c-4d90-82c4-3ba3e671b319", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c64466-a17e-4be0-84cf-ef4b57c40eb7", "sighting_of_ref": "indicator--e74cafef-d08c-4d90-82c4-3ba3e671b319", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19fb03e-799a-4b71-a24f-6e04b099d09d", "sighting_of_ref": "indicator--3df217ea-8280-4c9a-a0ff-b130cfa9fa9b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5423a1f0-6ff2-4a14-bfcc-4532cda55db2", "sighting_of_ref": "indicator--021747ca-20ad-45bf-9ef0-dcb4eeee0754", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e01aca-4070-4063-9ab5-7bed4bc8293d", "sighting_of_ref": "indicator--35833a11-3d89-4af7-bd0c-18f0a5c64b68", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be3f1bd-4f67-4ee6-bee2-d15040797386", "sighting_of_ref": "indicator--6778dd3f-177f-4300-b580-12de0c7adab8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fb8198-5318-4f8e-8dc8-36474f3c3c7a", "sighting_of_ref": "indicator--e81891d2-5872-43e2-8294-e47973bec695", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa2d24c-aa1f-4798-a83e-d7e169c08df1", "sighting_of_ref": "indicator--903856ed-de72-41df-9c51-97e7b856afef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff898e3f-b645-4819-9ea2-99d0f3e5a9d0", "sighting_of_ref": "indicator--f5109ec0-d3ef-49f5-811c-f516610b0043", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bc49a6-285e-4d24-8b6d-4be6acbf6d8b", "sighting_of_ref": "indicator--38f37dd4-3a6f-45c0-9d86-5378cd867bd5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dae9ad-ebde-428c-b519-00b0fe151473", "sighting_of_ref": "indicator--da51349b-79bc-48f1-bce1-f55f6cac98c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f2fc68-f7a6-453f-9669-4f670679cade", "sighting_of_ref": "indicator--214a1a8d-5515-4761-ba8c-378afd1fa903", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f9e917-47ef-4c17-b92d-253c193cf0d6", "sighting_of_ref": "indicator--818a344d-2681-43a6-8b5d-d2df668835c3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fed750b-4261-439f-82ae-594da8fe8d42", "sighting_of_ref": "indicator--9c6b7ce2-4524-403b-b9c2-13b8d6c9b1d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6719fe7-ebb8-41cb-84a2-7b4804e4b28f", "sighting_of_ref": "indicator--4118d203-f63f-403c-8298-48349bd8fcec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a750d368-0cec-40eb-b06f-7046c5d941b6", "sighting_of_ref": "indicator--f0f96355-91c0-4f69-8033-6b466883b27e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e029af1b-c5cc-4b45-a404-447b3a670b4b", "sighting_of_ref": "indicator--d6087b1a-2051-4583-9a1c-5fffabba872a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d137d3e-2671-4c0b-9605-f6071a9a3a64", "sighting_of_ref": "indicator--c2145442-5a5a-434b-903e-45d20c9e0d36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f32d66-5b0b-4a30-8edc-d844e381b006", "sighting_of_ref": "indicator--c2145442-5a5a-434b-903e-45d20c9e0d36", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a3d8e7-7f88-4494-8921-13b8dee5c89b", "sighting_of_ref": "indicator--110ba7c7-b68a-4407-b05c-ffe7e09c5627", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50109edd-f000-448d-8335-8a2bfd65f160", "sighting_of_ref": "indicator--745bb7ab-bc41-4dc9-aca2-92147012592d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5998f6-5727-4a0b-9b0c-8ee46ce810c4", "sighting_of_ref": "indicator--97e40d45-82a5-4233-8f17-9bbfd73981b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bd1e18-1d8a-4c4d-a1b2-ba8bb5a9674d", "sighting_of_ref": "indicator--a0cce8db-e38c-4bc4-8ebd-6de1c3d1f14d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f087e929-3da9-451c-bc12-de7068044ee0", "sighting_of_ref": "indicator--a0cce8db-e38c-4bc4-8ebd-6de1c3d1f14d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360b2940-5176-4603-a33f-b9a3e8689755", "sighting_of_ref": "indicator--ba48badd-3190-41d8-b8d8-381302a5e0c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04df8aa3-1ba7-4d55-88eb-b0e7def776ef", "sighting_of_ref": "indicator--ba48badd-3190-41d8-b8d8-381302a5e0c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1787fadf-6caa-4091-8dc5-aaf65d444a58", "sighting_of_ref": "indicator--4654bf31-ad6a-4fea-8c0d-9ce20e1c1607", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dee74e-20d2-4969-8191-ba18e7faeeb2", "sighting_of_ref": "indicator--1901eb1d-2368-4017-8a75-20d6ab5da9b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9a0e99-ec9a-43eb-a8f4-e6c72c4801a6", "sighting_of_ref": "indicator--6745ff2b-e604-4f5a-b678-56c27c299f3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf261d7-acf8-4bb3-a6c9-5b6b084c0bfc", "sighting_of_ref": "indicator--377e7921-7e5a-4424-9a76-8b7ac494f4f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe98e70c-2ac6-4472-a22a-885fe6efa3b1", "sighting_of_ref": "indicator--2ba08ca1-0429-4bfc-baf9-aba8830f9ee9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab837b5-dfa5-40e3-8114-8be6c7f80bc9", "sighting_of_ref": "indicator--388dd31c-0d34-499f-bdba-31b846925535", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4847d13-a432-478e-8658-45cb87373595", "sighting_of_ref": "indicator--b2e59bb6-38ed-44e2-8762-61bf8cbd4525", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce48431-73fb-4b4b-9cac-fb11983beb3e", "sighting_of_ref": "indicator--9ca0a1dd-519d-499a-a4a9-c4b354373aa3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070446da-897b-4549-89b5-cfc674a1e2e1", "sighting_of_ref": "indicator--2ab00890-212c-49e1-a8d2-fe13ba5f7a0f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01212073-d7d3-4e34-9375-3c455446562a", "sighting_of_ref": "indicator--e0347616-87ed-44c6-b473-1d21996361dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5294cd7-51c6-4f8b-847c-461e21de4912", "sighting_of_ref": "indicator--933e7729-e5f5-4f2a-bdea-3fde25163670", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d77ddc0-ac58-4dbb-9291-56762b3b68bf", "sighting_of_ref": "indicator--933e7729-e5f5-4f2a-bdea-3fde25163670", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ebb0ac-5362-4ede-a348-35c2061a3b2c", "sighting_of_ref": "indicator--20c9b83f-cb53-4770-ab64-306ffb97eae6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994367e6-6eb2-4912-a536-c14ad21fff2f", "sighting_of_ref": "indicator--a70e87b4-c47d-4944-a737-b747c7816089", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670b6fac-e5a2-4d95-8c7f-e09ebec03e5e", "sighting_of_ref": "indicator--db685b97-5b5b-42d4-bf6f-6cde43e5c01a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d86ce7b-775d-4431-87b8-74dad6f10d89", "sighting_of_ref": "indicator--e6c91138-a944-4429-bbbe-fa4960d2380f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6666e1e3-1dea-41a9-988a-bfe74d0271c8", "sighting_of_ref": "indicator--e6c91138-a944-4429-bbbe-fa4960d2380f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c1fdb1-c2e6-434c-b2cf-0c89490150d4", "sighting_of_ref": "indicator--e6d6da13-6564-46ad-8cf0-ecd927879f7e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488d3c15-07a3-4216-aee6-6c600d0e8e3a", "sighting_of_ref": "indicator--a95382f1-1f4e-498c-a4ef-bfdcccb1f7d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fce30fc-a23e-44a5-a6d8-6e1631f73824", "sighting_of_ref": "indicator--a95382f1-1f4e-498c-a4ef-bfdcccb1f7d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f85c4a-43df-46ee-af66-b72a8abe0b97", "sighting_of_ref": "indicator--5cd6181b-9d53-4e6c-90b4-450ddce7c42c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55366520-3f3d-458b-9285-0a5ac1ae40ae", "sighting_of_ref": "indicator--03a1a403-bfae-4861-b25b-864c046a2084", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2444f7-ba88-405b-8f73-14530f894fad", "sighting_of_ref": "indicator--ac5ba68a-9b4b-4e0c-8098-b34f57082a68", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b56e7d-2b5e-4d03-b65a-e21819080602", "sighting_of_ref": "indicator--50c2e899-82de-4ab2-8a9a-5d750b2cd6ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41e55bb-a3da-4dba-9082-1f5caf11984d", "sighting_of_ref": "indicator--3de8ca04-dc35-4e86-b12f-a9c5254d846f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f78918e-63ff-4654-a69b-a33955e06bfe", "sighting_of_ref": "indicator--b58d2372-1326-43ac-8b3a-9975c2594f9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dcafd4-73fe-46e8-9606-773afc045d7e", "sighting_of_ref": "indicator--d0368a71-3b65-45a1-abc8-0f134f9ec3f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c745598-6afb-43c1-b51c-bdecb23caa84", "sighting_of_ref": "indicator--ab67ea4a-751d-4bad-9661-bb9aa3462c3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a361bade-4786-4b97-9c1a-fbdd4b457b70", "sighting_of_ref": "indicator--13af0b97-8a82-4195-bacb-4fe66f52756e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5802bbdb-3d8b-46fa-a3f6-d3d20c56f966", "sighting_of_ref": "indicator--965217c3-4ee4-4528-92cc-20e396e3c684", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea054e1-676e-492b-800a-1b9e590e6d81", "sighting_of_ref": "indicator--2b53fa8c-559f-4e74-bb55-20c4714baaeb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb91ae7b-9d24-456a-8dc5-1c03f5fa125c", "sighting_of_ref": "indicator--61c90925-fdd3-4932-83e1-7e23a4ba5d73", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5962171c-4102-492e-a6ca-a834e9359842", "sighting_of_ref": "indicator--e3976382-cc3c-472b-aba5-e582e92d4b5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4a456f-1b61-48cf-8dcf-b43dc7ff9d32", "sighting_of_ref": "indicator--328e4f82-9e48-42a0-9a3e-d390a4f876e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6448bed6-c054-4cfa-b659-afb7b55df58d", "sighting_of_ref": "indicator--a7719359-fc09-489a-81ee-713c05469393", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa05946-4d62-40ed-94bb-5ad4239a30f0", "sighting_of_ref": "indicator--f13d1291-4d2d-42c4-b340-e02e9c30b668", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9569b70d-9f98-42af-b146-2ccadd0b415f", "sighting_of_ref": "indicator--b0de84f8-e8ca-4a96-9c25-6ddc810a281c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefa4643-7c76-4b6c-87f4-95c6ebd80fae", "sighting_of_ref": "indicator--09d50c40-eee6-4c76-b821-4e3e582012f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe22d8a-361e-498c-9556-1d480b2ed71a", "sighting_of_ref": "indicator--cd6d6c41-bd20-492a-8645-04200dd141ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55caa92-dec7-4ca9-b419-c7a357c46b76", "sighting_of_ref": "indicator--ee097a55-41a9-4e4d-ad43-c38c87b162f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b76bc2-e31c-4f6c-a993-a2112b6119cb", "sighting_of_ref": "indicator--c0080e64-1e40-43b7-bf33-06dfbe3ff297", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55070b7a-b195-495a-8420-acdec4f24d8f", "sighting_of_ref": "indicator--2ce097c2-7a9d-43ae-b5ed-c2db842bf43b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a9d43f-cbb2-4200-b20f-dce5236664e2", "sighting_of_ref": "indicator--93f4bad9-6ccd-4996-ad1b-e740602c6c32", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114ebbb3-9198-406b-aee9-ad96eabb655b", "sighting_of_ref": "indicator--55119499-d4b1-4561-b27e-bfe25720be0b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b575889-8032-4a59-9eb8-2e7f0f13f72b", "sighting_of_ref": "indicator--54658e5a-b07a-40fa-8abd-e3a7b9910c80", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8fae67-2246-4f1c-a3b8-b6a5281fdea2", "sighting_of_ref": "indicator--a01c79d3-48f2-43a6-872b-f08752bf9df6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e1fed5-d590-4eee-813e-8b112addc735", "sighting_of_ref": "indicator--89a39e7f-7df2-43bf-9648-ddb092171b42", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c010f6c5-348d-4ca6-bfc4-ccbe2fe8bdb1", "sighting_of_ref": "indicator--df97c0d6-875c-45b8-9f96-f55a0ffb581a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9419ed35-2362-4492-a014-cc63f5191b7f", "sighting_of_ref": "indicator--e3e0ef7e-4c78-415a-860d-0dd6c9323ab9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da7b3a2-efb8-47b5-8bc5-95fded6a6dbc", "sighting_of_ref": "indicator--53619263-3977-4dfb-894c-a492173ab33d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832765fb-349d-4fa1-afba-6058c07a9161", "sighting_of_ref": "indicator--9a6f02de-0b0a-4a35-be02-110b051f723d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef6b261-c67c-4153-bba2-f19bf0dc1d41", "sighting_of_ref": "indicator--a4fed483-1715-409d-b40f-8cf334ba7600", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4de86b-424f-42ab-ab10-8f0da02fd632", "sighting_of_ref": "indicator--463632e0-f7ca-4133-9178-21d71d96e636", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a13cc16-8d03-495a-821e-1421c3ff3328", "sighting_of_ref": "indicator--5b4e7ed3-f3cd-4c47-82bb-3691c35c4f57", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4cc793-8525-43e3-ba71-c41aa3f10b37", "sighting_of_ref": "indicator--1fd97702-f072-4a2a-a833-4941078cff39", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17b2f60-6e36-4b2a-b639-bccfd676c95f", "sighting_of_ref": "indicator--1fd97702-f072-4a2a-a833-4941078cff39", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d85f624-5437-4a65-bc62-ff7543cffff1", "sighting_of_ref": "indicator--400c3fbd-7dfd-4a13-9340-d3bc4fb94911", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee31027-528e-4e85-b9c6-586da2fe8351", "sighting_of_ref": "indicator--aff78721-5ba2-42e2-95b8-d4273fda3dac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f8e6dc-589d-408f-b8fe-37a2b518279a", "sighting_of_ref": "indicator--5c823c67-0ff5-42e7-86ad-a6cc92d23821", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f21b331-5d25-4ec4-af2a-56c1ce888e32", "sighting_of_ref": "indicator--30e1089e-66a1-4601-9535-8683bba76314", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cc4a60-45ee-4e4b-9053-a2a7ffcfd171", "sighting_of_ref": "indicator--b63fafb8-76b1-4937-bf26-01644260263c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9041ae8-b010-4ee5-8ea1-8b7d67671ddf", "sighting_of_ref": "indicator--f27bb7a5-741d-40d2-938e-ba1dfc9e9bda", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a66fbcf-12a2-4caf-b695-bb64578e8aed", "sighting_of_ref": "indicator--cde80a58-6e9f-4209-9f84-ac885553b5d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5840613-db0d-4cef-9859-507df7028fa6", "sighting_of_ref": "indicator--95ef2700-019b-4901-8415-e397f8945e9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5a906f-bb01-4f55-8f32-e6afda134eb5", "sighting_of_ref": "indicator--010d4674-79a1-497f-ac7c-0dcc7dde6a42", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c88997-974c-4ff7-939d-8a09cd1e1ba7", "sighting_of_ref": "indicator--8004e8a1-ccae-4e42-af9c-cbaf3cd51a43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc67aaa-2d1a-4086-a40e-518052425e98", "sighting_of_ref": "indicator--64b49b15-4819-442a-840d-2081b05d23d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff416b5-a536-494f-a6b3-3b1f7635fe7c", "sighting_of_ref": "indicator--0146e437-1389-40a6-abac-032c673ccefa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b3630d-cb3a-49b2-a8e5-91f44f5b11c4", "sighting_of_ref": "indicator--db1e3a09-68b6-4e1f-aeb5-85e922ece347", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c93199-333c-428b-81a4-04e25b9da2d5", "sighting_of_ref": "indicator--06c2cb05-ebed-4947-8df1-69fef414c1e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a581de61-7f35-42b8-b426-3fbc55061a05", "sighting_of_ref": "indicator--f4bca409-113e-4451-afe4-bdcbbae40aeb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597c26d9-643a-4003-8d69-3e592292be61", "sighting_of_ref": "indicator--ff23c2f6-b992-498c-a08b-1046528624fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46141125-181c-4ed2-95f8-cca24b0eb954", "sighting_of_ref": "indicator--ff23c2f6-b992-498c-a08b-1046528624fd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8615806-f482-4059-b69a-63c97c448069", "sighting_of_ref": "indicator--a1da4d75-0f9e-44ac-a8ab-05c4a9c99677", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1bf6674-ecac-45d0-b022-a12de69b5f27", "sighting_of_ref": "indicator--1fba0499-79a8-4a29-826c-69f226d0b2c5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87629602-d768-4a31-9148-fcec51f53e09", "sighting_of_ref": "indicator--83e49542-0e63-42a5-9e6d-950bdfafc892", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53e9984-f8c9-4d43-8632-c59280febb74", "sighting_of_ref": "indicator--8ae11cb2-48ea-46d7-b56a-c1d21ce5c1c8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a4b4b9-7f6e-459b-8b5f-0c94387b0606", "sighting_of_ref": "indicator--aa3202d7-65d1-48b4-8685-34bff9ca0552", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc17d56-5a87-4115-a469-c08acfd797a0", "sighting_of_ref": "indicator--028ada87-0435-4208-9f87-f2681b1f50a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bd4c25-751d-402c-b25c-a955376bd047", "sighting_of_ref": "indicator--ce26c9a2-c5f7-4a75-9e91-5f2ce28ac901", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c04326-54fb-4564-b32d-b658d108233f", "sighting_of_ref": "indicator--7cb5491e-d8ba-4973-ab14-7b59b8def73c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade481c4-013f-4451-ac90-5a6d17030954", "sighting_of_ref": "indicator--fca54d88-0146-4f00-8394-9552b1da09fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abefcfa5-f4b6-4199-89ca-5012fc4b44e0", "sighting_of_ref": "indicator--ba1ab045-e1d1-46e7-87d6-3d052919400b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60e5369-952a-41f1-84fb-d6d85bc23fad", "sighting_of_ref": "indicator--910fcb94-7d37-4be6-af41-c23fec880896", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef88171-88ef-4181-b390-80f853029f42", "sighting_of_ref": "indicator--dfefddf5-95ac-4bd6-bf35-bd05bd80922c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d61786-6ccb-44b4-897b-89896193a9ce", "sighting_of_ref": "indicator--0c89ae91-7245-4975-8753-64b78412fbbc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c3a009-51ae-4c6b-b184-a31855748499", "sighting_of_ref": "indicator--0c89ae91-7245-4975-8753-64b78412fbbc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8595a4b4-0a58-407a-b20f-fc30f0e641c7", "sighting_of_ref": "indicator--43dddf2d-5480-4bd6-83e5-477ada942349", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537b57f2-909b-475b-89ca-6d9e6e5a29ee", "sighting_of_ref": "indicator--c1b7a9c2-5858-4b66-b12a-69d8baf213e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0a2cee-0ba4-46ea-9376-3ae44a1fdc0b", "sighting_of_ref": "indicator--0538322e-98fa-49f0-999f-b1ed3f464ef1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914d6be9-8f0f-42d4-abd4-885448b92ad9", "sighting_of_ref": "indicator--c2eee2d1-2c62-4c39-948b-257d9c2c63ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1e6d4a-6865-4f13-b3d5-1df8709a68f5", "sighting_of_ref": "indicator--f319e741-230a-48c5-9a6e-6bff427f3ec6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ea67aa-8ac4-414d-9ad8-dd8e35f3ffdd", "sighting_of_ref": "indicator--7af8b04f-1eb7-48f1-b2af-1a0030213670", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a43f49f-8f0a-46e5-bf47-d6989efb2e68", "sighting_of_ref": "indicator--12e00b9e-e0ef-41a0-bce6-ac5c2d7bce45", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c91d9e0-33c6-4831-854e-56710d792960", "sighting_of_ref": "indicator--f2d4c619-90db-4a05-a822-d8e471ae38f5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909cfd62-0970-40ee-8b4d-c805f144a569", "sighting_of_ref": "indicator--1e3e77c8-a740-419d-a402-29a937dedab7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a693cfde-fa6a-4607-8b2d-5f6a62aeb107", "sighting_of_ref": "indicator--2e6b0696-0043-44d6-b150-cb3de0e41bf6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebdb5f7-1bc3-45c2-b706-d79da708fc80", "sighting_of_ref": "indicator--b9d5d684-d4ae-4a6e-bc9b-7b811e9dea0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92760b2e-72c2-44c1-bf7b-314b6f45b2b4", "sighting_of_ref": "indicator--17bdb6d0-7155-47b5-ada2-24d33735218c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7980cfda-da8f-4372-bd79-bcf71c08d268", "sighting_of_ref": "indicator--fd937aa7-10a3-4314-bb67-17587af09058", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d382a557-e16e-4d74-9f54-2f6e5547b719", "sighting_of_ref": "indicator--24bf460e-00eb-41c6-bd3f-e3633c013440", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda4ac92-101c-41f4-b90e-21c864d116dd", "sighting_of_ref": "indicator--d63ab729-b2a6-42a9-b646-1a3f47358b72", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7696f307-7ab6-42c2-9ac4-4ab281dbeefe", "sighting_of_ref": "indicator--d63ab729-b2a6-42a9-b646-1a3f47358b72", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed6208f-69ff-44fa-8f70-b5a3e853ae8a", "sighting_of_ref": "indicator--81098296-caac-4b22-aeb2-d556b335cc85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7f9a8b-0209-482b-bfa6-9b68b3dad756", "sighting_of_ref": "indicator--bde21334-750a-4dae-802b-69dfff261349", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e836c05a-7017-44d6-be93-4e93043ab8a6", "sighting_of_ref": "indicator--08ad0737-a962-4acd-bc0b-5aefcab36cfc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20628f7e-d7c4-4146-8ddb-1bf191be93bf", "sighting_of_ref": "indicator--31c37f16-c9b7-449e-8018-f56981a6a5cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc8f5c7-a42f-43ab-a08b-feaa5679baaa", "sighting_of_ref": "indicator--57fadfcf-9126-4067-972b-a554bd9d77ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f9a744-fe45-48c0-bfdd-10f8e2708c06", "sighting_of_ref": "indicator--57fadfcf-9126-4067-972b-a554bd9d77ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a02fd1-2091-404e-8f2a-b305a9007cdf", "sighting_of_ref": "indicator--57fadfcf-9126-4067-972b-a554bd9d77ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f98f53-d287-44fc-ba11-056e6bd43c81", "sighting_of_ref": "indicator--a086279b-c527-48e2-ba72-f4e64309521f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed5d026-796e-4ff9-977b-cdad75da9d19", "sighting_of_ref": "indicator--cc2bee88-ae0a-4a7e-9fde-707e46934498", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e0d619-c6d2-486e-9b4f-ec53720e4a59", "sighting_of_ref": "indicator--e2d5d8ba-bca6-4649-8a92-d2c4f913edf6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece973e9-de15-4c8d-822d-41432498c06f", "sighting_of_ref": "indicator--bad63db2-513b-4efc-9917-eeede6eea216", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8321da1d-b37a-4976-8418-43cb0759158f", "sighting_of_ref": "indicator--e93b10d7-7172-437f-9301-8578f39e1dc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ac77a9-87a8-4835-a889-cf0005905ce9", "sighting_of_ref": "indicator--9a01151c-5046-4be9-b36f-cd5030c285ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46ae5feb-c980-4d72-8581-8c7555d5a817", "sighting_of_ref": "indicator--8327ac9b-b36c-4cde-b79d-92cfbca180cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff81af5-52ac-4926-8d8a-251468f156f2", "sighting_of_ref": "indicator--a4930883-07a6-4b68-8b30-4e668fa55d6e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75feedad-2a7c-48aa-96b6-65ebf7f2b8bd", "sighting_of_ref": "indicator--9a1f1a43-c13e-45c2-8448-edad6d783208", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b589dbf1-dd43-4ebd-803f-72a81de861d0", "sighting_of_ref": "indicator--1e2f17b5-1260-41e9-9085-229dd8dab716", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba486df-1591-4728-a714-8f8c0403c80c", "sighting_of_ref": "indicator--9b39763f-0082-4922-b163-2f51e5bf7f48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6ea89f-3cc0-4fce-b767-07e92210707e", "sighting_of_ref": "indicator--5d52fbbb-0dce-466a-bbc1-92e0f7162704", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ed985a-d754-4abf-a80a-25d04daffc79", "sighting_of_ref": "indicator--463ead0a-73a3-4b48-80f4-04acd5d765b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db92e355-870f-41b7-b73c-edcfa8e7c683", "sighting_of_ref": "indicator--463ead0a-73a3-4b48-80f4-04acd5d765b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776019b9-af5f-416c-ad26-47dc3fc2819e", "sighting_of_ref": "indicator--adc76e01-902e-49fc-8e41-11d77a57fed5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bb3d6c-e7b1-4da7-b353-690c992e9526", "sighting_of_ref": "indicator--adc76e01-902e-49fc-8e41-11d77a57fed5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aab9687-92ce-4343-8b98-f010412a7850", "sighting_of_ref": "indicator--2f5a418e-01be-4018-8187-bb166f5089b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2a03cb-40c4-4254-8931-1b05daf5b765", "sighting_of_ref": "indicator--abd15d67-38fd-4305-9033-e9ba7113fcf2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74da0532-0fc9-4304-b7a6-40638c9142fa", "sighting_of_ref": "indicator--a350b6f3-e0d6-4473-b0ea-adcc1c72a262", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f5cee2-2af4-4570-99be-6cc4d50d6688", "sighting_of_ref": "indicator--8340c74e-bcee-4532-bff4-e3760227f88e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977a0586-82ad-4143-99ac-82a4e9e6566e", "sighting_of_ref": "indicator--7354960d-723a-42aa-b739-63fe247fa5d1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb63d133-2350-498e-8832-3439c77f1ad1", "sighting_of_ref": "indicator--1498acb4-5b78-4e29-9dc9-85af45b27657", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb0f9b3-67ef-4d21-a345-fa455cbdafdf", "sighting_of_ref": "indicator--809b9165-b3bc-4484-8a37-d8accb1b4c00", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f17ffb3-47d7-43a0-904f-ae537ed07f50", "sighting_of_ref": "indicator--89b8a0e7-8100-469d-b72e-fad215fe61c5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f9ffba-fbec-466b-8e36-32ed7a3d98e0", "sighting_of_ref": "indicator--2c130190-bde9-483a-87c2-2bc009137926", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cfdd4d-fb2d-49ad-a246-72e93ff8a0ca", "sighting_of_ref": "indicator--2c130190-bde9-483a-87c2-2bc009137926", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc215f00-9c6a-4699-a712-044f9ba9d39a", "sighting_of_ref": "indicator--2c130190-bde9-483a-87c2-2bc009137926", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01568190-a8b4-43ce-8da8-6d695aab6410", "sighting_of_ref": "indicator--34b6c404-6a95-4d82-90db-68f4e3f0b943", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73593b8d-0274-435a-93f2-29a420fa6329", "sighting_of_ref": "indicator--15ac2319-0d30-4f7b-b363-e93e5418bc55", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc575719-a032-42e8-82cf-5b9108437269", "sighting_of_ref": "indicator--833945ac-0bc9-4b34-88a3-48e0b0699e91", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa7bfbf-1d38-4671-b0f2-408063edb7f7", "sighting_of_ref": "indicator--92c50855-4233-4a89-b44f-0066019cc972", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce036b6-aad1-4636-8d92-029d0e3d3c76", "sighting_of_ref": "indicator--a81bb7ea-9463-41d5-b24a-c0fe02e1178f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2e719d-53c9-4d20-834b-832b726dd084", "sighting_of_ref": "indicator--3a8e23a9-0623-400d-8ef5-1ad78a494f48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb543104-3851-4b21-944f-458c86540946", "sighting_of_ref": "indicator--d01aa74e-5703-4f8e-95d6-8310537d5ca3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ef3fa9-c8e2-4e94-a7cd-9b820c314d8c", "sighting_of_ref": "indicator--9dc2e7aa-21d1-4247-b66f-f85752b5d082", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb904b4-5469-4143-ad5c-d8eb3565b27c", "sighting_of_ref": "indicator--b7e6556b-3f46-4925-a1d7-b57b42e87edf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ee3cfb-f056-4212-9087-3d028b0096ee", "sighting_of_ref": "indicator--b7e6556b-3f46-4925-a1d7-b57b42e87edf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ea32c9-c222-4552-a546-ad19cf096899", "sighting_of_ref": "indicator--90dadb8e-93e4-4367-8a27-b42fefcbc030", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769af757-6ac9-48d1-9114-3ec63792f7cf", "sighting_of_ref": "indicator--90dadb8e-93e4-4367-8a27-b42fefcbc030", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b69232-1eb8-46bf-85a3-4cbf127e9136", "sighting_of_ref": "indicator--874b56f9-2f46-4b5a-bf06-60b0e1c4278e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22dec5f1-17b2-4330-9532-2e85c7c4fb5b", "sighting_of_ref": "indicator--cd33bdaf-d795-475f-8d4b-fae4d9d7a22b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b675e1e-1853-40c7-9977-8e15de28b8a0", "sighting_of_ref": "indicator--cd33bdaf-d795-475f-8d4b-fae4d9d7a22b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35288c32-4089-4c65-a270-f1a3cb58a17f", "sighting_of_ref": "indicator--99a13969-7a9d-4bae-9dbd-811cf3eb73a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1644d6-9e47-4e2d-b6e1-767b4bf8c0f8", "sighting_of_ref": "indicator--80f6550f-46b0-479b-80d8-7d2d0cb55106", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2499108-0934-4513-afd5-cf9e40345deb", "sighting_of_ref": "indicator--1fe92832-508d-4069-841e-fe0062e2271e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2bc6f2-e5e0-494e-ac71-b8eb55544c9e", "sighting_of_ref": "indicator--1fe92832-508d-4069-841e-fe0062e2271e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784f48c1-3a9a-4e1f-847a-dcf2f1682790", "sighting_of_ref": "indicator--86d04554-1eaf-48eb-957d-7f258b54de11", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61232a6-5085-411b-a9b7-618643cc9630", "sighting_of_ref": "indicator--73800da8-37db-409a-b89d-e28b72c7712d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bca1852-5793-419f-9ca7-37f3f33c3daa", "sighting_of_ref": "indicator--b7fdb684-1c0c-47fc-83fe-206261923e7f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8a0afb-72f4-4035-b3d5-f63e206be189", "sighting_of_ref": "indicator--f5462d81-2858-45cc-b077-2bfac2443d1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3a8124-2969-4b1d-97dc-dbcaa5ec0bc6", "sighting_of_ref": "indicator--c7083431-b33b-42c2-b8f6-6169349e55cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9070c280-7c19-4e79-8979-0127e3bae9eb", "sighting_of_ref": "indicator--18582bf5-ae26-4dcf-ae8a-bfa512f13dfa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b93992c-3a00-4452-bab2-be6dcb5b5c75", "sighting_of_ref": "indicator--a20851d1-d609-4199-8eb5-7aabde97ae1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05bdf17-98ac-441a-ba0c-e5894a6e8ad9", "sighting_of_ref": "indicator--1e6d1978-9c13-4333-9513-74aca1000fb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20196f82-da46-415c-b4c3-add131e91b7f", "sighting_of_ref": "indicator--6b2e5560-4508-46fb-aa8b-5a4fb0a7fdb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e41399-5947-41d9-9eb6-4b37dced804e", "sighting_of_ref": "indicator--530f69b6-f5ea-4129-b0a2-21d37e397456", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd82528-0e87-48bd-baa2-f5ab315ecc5f", "sighting_of_ref": "indicator--42f6dedd-dddb-4708-85e3-be082cb0c987", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b18bad-4245-4d3d-92ee-02abeac8e0b6", "sighting_of_ref": "indicator--edcce019-f596-408b-8fea-9ef2214ef990", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8018d9-bb0c-4b7b-b60f-def7274da708", "sighting_of_ref": "indicator--efb6a3cd-27ee-49b5-b76b-67cae714392f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92be00ac-745b-488d-b921-7258e5353934", "sighting_of_ref": "indicator--4cf38a49-cdc3-4142-bbe5-b2456e3fb204", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31f556b-b6ad-429a-8802-ff838c30afc8", "sighting_of_ref": "indicator--af1d0180-51af-45e9-aa98-03dcca9a9adc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e098441-92dc-4401-9646-878d1f67b859", "sighting_of_ref": "indicator--af1d0180-51af-45e9-aa98-03dcca9a9adc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f178f341-b7b3-44d1-8f7e-d6d8dce2c126", "sighting_of_ref": "indicator--f2c280c4-48d1-4a4b-8b5d-4c046708abbc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df23788-664e-44aa-bf04-3ec32bd5ba0a", "sighting_of_ref": "indicator--75913380-3411-4f66-abc0-07b2237f94c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be92753-039e-4d80-8deb-94530bc409af", "sighting_of_ref": "indicator--e303c77a-5eb5-4fc5-8953-9c75ea4a351f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b51c2a-7bec-48f6-b1c4-29d9ef4a3fda", "sighting_of_ref": "indicator--87e77783-2510-49f0-9533-0adb78e0231d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1b9f15-1312-40ec-ab74-a283cabe5299", "sighting_of_ref": "indicator--6c2811d8-0df7-4491-b2a0-dce564a9f7d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f592dfe5-d04b-416c-9774-12af45b6ea52", "sighting_of_ref": "indicator--379ae7f8-ed66-475a-b8fa-9df2febae7d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4aa94c-3a90-4d36-b97b-f0a525bb6464", "sighting_of_ref": "indicator--ddfc6463-5a71-410a-9d9a-f2f00b509ed9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a874c45-f220-4e1e-9214-d2b6758be182", "sighting_of_ref": "indicator--289ceef0-f329-451f-a356-e7a3fcdc8093", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7badda05-b5cd-47c9-a671-41699739b601", "sighting_of_ref": "indicator--8208bac5-d1d7-4e65-8391-91d74daa6b5b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30c5689-7a87-4d77-8ca5-0d86e5113f92", "sighting_of_ref": "indicator--43ef8bea-96ad-48f4-b675-f405e0c26c4d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59d0749-4c5e-46f1-bbdb-f77c7f3038ba", "sighting_of_ref": "indicator--18d11194-a472-432c-aec8-e16607c872f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a687c1e4-4446-4af9-a339-ef877a67af3d", "sighting_of_ref": "indicator--fb0f4b58-804a-4d2a-9336-c36baf2b6359", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addeee53-ba7f-45f5-9bf5-40b78c8062fa", "sighting_of_ref": "indicator--4f363193-94dd-4a3c-8f17-52912ba1f23e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d0c675-a65c-4944-952a-a813a87fe5e3", "sighting_of_ref": "indicator--24c449b0-f1a4-48c0-aa61-5e524a5a4fc0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b725903d-7f73-460f-bc76-a739ffa37062", "sighting_of_ref": "indicator--39dd336b-eaf8-41e9-9d4e-e120de6d4e18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdfb1aa-35a3-42b9-8f79-d54336749195", "sighting_of_ref": "indicator--4fe489ce-601a-4bd4-b56d-f297e1c2fde6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01629217-82f9-4edd-919e-07506917ee77", "sighting_of_ref": "indicator--bff3b0a0-3055-4731-ba02-4fd71a41f82e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d761dba-65a2-4698-9a05-d780ec2c150f", "sighting_of_ref": "indicator--c846cec7-42b7-4d83-b735-ed9d452f514f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bb131a-12b1-49fe-a83c-67387e555805", "sighting_of_ref": "indicator--0cf11893-4595-49a5-bc8c-a836e85b2a92", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d47d7e-2360-482f-ab30-da3fc4c78fb9", "sighting_of_ref": "indicator--5eed7750-7168-41aa-b781-e275b2527c06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc27eb6-f12a-4171-9bed-6eeefb589195", "sighting_of_ref": "indicator--5eed7750-7168-41aa-b781-e275b2527c06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48321335-35c5-4cbe-834a-1acdd19d5979", "sighting_of_ref": "indicator--5269e49f-0d80-4bf8-a958-b3ae9f5c3e8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb113b9b-5e15-4259-ba2c-75f66a219db7", "sighting_of_ref": "indicator--09c0c883-3023-4907-85e9-ec9bccaa3325", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ff9cb5-c291-4a26-87d3-944084928d8e", "sighting_of_ref": "indicator--09c0c883-3023-4907-85e9-ec9bccaa3325", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d60c4b0-1e4f-4453-93c2-88f02bed6016", "sighting_of_ref": "indicator--75dad04b-df57-49ec-9279-97e0e1a6bb2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8581326a-d8ac-4187-9194-27227fd2c00a", "sighting_of_ref": "indicator--931fd01e-8270-413d-bb66-bf3f2e73b0ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44cf554-66c7-474a-adc7-aa50a14b1fac", "sighting_of_ref": "indicator--931fd01e-8270-413d-bb66-bf3f2e73b0ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63f0e10-bbaa-458a-8b8d-cc99b3a6ee01", "sighting_of_ref": "indicator--228dc60a-82d7-445a-bb19-4714b36b5fa7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccff63a8-ea29-4288-bc06-a9c5feb4ab4a", "sighting_of_ref": "indicator--441c393e-9b3f-4a6d-a0fb-85f7eb63087f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd13157-336e-4a44-9432-23bd3579468b", "sighting_of_ref": "indicator--ca20264d-18a7-4996-a24c-399316ec8a30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efcf0cf-bc3e-490a-9d51-d77d817f5744", "sighting_of_ref": "indicator--d24ac713-3ff5-4d96-8f54-57c877ae61b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04fb85f-ee48-4cf5-98c0-2c57a9bb62bc", "sighting_of_ref": "indicator--f9880729-e743-4a1d-972b-c402901352dc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdcadc8-60e7-42d9-a5f0-83ddd0e88b88", "sighting_of_ref": "indicator--fd84537e-e1ac-4a47-afa5-097ba5921d82", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f7e198-b64d-40b0-9d51-79202cb0cf8c", "sighting_of_ref": "indicator--29acf62f-01a4-4165-8312-ee1bd349e6f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c346efda-5370-44ec-a85f-14828903e98a", "sighting_of_ref": "indicator--29acf62f-01a4-4165-8312-ee1bd349e6f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dea6fbc-c1c5-418a-b6ea-8cb03923a818", "sighting_of_ref": "indicator--461cefe5-2bcf-4d83-8d5d-9da384b4dc53", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df781fa-88be-4920-af09-e9b2c8166abe", "sighting_of_ref": "indicator--a8a7c0b1-b165-4290-aa54-92b4b71a03b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e93bd0-51cd-4c51-962d-755ea96a4beb", "sighting_of_ref": "indicator--cd0257fe-161e-4d76-aa5d-2e01d025a15c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00004543-6693-4c77-9a02-6e2efad75b4d", "sighting_of_ref": "indicator--cd0257fe-161e-4d76-aa5d-2e01d025a15c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbad954-389e-441f-b796-8d02cd84b353", "sighting_of_ref": "indicator--8be67c28-1813-4280-98f0-91b49cbf7bb0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592259e3-32d4-44d2-97c8-601832fbf47c", "sighting_of_ref": "indicator--b8228a48-34d7-4ce3-987c-170f25ee53a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2cf1cf-be6c-4b02-ac54-9df27e49a4d3", "sighting_of_ref": "indicator--08e85088-3c69-43ea-bc0d-9ac4df847557", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767aadd0-ff45-4ecf-9dd4-a0e6749ba8d4", "sighting_of_ref": "indicator--08e85088-3c69-43ea-bc0d-9ac4df847557", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d31f4ea-b201-45ea-bbf6-c200a0133cff", "sighting_of_ref": "indicator--bc13314e-8ae2-4c1d-ad0b-1fbdd6903bab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54565a0a-4b26-4116-bdd3-df3d6c40a953", "sighting_of_ref": "indicator--5271928a-fd2b-4d78-b652-998c92bd1a06", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff74b71b-67d1-4ced-9c87-810c6bb2324f", "sighting_of_ref": "indicator--f90cfe4c-6fca-4517-baf8-881c1f70469d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7eb423-146b-4213-990b-cfa1202d1838", "sighting_of_ref": "indicator--f802074e-d3b6-44f5-9a48-1b2d77db7cb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d13479-a85b-4996-9a06-82ae915be09f", "sighting_of_ref": "indicator--f802074e-d3b6-44f5-9a48-1b2d77db7cb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d34bdc1-df33-4a9a-a6b3-896a46d279c3", "sighting_of_ref": "indicator--85ad471e-6831-46d9-b0c1-9e9f37838332", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803bc6db-0e5e-4856-8a31-510a5509d80b", "sighting_of_ref": "indicator--23ee3f72-1c6c-46d1-bfa2-32c9908f5eec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e637d64-f38b-4608-bcd3-1510b739f54c", "sighting_of_ref": "indicator--ad1877be-6580-4de7-8a11-91c5036b9544", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa265ae-c898-49d5-ba0b-00647888e2c9", "sighting_of_ref": "indicator--a452ba44-79de-4e13-bb43-abcacf2342ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37effbe5-b743-4ef2-8fbb-921b0ca2c28f", "sighting_of_ref": "indicator--a44b82dc-cc5b-48d6-a468-601da9b8d722", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490863ba-c1fb-4d0a-85f4-8871c400dba0", "sighting_of_ref": "indicator--337bd22f-4a32-4b28-85e1-fbc668bf409f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a76d1d-0ac8-4df4-882a-e918ecab453d", "sighting_of_ref": "indicator--337bd22f-4a32-4b28-85e1-fbc668bf409f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea7ad0c-d1b5-4b48-b83f-82bc9d225689", "sighting_of_ref": "indicator--22743020-e015-4b41-94af-bce5c95f965f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243cc462-bced-438b-9119-4df5dbd6c51f", "sighting_of_ref": "indicator--327d6b53-c3f5-4302-be70-18a161b08d95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d364f19a-25bc-476d-b2ec-f47776a17f30", "sighting_of_ref": "indicator--327d6b53-c3f5-4302-be70-18a161b08d95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22273b13-bae0-4ff9-a600-b4736c3a11df", "sighting_of_ref": "indicator--554bf617-2292-4fd0-9100-92d1f82a92bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0664c3df-c887-42f0-8a3f-a284bb1bbe8c", "sighting_of_ref": "indicator--4ba9ac21-84f2-43b8-9863-09f61bc71045", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c8fbd1-9973-4a56-8229-ccceba0e4ed1", "sighting_of_ref": "indicator--abe893e9-0063-4fd5-affb-793c424a428d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf5f85a-10a9-49d3-bf0b-b8aaaf10a4df", "sighting_of_ref": "indicator--29132c7b-ec9e-47b6-aa22-b52c1bbdd141", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0353ab85-2671-42e4-9860-556e2015d4b5", "sighting_of_ref": "indicator--f7286ab1-4054-449d-bd2f-a26a57a6b654", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18965de-f087-4036-bc65-6d273463cfaf", "sighting_of_ref": "indicator--a7ceabed-c31a-4eab-82b5-40eb8c5a1ef7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c89cb9-7eba-49e9-9811-980d8ad89821", "sighting_of_ref": "indicator--db4ab3dc-c2fe-4251-ad77-af91c8c6b076", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb92b26-a424-4020-b92c-3936cf9fe12a", "sighting_of_ref": "indicator--0cc413f7-ed77-47f7-befe-ff15320f30a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9026801-c48e-4248-988b-c98586e7b7bc", "sighting_of_ref": "indicator--0cc413f7-ed77-47f7-befe-ff15320f30a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280cd3a0-42b5-45fe-a513-44d13f44daf2", "sighting_of_ref": "indicator--0cc413f7-ed77-47f7-befe-ff15320f30a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8681d1-be6f-4ff0-8d4d-5621c62c9d76", "sighting_of_ref": "indicator--0043c3e5-0101-4cbd-ab34-c9273e47e2da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc664a7-0a4a-4c71-a93e-d78f7f55af92", "sighting_of_ref": "indicator--7f829ab5-2a04-4311-9701-d3a9fd83f905", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046f35fa-e933-441b-a755-26596e35a6a2", "sighting_of_ref": "indicator--7f829ab5-2a04-4311-9701-d3a9fd83f905", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2b3cf2-70e9-456e-ba8d-17629a5d40a0", "sighting_of_ref": "indicator--1c3e67c3-70fd-4f40-a86e-a26293731881", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5999d8a2-cfbb-4281-b218-be791791f321", "sighting_of_ref": "indicator--e791177c-bf0e-470b-8e8d-d824fefd07fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee62f84-426f-4a5f-80bb-81632583e7bc", "sighting_of_ref": "indicator--91277016-cb95-43e1-89f0-a97869991ce8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb12617-6ff3-4639-a697-b83393803d0f", "sighting_of_ref": "indicator--6a0f36fc-bf0a-45c7-acc3-0f6b5e13b757", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdda3db-155b-4656-8302-5fddaed444c9", "sighting_of_ref": "indicator--7243bfb5-7dbe-4010-a66e-be2b023f54a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfecfdcf-c987-4a04-9eca-4560dfb7b0a2", "sighting_of_ref": "indicator--8dd57fba-1730-4ee7-adfc-690e0dceb140", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8606f8-6a96-4c5a-b8a9-d6699891633b", "sighting_of_ref": "indicator--86f4fef0-bae9-4f94-97ee-fa1b50eec5af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e8b87e-c895-40f4-9804-397d74c0a001", "sighting_of_ref": "indicator--e737eb63-376f-4759-8f63-ef5c9dfd5e4b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce0c40b-d70a-4408-9c3d-5c5134ffcc1d", "sighting_of_ref": "indicator--b39f90f3-624d-45d1-b823-f441c43b8ab8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbacbb9c-8339-43f6-9b78-4f71c8f2915e", "sighting_of_ref": "indicator--efde4837-ceb1-489d-bfe2-d6f391fca95d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4391ac9f-75d3-4424-9239-e1b94b790cee", "sighting_of_ref": "indicator--efde4837-ceb1-489d-bfe2-d6f391fca95d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c649ec7-644a-42b7-8b40-6deabca111a0", "sighting_of_ref": "indicator--a0c61aa2-000d-4c7f-ae8a-aea26517d2f5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e30073c-e783-4db1-a8cd-19f6a7b65873", "sighting_of_ref": "indicator--9ca09b4b-b821-49f7-9674-a6593b9e5893", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b91900d-f4ae-4e39-b19a-70cbe4548c1f", "sighting_of_ref": "indicator--3f2da4f1-a451-4559-aef2-6ae89dc4b719", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d63da74-c486-461c-ab9d-ba226b226a60", "sighting_of_ref": "indicator--f90b5e35-341a-4279-a0a5-a77cdbf80b22", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84be1fd-c6fd-47c8-a3d2-e9844c8b64c2", "sighting_of_ref": "indicator--babe8209-40c6-40b4-87ff-5e42868eb6f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdf37e9-05c6-47d3-b713-24899d7bfeca", "sighting_of_ref": "indicator--870b6eab-a688-4206-88b4-6433071d4640", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35967c27-22f8-4caf-8cba-30cedd8c1376", "sighting_of_ref": "indicator--cf1b8076-1394-49d6-887f-e19726a5c765", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d20444-c43e-4b55-8247-468171eda8a3", "sighting_of_ref": "indicator--d4995778-cea4-4c7c-9461-1f64b6855610", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b159b8b-196e-4470-82eb-b30c8c3d5d2a", "sighting_of_ref": "indicator--2f4c38b8-39cf-4a8a-ab3a-e7dc07fa5b42", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f6dcd7-58b5-467b-a1ce-c4ba53433cb9", "sighting_of_ref": "indicator--adf46a58-1372-4646-b792-6b6a339c1b9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae63c59-e51d-421f-83d1-7bb084434bb9", "sighting_of_ref": "indicator--adf46a58-1372-4646-b792-6b6a339c1b9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f10d150-1c9d-4651-ac2b-0dc33e7cdc68", "sighting_of_ref": "indicator--a6a7be58-d94a-443e-9a3b-1c79f201559c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478be8d0-71da-4a7b-b8f2-8dae30cfb5a3", "sighting_of_ref": "indicator--b046452f-4926-4b5b-9f92-50342bf88a80", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0837cd04-f29f-4baf-b816-9f13ed2128e4", "sighting_of_ref": "indicator--1428793f-f7a6-458f-b0ea-6d6a8a410007", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787845bf-ed08-4378-8bba-f2deb589f7c9", "sighting_of_ref": "indicator--dbde68bd-676c-4339-92d4-3e1631fa2654", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f767908-2f2a-4b1f-94a0-731548fbd435", "sighting_of_ref": "indicator--968a6857-3fc8-4e81-b8e0-26891788f43d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003723ba-6f32-4f8d-835d-0c08b9c38338", "sighting_of_ref": "indicator--c15a82b4-e1f2-4e09-8d90-9a76ca3b95da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acee7c4-3065-48e0-a41a-3eba8e8fb777", "sighting_of_ref": "indicator--48fb4eb9-ffa0-4af3-b075-bcbeb98891ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092e20ea-1299-4d83-96d1-9789fd226f85", "sighting_of_ref": "indicator--48fb4eb9-ffa0-4af3-b075-bcbeb98891ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7693f1-ca70-4164-9262-48e80bd079c4", "sighting_of_ref": "indicator--921979aa-f4bb-4867-abe2-c9940aef47cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f40b59a-8511-4b2c-9276-5e1729cc5a2b", "sighting_of_ref": "indicator--6ae2b826-1516-47b1-8325-4ed187e4b3dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac67581e-2513-4272-b919-45def5d5e5b8", "sighting_of_ref": "indicator--b3096171-52a5-4ab4-8a7d-621c4c4e2c76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e7565d-ce66-4ce4-b2c8-0dac89dde322", "sighting_of_ref": "indicator--743c04ac-3b14-4d12-bed8-8c82bc389eb3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5813ab-5d58-47ec-9b9f-e0504f9ec3b6", "sighting_of_ref": "indicator--743c04ac-3b14-4d12-bed8-8c82bc389eb3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fd1875-dbfd-478a-be50-6fa39913955a", "sighting_of_ref": "indicator--219dc4d0-3552-4a03-91bd-c75cc34e8bcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc958ec-40d6-4a55-b85a-4493fbd3c9c1", "sighting_of_ref": "indicator--f0eba23b-58f5-49c2-b9f2-3749b6c4e437", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f70fd5-e426-4b14-936e-218c0ed6152a", "sighting_of_ref": "indicator--259c0b9e-22c9-4e20-9712-859dfdad18f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8b0665-ba45-408f-9e12-7b83fb23d296", "sighting_of_ref": "indicator--fcd46efd-0a77-425d-84a5-515ad7650388", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b53dd2-6876-4b1d-a3d7-64d090c3406e", "sighting_of_ref": "indicator--8a057204-aad9-41da-8b0f-c466fbf8de52", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732be2cc-6313-4848-8085-c43bc96b96de", "sighting_of_ref": "indicator--3d4676d1-f722-465b-8f74-7910a6c24d14", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b9da19-d0aa-4e9e-94cc-3f6b8ab82e7d", "sighting_of_ref": "indicator--8429da8d-a595-46bc-b5fe-fcea8eacc5af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c7eecb-7da1-4199-bb6d-286deaae30a5", "sighting_of_ref": "indicator--6416be57-6c06-489c-a41f-e9656c953b23", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0beb6f5-b8bc-462e-bb88-720bbdda6d31", "sighting_of_ref": "indicator--09953036-6186-4a8e-adce-cd9b049c7401", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e841f37b-62fd-46f3-8895-70dba5a25b30", "sighting_of_ref": "indicator--0f14d178-2cee-46c3-acc2-c6155ec941a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2191f675-027d-4355-a6d0-0620d9174193", "sighting_of_ref": "indicator--784cacd1-4de9-4b0e-9efc-e573b75eeaa6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26606547-85e2-41b0-9011-642d0957afda", "sighting_of_ref": "indicator--3acfd3ba-cf8b-4e19-93e6-2d4023a47922", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cee8b6-0c36-4f41-8207-5554ecf00456", "sighting_of_ref": "indicator--708f4ecb-7c1a-4973-9616-9e374b6dda95", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7455534b-5299-4d17-b6a4-46301e9e7410", "sighting_of_ref": "indicator--4c42ca31-b6f0-4078-8723-48e0ea521837", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447c8d16-0674-4b58-9309-f8008973015e", "sighting_of_ref": "indicator--8ed4dfd0-a4bb-428f-ae31-f7707de4b9e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2d4fb4-2e16-4a0a-b749-eb5537663b50", "sighting_of_ref": "indicator--8ed4dfd0-a4bb-428f-ae31-f7707de4b9e7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ecbfaf-d021-47a1-aaf0-07eb44b35300", "sighting_of_ref": "indicator--953f2ffd-9972-4441-94af-914862676834", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eabc2f-75ee-4493-95bf-59da8dfe3622", "sighting_of_ref": "indicator--953f2ffd-9972-4441-94af-914862676834", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129b8e22-23fb-454d-a2b2-95371f06f2d4", "sighting_of_ref": "indicator--193dd7c8-b756-4012-bfa6-8d207d0ed977", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecb4026-22ba-410c-8367-588dfb6e955b", "sighting_of_ref": "indicator--9af816d6-feea-4341-ad30-b99327c03c98", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aea8162-0251-4a46-bb2a-30c56fa8044b", "sighting_of_ref": "indicator--1ccc634d-e88a-42ec-a105-c180d898e2c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec3d3cd-4b4e-4bb3-b4c0-03cfcc16fabc", "sighting_of_ref": "indicator--e1c2569d-7f96-4dab-925c-f9ae93c9fe5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7191771-3550-4f81-b0a1-9aef4f78f054", "sighting_of_ref": "indicator--e1c2569d-7f96-4dab-925c-f9ae93c9fe5a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203317c6-ebb8-4fba-8b35-f76005ac27b8", "sighting_of_ref": "indicator--58a8967b-2007-473f-ae1d-f714e439b550", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52224930-0ca7-493a-9755-e8c62da32860", "sighting_of_ref": "indicator--265615c4-7edb-4ad8-b1ca-160516c56479", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6edf69-d650-4bbb-b03a-9830bd18b5c5", "sighting_of_ref": "indicator--5a89e88c-9a16-49fe-b3ce-6ac0e7696413", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1408084d-0089-4243-b7f0-da45ea8ecef4", "sighting_of_ref": "indicator--994b46b1-7cc4-4390-b4c7-f3c70eeaf006", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf92a722-3d14-450e-88da-4bea432b5927", "sighting_of_ref": "indicator--cc0e557d-9e2a-4179-9db9-9a8e5619fb46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478a2c12-3c9c-47c8-95a5-61b78f57a7df", "sighting_of_ref": "indicator--1cb96aad-6f0d-4621-bd5e-23da1b9e22ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51eb8877-7562-4948-aedc-83868d6f52a7", "sighting_of_ref": "indicator--184f922a-45f5-4380-be7b-8d031bfb0de1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e78567e-03f9-41d6-a424-eb3bac250f62", "sighting_of_ref": "indicator--e4781016-f413-4f2a-b6d4-849d35df8407", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c05bb7-c39f-464b-807b-dde59012b600", "sighting_of_ref": "indicator--1ce03615-b1c8-4f28-b1d2-f896d6314fd6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e2606f-a3a0-4342-9cbb-1292b16a88fe", "sighting_of_ref": "indicator--6003ff8c-16a3-4465-b4c7-c07d34c29961", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61518987-df1f-4b0d-90b1-67e008b9ed71", "sighting_of_ref": "indicator--058878fc-8472-4d16-bae0-48669f9f11f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ffb41f-d94a-4005-8eff-cbba26eacc77", "sighting_of_ref": "indicator--cb528416-d679-4b5e-b8c0-11811b7d6baa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdbeb32-79cf-4590-8990-a4cba0a6ae6d", "sighting_of_ref": "indicator--5a45e92c-751f-4302-bc5c-b204488b16ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dea6365-b768-4a1d-9868-6483233d4214", "sighting_of_ref": "indicator--4b30abe6-3c6f-47d6-85da-a30eda271e05", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018066c2-77ce-4ab2-bd22-f8bba5383338", "sighting_of_ref": "indicator--67ba95a3-94a6-4158-9067-aa7741b1efb3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdf377f-41f3-418f-bcfa-0821a3eb736c", "sighting_of_ref": "indicator--b4b348fe-e527-4d56-8199-06c033aaa4ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67a3e73-350a-465f-8c74-c47c6f574474", "sighting_of_ref": "indicator--fb7635b5-b149-422d-8c2c-17b30f020b0a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112394e8-d742-43f4-84a8-df0785acbeb2", "sighting_of_ref": "indicator--e6433d71-0508-4f44-baab-3f0c350d5baf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c6600c-35d3-4da9-81ee-e332f26a670b", "sighting_of_ref": "indicator--a525d953-5b8b-4a33-9a19-5fee87d6d026", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9529ed12-58fb-4d50-ac59-f1996a58de9e", "sighting_of_ref": "indicator--5cfb2e18-88b3-4ab5-85ab-9806d03a1f71", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c78ceb1-49c1-450e-8a72-5c6bdf523a93", "sighting_of_ref": "indicator--5d3fb7b0-f5f0-4fb4-be4f-ad76dbcaa003", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0242c730-880a-40ee-a442-f7ab07ec6476", "sighting_of_ref": "indicator--d14e426e-de5d-4c95-a3ff-edff0e24ecf0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6333cfbd-adf0-420c-ae4e-10477a51635d", "sighting_of_ref": "indicator--cc78e9e8-45e6-481e-ba90-b67b08631fd3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb3e5bc-8bf6-4bd8-94df-74e81a95db96", "sighting_of_ref": "indicator--e772adb3-56f7-4c73-af37-6c5bdb2945e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34249069-eed1-4ad2-8b7c-055f08c38de9", "sighting_of_ref": "indicator--ce476daf-399f-4272-9055-fe5d6d245153", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2522e44a-2353-4364-9d1c-04331fea5d08", "sighting_of_ref": "indicator--a68b9859-33ad-4cd1-be1d-c04b78ada2c3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346810dd-c28e-46f8-9f79-0e8cdcf05cb7", "sighting_of_ref": "indicator--a68b9859-33ad-4cd1-be1d-c04b78ada2c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38853a01-8b5d-4509-b18b-bf273a07e86a", "sighting_of_ref": "indicator--0cee2682-3b0e-41f1-b7f3-e9193f71bc90", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3659b0aa-1bdc-4839-b141-66bf6c351db7", "sighting_of_ref": "indicator--5e9b60bb-ffe3-4397-a4f0-7411794e9f2f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e93f5-dc7b-4931-9f11-f1e4dab13997", "sighting_of_ref": "indicator--e6339250-acfc-4ffe-b667-771ce7a428c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38f531a-28fc-4dac-ad1f-40d5967df8cb", "sighting_of_ref": "indicator--7bbbff48-4cd5-4108-9fee-e53e991158d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c1d17e-7ece-44d8-ad57-dce3538833e4", "sighting_of_ref": "indicator--b09bb690-efaa-4d8b-b349-7702cecb693f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4515f9ae-7c59-4ea3-930b-7681eafec541", "sighting_of_ref": "indicator--d09728e0-7720-46b3-a764-00eaaebecd9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf7fd74-33eb-4b29-9331-8a811a41f3e3", "sighting_of_ref": "indicator--5862f27b-2919-4cc4-9f17-77c3176cb23f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fb9bdd-af28-4ece-a2a7-72facfd41f67", "sighting_of_ref": "indicator--7155e77e-b0e8-431b-9392-0be702149686", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e9e755-154f-4bd6-b279-0704ae4a5d22", "sighting_of_ref": "indicator--d2167a95-2b1d-4eae-ba26-0107dacfa1bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfb4525-63d0-406a-b2d8-f3f09a879701", "sighting_of_ref": "indicator--d2167a95-2b1d-4eae-ba26-0107dacfa1bf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae1fd38-1f6f-4c8b-8a88-0c13804780b9", "sighting_of_ref": "indicator--a2e3156b-1b4f-42bd-9144-947721fba7e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd3af6b-2480-4116-9b62-99ea81be87f1", "sighting_of_ref": "indicator--beb5d849-89d9-4b5e-b41c-2cef30f1c598", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78161489-24ed-44ad-9922-0b6e0e39e126", "sighting_of_ref": "indicator--f8195f1a-a8ed-4dea-9b46-65b56542d3d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09856301-38d0-4fc8-841d-3f566ccbe2ae", "sighting_of_ref": "indicator--d87a4b32-48a8-4efb-9f8f-8e8dde0cd2bd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96afbca9-37fb-42f9-b649-fc70972a698c", "sighting_of_ref": "indicator--08bc3d4e-5636-4468-b4df-972f6020b54e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbb3122-bd75-400e-b4d5-81e3f020882f", "sighting_of_ref": "indicator--0d302bb6-69d1-490b-a4c5-fd7cdfbe75e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f193f71-39c5-4e3a-98f9-6703a76e2282", "sighting_of_ref": "indicator--c6adca00-acfa-4306-bffc-2ece486ba56d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ff3f34-d74f-49ba-978c-117db58e6315", "sighting_of_ref": "indicator--48430996-cf44-4689-a0e1-a0f61b1db32f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dadcca0-94ac-422b-9ad1-f4c129bfe136", "sighting_of_ref": "indicator--48430996-cf44-4689-a0e1-a0f61b1db32f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b637e0be-f888-47c8-b2af-58675bf03fe8", "sighting_of_ref": "indicator--48430996-cf44-4689-a0e1-a0f61b1db32f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36008c5e-1df4-4827-8056-8b42a5186a2e", "sighting_of_ref": "indicator--3d700bd5-3c8b-4665-bf8f-c3a9d04589c5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d19d94-02fd-46c5-a92e-d2c7eb45c020", "sighting_of_ref": "indicator--288c3fa7-8358-420f-9fb3-53d68ef9997c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150e10b9-b6b2-43bd-95f0-48b4eb2d828b", "sighting_of_ref": "indicator--47067f1f-43b6-4da3-bd18-9cf1cc5d279e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc309a9-555c-4b3d-bc5c-4b6b69e1bce2", "sighting_of_ref": "indicator--de4b752e-920c-4be5-8df2-d2812574e7a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b43bf2-dd4f-4bb1-957e-008e957b7714", "sighting_of_ref": "indicator--c7ac5f8f-1bfe-4344-a74d-61c0f9a76a3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afbc1de-e8fb-4e53-b871-e6b8446c5dad", "sighting_of_ref": "indicator--76352ecd-b70e-4f5c-a670-a2fc2470ebb4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d23631-8036-470d-b08c-a54362e9c111", "sighting_of_ref": "indicator--12819dce-6758-47db-af76-5dcb9318bf5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce92890c-af87-4732-aec4-e877fcd1ef1d", "sighting_of_ref": "indicator--18e21f15-87d8-4fa7-9923-61533de3c422", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf89dae-f46f-4028-b8a2-a1a56c3126c1", "sighting_of_ref": "indicator--18e21f15-87d8-4fa7-9923-61533de3c422", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79aacda5-06b0-403b-8866-f7ffb094f26d", "sighting_of_ref": "indicator--18e21f15-87d8-4fa7-9923-61533de3c422", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c31b2cc-5e36-4446-b0cd-75fddc2e68d7", "sighting_of_ref": "indicator--7e4b2073-1dd7-40b9-88fb-04f7babc01be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e756f16-3d41-4d43-8658-9a4a18a36e02", "sighting_of_ref": "indicator--b2c31dae-a7ad-49d5-9280-c72361425982", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d112823e-2c38-47d6-a458-4d0c848723cb", "sighting_of_ref": "indicator--f33ca6e8-375f-4585-b374-6f39ff8c5190", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839a8f35-8dc9-4c95-8c4f-0b79162763c5", "sighting_of_ref": "indicator--c72eed60-5152-4280-b713-e974f50ad16d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490f7c67-f327-4400-9cf3-4d665b2660ef", "sighting_of_ref": "indicator--4fbebcd2-63ca-415b-ba04-f99b13a86f05", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338263a7-36f0-4af9-a3f2-d92ca8235989", "sighting_of_ref": "indicator--4fbebcd2-63ca-415b-ba04-f99b13a86f05", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b3e79c-4ba7-4e97-a08e-45d94374d6d9", "sighting_of_ref": "indicator--0e592196-13d0-49c8-92c2-e9143743378e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00f791d-56a8-4cdb-8bc5-ff088cfdaf90", "sighting_of_ref": "indicator--0e592196-13d0-49c8-92c2-e9143743378e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2535f23d-8834-491c-9673-5629afcac3eb", "sighting_of_ref": "indicator--0e592196-13d0-49c8-92c2-e9143743378e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51325fb-306b-422a-ac40-337433a41037", "sighting_of_ref": "indicator--8f42b2b8-d494-4a30-8bc8-840e7e9d1fa7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d2d3a4-5346-4917-bf3d-0a83b803c869", "sighting_of_ref": "indicator--8abdae62-61f0-4880-9715-5b6a045b97e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46a3e9d-a647-4424-b5c0-9c3a09ad1cbc", "sighting_of_ref": "indicator--b62e6233-f2bf-4a0c-b973-e5affdf80126", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b189c9-804e-4e32-9a0f-d2782e03722c", "sighting_of_ref": "indicator--af7b5b74-a294-4c0a-96da-552eccd826b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fff4e7-fee6-4d58-b7e4-61b076e6ddb7", "sighting_of_ref": "indicator--b1f283e2-8969-4d94-b994-df221a404416", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957340bc-1963-4599-b6e1-611f52df462d", "sighting_of_ref": "indicator--2716c4ba-fea6-48ec-a5c0-d272dc9093ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261be8d6-f492-47cb-9b35-35b9bd6773cd", "sighting_of_ref": "indicator--1a1a1d31-b953-4afa-9d8b-0d9b7f9e8264", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b4a0fa-2def-4d0b-b66c-92e2eba5ca1f", "sighting_of_ref": "indicator--1a1a1d31-b953-4afa-9d8b-0d9b7f9e8264", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386006f5-30e5-4f44-87de-fd142cef8ff9", "sighting_of_ref": "indicator--1a1a1d31-b953-4afa-9d8b-0d9b7f9e8264", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab644a0b-498b-4365-862d-395f0be1d9f8", "sighting_of_ref": "indicator--19a2fc42-4cc0-47ea-aba8-91ae102b83f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d58568-154b-4ba0-a32d-683c19a73187", "sighting_of_ref": "indicator--eb258d85-0727-44b6-a27c-5f4aa2e60e7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34ecf72-37e3-4652-8875-65a5584fe336", "sighting_of_ref": "indicator--9ff6bc68-7cc7-46e5-8f64-3b418a60d236", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0dafc8-c0f1-49a4-8893-0fef3ffd2dc1", "sighting_of_ref": "indicator--9ff6bc68-7cc7-46e5-8f64-3b418a60d236", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54400b70-e959-48f1-a4d0-98eedacada43", "sighting_of_ref": "indicator--c598636b-909c-4706-82bd-f343963d7009", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43c1844-d20b-4134-a312-7be0c758cd2d", "sighting_of_ref": "indicator--c598636b-909c-4706-82bd-f343963d7009", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83e81a0-421a-4777-b423-19463b6aef43", "sighting_of_ref": "indicator--a5d52984-2733-4486-ad2e-ad5f13d23521", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2174311b-5f3c-4518-94b6-1e734265e7b3", "sighting_of_ref": "indicator--a5d52984-2733-4486-ad2e-ad5f13d23521", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c6a78a-ce58-40ad-9b64-0515a7bcbc4c", "sighting_of_ref": "indicator--896d25ce-cb70-4701-b954-135d998e9712", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d24dbef-6984-4cde-a34c-03c428d1dc83", "sighting_of_ref": "indicator--813b6057-a6ae-4a56-9431-27748856d2fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a5cb3a-e87f-43f4-9440-7e35c8de2fd5", "sighting_of_ref": "indicator--df0382c2-a2e9-44f6-9eea-a0d79f80f1aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f201db2-88d0-4416-95e2-abc084fb13d2", "sighting_of_ref": "indicator--d7b2695e-79ce-400b-bdc0-7bff032dac77", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764cad76-7a5f-4f46-9439-72d51cb70fa3", "sighting_of_ref": "indicator--f17f9816-6b8e-4a21-b8fe-7a421fe8a3b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0f289a-1a73-475e-8dbc-1ec0b412aa35", "sighting_of_ref": "indicator--26bfdd98-3c00-4cc8-8282-8e214e3d18a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b1c9e2-a159-46fa-9ebb-ab6465a24dc1", "sighting_of_ref": "indicator--26bfdd98-3c00-4cc8-8282-8e214e3d18a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448371fb-3be0-42bb-a0fc-7768198823b2", "sighting_of_ref": "indicator--26bfdd98-3c00-4cc8-8282-8e214e3d18a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec524f15-32a5-4397-b879-f9ca80eac9b9", "sighting_of_ref": "indicator--46a392ff-9981-4dfa-9698-e74492944022", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220b1c2c-6e1d-4613-b63a-310616004447", "sighting_of_ref": "indicator--adb98d99-8a76-48ac-a35b-742a0b976f50", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832e12ec-ebc1-4cb7-a16d-2cbc55d77968", "sighting_of_ref": "indicator--adb98d99-8a76-48ac-a35b-742a0b976f50", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8229d6-f50e-4055-ae12-5893b5f053b3", "sighting_of_ref": "indicator--cdb1bee6-2a23-4067-853d-22582877b80f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbb2619-0e3e-4282-ba61-583b6060a23c", "sighting_of_ref": "indicator--873a6818-7e72-4a77-9d7a-27397aa05abf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde6bf4e-a667-4c2c-ba54-bec34dd9ce8b", "sighting_of_ref": "indicator--873a6818-7e72-4a77-9d7a-27397aa05abf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2876235d-af94-4014-ace5-61ea2343698d", "sighting_of_ref": "indicator--cd06669a-73ad-48a7-b504-981c1a624ee2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ca6468-234e-413f-a60c-4f8ab0ab891b", "sighting_of_ref": "indicator--6411e4ba-3fc4-45e7-846d-6834aab38cbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f908e2-a1bf-4a0a-a9a8-f4516e3670b6", "sighting_of_ref": "indicator--6411e4ba-3fc4-45e7-846d-6834aab38cbb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53234f7-4700-4e99-b5d1-9974b9f49a95", "sighting_of_ref": "indicator--6411e4ba-3fc4-45e7-846d-6834aab38cbb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d16040c-1ddb-4d8c-9499-38da81b07bf7", "sighting_of_ref": "indicator--03a1f48a-03df-49c8-a75d-7b1d01c8316b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5e311f-b38f-4009-8d43-b85cd355fbf1", "sighting_of_ref": "indicator--0fe17aae-9547-4991-955e-8a19bed2f359", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a003dadc-a6f0-4796-ae4b-fb569dca9119", "sighting_of_ref": "indicator--0fe17aae-9547-4991-955e-8a19bed2f359", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bdd810-9da0-4892-a471-48f608f293f5", "sighting_of_ref": "indicator--35f36a37-69d7-4a5d-87a1-15dca853803b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0c2ecc-5885-4edb-9633-27604e5ae04b", "sighting_of_ref": "indicator--7a96c7aa-6b3f-428c-804c-1520f7ba37ec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f2b209-df31-4488-a381-c7f13bfef718", "sighting_of_ref": "indicator--7a96c7aa-6b3f-428c-804c-1520f7ba37ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56916e66-86a6-48bd-92b9-ed30fdd1181f", "sighting_of_ref": "indicator--7a96c7aa-6b3f-428c-804c-1520f7ba37ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4c5f8c-13ab-4d8f-b703-d0501ba323b1", "sighting_of_ref": "indicator--ec8bdf5a-baa0-4b84-9f2c-9a526d3c1165", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f4bc1e-a4ee-4220-af7e-0d5505a9a9c8", "sighting_of_ref": "indicator--2f96690a-4b4a-40b7-bc29-6c6d1f0adea0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ef9e6d-92ae-4945-bfa5-ad5dd296567b", "sighting_of_ref": "indicator--2f96690a-4b4a-40b7-bc29-6c6d1f0adea0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6497ffe5-c8fc-401a-a5f5-1527a23da2f5", "sighting_of_ref": "indicator--1eda6d5a-02c9-4aa8-a299-3363aea514bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df636901-955e-496f-bc06-b201b07060e6", "sighting_of_ref": "indicator--6db5f8f9-917d-4bc3-9882-c2e2a67caa6d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d04807-5224-49ce-8366-6d66a3fbbe1a", "sighting_of_ref": "indicator--f5e118fe-9597-4c4d-95b0-398a0cedf02f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcad7d3-4e7f-49a5-a4e8-1e526c69fbe8", "sighting_of_ref": "indicator--f5b9abbe-97b1-43cf-9c31-79841d152165", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a18552-2fbe-4bb7-b8f3-0789baa49428", "sighting_of_ref": "indicator--8dfac94d-0bb5-40ca-b0fd-5bc3d306e6da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce49b190-1e5a-42d2-a787-2f9ea065b8a2", "sighting_of_ref": "indicator--6ae3b563-f132-4259-96f3-29ee8bab2873", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e9fc3d-ac6c-44f4-974d-0ae773835860", "sighting_of_ref": "indicator--6ae3b563-f132-4259-96f3-29ee8bab2873", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821c8601-ebfc-4ea0-a18e-d18bb459d98a", "sighting_of_ref": "indicator--5a296a7c-1794-4e62-ad85-cb85619fe3c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce16cb8a-65dc-453e-af59-760f0fdbf8ab", "sighting_of_ref": "indicator--f26b8828-5101-41a5-992f-e72cfdd73303", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41126c4-2d84-4781-b94a-724b89be2781", "sighting_of_ref": "indicator--f26b8828-5101-41a5-992f-e72cfdd73303", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a6728f-d164-45b2-aa1d-9caa10aafd20", "sighting_of_ref": "indicator--65d51c09-900e-4969-8b71-febee0c7970b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4aa695-5fe4-4525-96ff-41965e14ecd7", "sighting_of_ref": "indicator--5ce6623d-d295-4736-9900-6b7083fff330", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1377b649-ef8f-4d08-bc18-92a3094945df", "sighting_of_ref": "indicator--5ce6623d-d295-4736-9900-6b7083fff330", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108fe28b-3161-4f04-923c-9fb7fa5cda38", "sighting_of_ref": "indicator--50d8123b-4b9d-496c-89bc-36a6ed7cf79f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355febf1-78e0-49fc-9172-f352aaef466b", "sighting_of_ref": "indicator--de1d7233-3a6a-4b1f-863c-b59d7b46f952", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad593628-cadf-4520-99b3-2edb298b9e4b", "sighting_of_ref": "indicator--1aa058b3-cf59-4347-8b1b-e4811624772d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8d14ee-ed1e-4d63-aba0-766f92904697", "sighting_of_ref": "indicator--1aa058b3-cf59-4347-8b1b-e4811624772d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69b2cec-85ba-4091-96bc-3717f0c05013", "sighting_of_ref": "indicator--1aa058b3-cf59-4347-8b1b-e4811624772d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d21ad9-7781-4d0d-93e5-4a27be277987", "sighting_of_ref": "indicator--f982a7a2-e4c4-428b-b6c5-dd4d1a7815d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90371aee-b77d-4685-b75a-90ce1da0ddd5", "sighting_of_ref": "indicator--f982a7a2-e4c4-428b-b6c5-dd4d1a7815d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f9d171-46e0-423f-acd5-3a62b3b52167", "sighting_of_ref": "indicator--0b948a3a-83b4-4777-a00f-3775c5cb27f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc930640-5247-4760-9bd8-57ac06fb150d", "sighting_of_ref": "indicator--c767de58-571e-489d-9a2b-ef118979f78c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974dc675-05d2-4cb4-810f-79445861377e", "sighting_of_ref": "indicator--c767de58-571e-489d-9a2b-ef118979f78c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374af184-d23b-427a-bdad-79bf29fd0c5c", "sighting_of_ref": "indicator--28696c78-2f7c-4c47-b004-fc86a93a4be6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a807ee1a-4e32-4460-989c-bec4c49e1a64", "sighting_of_ref": "indicator--28696c78-2f7c-4c47-b004-fc86a93a4be6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00318417-f850-48c8-bc09-97f2ab7c7ac7", "sighting_of_ref": "indicator--9c0c530f-b0cc-49a1-860a-12c6fa3a8973", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087c1da3-3793-417a-bba4-f72e1223c46c", "sighting_of_ref": "indicator--8dc5cc1f-b7b2-47e8-8bca-2cbb96874d2b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a24d74-374c-4ef8-aecf-f1ffea4c1090", "sighting_of_ref": "indicator--95c74081-0219-4ba1-84fb-f47c6b33e1da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af4decb-2249-4098-a11b-61b80d5d070a", "sighting_of_ref": "indicator--95c74081-0219-4ba1-84fb-f47c6b33e1da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1368ce-8088-4aa5-9c04-52af855f6242", "sighting_of_ref": "indicator--b11fa46e-ddf7-433c-925e-f891e8a7410a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bab1d2-f493-4b85-ab6a-c8dfd279fc17", "sighting_of_ref": "indicator--b11fa46e-ddf7-433c-925e-f891e8a7410a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66359e41-ef48-4852-afb2-934869d12e69", "sighting_of_ref": "indicator--b11fa46e-ddf7-433c-925e-f891e8a7410a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cc7c47-e991-4784-80df-0d114e370be6", "sighting_of_ref": "indicator--c7b0734b-3bf5-40c7-bf28-077b59a96e09", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a139a79-f3fd-447e-a3ce-8c1d59a04b1f", "sighting_of_ref": "indicator--e743aeeb-c5f0-4294-83d7-7855404f478a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6721893-5293-4443-a9a3-56bf14ebce48", "sighting_of_ref": "indicator--c8c92362-89c5-40e5-a66f-811a8244dbad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d759e510-4fa9-4f20-a8be-3948ed51c667", "sighting_of_ref": "indicator--d1508da9-dad0-49cd-81a2-5444698b42cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d68b910-bfdf-431d-a19a-54c2c06a3ffa", "sighting_of_ref": "indicator--d1508da9-dad0-49cd-81a2-5444698b42cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5f5f32-6a54-4594-a8c9-69e6e9ed287b", "sighting_of_ref": "indicator--a15abb78-9cb4-45f7-ab98-428d4d17f4a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d972926-3057-44e0-8426-8969dc2b1b3f", "sighting_of_ref": "indicator--10f32e65-bf4b-4aa8-a33f-d0d7e90fc412", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6decbe94-bf06-431c-b2b9-46079ac4fb44", "sighting_of_ref": "indicator--10f32e65-bf4b-4aa8-a33f-d0d7e90fc412", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe32a916-4bb3-475b-9b69-f008f940d127", "sighting_of_ref": "indicator--21f65d2e-9d59-432c-8b32-101901d2a080", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7eaf82-5235-425c-a5b5-152d8cf7a427", "sighting_of_ref": "indicator--21f65d2e-9d59-432c-8b32-101901d2a080", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff147bd-56b4-47d8-b709-e502f6425284", "sighting_of_ref": "indicator--d432bcdc-a782-42e1-8ae0-361bb94e1e8c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad59442-034e-476c-a0ec-76fd8e7ac79e", "sighting_of_ref": "indicator--d432bcdc-a782-42e1-8ae0-361bb94e1e8c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3284e6c-8802-4783-9fec-b7d165a41407", "sighting_of_ref": "indicator--ddaa7b06-7260-46d8-bfed-c2c002076487", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f426c2-6a0c-4879-a23f-84bb3b850e02", "sighting_of_ref": "indicator--794ce7fb-556e-4bd8-bc76-2ae3638627ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e85302e-9699-4989-abf0-6d4696a507b8", "sighting_of_ref": "indicator--794ce7fb-556e-4bd8-bc76-2ae3638627ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29658c98-fdf2-4042-a72a-f5f8ec66a985", "sighting_of_ref": "indicator--794ce7fb-556e-4bd8-bc76-2ae3638627ef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a040e04-3174-4b3c-a61a-d168734ed96b", "sighting_of_ref": "indicator--2608415f-6c65-4d57-9d4e-98e8082646b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7603c5bc-dbfb-4e8a-aa84-762fd26cc89b", "sighting_of_ref": "indicator--2608415f-6c65-4d57-9d4e-98e8082646b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d60617-559b-4358-8c12-7c77d00313c1", "sighting_of_ref": "indicator--2b8d252e-5dad-4460-b90b-935d5032148b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad3ad93-946f-466e-98d5-9c6db8ae2656", "sighting_of_ref": "indicator--2b8d252e-5dad-4460-b90b-935d5032148b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cb6f5e-bccf-407c-84f2-f9424e14aff8", "sighting_of_ref": "indicator--df04f595-f435-4bf8-97ab-a0de8b799bb3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4cf455-7659-4f15-8280-f66c9aa39a96", "sighting_of_ref": "indicator--df04f595-f435-4bf8-97ab-a0de8b799bb3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee29e037-3bb1-4d04-87b2-23eab52776c8", "sighting_of_ref": "indicator--13819f29-c968-486c-ad75-6485cee13a08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb874f4-d1f2-4d57-a9bb-d4770518c6a3", "sighting_of_ref": "indicator--13819f29-c968-486c-ad75-6485cee13a08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd1df23-f84f-4407-bed8-fc7fd0a40001", "sighting_of_ref": "indicator--8114f361-ba69-45d0-a007-02390106aae9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7394fa2-a758-403c-be19-e4adb2906bdf", "sighting_of_ref": "indicator--8114f361-ba69-45d0-a007-02390106aae9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1230f7cf-fa28-4c8b-a690-32a6bec96e22", "sighting_of_ref": "indicator--8b3bc8b7-1860-4465-be8a-e54d3ccd405c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361cbdbe-0104-4a67-b25c-474db9e2e330", "sighting_of_ref": "indicator--8b3bc8b7-1860-4465-be8a-e54d3ccd405c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a9502a-1f34-46bc-9cf1-99ab005b757b", "sighting_of_ref": "indicator--2a6a9f6c-48be-4243-b4ae-cbaf238a0a34", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb025db-61e3-4ef7-ba9e-4df54bc2f640", "sighting_of_ref": "indicator--2a6a9f6c-48be-4243-b4ae-cbaf238a0a34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5aa3065-f592-4dea-a47e-1e8aa6584664", "sighting_of_ref": "indicator--521dc613-ddee-4274-822e-65bd39004e0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb2ea6-3d6d-480d-bb02-035ab6a8ec43", "sighting_of_ref": "indicator--481c9ef3-2d7b-4a2a-937f-03fdd9504cb5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd43e35-d345-4efa-8c44-3a50a45b175f", "sighting_of_ref": "indicator--481c9ef3-2d7b-4a2a-937f-03fdd9504cb5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1111cd-2aa2-468a-8c47-1458acbc7288", "sighting_of_ref": "indicator--f9e1abe3-56e4-4c32-90dd-514b9fd4db6f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf3775f-946d-430b-9b79-0e357e834237", "sighting_of_ref": "indicator--c688e4a0-f987-4f0c-a86d-7045a8b445f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54859d4e-8158-4de5-a624-9d8a19d09922", "sighting_of_ref": "indicator--c688e4a0-f987-4f0c-a86d-7045a8b445f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081dde88-fd8f-4785-add3-cb8eaaafd217", "sighting_of_ref": "indicator--c688e4a0-f987-4f0c-a86d-7045a8b445f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ff3ddd-506f-4f95-9eab-23618017d188", "sighting_of_ref": "indicator--c93edc97-582d-41b0-a99c-7b0c24c93c8f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39128580-48b5-4302-8eaf-5047ba3dda2e", "sighting_of_ref": "indicator--f3581072-980e-43eb-a5ef-514034fb12e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9863cfb9-a4f2-49c5-b7cc-d1e816c7a792", "sighting_of_ref": "indicator--f3581072-980e-43eb-a5ef-514034fb12e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c9a961-cb8f-4b58-9b2d-8fd18af31871", "sighting_of_ref": "indicator--0a8b8170-25fa-4248-bbe3-93b6051510b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3156231-9188-4fd5-a561-d8bf9ccec8e6", "sighting_of_ref": "indicator--0a8b8170-25fa-4248-bbe3-93b6051510b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04cdcef-4149-4a72-b849-8bb073da1041", "sighting_of_ref": "indicator--0a8b8170-25fa-4248-bbe3-93b6051510b5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a6da68-d70c-4561-8ded-38fc4bb97cf1", "sighting_of_ref": "indicator--d89e54e6-6053-4b25-a098-47ce496f338f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454b4b31-cc68-4a83-9b99-615fdee3c227", "sighting_of_ref": "indicator--d89e54e6-6053-4b25-a098-47ce496f338f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baebddbd-7846-4c41-bfba-b97da7421974", "sighting_of_ref": "indicator--b9913499-9dee-454f-86ba-7c5337041c03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6fa7be-2a66-40ad-a5b0-96b82152b261", "sighting_of_ref": "indicator--b9913499-9dee-454f-86ba-7c5337041c03", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d4f731-7dea-4e40-8e10-ed56ca11e98f", "sighting_of_ref": "indicator--6fb55d9c-35e0-4bad-9086-263631f6682c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9545d2-4f87-4027-bb6d-89d900ab1750", "sighting_of_ref": "indicator--5bae83c4-1624-4b82-b0a9-1a3ce7c14ad4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0858a2-0056-4537-91c9-fa044b049da6", "sighting_of_ref": "indicator--5bae83c4-1624-4b82-b0a9-1a3ce7c14ad4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7547b978-68f6-4faa-9010-fb4eeacbca9c", "sighting_of_ref": "indicator--f6bf4af3-2a71-449d-8e9f-8d7b83ad51b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c7561-d67d-4e2a-a9f2-1362be21d237", "sighting_of_ref": "indicator--f6bf4af3-2a71-449d-8e9f-8d7b83ad51b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130420cb-72c4-4862-9da4-a5a142dddae4", "sighting_of_ref": "indicator--2dd8c8f9-9de6-40a7-a687-40c6f24c460f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0823c825-ca4c-41b0-a9b7-e870e028b43f", "sighting_of_ref": "indicator--67e46f8a-4ccd-4c11-b2f6-8fb2ee448e58", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0170b4-e5f8-4a13-894e-e464520d27fa", "sighting_of_ref": "indicator--67e46f8a-4ccd-4c11-b2f6-8fb2ee448e58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b8d9dc-a3f4-4472-9076-b4b765a30706", "sighting_of_ref": "indicator--777a2cb9-87fe-4417-ba1b-844640a75e17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e120ac-3950-4383-bdfc-9d6fd933ed07", "sighting_of_ref": "indicator--777a2cb9-87fe-4417-ba1b-844640a75e17", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379fee70-ae7c-4af0-85e7-f3fd13c7a199", "sighting_of_ref": "indicator--d872dcd0-faf5-46ee-8b40-b3876fbe3937", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca40d0f-0d83-4298-b06d-57d3a6de8aa0", "sighting_of_ref": "indicator--d872dcd0-faf5-46ee-8b40-b3876fbe3937", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5248b5-117c-4232-9644-edfce66a5120", "sighting_of_ref": "indicator--08ca9306-24d7-4a23-a5ef-d9a4384462db", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a70352-f694-4820-bb37-6e04b83621bb", "sighting_of_ref": "indicator--592fefd9-525e-4bda-b79b-ee9495e99741", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a7cc75-bdcb-48f8-af97-2001ebb0b719", "sighting_of_ref": "indicator--e318fea1-80e2-4556-8474-8429c8bcab30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559ade55-bda5-4bf3-bf75-7e7845cb20ba", "sighting_of_ref": "indicator--e318fea1-80e2-4556-8474-8429c8bcab30", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9250e3b3-8d2b-47c8-be5a-f56da3e163f0", "sighting_of_ref": "indicator--14405e82-ef42-4629-890c-f4cf89ae825a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebbd257-7e92-41db-b3ea-6f34af1fe29c", "sighting_of_ref": "indicator--14405e82-ef42-4629-890c-f4cf89ae825a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ca5b83-28e1-4b66-865c-b2dce39ebd1e", "sighting_of_ref": "indicator--862066f1-307c-4578-a22c-b045501c8fed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3aaee4-ae4f-4b65-a702-dbc96c1e8ca7", "sighting_of_ref": "indicator--862066f1-307c-4578-a22c-b045501c8fed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873d0193-24f0-459c-aafb-4263a6c0995f", "sighting_of_ref": "indicator--862066f1-307c-4578-a22c-b045501c8fed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a933d323-1ee8-40c0-80a3-f23640bfbfb2", "sighting_of_ref": "indicator--4277958c-4b94-4f91-9d37-61d881a752e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb6d407-8285-444a-a401-8f8a19255f22", "sighting_of_ref": "indicator--4277958c-4b94-4f91-9d37-61d881a752e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c07d8a-31ae-4517-94c4-a2122b44ed44", "sighting_of_ref": "indicator--c8cb605f-651f-466d-a5e1-a313098f6c26", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d052dbc-cdc1-4732-8872-d0a9b272ea4a", "sighting_of_ref": "indicator--c8cb605f-651f-466d-a5e1-a313098f6c26", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11dedfc-0e8d-4cff-b469-7931e75899e6", "sighting_of_ref": "indicator--36a829ca-aabb-4620-8457-20b25f50f949", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcc8fc1-20e6-473f-9cec-837f6e9aa462", "sighting_of_ref": "indicator--36a829ca-aabb-4620-8457-20b25f50f949", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbd529a-70e3-4024-8b98-7377e19f0916", "sighting_of_ref": "indicator--724e6464-3112-4e1e-8413-af8d877d0589", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a91da4f-5d1e-472e-b041-f0b7f5aa2f87", "sighting_of_ref": "indicator--724e6464-3112-4e1e-8413-af8d877d0589", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eecb757-9d17-4d37-9588-36d846f3e0a2", "sighting_of_ref": "indicator--a89caf99-1c6c-45ac-9b2f-848baa5c3c7d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abdc80c-71a8-4f8c-bb31-1c56c9b33157", "sighting_of_ref": "indicator--a89caf99-1c6c-45ac-9b2f-848baa5c3c7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08101bf7-b825-47a2-9c0f-1f754d532807", "sighting_of_ref": "indicator--e478119f-0c5c-477e-bbc9-ac1b7534d4d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b23cd5f-35df-42c2-989c-754698f07140", "sighting_of_ref": "indicator--3b990c08-2a15-4adc-99f6-e4952ecf68f7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bb0e37-1019-4375-a3a0-52a570f430a7", "sighting_of_ref": "indicator--3b990c08-2a15-4adc-99f6-e4952ecf68f7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f22a238-9a48-4a4c-8d22-5bb39395f4f0", "sighting_of_ref": "indicator--4141ab86-6552-4305-bd86-a4f036d79bdc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b76320d-b030-44d5-bbfb-b82d67c9528f", "sighting_of_ref": "indicator--b4910afd-1f8b-4b7f-8cae-65eb2ac12a4a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e6e5c8-bd19-40e2-9dcc-3376be12de64", "sighting_of_ref": "indicator--b4910afd-1f8b-4b7f-8cae-65eb2ac12a4a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58617807-8180-44e9-b67c-ddc9c7b4b4ad", "sighting_of_ref": "indicator--1c4cf1cf-818a-488a-993f-2447ab325fd0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7218d85-a531-4d38-9261-d6d70e51b5c4", "sighting_of_ref": "indicator--bd0d2c50-058f-4d13-87cf-887ad9f8d0fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c05931-9d31-4ed4-a53d-c3ffce373df0", "sighting_of_ref": "indicator--decaaafe-f36e-4bc1-9f3a-c75c39594175", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f37386-9e13-4303-86f5-13a54e399354", "sighting_of_ref": "indicator--decaaafe-f36e-4bc1-9f3a-c75c39594175", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffb4176-0388-40e6-b8c5-d7dc17bcb854", "sighting_of_ref": "indicator--b97c20e4-248e-4310-aeb0-b077a375c2fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59c0fe7-8e3b-49a5-b145-a23113b07d74", "sighting_of_ref": "indicator--b97c20e4-248e-4310-aeb0-b077a375c2fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a58ec1f-1483-49a2-8a47-0dbe1e573201", "sighting_of_ref": "indicator--970b8375-7e75-4dcb-95a4-5ab39adb1195", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b01956-4567-4113-8dbb-be8584c79045", "sighting_of_ref": "indicator--970b8375-7e75-4dcb-95a4-5ab39adb1195", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6bb097-f604-4a36-a24a-6194602b1c28", "sighting_of_ref": "indicator--225da4f5-de07-4071-8762-e0793a14b870", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9d26cc-59c0-444e-a2a9-b2affed0a679", "sighting_of_ref": "indicator--225da4f5-de07-4071-8762-e0793a14b870", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7691822d-d69b-448a-a741-0a1c4bea86c8", "sighting_of_ref": "indicator--30589b47-07d3-4507-9843-94a808866d14", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf30a9c-903f-4802-b59f-8747c4b014af", "sighting_of_ref": "indicator--30589b47-07d3-4507-9843-94a808866d14", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cd4033-13c1-4455-b29e-b3a8560b32ff", "sighting_of_ref": "indicator--d5ab615f-b760-4184-9f00-87b25e71d1ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20d3fa7-f44a-47f8-ad83-64c0318ea8f1", "sighting_of_ref": "indicator--c772e101-2013-45ec-98bd-399d235628d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0c2eb0-2718-454e-940e-aa0e9e4243f0", "sighting_of_ref": "indicator--c772e101-2013-45ec-98bd-399d235628d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a90506-ede4-4f2c-8d58-59b5377b700b", "sighting_of_ref": "indicator--c772e101-2013-45ec-98bd-399d235628d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c4d4d1-e0a7-4211-b586-391fddd88791", "sighting_of_ref": "indicator--5a2fdc15-f3fa-4730-8b65-d4bfae76f386", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89412735-5c63-4dfe-be64-616579668594", "sighting_of_ref": "indicator--88e4e8cf-8cb0-4d1a-9fb3-8f02e1ed537d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efa4a59-cbd9-40c9-a819-20b550953438", "sighting_of_ref": "indicator--88e4e8cf-8cb0-4d1a-9fb3-8f02e1ed537d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706b94da-4ffb-460e-9e9c-9a3054b998be", "sighting_of_ref": "indicator--88e4e8cf-8cb0-4d1a-9fb3-8f02e1ed537d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc8e9ab-16b2-4bf8-8e26-826337c18ec8", "sighting_of_ref": "indicator--ec5741f0-a571-403a-92d8-7a2d64d5a0a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa529930-08c3-4ef9-8d4f-4e0f6349db8e", "sighting_of_ref": "indicator--ec5741f0-a571-403a-92d8-7a2d64d5a0a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e49f38-eda8-4c46-b16b-164114af1b92", "sighting_of_ref": "indicator--1a7a79af-5d85-4459-b31c-45828e20bdf2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a640451a-8f53-4833-8af2-6b7f063ef6b7", "sighting_of_ref": "indicator--1a7a79af-5d85-4459-b31c-45828e20bdf2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376d0c86-3259-4413-8f9f-7d7ba67f499f", "sighting_of_ref": "indicator--a48c4816-9615-42e3-a841-5503f52a3b22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9534abad-fa4a-475b-baaf-ebf7a5158c90", "sighting_of_ref": "indicator--f1f59d43-57a6-48f0-b734-3a73b519d397", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caeba95-9e97-4b09-a363-d0f1be0ea2ec", "sighting_of_ref": "indicator--f1f59d43-57a6-48f0-b734-3a73b519d397", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d67af6a-8f14-4d9c-b943-e71d46ffe1cf", "sighting_of_ref": "indicator--f1f59d43-57a6-48f0-b734-3a73b519d397", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1222ea00-1529-4c1d-9feb-31dff7a2ba4e", "sighting_of_ref": "indicator--4c64540e-cadc-4e7e-9223-5c62b9bb6e93", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82dfbe7-381b-4403-a12c-0073439fb8c8", "sighting_of_ref": "indicator--f5d41339-8dce-4da0-b1d3-d718642b6e1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43793c7-c61d-485f-885f-24c4d156aa88", "sighting_of_ref": "indicator--d3d13e17-2502-492b-976f-f827fe496cf1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c90fb42-3c39-4855-904b-ad16a7f9a63f", "sighting_of_ref": "indicator--3a83b650-fe63-4e30-9072-e18a17f6b753", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60cbbd3-bd46-4556-a987-50e3bff9b003", "sighting_of_ref": "indicator--2338c406-baae-4a17-a3d0-52b5dff4105e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0452556f-98b8-4459-b3b4-05ec06126d5e", "sighting_of_ref": "indicator--2338c406-baae-4a17-a3d0-52b5dff4105e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdcce0a-f75f-476a-8e45-a8ab44cbeee5", "sighting_of_ref": "indicator--2338c406-baae-4a17-a3d0-52b5dff4105e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61f0ee7-9521-4cfb-b113-0c038fc3515c", "sighting_of_ref": "indicator--10d97111-95a0-4269-a036-09e63f496f3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74316cba-8952-4fd2-88e1-7194d206ae0f", "sighting_of_ref": "indicator--10d97111-95a0-4269-a036-09e63f496f3e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04acd29f-b341-4bd6-8e80-ac3f7bf1d36d", "sighting_of_ref": "indicator--74629ecb-ffd9-4efd-a0c1-decd4a9797ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce44052b-8587-4912-ad66-67b9417029b3", "sighting_of_ref": "indicator--74629ecb-ffd9-4efd-a0c1-decd4a9797ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec977a4e-b1e2-473a-b5b9-9a4f006a9fd4", "sighting_of_ref": "indicator--e2fe4cd5-227f-407c-b0eb-2742efef6a5c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5ddb01-63b0-497a-95d9-f0e90054f0a5", "sighting_of_ref": "indicator--e2fe4cd5-227f-407c-b0eb-2742efef6a5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c68a4d0-8436-489c-9c1e-41c8d6aacab2", "sighting_of_ref": "indicator--e2fe4cd5-227f-407c-b0eb-2742efef6a5c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f64d46-5819-48b8-897d-285568a3e7ae", "sighting_of_ref": "indicator--a82a43fd-cfdf-4899-b995-a19e79bcb81c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ccaaa3-bb1f-4c5a-acf8-34a49ec46894", "sighting_of_ref": "indicator--a82a43fd-cfdf-4899-b995-a19e79bcb81c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dad1590-9156-447a-92bf-64b5b42e8fc0", "sighting_of_ref": "indicator--a82a43fd-cfdf-4899-b995-a19e79bcb81c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4fe0cd-dcb4-461d-a14d-f7a86e02e998", "sighting_of_ref": "indicator--83b53569-fcfd-4770-b2cd-103f4036d90e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dff180-7d3e-4e5e-bafa-75fc9b17b816", "sighting_of_ref": "indicator--83b53569-fcfd-4770-b2cd-103f4036d90e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7735094-87a8-479f-aff8-e16333fbdb1a", "sighting_of_ref": "indicator--e515b4f6-bf5a-44f2-9c3f-c927a9afe9ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c80839-fa28-45bc-a814-6b546843e76b", "sighting_of_ref": "indicator--e515b4f6-bf5a-44f2-9c3f-c927a9afe9ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de80209-b9d5-421b-9272-3ab8014652ab", "sighting_of_ref": "indicator--e515b4f6-bf5a-44f2-9c3f-c927a9afe9ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c97433f-c0c4-4516-9c36-e9db4c9a7682", "sighting_of_ref": "indicator--648ff1e8-ce2a-4152-bdd6-9503c43f006b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4604901-53cd-428e-84ba-0137f3cc4a3a", "sighting_of_ref": "indicator--648ff1e8-ce2a-4152-bdd6-9503c43f006b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40173291-29af-4ba0-802b-2484bf22ade4", "sighting_of_ref": "indicator--de09dbd5-85dc-444c-9229-8d6d5bd0d4f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccdf780-4006-49e2-b42c-9df8b5596f80", "sighting_of_ref": "indicator--7669f306-72ba-4506-af5b-59a5e4826753", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9006e3-d7e1-487c-be1b-aeb95f4ae287", "sighting_of_ref": "indicator--9fdc7d52-4088-418d-a338-a6dad10c2a3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08689e82-19a3-47a8-9c73-6a2920220dd6", "sighting_of_ref": "indicator--9fdc7d52-4088-418d-a338-a6dad10c2a3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdda72b0-986e-40f8-9215-34b509b7f527", "sighting_of_ref": "indicator--9fdc7d52-4088-418d-a338-a6dad10c2a3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199c0453-63fd-4198-b0e9-7a8da33f60f2", "sighting_of_ref": "indicator--8d9eca67-3757-4074-9941-e6f318c6efe6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f01d61e-658f-4062-85ef-391a2a311a9b", "sighting_of_ref": "indicator--8d9eca67-3757-4074-9941-e6f318c6efe6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72abab42-a85c-47a6-bfe2-66b3f21c81e4", "sighting_of_ref": "indicator--8d9eca67-3757-4074-9941-e6f318c6efe6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ddb2db-7247-481b-b140-9177885740f4", "sighting_of_ref": "indicator--c07c61b9-db33-4a59-8a6e-ddc021f5f00c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edb48e4-84c8-4f22-93b1-a180f2ec94fa", "sighting_of_ref": "indicator--90e8bb6f-33a6-4b8a-b7f2-caea3a798bb1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae02841c-6623-4633-a2c4-6fc3541daeba", "sighting_of_ref": "indicator--90e8bb6f-33a6-4b8a-b7f2-caea3a798bb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa7fae5-c011-425e-a542-9ff440504df5", "sighting_of_ref": "indicator--90e8bb6f-33a6-4b8a-b7f2-caea3a798bb1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7365461-243a-4259-b193-97c29c77d7f3", "sighting_of_ref": "indicator--41abc55c-201b-43da-a48b-c4834fb37478", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eeec591-3c5c-4e54-bdd9-c840a15439be", "sighting_of_ref": "indicator--41abc55c-201b-43da-a48b-c4834fb37478", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085d7f4b-0483-4b2f-a135-abce9956af3d", "sighting_of_ref": "indicator--41abc55c-201b-43da-a48b-c4834fb37478", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdebbba-87bf-4669-9c21-0d1dc3e7a1a0", "sighting_of_ref": "indicator--4d568894-7ed8-413c-bc33-fb3ad17243e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d5626c-72f0-4ec5-a026-8fca30712a11", "sighting_of_ref": "indicator--4d568894-7ed8-413c-bc33-fb3ad17243e6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1d02ea-ce2b-4af9-884d-0faae657b8de", "sighting_of_ref": "indicator--4d568894-7ed8-413c-bc33-fb3ad17243e6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f36e6b0-b463-4652-8b3d-2d00d6bb3f4b", "sighting_of_ref": "indicator--9102e69a-0ab2-455c-8f8a-ba32ed692580", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d04002-960e-4d96-a45c-44cb8ab69607", "sighting_of_ref": "indicator--e524d716-9231-4f00-940c-13871ce86fd5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74abfe60-3af4-4b7b-8a3f-8d22d9a2b1ee", "sighting_of_ref": "indicator--7dfd22ca-31d7-4b9a-82b2-546bdf037f83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb62e8a-256e-4b64-b24b-46908cf2e804", "sighting_of_ref": "indicator--7dfd22ca-31d7-4b9a-82b2-546bdf037f83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8be2f5-4634-40d7-a1ee-149e2b3b949a", "sighting_of_ref": "indicator--a7cfee18-0301-485d-bc0d-7b268bee1af2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9d8a91-ba68-4457-8d29-b1f2c564a76d", "sighting_of_ref": "indicator--a7cfee18-0301-485d-bc0d-7b268bee1af2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8ca75a-7f03-4d30-9a01-575ed0fe7033", "sighting_of_ref": "indicator--384011bf-789a-4719-bfb4-e24d350b82f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ee837f-607a-4816-88dc-32da1941602b", "sighting_of_ref": "indicator--3dee2c93-5d51-42c4-b68c-c6bde73651a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0dcd35-2477-4630-b454-df09c622df8e", "sighting_of_ref": "indicator--2947f9aa-757e-4a76-acdd-6793a2543fde", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28e0e4b-3ae2-4818-b2fa-023ff7288ac0", "sighting_of_ref": "indicator--2947f9aa-757e-4a76-acdd-6793a2543fde", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274a77a5-745f-4859-9028-296f1cae8145", "sighting_of_ref": "indicator--2947f9aa-757e-4a76-acdd-6793a2543fde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61579f1e-0d20-4c03-bac7-66feb3c34340", "sighting_of_ref": "indicator--0e205bcd-d041-4c44-8d14-e9cac40ce5b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf33a00b-bc1e-45d2-8202-e229f846e562", "sighting_of_ref": "indicator--58a5ce70-4bac-4eb8-b620-e162866a7c36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54bc14d-b6c5-45cd-8076-05eb0a4d17a9", "sighting_of_ref": "indicator--25a584db-5bc0-4890-90dc-cd4db22e897d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2230a975-7793-4d5c-b8ee-f15c5ea3ed61", "sighting_of_ref": "indicator--b56e65a6-7036-49d2-8a54-9a3a5b3a4ae5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3660c26a-53e0-4ce0-b69a-3823809e90c5", "sighting_of_ref": "indicator--86950e77-2488-4c57-b79a-d611e5206991", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c137f49b-71ae-4119-98a8-42eb931dfc1b", "sighting_of_ref": "indicator--837ccfcd-5fd1-4f7b-ac81-5974e07c65ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4df5ca-e6eb-4d4e-89b7-1bb5d3349495", "sighting_of_ref": "indicator--837ccfcd-5fd1-4f7b-ac81-5974e07c65ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35db4ae9-7f81-49bf-b26d-341048781c99", "sighting_of_ref": "indicator--5e4f09b0-c63a-4f98-be86-ee75a71d6496", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b289201a-e18f-46cb-b28b-17dbb78ec195", "sighting_of_ref": "indicator--33ac4ff4-3451-4298-89ad-fed7fb6992e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a427c23-237e-4eb6-bcd2-e8f01666f979", "sighting_of_ref": "indicator--33ac4ff4-3451-4298-89ad-fed7fb6992e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52880cbd-3275-429e-a98a-ae5646213ad7", "sighting_of_ref": "indicator--ee4035ce-acf6-4f52-be13-3aacd1076e30", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19134155-b79d-42ae-8683-fac1a4a75ff0", "sighting_of_ref": "indicator--ee4035ce-acf6-4f52-be13-3aacd1076e30", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a935b4e4-c4bf-46c3-939b-0c56aaa49b95", "sighting_of_ref": "indicator--9372320d-48b4-4b47-9b36-689855f5b625", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be4b472-bb73-44ed-9adc-f3f730df4d30", "sighting_of_ref": "indicator--9372320d-48b4-4b47-9b36-689855f5b625", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8bc731-cd67-4684-8545-ba1f68ffeb5d", "sighting_of_ref": "indicator--e482a7b0-af02-4624-b51c-2f7aab222cc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a574367-0693-4b76-ae6a-9fc1c349e217", "sighting_of_ref": "indicator--e482a7b0-af02-4624-b51c-2f7aab222cc9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e392f7f3-d5dd-47b4-adf6-a842db34dfe6", "sighting_of_ref": "indicator--0f7fb563-87de-4e55-8342-fffdf48921f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7c7622-c675-49c2-ab44-aa479ca99144", "sighting_of_ref": "indicator--523847db-b6e0-4d60-8800-818db5ee83dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1e19db-2df3-4cee-9ab7-8f093355182d", "sighting_of_ref": "indicator--523847db-b6e0-4d60-8800-818db5ee83dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ff9668-7000-45ce-9fc3-6873c3f1ae29", "sighting_of_ref": "indicator--9e695b41-c7d3-4269-8749-237efcf97338", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3b94a1-66bf-4ab0-982c-10c14f9ef632", "sighting_of_ref": "indicator--9db2ce6a-6265-4189-9393-2fe5ff13df1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e9919e-707b-4337-8fdd-f7975a14f1a9", "sighting_of_ref": "indicator--1f78bf54-7480-435b-8054-12155c05e343", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee9c855-2e85-492e-acd8-6695b590ec55", "sighting_of_ref": "indicator--4d4791f2-a327-4865-8de8-d84ef4e5f35f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172ebe7b-1a16-44c3-9a3b-bb35bd97cc0d", "sighting_of_ref": "indicator--4d4791f2-a327-4865-8de8-d84ef4e5f35f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6625b96c-8368-4c36-ad29-1a9852a08cd7", "sighting_of_ref": "indicator--63044c3b-6c0e-4e35-aa2b-55b84c07ef2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca5b14a-4bbb-49de-a4f0-36dcf2a110b6", "sighting_of_ref": "indicator--63044c3b-6c0e-4e35-aa2b-55b84c07ef2d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a970b9fb-1db5-4481-aedd-db18b3c9b2b7", "sighting_of_ref": "indicator--03b84b55-54fb-4d84-ad04-e1fa8abb00d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b36914-c209-4815-8ae4-b075502657d1", "sighting_of_ref": "indicator--03b84b55-54fb-4d84-ad04-e1fa8abb00d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcb9191-f49e-440e-a1c5-417c54e8bbb2", "sighting_of_ref": "indicator--1ba089b5-5049-4a6e-9e4b-5a215716d4a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5d00e5-391f-4db1-bcd0-b77efda3b9ca", "sighting_of_ref": "indicator--dbe50425-d6c9-40d5-97e5-bd8d6445acb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2168d20a-a5e8-44da-aab0-f47daf7fccdc", "sighting_of_ref": "indicator--dbe50425-d6c9-40d5-97e5-bd8d6445acb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47293977-27eb-4de7-8e7c-5c68077c7c73", "sighting_of_ref": "indicator--96bea9d8-2bef-4a65-ba22-b5530347d811", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b71e07d-2545-4759-9d9f-c9ace369fab2", "sighting_of_ref": "indicator--96bea9d8-2bef-4a65-ba22-b5530347d811", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2779aae3-b366-4cee-b6b6-4b11140a9733", "sighting_of_ref": "indicator--96bea9d8-2bef-4a65-ba22-b5530347d811", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0c94db-5bf3-4eeb-9a9d-e46724a524de", "sighting_of_ref": "indicator--1e049947-3bc2-426c-a425-6f7cd7d695c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50285bd7-2fab-4baf-944f-b92ce139ed9d", "sighting_of_ref": "indicator--1e049947-3bc2-426c-a425-6f7cd7d695c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7971ef1-fd53-4818-90eb-69357a6bc1e1", "sighting_of_ref": "indicator--da42b07f-ffcb-4b9c-82a5-02ad0824688c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a924792-7b8e-4d03-a966-49e139b88019", "sighting_of_ref": "indicator--da42b07f-ffcb-4b9c-82a5-02ad0824688c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797a38c2-767b-4094-9b84-54d65279f3f9", "sighting_of_ref": "indicator--da42b07f-ffcb-4b9c-82a5-02ad0824688c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4691ea10-69aa-4994-9e68-5cd2af5fcc9a", "sighting_of_ref": "indicator--d3bd17e9-6d2f-4e19-96d1-b2c09b700c3d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233cfaff-808e-4b54-b96b-e981abcb670e", "sighting_of_ref": "indicator--d3bd17e9-6d2f-4e19-96d1-b2c09b700c3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f24f3d1-a5eb-4b51-9018-afbef3bf661b", "sighting_of_ref": "indicator--ece1937b-2df8-4459-847b-0bc30bf51ac3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbbc181-cf06-4393-90a2-08827eefb2ed", "sighting_of_ref": "indicator--4430e357-fc1b-437b-bdf8-58531ddf9676", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b70e248-4d45-4ddb-957c-74c9ace6cb3d", "sighting_of_ref": "indicator--6dde777e-a759-436b-ab49-5ff42c6f93cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49770574-38e9-4082-8e48-6d30b8d9dd76", "sighting_of_ref": "indicator--2c82c8b3-e4e8-4558-9e5f-deaba8d33a83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f5409e-b7e0-426e-a756-88b9169767a8", "sighting_of_ref": "indicator--1fa4e6bf-b36e-498d-ba0e-20a61c22eaf7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadbe556-a608-4e64-b7f6-cb652583e8d3", "sighting_of_ref": "indicator--8f5ac978-f7ad-4c09-a1e6-dc107e40e1d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116b2e7b-e805-47cf-8f05-4b714d82a5bb", "sighting_of_ref": "indicator--2ed68fd1-adab-45a1-8bbb-e589eb6ffd14", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d05cca4-091c-41ed-b7b0-ac8bea0ee6ed", "sighting_of_ref": "indicator--f8124373-fee0-420e-80a7-790cd9db85cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0b5313-f606-42de-aad8-8110b2c727cc", "sighting_of_ref": "indicator--5d899873-a1bd-4c9d-a3cf-dbda24b5b8bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce562808-e5ab-4fa7-91f7-9e58931d69f3", "sighting_of_ref": "indicator--533dad28-8706-43de-a434-a6b7ca6b7f62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240da917-ab87-4825-a46d-93dd1d3aabf8", "sighting_of_ref": "indicator--533dad28-8706-43de-a434-a6b7ca6b7f62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad9994c-bb7e-4b9c-8798-a96f8e713b55", "sighting_of_ref": "indicator--4df52926-0809-4ad9-8cf2-a1d8e1924231", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de19ee7b-a796-42ad-884c-971bf8d84dee", "sighting_of_ref": "indicator--4df52926-0809-4ad9-8cf2-a1d8e1924231", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2759ccd4-b1ec-405f-b3d6-83bbf84f816b", "sighting_of_ref": "indicator--221d0959-c20c-4939-b64c-df4ac627e5f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e48832-e4ef-4f64-beb7-667719470e34", "sighting_of_ref": "indicator--221d0959-c20c-4939-b64c-df4ac627e5f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6dd313-4480-4930-9987-c30e0b6b90af", "sighting_of_ref": "indicator--221d0959-c20c-4939-b64c-df4ac627e5f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a62167-2521-4985-a64a-1c17cf8e91ba", "sighting_of_ref": "indicator--a90f5eb0-8018-4722-888d-b98599cd4d15", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d47dbb-7344-44ab-bc9f-d83b583bf0d2", "sighting_of_ref": "indicator--a90f5eb0-8018-4722-888d-b98599cd4d15", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c63700-2e84-41b1-8452-41b11e1a3022", "sighting_of_ref": "indicator--a90f5eb0-8018-4722-888d-b98599cd4d15", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba237920-e456-4a70-bfc2-0094579023e3", "sighting_of_ref": "indicator--7390adae-93df-477e-b7d2-d95d0be41707", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e38ec8-4fb7-434b-8bbe-c6b8a3a7074e", "sighting_of_ref": "indicator--7390adae-93df-477e-b7d2-d95d0be41707", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc98c965-0799-4cf7-a214-4a55ec6b6bdb", "sighting_of_ref": "indicator--60859541-226b-484a-8fdb-9794536c599b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f50ce79-bbfb-455d-830b-10c80a668ead", "sighting_of_ref": "indicator--32e39044-cb08-4744-88fa-e5ade5b981b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d211190-bda0-4147-83e2-af975c448ae2", "sighting_of_ref": "indicator--2ec6449c-6bbe-48a4-ba56-1a69be791100", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fb54e4-e614-4628-a018-6bfe05400473", "sighting_of_ref": "indicator--7bd3016f-8400-4f41-aada-b990932d46a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de04ab8d-8875-4bf0-9c45-c46dd52f7217", "sighting_of_ref": "indicator--ff0eb62f-17e1-45f1-b3eb-1219531c7bd5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c91687-e697-4bb0-9d5f-cc6c53d52712", "sighting_of_ref": "indicator--ff21f357-17fc-48b4-bec9-e602b07ad5a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff2ac91-0cd4-409c-bd4f-a0de2b33649d", "sighting_of_ref": "indicator--e8b228c6-d4d6-40f7-88d2-52b8808c85a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb825df-00d0-4dca-82cb-3e9871d04808", "sighting_of_ref": "indicator--e8b228c6-d4d6-40f7-88d2-52b8808c85a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8a0f7a-291e-49f9-8b7d-c65d349cd86a", "sighting_of_ref": "indicator--2f8ed09f-7303-46f3-9ae3-4e3c95bf7e79", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c81f04-e4aa-4332-b5dc-926b61107b96", "sighting_of_ref": "indicator--2f8ed09f-7303-46f3-9ae3-4e3c95bf7e79", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac0b85b-9e87-4b88-909f-9a927edce687", "sighting_of_ref": "indicator--f4e068f5-650a-486e-b15e-067b3dadc832", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68c165d-1be4-4ff7-8350-e146ba9cfd1c", "sighting_of_ref": "indicator--f4e068f5-650a-486e-b15e-067b3dadc832", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5da737-42c5-461a-99b3-8f5f3ae5a11d", "sighting_of_ref": "indicator--f4e068f5-650a-486e-b15e-067b3dadc832", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bab6266-6c1a-4357-b6f7-096b8571176b", "sighting_of_ref": "indicator--5ea595c2-b825-45a5-be05-49e8e9477305", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36224966-dc7e-4852-851b-51f421f9cdb1", "sighting_of_ref": "indicator--f865f5b9-3ea6-44fd-8a70-b2c5801c85ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d82883b-c238-4e40-b8b0-03eb5f5ac491", "sighting_of_ref": "indicator--f865f5b9-3ea6-44fd-8a70-b2c5801c85ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12b8281-bfc0-4c0d-b2fb-27c8a7de0b4f", "sighting_of_ref": "indicator--f865f5b9-3ea6-44fd-8a70-b2c5801c85ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37188a97-120a-4a1e-9f40-e065d512717f", "sighting_of_ref": "indicator--e105d7c7-c360-473e-8a98-16dbfc5cd3a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1107015b-9bbc-42b4-95a7-f0e2561407bf", "sighting_of_ref": "indicator--e105d7c7-c360-473e-8a98-16dbfc5cd3a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d57f88-b809-45e0-b9d7-e46aae45c6ae", "sighting_of_ref": "indicator--e105d7c7-c360-473e-8a98-16dbfc5cd3a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e72d001-b4b8-49fe-8178-2147cd8161c9", "sighting_of_ref": "indicator--0e0b0308-1e32-45b3-80cc-8f20ae617671", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4478eb-cff2-42dc-ba2f-490d93e4a379", "sighting_of_ref": "indicator--0e0b0308-1e32-45b3-80cc-8f20ae617671", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ce0b2f-eb96-44cb-9d37-f7aa395d0f02", "sighting_of_ref": "indicator--0e0b0308-1e32-45b3-80cc-8f20ae617671", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10c5c68-1755-4d17-bc96-5c093f4c4adf", "sighting_of_ref": "indicator--f0118095-ac62-4d89-a046-f4f770f0e997", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994ab8c1-cb31-4114-8863-38c407aa2205", "sighting_of_ref": "indicator--f0118095-ac62-4d89-a046-f4f770f0e997", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1a00c9-a3eb-4bf2-93c8-e8c11ef95479", "sighting_of_ref": "indicator--f0118095-ac62-4d89-a046-f4f770f0e997", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcffaa5d-27f6-41a5-9934-2c877d3aac75", "sighting_of_ref": "indicator--d88379bc-75af-4c2d-8074-88a0a797ae79", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2917dbf3-f2c6-4b93-9674-1b9667141547", "sighting_of_ref": "indicator--b8c31c1f-3836-4d63-88dd-0aa31fc214a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df142704-beb6-4b96-a668-3e9777b02d86", "sighting_of_ref": "indicator--b8c31c1f-3836-4d63-88dd-0aa31fc214a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47619272-1b60-4616-a9f3-8fcbb5210fac", "sighting_of_ref": "indicator--b8c31c1f-3836-4d63-88dd-0aa31fc214a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cea487d-b875-4d89-84e9-1c5aacb5e042", "sighting_of_ref": "indicator--89ea081b-795c-490c-b43d-4192549aefcc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db0af18-74fc-404b-bea2-0fa1a155e72d", "sighting_of_ref": "indicator--89ea081b-795c-490c-b43d-4192549aefcc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0daea-e9ef-4303-b0ee-478318a708fa", "sighting_of_ref": "indicator--89ea081b-795c-490c-b43d-4192549aefcc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454021fe-a076-4b5c-a2f8-d71efc521a6c", "sighting_of_ref": "indicator--4f14ff4b-734c-4fc2-8261-c3319a88f7ed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6dcff0-2596-49f6-bbe8-4fa3f451da9e", "sighting_of_ref": "indicator--4f14ff4b-734c-4fc2-8261-c3319a88f7ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6c968e-926d-4896-8247-8d67a7696f2a", "sighting_of_ref": "indicator--4f14ff4b-734c-4fc2-8261-c3319a88f7ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f4d335-fd93-435a-8d1d-03dbb7563b07", "sighting_of_ref": "indicator--c9d9d98c-c6ee-425e-8eb2-90b7476bae4a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a24a00-37fc-435d-abfa-6fc629a52fa0", "sighting_of_ref": "indicator--7057785b-d235-4ca7-9595-9a0c171b0b15", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e52b08-f8a8-4f17-be2e-73fb3ac484d6", "sighting_of_ref": "indicator--7057785b-d235-4ca7-9595-9a0c171b0b15", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55148405-265e-401c-b691-c5276629b214", "sighting_of_ref": "indicator--97d2a48c-2536-4270-bf8d-03446e47375c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcec44ab-5cb7-4d9c-80e3-39491c4f876b", "sighting_of_ref": "indicator--02feb97d-178b-4e5e-8615-11b212b75c87", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f828f29-4294-41b7-bd39-baf7c0e9626c", "sighting_of_ref": "indicator--02feb97d-178b-4e5e-8615-11b212b75c87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0272a0bd-b48a-4a63-ba8c-25505252343e", "sighting_of_ref": "indicator--99cdb6a7-6190-463e-9e29-18abf3cb3975", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847f6ade-8675-4251-aaf4-47d6c535749b", "sighting_of_ref": "indicator--897d495a-6d23-4816-9e46-71321d3d2b7b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c86321-f241-4f03-9e8b-0ff6f9f64581", "sighting_of_ref": "indicator--5cd96079-5999-4e31-a60e-de2df52f9e55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2dbcfc-9051-468b-9938-4a6df81355c4", "sighting_of_ref": "indicator--5cd96079-5999-4e31-a60e-de2df52f9e55", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668539eb-976a-458e-875c-11e38f214b49", "sighting_of_ref": "indicator--db6d0356-1513-4712-ac91-0b07f3e4b80d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a02b40-03ee-40d8-8634-72aa8175fb82", "sighting_of_ref": "indicator--db6d0356-1513-4712-ac91-0b07f3e4b80d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070d6647-1f66-4d0c-8aaa-7aa73b671757", "sighting_of_ref": "indicator--4c3e7f2a-c25e-4932-bcc1-affad829a712", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e1416f-38b2-442a-8381-412df3f537a0", "sighting_of_ref": "indicator--4c3e7f2a-c25e-4932-bcc1-affad829a712", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2294b304-4138-4868-80e8-39accd6d1fa4", "sighting_of_ref": "indicator--194bc658-ce84-4af9-85b5-e085f31afcf8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218ed1e4-31fa-448d-9900-f5046c495366", "sighting_of_ref": "indicator--194bc658-ce84-4af9-85b5-e085f31afcf8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da7ef67-40ee-42d4-9c49-2968633249c0", "sighting_of_ref": "indicator--194bc658-ce84-4af9-85b5-e085f31afcf8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e70f6c7-a8f0-4c34-8f58-5c20173e59b5", "sighting_of_ref": "indicator--f92d5b35-c692-4411-9f95-599ee9db2915", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a03bde4-ab0c-43b3-8f56-6a0527509d90", "sighting_of_ref": "indicator--f92d5b35-c692-4411-9f95-599ee9db2915", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe8a556-2fdc-44f1-8e5b-0b2dfc1b45c4", "sighting_of_ref": "indicator--f92d5b35-c692-4411-9f95-599ee9db2915", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c2fd5a-e2a4-4521-ba1c-dc07ffb6ae8e", "sighting_of_ref": "indicator--848bc9d7-569d-43b8-91e1-f0487996a722", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8748e58a-2879-466d-9c98-bba96cc1f51c", "sighting_of_ref": "indicator--848bc9d7-569d-43b8-91e1-f0487996a722", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed1c8d4-b7b8-42c8-9e82-b82cc49848c5", "sighting_of_ref": "indicator--317cea4d-737a-4e0c-b3b4-5929b0342814", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c86a8cb-f5f4-41c7-b83a-6d5a8de3dfec", "sighting_of_ref": "indicator--317cea4d-737a-4e0c-b3b4-5929b0342814", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76843814-84d7-4b33-96fd-50da8ed3732e", "sighting_of_ref": "indicator--a113f383-6ebb-4168-8b78-dc7cee47d2d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18226b3d-f72d-4530-8ce8-9f2831296c2e", "sighting_of_ref": "indicator--388560c4-64ae-4b68-9002-6867f8f594f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3079ffaf-de33-445d-8eb8-191f0cc4b518", "sighting_of_ref": "indicator--388560c4-64ae-4b68-9002-6867f8f594f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08b82c3-92c4-46bc-abe9-70bb35fc3f39", "sighting_of_ref": "indicator--388560c4-64ae-4b68-9002-6867f8f594f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2aa7d06-0be4-4679-90b8-e00b76825687", "sighting_of_ref": "indicator--e11a42db-a598-4899-aa63-693073433fe8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8a7d59-12de-4087-85c0-b1b0188efa0d", "sighting_of_ref": "indicator--75881821-489e-4c41-a3dd-58935ad2cd90", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b35f84-f7fc-4ca5-8830-0d0afa58d439", "sighting_of_ref": "indicator--b2825e58-3882-41f9-8efd-b43b47f21187", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fdedd2-00a3-4220-9018-1ec20cac5d5e", "sighting_of_ref": "indicator--b1e26b55-e6e7-4b16-b06e-f9ddc0fdac1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dabc663-aa8b-4603-bd01-95d659fc243a", "sighting_of_ref": "indicator--b1e26b55-e6e7-4b16-b06e-f9ddc0fdac1c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97fae85-f5ca-429c-b73a-e99495da927e", "sighting_of_ref": "indicator--b1e26b55-e6e7-4b16-b06e-f9ddc0fdac1c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e555b987-3b77-4a45-acb0-dca42e3ceda0", "sighting_of_ref": "indicator--ed55eecb-bc6e-4951-9541-eac9e3970bbb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6c806e-f298-4fee-9b40-cafeecb1ce35", "sighting_of_ref": "indicator--ed55eecb-bc6e-4951-9541-eac9e3970bbb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d04519-8eee-4e60-a2c1-8bf619f65fb1", "sighting_of_ref": "indicator--8747de34-a4d6-4db7-8121-e55baf469b72", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9c54f1-590a-43be-b458-419a52b75722", "sighting_of_ref": "indicator--dcaa9c90-5a84-463a-8341-45e86912334f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4194bb2b-229e-4503-9c81-83a31fd61e6a", "sighting_of_ref": "indicator--75d37207-c23d-4764-89e7-a9f3608ceffe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928286c6-a5ba-475d-b5f5-5e834f7b6624", "sighting_of_ref": "indicator--d4302fdd-f3a3-4781-af5d-c88791e2c650", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94e6129-e110-4568-a41c-3b6b15e196b6", "sighting_of_ref": "indicator--d4302fdd-f3a3-4781-af5d-c88791e2c650", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80853fe5-12d9-46ac-a150-ea52a80b612a", "sighting_of_ref": "indicator--059e8bbd-20f2-4838-9f02-a22bdf3c71d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41fc392-2b79-4a0f-b123-9a8b81ee9f8e", "sighting_of_ref": "indicator--059e8bbd-20f2-4838-9f02-a22bdf3c71d9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e60e51-dc81-4f07-9c12-6a6e65252e1e", "sighting_of_ref": "indicator--059e8bbd-20f2-4838-9f02-a22bdf3c71d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018e954f-8e98-4ff1-bbaa-560c69441e88", "sighting_of_ref": "indicator--81fb82c3-99e5-4903-9411-df9ef0f52c7c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d007b462-c49c-4789-9bdc-07662c3f41ce", "sighting_of_ref": "indicator--81fb82c3-99e5-4903-9411-df9ef0f52c7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bd9b38-761e-456f-9146-fd5638a9161b", "sighting_of_ref": "indicator--61ec25fa-2a01-4397-9edd-a341166c83c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8da7fae-38b8-49fc-835d-0c43e1482b0c", "sighting_of_ref": "indicator--fdb92013-285b-4369-8fff-10fa744a636d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed3b7e0-5a6c-4061-8a65-66c2ddcf9bf7", "sighting_of_ref": "indicator--b14ea55c-fa93-4b3c-9f05-f4eb38eead7d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e08b701-5b92-4df4-be0b-c896264e9df6", "sighting_of_ref": "indicator--c7aa620e-1013-44d9-af33-67bb1253f4be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9e7673-04e3-47c5-8bef-ae246b04c2d0", "sighting_of_ref": "indicator--11e3f9ad-12f4-4ab3-810d-4c85b562e5b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5e8731-a798-4ef8-8f34-f0d2d975b49b", "sighting_of_ref": "indicator--e190f79f-f39d-4bbe-8f63-4e3eca6767f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92aa753f-d6e9-4f40-9c26-7a1336e3f056", "sighting_of_ref": "indicator--e190f79f-f39d-4bbe-8f63-4e3eca6767f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6751696-068c-473c-836a-f9cdf013ba14", "sighting_of_ref": "indicator--e190f79f-f39d-4bbe-8f63-4e3eca6767f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e52e2bb-7c2d-4826-baf7-313b6f7c6b11", "sighting_of_ref": "indicator--80fa582b-8fd0-47af-af74-11c810684f6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176e5103-20c7-411e-a8e2-c6582e34050b", "sighting_of_ref": "indicator--43959dd3-bab6-48c8-94b8-52173ba7caf4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9c6e88-8ec9-4409-af9c-a8c1a8672951", "sighting_of_ref": "indicator--9258af37-3530-401e-bb6a-748776d4f7fd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ca5752-1fa1-4f01-89c1-e0f2891c186a", "sighting_of_ref": "indicator--48fbbc50-7636-4e27-b209-7f8f28858375", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8850c1-4cc0-4758-90a0-986f99835f96", "sighting_of_ref": "indicator--a54efc74-17aa-4169-96ad-9d68ae6896c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f974d310-43a7-42af-85f3-ae32bbab6e21", "sighting_of_ref": "indicator--a54efc74-17aa-4169-96ad-9d68ae6896c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b67311-c4f4-40ca-9936-76fbf088312a", "sighting_of_ref": "indicator--a54efc74-17aa-4169-96ad-9d68ae6896c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3572d8-7dfa-40d6-8569-339080fc8eb2", "sighting_of_ref": "indicator--52bf777b-0cc1-4323-9533-22415a848adb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990c64d4-8bb8-4493-9214-2b47804cb2ae", "sighting_of_ref": "indicator--ce762460-ad73-4e7a-b674-04d222fb9852", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c62758-58e3-4132-89ea-2a87a823eeb6", "sighting_of_ref": "indicator--ce762460-ad73-4e7a-b674-04d222fb9852", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64041e7a-d4ff-4060-8555-3e1eb4e3da98", "sighting_of_ref": "indicator--71067e92-30fb-411b-b42b-4ac81fe125e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79886243-b409-44bb-aa2f-10dbaf4da519", "sighting_of_ref": "indicator--4f37193e-c3ff-4c20-b818-795e0254582c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d7fe10-80f8-49c5-9a8f-48d8eeca3a4d", "sighting_of_ref": "indicator--4f37193e-c3ff-4c20-b818-795e0254582c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df261af8-bf34-4673-bb32-07df9d84d025", "sighting_of_ref": "indicator--ae804a44-0644-4127-8001-1f7f6f7498be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9d2eb9-e1eb-4161-ad37-816127f937ef", "sighting_of_ref": "indicator--ae804a44-0644-4127-8001-1f7f6f7498be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e1d6f0-1719-472e-aeff-26d0d637a7aa", "sighting_of_ref": "indicator--afd0145e-1024-464c-80c5-822ebaee0442", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b28ccb9-75f1-482a-8ca6-1ef32c8e6754", "sighting_of_ref": "indicator--afd0145e-1024-464c-80c5-822ebaee0442", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915ab798-f14e-4763-bc76-ff00eeea33a7", "sighting_of_ref": "indicator--afd0145e-1024-464c-80c5-822ebaee0442", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f604dfe5-1af2-4812-8b1a-d38bb5d139fa", "sighting_of_ref": "indicator--64adbd5a-ab27-403c-9fde-828f04bf5fbc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a470f0-e3e0-415d-a36e-c1b8a3b6012a", "sighting_of_ref": "indicator--a4a945d9-58f1-4d3f-a8a9-a0d1f98947d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15046ae0-79ec-4010-9bac-8eddb1d7735d", "sighting_of_ref": "indicator--c56e6b9b-503a-4ccf-8b1a-28b6836cd615", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ca6bd2-4434-4822-8444-b49a773ab849", "sighting_of_ref": "indicator--586d8382-168c-4248-9dc2-1a6f704ca417", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d2dfe7-8eed-4424-9269-59ff2859b79a", "sighting_of_ref": "indicator--586d8382-168c-4248-9dc2-1a6f704ca417", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0cbf5e-393a-49e8-96ea-212e6912bca5", "sighting_of_ref": "indicator--7a2946d1-9200-4295-b588-a23abadf154b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcff3ac-af22-4d50-81b3-659f13005f29", "sighting_of_ref": "indicator--7a2946d1-9200-4295-b588-a23abadf154b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00898f2-fadd-4b59-bb03-d288f37323ff", "sighting_of_ref": "indicator--e62a0458-1544-4c39-8e94-dadb7fde5301", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f451654f-98de-46b0-8664-f6c4ce8ffd35", "sighting_of_ref": "indicator--bc5f8ed6-8730-43e7-bb0a-14fbf6e480d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d0600e-d191-44dc-9e21-81d5b7f04b52", "sighting_of_ref": "indicator--7d9d86de-d940-45bf-9a70-4099f7e779a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce6ef3f-ce6c-4d9d-89d3-dc3e9e3963ed", "sighting_of_ref": "indicator--ee4feb3f-3c5c-4376-9d1b-fd16245baa38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b937dac8-c296-45c9-92d1-5e7ef3d1a686", "sighting_of_ref": "indicator--f0238901-7a0b-4c51-80d0-c9a1781ba753", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6155103b-57a3-4d38-a3ab-029a31d85c86", "sighting_of_ref": "indicator--839da48c-583f-46c7-adc7-64c424ef4f74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6ccc10-f7a7-4053-8c87-4d995f7c42b4", "sighting_of_ref": "indicator--3d1f2db9-ac6b-4c56-9fe1-71c7b627ada3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0af875-06f4-4595-991a-4647647e5f8c", "sighting_of_ref": "indicator--5457699f-6b32-40ad-a774-2d99e7535545", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426cdcf1-55e1-4f77-8a76-184397610b8c", "sighting_of_ref": "indicator--003ae064-6d63-4b97-9b3c-82b0964bf129", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e620a-4e1d-40e8-968f-6f8ec51260ed", "sighting_of_ref": "indicator--ec1265cf-5402-4e8a-b270-6decdc84e06d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fdb7a7-2e9b-40fb-9df8-b8d7ef7c5fad", "sighting_of_ref": "indicator--e75d124b-58ad-4c31-bf05-c3d27d05382e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b19657-2149-4b67-aeaa-ab25ac69a8d7", "sighting_of_ref": "indicator--68b411f9-a2fd-4ae4-b2ce-a4836ef64344", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e08d504-a129-4b91-aa75-233517fd4ca6", "sighting_of_ref": "indicator--59886951-a435-4b7c-9e06-1fb84db35188", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfc020b-3736-496a-9891-0c806beb0f58", "sighting_of_ref": "indicator--bca7b058-588e-4e39-8c0d-c1a3fdb2c2d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38fc50c-fcad-472e-bf66-03c192ae7228", "sighting_of_ref": "indicator--28bf87ae-0a2f-4972-a615-bcf52dfadf91", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692d1bca-027c-45a3-8722-0c8f2e5ccaf9", "sighting_of_ref": "indicator--69ab5c38-49ad-4c81-b3fc-e4cbb8b7e24c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a9f6ab-ffb9-402c-8b88-3e05d56f0493", "sighting_of_ref": "indicator--83415ee5-26a6-4038-9cff-9e8a400b72f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe5b159-2be5-4610-b097-3b4c7a118ccb", "sighting_of_ref": "indicator--45432a3c-1a94-4f1e-a703-3f743aa5ab7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21471c74-3c0a-40f9-b31d-1d1c800f28b4", "sighting_of_ref": "indicator--169c396d-42cf-4a21-9f17-296f5e6b68eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7d8bb7-dc11-4f41-bd93-57d928898506", "sighting_of_ref": "indicator--851cf9bb-c1a1-42b0-88a3-711c2554dc1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9d49cf-fb20-42a3-8f8f-bf2fb801ab74", "sighting_of_ref": "indicator--4fc8efd9-7afc-4c98-8cdd-c3d1a6642ef0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca42f90-97ad-432e-9e91-413b160a5e93", "sighting_of_ref": "indicator--cb09b1fe-2da0-4ddc-a314-6b8116dd8771", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1904fc2-52b9-40a9-b407-8dc56ab286c0", "sighting_of_ref": "indicator--652547fd-0889-4950-b403-5cee294585e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a93e442-fc4c-4f7f-b216-95bd6f688558", "sighting_of_ref": "indicator--7c945fb6-3f79-4128-a119-031c095d4a1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9039a24a-05fd-4c83-92be-df3cf077480a", "sighting_of_ref": "indicator--00c5ac2c-b013-4eb3-917d-84070c0f3811", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f6fc1c-6fed-4ee7-869a-2df974a8fca6", "sighting_of_ref": "indicator--4fd1054e-4bb3-4c37-be1d-56a633f1b89c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25afea2-568b-46ad-8aa6-1b9f08b91f48", "sighting_of_ref": "indicator--3223f3a7-1499-4951-b3b5-d1fd9e4084f0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8d5bd8-b82b-4743-90e4-1de75be4e614", "sighting_of_ref": "indicator--cb1c80b7-697a-4029-a29c-28159809fd41", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b9a71b-67f6-40b0-ada3-12b4eb81373d", "sighting_of_ref": "indicator--22758e94-32be-4ee1-ad31-9b611b66a69e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd372e1f-fa2c-47be-97f6-e528ef98389b", "sighting_of_ref": "indicator--22758e94-32be-4ee1-ad31-9b611b66a69e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415e0929-22ba-423e-8523-781189919951", "sighting_of_ref": "indicator--5fd4dde9-ec48-41c3-a143-95d09dc5e6bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dadf1fe-6480-4343-adf4-32d9174598b9", "sighting_of_ref": "indicator--e293cd38-294a-4c8b-9aa9-613bd35c964d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff51e22e-257e-4bd6-8c59-f67a5d6c3fb6", "sighting_of_ref": "indicator--289053c4-4a83-4920-b9d6-582ce13018d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5124b9-8287-4e46-964a-dc961e71a245", "sighting_of_ref": "indicator--eb6d08ac-4827-459f-a142-5b642a0e8131", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b130cf-7847-472c-bec4-9b2adde584e3", "sighting_of_ref": "indicator--e1f81059-d917-4935-b52d-2f5fcd4f8016", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c85ac8-b736-47c0-a989-1f93e837c2b8", "sighting_of_ref": "indicator--48e169f3-f6a2-4419-8806-11bcdb742332", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecce0e0-7836-4690-b5d5-5598da2cb5ca", "sighting_of_ref": "indicator--1255a81a-ebcb-43bc-8299-53687fd65931", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee39a2d4-bd73-4503-be2d-8ffe1d1ec234", "sighting_of_ref": "indicator--5af47159-24c4-4846-a5e6-cb9be0d41a43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4260696-482f-45e4-9f4a-bfa2c876c9c0", "sighting_of_ref": "indicator--de8f3aa3-e4b4-4625-93c4-04e101b15703", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b84d4a4-7c08-4e56-ba6f-390b0ebe4d0e", "sighting_of_ref": "indicator--33daa086-6229-44ae-ae47-a1a514fa5fe4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1166791b-3c62-4f68-b6d0-224c059c6b44", "sighting_of_ref": "indicator--ec18d42b-c2bf-45e8-b003-acfb70375227", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f7c362-7b2e-4706-b70f-e433c33d17fa", "sighting_of_ref": "indicator--2afe505a-ebb3-4f8e-9984-70050f92aa01", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7652795-43ca-49bc-a194-bf27bf108129", "sighting_of_ref": "indicator--2afe505a-ebb3-4f8e-9984-70050f92aa01", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157da64a-ab96-46cb-b4a6-397d4827ea6c", "sighting_of_ref": "indicator--a661af3a-8c07-4ea2-9adb-65aefa0dd1d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11901834-edff-47ac-913b-08df5f8f494d", "sighting_of_ref": "indicator--ec76b93e-fec2-49d9-a0df-874b406395b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49cf2f4-a8d6-4003-81cd-1fdfd6dd0705", "sighting_of_ref": "indicator--ec76b93e-fec2-49d9-a0df-874b406395b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda756fb-4cfe-415d-b80e-768494ed712c", "sighting_of_ref": "indicator--615418dc-1ff0-4078-8f29-d9ba8a5b897f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea92e00-82dc-459c-b44f-b8372ff50a00", "sighting_of_ref": "indicator--532ed7fe-9d0b-4efa-a20f-093a2d72ba64", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c624c71e-cb27-4449-ba64-d90d11ac5d08", "sighting_of_ref": "indicator--da0cd579-779a-471a-b679-54cbb5261d00", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fbbe41-3384-466c-9008-97f06fe76d75", "sighting_of_ref": "indicator--da0cd579-779a-471a-b679-54cbb5261d00", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9fc886-3208-4f98-a8c7-e8128baa49c6", "sighting_of_ref": "indicator--da0cd579-779a-471a-b679-54cbb5261d00", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ddff08-4d16-450c-80fe-498e7bb61ec8", "sighting_of_ref": "indicator--ad99b36a-f4ae-4805-9ab3-51d60f810baf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a9e0bc-21e5-4f18-9840-94a762136397", "sighting_of_ref": "indicator--48b738d2-7dc6-429d-b51d-3d9ffbea192c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70eed78-2a84-435a-b01b-f5ebeb2e78c5", "sighting_of_ref": "indicator--48b738d2-7dc6-429d-b51d-3d9ffbea192c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e146b53-d9f4-4db3-84a3-67da048cd1db", "sighting_of_ref": "indicator--c6996a3b-51fb-4d29-abe7-cf2e25898ff9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f5f69c-77d3-4cb3-b249-648d05e36577", "sighting_of_ref": "indicator--c6996a3b-51fb-4d29-abe7-cf2e25898ff9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cf51f8-3e6d-403b-8aa2-686b8312b1e9", "sighting_of_ref": "indicator--c6996a3b-51fb-4d29-abe7-cf2e25898ff9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b96e293-0909-4b45-9369-8425c8678579", "sighting_of_ref": "indicator--ad306525-ace8-4ebb-b2c1-5085186ddd19", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616bcbbc-5526-4f49-9623-7ec78243cb11", "sighting_of_ref": "indicator--0cbd0e4a-7a82-4c94-8680-1fc13d04c5b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ec19bf-723d-46f3-97cd-05c77d638f7e", "sighting_of_ref": "indicator--0cbd0e4a-7a82-4c94-8680-1fc13d04c5b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be557716-39a3-4f3e-93eb-1c2ee7cfb1da", "sighting_of_ref": "indicator--6d01ad67-3109-4911-84ee-e5f8215f47fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286a5678-d0fc-43a7-b29e-4addc12b8edc", "sighting_of_ref": "indicator--6d01ad67-3109-4911-84ee-e5f8215f47fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ffbf72-43df-4edb-bf8f-54e6e2a55330", "sighting_of_ref": "indicator--62e6ccd7-60be-4904-9c6c-4a572e792af7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1525b8f6-3559-4cf3-9740-25dfb2beadb8", "sighting_of_ref": "indicator--62e6ccd7-60be-4904-9c6c-4a572e792af7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6f300f-d096-44eb-a4f0-faee79ed323b", "sighting_of_ref": "indicator--2a48ec2e-57b4-4860-aa39-4f4e0dc610a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fb6d24-8d9e-4786-8bbe-0986e91c030b", "sighting_of_ref": "indicator--2a48ec2e-57b4-4860-aa39-4f4e0dc610a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9611f6-7203-42af-962e-2a7d3bbdc46f", "sighting_of_ref": "indicator--6b2e26b9-a1fa-4749-bfa9-03fab28ce819", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9fe751-dd03-44c4-bcff-a5db0c38662b", "sighting_of_ref": "indicator--36a8bde1-3fbd-4139-8b10-78b63d999245", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6175fc-669f-4e3d-a34a-a71b56795c81", "sighting_of_ref": "indicator--9cd7a24a-8dc2-4184-a91e-a3bc14f0f7da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5575a99-c25d-4257-bb1f-f1944669a09c", "sighting_of_ref": "indicator--9cd7a24a-8dc2-4184-a91e-a3bc14f0f7da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585e1c91-2ab7-4e30-8556-ff0453c08e94", "sighting_of_ref": "indicator--9cd7a24a-8dc2-4184-a91e-a3bc14f0f7da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b62b900-a0d9-437b-be9b-053d43f7f02d", "sighting_of_ref": "indicator--1878032b-c3f5-4eb4-acf0-8045273d22e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e12cadc-92b1-4097-a599-5794fcdc4358", "sighting_of_ref": "indicator--1878032b-c3f5-4eb4-acf0-8045273d22e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5c6d5d-0729-41d8-9b01-2a2513335632", "sighting_of_ref": "indicator--1878032b-c3f5-4eb4-acf0-8045273d22e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84064a66-c88e-4f4f-889a-8447fe035574", "sighting_of_ref": "indicator--1878032b-c3f5-4eb4-acf0-8045273d22e9", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f261f97-6300-424d-a4a5-1617bcbef748", "sighting_of_ref": "indicator--d10af584-3178-4c4c-ba4d-eebbe4608187", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c0b397-56a2-410b-97e1-f34d9cbf31e9", "sighting_of_ref": "indicator--d10af584-3178-4c4c-ba4d-eebbe4608187", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1095e6-0440-4f74-8e9a-631b29373863", "sighting_of_ref": "indicator--b7457ec3-08ba-4b6f-b6fa-f76e8dd78b85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58597b89-c41e-46f7-b654-bb1e7e834144", "sighting_of_ref": "indicator--b7457ec3-08ba-4b6f-b6fa-f76e8dd78b85", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb51533-beb6-415a-9abb-26ee1afe2a08", "sighting_of_ref": "indicator--c866b4b0-c338-44ce-be28-dfa6e59a9e3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d78042-6bee-481d-bd1e-252f0c68a40e", "sighting_of_ref": "indicator--c866b4b0-c338-44ce-be28-dfa6e59a9e3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29da013e-056d-424c-8c3a-0d78b82043d2", "sighting_of_ref": "indicator--69ef184f-5611-4da9-b295-b420ea2fdb7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b17e124-f619-436d-855a-b2d990e262d4", "sighting_of_ref": "indicator--b862ba99-cd9f-4f69-afa1-b3355014a276", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd1eca8-1f0f-4241-a3f6-1316ad110a4f", "sighting_of_ref": "indicator--e41702ea-479b-4d66-aaa4-1d4f39097385", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa68af8-f29f-4f64-b896-db7723c38825", "sighting_of_ref": "indicator--c127c2f5-49a7-4152-a397-9d7416e4395b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304e6e8a-1ee0-45af-9b8d-b96d51b34010", "sighting_of_ref": "indicator--d3ae6ffb-7d65-465f-8206-b0a1ad51f95c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be79a18-e092-46fb-b069-029d36025bd6", "sighting_of_ref": "indicator--d3ae6ffb-7d65-465f-8206-b0a1ad51f95c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46f36a6-b384-4da3-831c-52b09487196a", "sighting_of_ref": "indicator--a7a11ac1-306d-4ab3-bc4f-13921a5a46f0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ddc728-907b-460f-9234-452d210fbdf9", "sighting_of_ref": "indicator--0012e887-3fd4-4839-8704-a5209dee330e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d60378-2957-4d51-a155-621568a3eed1", "sighting_of_ref": "indicator--43346e77-92e4-4337-b3f0-1a72edcb4379", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0a27e1-27bc-4fe2-ba89-1dd3e69b9bf4", "sighting_of_ref": "indicator--38125d22-5608-452f-9cd4-4e96ceb883c5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1444b0-1cda-4f67-8906-cd145e1c3b6d", "sighting_of_ref": "indicator--d52566f9-7b25-49b4-92ec-9f787b8b999d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe83a0f-023e-44e1-a7b5-eaff056e2c4e", "sighting_of_ref": "indicator--5a94cb83-dee9-499b-af41-017ef12231d3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e13827c-db5e-4980-9e7c-a6445c01c63a", "sighting_of_ref": "indicator--ccec4c55-2b10-49d1-9beb-f12aad831244", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd4a894-224f-4178-b864-7a935b41ce5b", "sighting_of_ref": "indicator--f65420f6-d9af-4616-95cf-1a8ba33e6aa5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9240eb8f-1d42-4acb-9a1d-6cdaf5cc2206", "sighting_of_ref": "indicator--8dee1a32-bb76-47fd-80ee-11e2ea64664e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadeb596-e12d-4c4e-8471-5d70d9c502ed", "sighting_of_ref": "indicator--72e05996-fe2b-497b-80fe-c0a7680cec63", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a977bb-0774-4c04-98a0-be283cd28da9", "sighting_of_ref": "indicator--f95537c1-332b-420f-a784-227c33a7d6e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43674f56-b7b8-4faf-955d-9a79d6e53ce0", "sighting_of_ref": "indicator--d7d86194-0203-4229-b3f1-cf64f2338956", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac8b26f-91b4-4e51-a46c-77433859e713", "sighting_of_ref": "indicator--bb0319fd-b5a9-4744-b9dc-78f4df63ada0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fd7497-e1bf-4842-b038-6886d0fa576e", "sighting_of_ref": "indicator--bb0319fd-b5a9-4744-b9dc-78f4df63ada0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fbb869-7882-4f42-a397-298273b38c4d", "sighting_of_ref": "indicator--da35cc20-16aa-4edf-a0f4-1fa44b5a0558", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9578f942-e44e-427c-ad2b-31738e190a2b", "sighting_of_ref": "indicator--b961e59c-13b5-4634-aa4f-76c7618bf577", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f754115b-fdff-4b4a-907b-4adc71d6a1fa", "sighting_of_ref": "indicator--b961e59c-13b5-4634-aa4f-76c7618bf577", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d976e838-f1a6-488a-8aa3-aa7826e3981a", "sighting_of_ref": "indicator--9d3c4e36-24a9-4333-a544-3221110cf1af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c2c159-1f45-4557-8e97-8c5b85544620", "sighting_of_ref": "indicator--296c2e98-fc3f-41f9-9e5c-3732698fa27f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa9d85f-50b6-4a76-8b23-1dd03decd0d9", "sighting_of_ref": "indicator--296c2e98-fc3f-41f9-9e5c-3732698fa27f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbf1c4d-738d-42f4-80f8-af1924901ebd", "sighting_of_ref": "indicator--190311c0-b9b3-4750-97fb-7f5a98c5fdad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4120bf86-8e11-40fe-868b-6de56977d876", "sighting_of_ref": "indicator--99b23327-f7ab-4e24-bd08-4b269e5bf5f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a66761-6cfd-4dbb-9165-0c1fa906cca6", "sighting_of_ref": "indicator--b8f0354b-6095-4715-bf4e-2122527440e8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5e8bd0-fa33-42c4-8257-dee15404372f", "sighting_of_ref": "indicator--699e3026-1650-4370-92b5-b3bf5bcb9f83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2893f7ff-f594-4db6-8ca1-0be59d4c958e", "sighting_of_ref": "indicator--73c8b965-1f6a-4d3c-8f92-9700fb5923c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3da73d3-846f-40d3-b9f6-18dc7412ea52", "sighting_of_ref": "indicator--73c8b965-1f6a-4d3c-8f92-9700fb5923c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098a6daa-1e4f-400e-888a-7779137bed68", "sighting_of_ref": "indicator--e53edf3c-4f84-40c2-b57f-9976fbfb7e32", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5ef64d-6d52-42ad-a430-87a7227136f7", "sighting_of_ref": "indicator--fa7e6a33-d5f4-42ac-b9e0-95b2768f6750", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f76a50-7a68-4dc1-af93-94d75f4728d5", "sighting_of_ref": "indicator--7ecae596-4cd2-4769-9518-e8358084183d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e741d621-bcd2-48cd-957f-d7e3a1a17ba0", "sighting_of_ref": "indicator--c44414e4-1814-4737-bda4-2a36bcc70545", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f11c153-9a2f-4d62-8fb1-eb5a3f6bb6e4", "sighting_of_ref": "indicator--8d7f87fb-5efa-4d62-b224-ef4d2f7655d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb15e74b-45ca-4801-917a-d3c3c047a1fe", "sighting_of_ref": "indicator--8d7f87fb-5efa-4d62-b224-ef4d2f7655d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5634b5f3-9be3-4829-97f2-8add59db1937", "sighting_of_ref": "indicator--96aa9001-d47a-4d0c-bbe6-2b90b1825b8f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239a13a5-0a34-4ee4-8700-bd787bb7b4b6", "sighting_of_ref": "indicator--a2baea9b-638c-47fa-9ae6-d205c8fe378a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0409b337-5c27-471d-ba8c-15dfe1464bf4", "sighting_of_ref": "indicator--c247bb59-1864-4834-9b1a-152c8ccee464", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca26a04-df17-4441-89cd-f0744f68337e", "sighting_of_ref": "indicator--c1eef394-d37c-4929-a6ca-208c75154342", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e92b43-046a-45c7-bd2e-85e739179ef2", "sighting_of_ref": "indicator--c1eef394-d37c-4929-a6ca-208c75154342", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a27743-461c-4eba-be85-884621edf7fe", "sighting_of_ref": "indicator--77487b17-08a2-40ee-bb97-51cf53d29fb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7593d3bf-37f8-4169-8bec-37f70d607c9a", "sighting_of_ref": "indicator--e5de181c-79dd-41eb-bffa-52534af3cf75", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4364dae-1693-4f73-a2f4-9b9465f3b28b", "sighting_of_ref": "indicator--e5de181c-79dd-41eb-bffa-52534af3cf75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aafd4c6-10ea-42a2-836b-3e0f92636828", "sighting_of_ref": "indicator--358c5c1e-6c85-4401-8e44-78eae2525519", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee16de8-ff9c-491e-b119-4899d1ba9aff", "sighting_of_ref": "indicator--5869a277-ccd0-4b61-b8fc-0cfcaa70d357", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d15f1d-82bd-44da-85d2-156c7ab06a88", "sighting_of_ref": "indicator--a37b804d-c9df-4a32-86d7-8ad1c816b3d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedd54e5-34b6-4e7f-91ff-a92e715630ee", "sighting_of_ref": "indicator--7a237a85-4d48-498d-8c90-725d28942807", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8020d1db-773e-4571-aed4-a89a91842b86", "sighting_of_ref": "indicator--cb9b98e7-ec6b-4ad9-8fd8-16c387a0794c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8513e2a-7e4c-489f-918f-98b7a55301c9", "sighting_of_ref": "indicator--eeeff690-d396-457f-b9c4-ddbab1ffa245", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab7ea2a-5bba-43d9-8392-1139aaf61f14", "sighting_of_ref": "indicator--0ae89b3b-e3f8-4bb6-9857-e0acadc87db9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2664b2f2-b559-4200-a5cc-e3d080fb7d73", "sighting_of_ref": "indicator--e57360df-63a5-42d2-9d35-9b359cca93e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0688efa5-e31e-4f00-a0b9-0ac020a98bd3", "sighting_of_ref": "indicator--b54b3f76-f91e-482d-801f-7f706b208e21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b8678b-e0e7-4452-96d9-5eec5e3e5ed9", "sighting_of_ref": "indicator--ea32608c-ae8e-4667-a42d-7492056300d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc51ce91-c44e-4102-8ee3-bceb4e99cf05", "sighting_of_ref": "indicator--595d05dc-9353-4979-b366-6e5aafa6a8a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daab4259-fd19-40ee-bc2a-3ef939570464", "sighting_of_ref": "indicator--595d05dc-9353-4979-b366-6e5aafa6a8a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b347511-e48b-420e-91ed-04614232a307", "sighting_of_ref": "indicator--595d05dc-9353-4979-b366-6e5aafa6a8a1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a75e73-666a-4236-968a-1d746d9f655e", "sighting_of_ref": "indicator--c6a40a0f-1adc-406e-a436-82e20c7188ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2223fff0-0e5c-4eb8-b8b2-1142c6694999", "sighting_of_ref": "indicator--9034bc33-ce58-4f77-b0bc-20f5de9451a0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bd48cd-214d-460c-9ef2-a6f342970415", "sighting_of_ref": "indicator--d5f33408-e95a-4124-8e22-27920321135b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3ee940-a646-4273-b359-2db3e42ecc53", "sighting_of_ref": "indicator--af631995-f96b-4913-b4f2-6ea26f191724", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4a1707-5216-4e93-a6de-4c29b147afd0", "sighting_of_ref": "indicator--af631995-f96b-4913-b4f2-6ea26f191724", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545334dc-cbd6-446c-9683-0b654b0a1c2a", "sighting_of_ref": "indicator--af631995-f96b-4913-b4f2-6ea26f191724", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c4eff3-06f8-4e15-93ac-48e125051db1", "sighting_of_ref": "indicator--eef829b6-8758-4fca-8430-4036b32c5ba7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4a8d5f-804f-4b3a-a4dc-f561ae811ab9", "sighting_of_ref": "indicator--eef829b6-8758-4fca-8430-4036b32c5ba7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332f9bc3-314a-4c19-9a5f-2e2399bdb42c", "sighting_of_ref": "indicator--08957615-d801-4be5-8bc6-ebac4d698e02", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a3c028-5aaf-4cf9-81d6-aeacd70dcc9c", "sighting_of_ref": "indicator--08957615-d801-4be5-8bc6-ebac4d698e02", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b29fbf-62a4-4a89-86cc-65373cbda09e", "sighting_of_ref": "indicator--08957615-d801-4be5-8bc6-ebac4d698e02", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12cf017-9120-492f-8260-198d45e58749", "sighting_of_ref": "indicator--58933f53-b4f2-4862-8f37-64b3ed4608b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57191e2a-1f27-4f30-b7e5-089ef128a27c", "sighting_of_ref": "indicator--58933f53-b4f2-4862-8f37-64b3ed4608b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c7cbf8-b474-4b0b-8284-a477bedc4ca4", "sighting_of_ref": "indicator--58933f53-b4f2-4862-8f37-64b3ed4608b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd94e325-27a4-47c9-8a65-a0a2b62d5ff6", "sighting_of_ref": "indicator--d45fc5a8-12f1-4dd8-8d8f-843e3eaab6ef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6068b9b6-e4bd-4e60-9068-dba85b3d6918", "sighting_of_ref": "indicator--8ec1e811-436a-4394-8c6a-f5ad71eab629", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e724cb42-bc60-4f3a-bd8b-ca5e863ea704", "sighting_of_ref": "indicator--7ee8a2e7-6ee0-4d01-b6e5-e5197f18769b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9825cf2-2f98-40a5-a8d5-9ac8864259dc", "sighting_of_ref": "indicator--7ee8a2e7-6ee0-4d01-b6e5-e5197f18769b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95a45fe-8032-4765-8a38-fe44c374985f", "sighting_of_ref": "indicator--7ee8a2e7-6ee0-4d01-b6e5-e5197f18769b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c0a4cc-c2a9-409f-9443-a5115f3e6e00", "sighting_of_ref": "indicator--25285dbb-441f-4ecf-8421-5b2603d40c79", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a606274d-5b0f-4288-be29-09059fbb0113", "sighting_of_ref": "indicator--25285dbb-441f-4ecf-8421-5b2603d40c79", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59257b39-a7b7-4b56-ba97-4b820e4b256f", "sighting_of_ref": "indicator--f9f17506-ad7f-4fda-8c2a-796c8c482a67", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797bc7c4-22dc-4bd0-8ea3-fa1c9d70ad2f", "sighting_of_ref": "indicator--f9f17506-ad7f-4fda-8c2a-796c8c482a67", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7ffd73-3b9e-4b71-a354-16203922f54f", "sighting_of_ref": "indicator--e69bb45a-610e-45e2-a604-dee952a8dc39", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb09054-e2f1-4133-a173-a82418a451bd", "sighting_of_ref": "indicator--e69bb45a-610e-45e2-a604-dee952a8dc39", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d1eede-0852-443f-9a60-c311ea1d3cbc", "sighting_of_ref": "indicator--8da6f9fc-c3eb-4649-b2d3-354d7297082a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbffb650-8987-4035-a06c-d8d33be4de1b", "sighting_of_ref": "indicator--8da6f9fc-c3eb-4649-b2d3-354d7297082a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0feda619-ec6f-4595-9903-b2147beaf996", "sighting_of_ref": "indicator--241b5b5f-0562-4fae-a806-23eca37b4dc2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2210c04-805a-4559-86f1-5c228c6b3111", "sighting_of_ref": "indicator--bcbc5391-a5cc-4d6a-abc5-659c13871065", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbbac4b-0bb2-4beb-add4-705a4ec65c50", "sighting_of_ref": "indicator--bcbc5391-a5cc-4d6a-abc5-659c13871065", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08946a4a-5422-4fe2-b6fb-33c0bcd60a44", "sighting_of_ref": "indicator--29eb10ee-4845-40ac-93b9-3098cf28d739", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e759c3-f493-49d6-9bb9-af21f650596f", "sighting_of_ref": "indicator--d25c165e-8cba-497c-892c-ca767d5026a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8d8421-76c7-40c3-b2ad-b4eaa35950a4", "sighting_of_ref": "indicator--53708ee4-e5f3-40d9-897e-bf2dbd67b1f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c32da1-cfac-4998-b010-90845ba854ed", "sighting_of_ref": "indicator--53708ee4-e5f3-40d9-897e-bf2dbd67b1f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc10fce-ceb3-405b-aa8f-41db8bcab3b9", "sighting_of_ref": "indicator--44b2d506-16ad-4362-83ae-324246eeecbf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ab7e69-ba83-45fe-9320-6ea5a26e3dc0", "sighting_of_ref": "indicator--44b2d506-16ad-4362-83ae-324246eeecbf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f977b872-5600-41a5-9096-7a6a997334d3", "sighting_of_ref": "indicator--12430e5d-bb14-455f-b6a0-62fc77abe204", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677f68e6-390c-4464-8183-6948e2595b95", "sighting_of_ref": "indicator--12430e5d-bb14-455f-b6a0-62fc77abe204", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d80827a-abec-4f31-b090-43844891fea6", "sighting_of_ref": "indicator--12430e5d-bb14-455f-b6a0-62fc77abe204", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1c3e40-b00a-413b-a448-ef96669ac937", "sighting_of_ref": "indicator--a7e2ce53-585c-4e96-bc21-4d9a1d76d892", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485057fa-befb-4b1d-a205-cdb56e07ccab", "sighting_of_ref": "indicator--a7e2ce53-585c-4e96-bc21-4d9a1d76d892", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7badb4-58c3-4e6a-9781-a6cb811a0fb9", "sighting_of_ref": "indicator--2062fa55-d14b-45d3-967c-903718e733ec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217d5852-4fb3-4ba7-94ff-6a0f3d010eca", "sighting_of_ref": "indicator--2062fa55-d14b-45d3-967c-903718e733ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6085fc30-2c79-4857-a040-e771c52e1598", "sighting_of_ref": "indicator--2062fa55-d14b-45d3-967c-903718e733ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b16e00-c455-498f-b390-253632df97b3", "sighting_of_ref": "indicator--5af33f8a-1dd9-4a9c-ab1b-01c6d7bbe7b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d78fa4-645b-4729-981e-6290090f2934", "sighting_of_ref": "indicator--5af33f8a-1dd9-4a9c-ab1b-01c6d7bbe7b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1aba0b-3cb8-45f5-bf88-324520fa3247", "sighting_of_ref": "indicator--9dfe43bf-24d9-438b-bf4c-38806c13c5bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7242abc1-823b-4bde-b19a-b0c38445e4f3", "sighting_of_ref": "indicator--9dfe43bf-24d9-438b-bf4c-38806c13c5bd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e4c74c-bf68-438c-a610-f002b09d960c", "sighting_of_ref": "indicator--9cb13500-50c5-4546-8ddb-c13aecf46142", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9620d305-c8c7-42bb-a536-e888d152c3ae", "sighting_of_ref": "indicator--24fc1bc4-57f4-41df-8150-3e4bf7866344", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce295981-490d-4856-9f67-10bb48c90a0a", "sighting_of_ref": "indicator--24fc1bc4-57f4-41df-8150-3e4bf7866344", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d2ac91-651c-45ba-8e87-a3c4443ab68e", "sighting_of_ref": "indicator--209ca0e8-6cb5-447a-ae0b-226fc20d6f95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145a9e85-6b13-4653-a8d4-0e490cd03acc", "sighting_of_ref": "indicator--209ca0e8-6cb5-447a-ae0b-226fc20d6f95", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d3346e-9040-4348-a7a7-97d3470eb89a", "sighting_of_ref": "indicator--209ca0e8-6cb5-447a-ae0b-226fc20d6f95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef377be7-5a89-4489-a8ef-0dd0c1ea8b97", "sighting_of_ref": "indicator--de8e2e2e-ecb4-4eeb-9f74-9e48f796e715", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9267258-4b89-4a5c-a948-555754e662d3", "sighting_of_ref": "indicator--faf913d5-2b81-4814-b62e-e0213acf2a3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e21db8-f467-489c-b565-2ec927a7de09", "sighting_of_ref": "indicator--faf913d5-2b81-4814-b62e-e0213acf2a3a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063df0fa-6ddf-4088-8205-259573772992", "sighting_of_ref": "indicator--6a158b93-0531-4649-b610-86e901184f62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e812fece-1679-4e81-80de-30049a22d98c", "sighting_of_ref": "indicator--9e14c0c1-7694-4b12-b6dc-135af5926b9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c5b751-d9f5-4100-bc8d-e7b238b4675a", "sighting_of_ref": "indicator--9e14c0c1-7694-4b12-b6dc-135af5926b9a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fc434a-bf5c-4a85-8e47-e8ab5779986b", "sighting_of_ref": "indicator--55a596e8-8137-4838-a080-a9944855c66b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c78e56-0757-4177-9de4-0bc3fed9ca81", "sighting_of_ref": "indicator--1f53420f-71b0-49bc-acf0-f97898000f65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5723464e-1f09-421f-9630-8f3eb81af39d", "sighting_of_ref": "indicator--4a7619c3-0b1b-442d-bbfd-bf96ace9b1ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac923d2e-a8ee-47d6-8acb-6e80c0cbcb3d", "sighting_of_ref": "indicator--c0f26053-2fa1-4f62-a6f5-81699c786adb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2048b1b0-0686-4bb3-963b-0fe640ab1950", "sighting_of_ref": "indicator--c0f26053-2fa1-4f62-a6f5-81699c786adb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c09dcba-4c28-4682-bc72-7c7ca61bc738", "sighting_of_ref": "indicator--72923e24-ce73-4ddd-a2de-4f3e7e2bc144", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e68829a-41db-49e4-b638-069680f30f66", "sighting_of_ref": "indicator--72923e24-ce73-4ddd-a2de-4f3e7e2bc144", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174c4809-3b30-4413-91ef-4d6184f10602", "sighting_of_ref": "indicator--72923e24-ce73-4ddd-a2de-4f3e7e2bc144", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a159a688-1128-4a71-b45a-ce695158d6a7", "sighting_of_ref": "indicator--b5393046-b17b-49af-b5ee-f29eb7bd0894", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb53898-4c68-4f39-b327-513c5aeb5479", "sighting_of_ref": "indicator--b5393046-b17b-49af-b5ee-f29eb7bd0894", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033e4287-f399-4fd3-90ba-7dfb705fc900", "sighting_of_ref": "indicator--b5393046-b17b-49af-b5ee-f29eb7bd0894", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b574fb09-a679-420d-a32c-7bda77d92b75", "sighting_of_ref": "indicator--e11f63fd-38a3-4168-b9a5-981b715ab891", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8503f857-b3bc-4034-a1c1-a7206e72365a", "sighting_of_ref": "indicator--e11f63fd-38a3-4168-b9a5-981b715ab891", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074139b4-b22f-4faa-a9c1-f03024bc6831", "sighting_of_ref": "indicator--e11f63fd-38a3-4168-b9a5-981b715ab891", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104cc205-fccd-4bde-8510-cd181fa862d4", "sighting_of_ref": "indicator--fdc3b417-d427-40cc-b3ff-52765d840352", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65a33ad-dce3-445e-86e5-c992b8de43ee", "sighting_of_ref": "indicator--fdc3b417-d427-40cc-b3ff-52765d840352", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7024786-0ace-4b68-98c9-ca798f10f7e5", "sighting_of_ref": "indicator--fdc3b417-d427-40cc-b3ff-52765d840352", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d923c3cf-b0bc-4e03-a3a7-c2aa96ebd0bf", "sighting_of_ref": "indicator--91e6903a-13ae-46ac-9541-9723da046af9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412b15d3-7bac-41ab-9a38-6ded25ae9dda", "sighting_of_ref": "indicator--0bf3c575-6ddf-431c-bf50-2e7672138afb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9042e8f-1f68-48ff-b687-ce52d1f4e6ed", "sighting_of_ref": "indicator--0bf3c575-6ddf-431c-bf50-2e7672138afb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2355b21-b645-4dac-b872-044acadc9a20", "sighting_of_ref": "indicator--2a0f2f2b-15cc-42b6-ab1c-d7ae397a2cd4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56cea6a-4031-455c-9cdd-c37fb3049aed", "sighting_of_ref": "indicator--cde9c9db-5c6c-43d9-9f60-d062e3eae5cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92b7c61-97e4-451b-8fb7-a763ad98de1a", "sighting_of_ref": "indicator--13c3718d-6557-4486-8bc7-777d6e23943b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02be4b48-6ec6-474e-a349-8dc9ba7133ca", "sighting_of_ref": "indicator--96c25927-1152-4118-9dc8-adacbe9cacee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9e0ecb-48e9-4d50-8672-8f65b67872e4", "sighting_of_ref": "indicator--f466887c-76fd-49b1-b41c-98a85bded880", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab279a30-e245-4f4e-83c4-4411028d8949", "sighting_of_ref": "indicator--f887ea4f-2ee1-4fb4-a641-5360f007d65a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5979d318-2c9e-4c06-8cef-4ca670339ca1", "sighting_of_ref": "indicator--093350d6-5f2a-474f-9657-86fdfe31cc2f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54663470-9921-4037-92f1-4ac42a5667e0", "sighting_of_ref": "indicator--093350d6-5f2a-474f-9657-86fdfe31cc2f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c6bd67-cc52-4cc3-8478-04a49ccbb4a3", "sighting_of_ref": "indicator--093350d6-5f2a-474f-9657-86fdfe31cc2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c062c4c5-392e-4b5d-a080-e5ea0b3a702e", "sighting_of_ref": "indicator--99604ee9-a2c3-40a3-b5cb-2cf5fbd80def", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf018ba1-582c-4177-b158-12747391ea7a", "sighting_of_ref": "indicator--1fbadd32-2d3a-4631-8206-2aedd7450c52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac3debd-65c3-4a39-b8ff-7df3804eb6a0", "sighting_of_ref": "indicator--1fbadd32-2d3a-4631-8206-2aedd7450c52", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acbce39-1678-4de7-961e-22c25bf74bc6", "sighting_of_ref": "indicator--1fbadd32-2d3a-4631-8206-2aedd7450c52", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca41826f-9f38-48dd-ae10-9e4075e23e89", "sighting_of_ref": "indicator--3daf4006-87b5-4f20-bfe0-e89765c3a33a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66364d75-747e-4ee1-b57d-8a5900e1a528", "sighting_of_ref": "indicator--115d6675-8809-487e-aa1d-250a9526209f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934a3a45-fba8-40a5-8e3d-a2a419ef4b05", "sighting_of_ref": "indicator--115d6675-8809-487e-aa1d-250a9526209f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc2a487-ea41-4fc8-ade9-f59a2b36a46a", "sighting_of_ref": "indicator--dbc48245-ff83-46ea-8c16-da374a9992da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b68d3e4-691c-4805-84c9-47199843659f", "sighting_of_ref": "indicator--e798f319-410d-474b-b77e-a7b2d8a8d0fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bed0d28-7641-4624-8683-14c4b99f7066", "sighting_of_ref": "indicator--e798f319-410d-474b-b77e-a7b2d8a8d0fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e33373-1b9b-4f79-b36f-a9174ded91ef", "sighting_of_ref": "indicator--f59e4b70-d563-43dd-9da2-049c747decae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37a8fc3-d73a-46e5-88ee-b993f4897502", "sighting_of_ref": "indicator--f59e4b70-d563-43dd-9da2-049c747decae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a191da-8bdd-483b-9d45-fa2ab432b266", "sighting_of_ref": "indicator--f59e4b70-d563-43dd-9da2-049c747decae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd22783-8129-4e8e-ba88-1d64239a22d4", "sighting_of_ref": "indicator--eb96332d-7da3-4528-9fcd-03d1b94fcc65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bc98a9-29df-45ad-b52b-2df2e84818ca", "sighting_of_ref": "indicator--914a342d-7059-4cce-85ce-d10af1a8c71a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72b2799-fb83-4e11-b725-894610573bda", "sighting_of_ref": "indicator--914a342d-7059-4cce-85ce-d10af1a8c71a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31ed4f9-a56e-45fb-a293-447a109a197a", "sighting_of_ref": "indicator--96be1443-4b02-4663-8842-6ff525bad1bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46e81a1-9f52-4c61-bf58-691cf6b4fd44", "sighting_of_ref": "indicator--96be1443-4b02-4663-8842-6ff525bad1bf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66ca286-baac-4830-9a8c-a68b3c2caedf", "sighting_of_ref": "indicator--5503841a-20be-44f5-a85d-aa99271243a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d30d16-9627-4350-8243-aba84762edab", "sighting_of_ref": "indicator--5503841a-20be-44f5-a85d-aa99271243a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb8199c-820c-49c7-af81-4a348ebfdd95", "sighting_of_ref": "indicator--74bf1de0-2d8b-43e4-b418-ffbc6e786f23", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45928282-ea1a-4aa9-9204-61364d77247c", "sighting_of_ref": "indicator--74bf1de0-2d8b-43e4-b418-ffbc6e786f23", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d874f96-620d-4017-a27a-0675f972449f", "sighting_of_ref": "indicator--74bf1de0-2d8b-43e4-b418-ffbc6e786f23", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ce4408-0e29-44d9-823e-af542b384498", "sighting_of_ref": "indicator--e7655edb-baaa-4ba8-b435-21123f93868a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a16573-8a62-423f-98c0-1b9dec2e93bc", "sighting_of_ref": "indicator--e7655edb-baaa-4ba8-b435-21123f93868a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a925a75-29ba-4f59-89a5-9a460b262287", "sighting_of_ref": "indicator--0078877a-dd56-4296-aa2e-0bb174ae52d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ae1cc0-7ac8-4261-92fb-ca7108ea7d12", "sighting_of_ref": "indicator--75c3e77c-26a0-402d-857c-44cc60344b1e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e562776-49a7-49f7-ae57-bbfd7c43a853", "sighting_of_ref": "indicator--75c3e77c-26a0-402d-857c-44cc60344b1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f293b9b-2984-4d5a-8fe9-55a4f6b4ad40", "sighting_of_ref": "indicator--40bf6583-163c-4ae1-b7ec-87c37a6493f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2239c0-af38-4632-9bba-ee3ab4106f49", "sighting_of_ref": "indicator--0914fdab-61a5-4cc1-8791-f4966156e0c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34567494-9536-40de-b644-d6e80b17a151", "sighting_of_ref": "indicator--0914fdab-61a5-4cc1-8791-f4966156e0c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37370d61-aa40-4e0a-b31b-4ec939586f90", "sighting_of_ref": "indicator--0914fdab-61a5-4cc1-8791-f4966156e0c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db69e37a-e17c-48ca-b5f8-3450d963debe", "sighting_of_ref": "indicator--6beef74b-4678-452f-8341-26049d558e9e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4afe615b-ebf0-4ca6-a98f-453ba45daa8d", "sighting_of_ref": "indicator--a7477003-9e7f-4577-846e-0135fea2cc84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6836e551-be11-4529-93ed-37824a3691f0", "sighting_of_ref": "indicator--a7477003-9e7f-4577-846e-0135fea2cc84", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91140a0d-22d7-42a2-b833-13294b253711", "sighting_of_ref": "indicator--efe6ada2-4b92-451e-9482-a923ebac8165", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957f8f5a-ab47-4901-a14e-6dcf4063b013", "sighting_of_ref": "indicator--a195085f-d36a-4746-b8d1-b4aeb06e3961", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57878be9-a459-4e90-ae5b-ee5e287e5543", "sighting_of_ref": "indicator--a195085f-d36a-4746-b8d1-b4aeb06e3961", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be0955e-fa51-4c50-9e44-b608647f134b", "sighting_of_ref": "indicator--a195085f-d36a-4746-b8d1-b4aeb06e3961", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958fbeb7-546d-478d-94a7-bfe0c62937e0", "sighting_of_ref": "indicator--eef8cd2c-a409-46c2-9cc8-dd4ba7aeb1e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ee4407-1e5b-47d0-9d9e-a04f725ac5fe", "sighting_of_ref": "indicator--17fc5d16-aa42-42b5-ac64-729a2df6fc47", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31349556-200a-483a-b6ed-92b25ebf0dd2", "sighting_of_ref": "indicator--17fc5d16-aa42-42b5-ac64-729a2df6fc47", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f17265-75fa-47c8-a9ca-59682ed1b331", "sighting_of_ref": "indicator--88d05297-b06b-4fe8-b6e4-2bbc35a80061", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad2ff48-757d-4ebb-a481-2bd73d4d1bff", "sighting_of_ref": "indicator--88d05297-b06b-4fe8-b6e4-2bbc35a80061", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2faba6ab-b9f6-4ade-a04a-c999c8539d28", "sighting_of_ref": "indicator--88d05297-b06b-4fe8-b6e4-2bbc35a80061", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94256b14-63f1-4775-90e2-b59e36ead403", "sighting_of_ref": "indicator--14d38d22-91ee-414b-a4ef-f82507fb0cef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a872564-c764-48ae-88ca-42cdd96eed2b", "sighting_of_ref": "indicator--14d38d22-91ee-414b-a4ef-f82507fb0cef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8736ab74-1c10-4f94-98aa-31ee3b461b1d", "sighting_of_ref": "indicator--14d38d22-91ee-414b-a4ef-f82507fb0cef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499ebbf3-a437-46e6-95f9-0176f2ae40ba", "sighting_of_ref": "indicator--12f5c791-a927-41bf-afc6-88a97cad1b1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e8483e-6d5d-4ec8-bbcc-57f5f6224915", "sighting_of_ref": "indicator--12f5c791-a927-41bf-afc6-88a97cad1b1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa718caf-ff65-4a72-8bd1-e6ca6796593c", "sighting_of_ref": "indicator--12f5c791-a927-41bf-afc6-88a97cad1b1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5147ab43-d3bc-46c3-80ad-521f60a93b5c", "sighting_of_ref": "indicator--10fbed82-452e-4e1f-a3e8-7bd34a467f6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569d8963-2f11-4393-9efb-eddb04ba8152", "sighting_of_ref": "indicator--10fbed82-452e-4e1f-a3e8-7bd34a467f6c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2270afb0-be86-4cef-9599-e69d413f5d28", "sighting_of_ref": "indicator--631d23c4-3a16-43bc-8010-b7f61cf7116e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e91c399-e731-44d1-84e5-ba854f904f7c", "sighting_of_ref": "indicator--631d23c4-3a16-43bc-8010-b7f61cf7116e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3944be-dde4-4b57-a81b-7b3f26e6dec4", "sighting_of_ref": "indicator--5a34744f-d01e-414f-a3e8-b8038e7e6d9e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f10eef7-bf44-44b7-abe7-f1ee75231750", "sighting_of_ref": "indicator--5a34744f-d01e-414f-a3e8-b8038e7e6d9e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f23801-6a93-46f9-b5d5-ca278f85753e", "sighting_of_ref": "indicator--88cb6df5-d96c-41a6-a2a4-2d6db4ac7b3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba692cf4-42e5-4651-bba8-8442d15a4c56", "sighting_of_ref": "indicator--461dbd77-df2a-4c35-8c64-8bd9b2576b01", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4d6d9f-de69-4d2c-9fb1-c8030c47cee3", "sighting_of_ref": "indicator--52e63383-d0c8-4787-94cc-a098830b8206", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b75f48-143d-4300-a35c-1f478edd03ae", "sighting_of_ref": "indicator--52e63383-d0c8-4787-94cc-a098830b8206", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f749bad-f4ad-4282-827f-8a09a628b974", "sighting_of_ref": "indicator--d36e69de-8d81-44ff-a23e-d662a6ce51e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424fe77f-cc7c-417c-93c4-50ec0b76c059", "sighting_of_ref": "indicator--d36e69de-8d81-44ff-a23e-d662a6ce51e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc311da-03bb-4e83-96f1-d19d793bbcb4", "sighting_of_ref": "indicator--d36e69de-8d81-44ff-a23e-d662a6ce51e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65da1d71-6390-432d-8848-383f6de17353", "sighting_of_ref": "indicator--6758d9da-0165-42da-bd09-88a85fe02983", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863d0efc-405c-4eb9-86c6-e09e9230b9a5", "sighting_of_ref": "indicator--1fe980d4-389f-47d4-95c6-ab2e56ea352a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54a3bf1-a2fd-491b-af4f-c7b6a006c8d2", "sighting_of_ref": "indicator--1fe980d4-389f-47d4-95c6-ab2e56ea352a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311de982-c9b0-4673-a24d-0576a462c375", "sighting_of_ref": "indicator--5cf8e77a-1087-4c26-bfdc-bd4dbc38da27", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e6a85b-ecca-48fc-a581-937d8123bfd7", "sighting_of_ref": "indicator--5cf8e77a-1087-4c26-bfdc-bd4dbc38da27", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024e7d61-6fa1-4017-b05d-45a469637a3d", "sighting_of_ref": "indicator--794a5528-c3a6-4b4b-9436-e77356fa2411", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00137223-690a-4c8a-85a9-2af20c471d49", "sighting_of_ref": "indicator--3ffb3dc3-d07a-40d0-aaf3-4fb24cc5ede6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6318dcc6-cf8d-4f40-ab1a-2532236334b8", "sighting_of_ref": "indicator--3ffb3dc3-d07a-40d0-aaf3-4fb24cc5ede6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7776a48-0970-4e1d-a05c-f08a4dd75ed7", "sighting_of_ref": "indicator--05211324-2c81-4333-b148-aecf9602e1b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23621e15-045f-4cda-94ae-ded49fae1e60", "sighting_of_ref": "indicator--05211324-2c81-4333-b148-aecf9602e1b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3add42e7-98a6-4bff-a304-5806d388ab58", "sighting_of_ref": "indicator--74bebdf4-b09a-4a8c-a631-f3992af49683", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff52ab80-77e2-4f77-b768-bd6d2d3e9449", "sighting_of_ref": "indicator--74bebdf4-b09a-4a8c-a631-f3992af49683", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9218411a-bf09-41f5-9911-fd7e83cfdc8a", "sighting_of_ref": "indicator--74bebdf4-b09a-4a8c-a631-f3992af49683", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e03890-585d-414b-b530-bccf37ea3d73", "sighting_of_ref": "indicator--a22e365f-6028-4614-8b4a-b5fd407eaebe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157f9ef1-85c6-4891-8f8b-34c3c1047e45", "sighting_of_ref": "indicator--a22e365f-6028-4614-8b4a-b5fd407eaebe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559b7b1b-0538-42bc-afd2-ee33b2ef67ce", "sighting_of_ref": "indicator--bcf03a8b-4c90-4919-8c59-50b8054b57ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c454ad-6b07-48be-9810-a164b6f25e61", "sighting_of_ref": "indicator--9d5f048a-6e5c-4de9-a5bf-b919a1f58cea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987e745d-8f75-48d6-961b-069de2e90702", "sighting_of_ref": "indicator--ffd787c2-1f55-4d79-9d77-44ea84ce0e22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625ce3b9-50cd-476a-8d11-d95514c44bf3", "sighting_of_ref": "indicator--f0fdb595-4742-4a89-8b0d-6d05ef980932", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b65a8b-63c8-49e6-9160-c0f375243895", "sighting_of_ref": "indicator--4f255913-42a0-4ab1-b1b6-c24e3849a3e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f6b381-a1d2-43b3-b7d8-10973ebd70e2", "sighting_of_ref": "indicator--80ccc54d-d1cb-4dff-8964-3d369e058557", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8999b3-32cf-4114-ad09-ffc9d14679e9", "sighting_of_ref": "indicator--b50ccd26-b5bf-4509-a019-6a29ebfdd1a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9b2a01-a16a-4865-a703-a771bc4bfca4", "sighting_of_ref": "indicator--e3e84fb9-3e75-4659-9ef1-5584042e21bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f56e893-9d06-41b1-8b3f-07558499cefd", "sighting_of_ref": "indicator--1d4448ba-05c6-490d-a100-4ab1b2596788", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e987d4d5-1926-4020-af9e-f3eca6002266", "sighting_of_ref": "indicator--4e347aec-08d0-4b89-a3d0-666b31dba594", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c0dd17-32be-4293-b61a-b80da3126e22", "sighting_of_ref": "indicator--4e347aec-08d0-4b89-a3d0-666b31dba594", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6767d8a-895c-4469-b8d7-c54134a86f85", "sighting_of_ref": "indicator--1efe1ef3-136d-4964-9ad4-c15a05a3ffb7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78939863-7404-4c4a-a25d-774d586f67d7", "sighting_of_ref": "indicator--1efe1ef3-136d-4964-9ad4-c15a05a3ffb7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae590933-2cde-4fba-b49e-ae7a571ca2ad", "sighting_of_ref": "indicator--b43c40aa-8cdf-40f7-8a25-e78ba93d81fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d345567-41b3-496d-b056-4814b02e4271", "sighting_of_ref": "indicator--42ab1116-2b3c-493a-9e69-15b6da90f481", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494e18ad-4867-49be-ba31-cb83144c3c81", "sighting_of_ref": "indicator--42ab1116-2b3c-493a-9e69-15b6da90f481", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939bb382-d401-4011-95e9-b4c75eaf1b0a", "sighting_of_ref": "indicator--d57ca51e-0bb1-4685-beed-9f75e273ec19", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a4bcfd-998f-4c45-a0d9-afe53b09648e", "sighting_of_ref": "indicator--d57ca51e-0bb1-4685-beed-9f75e273ec19", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bf738e-a9b3-413e-9dc1-8eb28a7f7a1f", "sighting_of_ref": "indicator--029881f8-ca49-4efd-a87c-5ee3d462c0a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57537966-501c-4f76-b20c-ccf73f153814", "sighting_of_ref": "indicator--029881f8-ca49-4efd-a87c-5ee3d462c0a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480c2a7b-2c55-4715-982f-01466cbe8157", "sighting_of_ref": "indicator--28fd6ff8-87f0-46b1-ac54-e07ea5e908b0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002726df-0b23-47b3-abc4-d58621384b40", "sighting_of_ref": "indicator--28fd6ff8-87f0-46b1-ac54-e07ea5e908b0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0cec8d-68a8-4801-84ce-ba80892000e7", "sighting_of_ref": "indicator--b8419cea-fabf-41e6-93dd-ae25c2f1b993", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a4036e-b6a8-4bac-b37f-b597c8962301", "sighting_of_ref": "indicator--b8419cea-fabf-41e6-93dd-ae25c2f1b993", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c370ce-b14b-4c07-9ab2-627272cbde51", "sighting_of_ref": "indicator--b8419cea-fabf-41e6-93dd-ae25c2f1b993", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7441657d-2017-4313-b148-856ebcbe7de5", "sighting_of_ref": "indicator--b1ef8676-d320-4d99-9755-074720ea510d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17acf5e4-995a-4a7e-a7c5-22b699446c56", "sighting_of_ref": "indicator--b1ef8676-d320-4d99-9755-074720ea510d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd277f69-36b3-46bc-87a3-749dea9644e8", "sighting_of_ref": "indicator--b1ef8676-d320-4d99-9755-074720ea510d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0fa354-1029-442b-bdf1-2bd2da6201f3", "sighting_of_ref": "indicator--f8e9b77f-4d71-4154-8d9a-cf20159e89c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3924f905-b290-4577-876a-93a8694cacb4", "sighting_of_ref": "indicator--f8e9b77f-4d71-4154-8d9a-cf20159e89c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dff78a8-dda4-4ef0-9b37-4db8c0d355c3", "sighting_of_ref": "indicator--cb1834c1-8f09-466f-aa55-935acb379d6d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6da9081-bae2-417f-a9dd-45106d099c79", "sighting_of_ref": "indicator--783c0195-35b1-4d7c-ac6d-a17b32ebb284", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bbdddb-94de-4c72-92b2-e4d3b9e5af21", "sighting_of_ref": "indicator--2b599fc3-95de-4c09-a549-bf5f663b06e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c0f5d7-afdc-4cd0-ad14-3f2107873b6b", "sighting_of_ref": "indicator--5a3a72d2-c72e-4861-a26f-cdd222c319ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d479cd9-e6b8-4575-9568-4f608853f285", "sighting_of_ref": "indicator--4517fa5c-a0b9-4c3b-b178-4f5ef5bfbac1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4595528-8b8c-4833-a752-e56e72e962bc", "sighting_of_ref": "indicator--4517fa5c-a0b9-4c3b-b178-4f5ef5bfbac1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4e0773-2bcf-44cd-80c3-66f7b8dcc862", "sighting_of_ref": "indicator--4517fa5c-a0b9-4c3b-b178-4f5ef5bfbac1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046ab05f-8d85-443e-9099-424a5245f979", "sighting_of_ref": "indicator--b8b18139-fdbd-4dde-9de6-244b2ddbd72c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84117571-2763-4bda-a30c-159efa748902", "sighting_of_ref": "indicator--b8b18139-fdbd-4dde-9de6-244b2ddbd72c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922f6a46-2b96-4a39-9218-685be71ff514", "sighting_of_ref": "indicator--b8b18139-fdbd-4dde-9de6-244b2ddbd72c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0809e992-e724-4233-bd0b-25c15748c337", "sighting_of_ref": "indicator--307f928a-0089-4bf2-a6d2-ba7e0a4a720f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51592f4a-6c9e-47bb-962b-5eeecbea550e", "sighting_of_ref": "indicator--d3df25ab-5505-4dd5-a5c3-339ab62319c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2df0117-19de-4ecb-9495-0cc70d559a75", "sighting_of_ref": "indicator--b4573e88-b233-478e-af58-10f03b4007c5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dec8d2-6ed1-4747-a669-bfc70ba64e7c", "sighting_of_ref": "indicator--e241b97d-f6f1-4206-88a4-f6c6ae5e1e5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8d79e6-d132-44c5-8c25-5309cdffe4c7", "sighting_of_ref": "indicator--1b9e3b51-2732-4e12-9334-ed2d3360f868", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38287518-a997-4d87-baf2-5006ecee3402", "sighting_of_ref": "indicator--1b9e3b51-2732-4e12-9334-ed2d3360f868", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeff0e94-b16c-4e27-84e2-5853a022938b", "sighting_of_ref": "indicator--4493a6cd-f5c7-4820-85fc-00501d0299c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c27105f-938c-45ae-b384-20bdaebeb1e5", "sighting_of_ref": "indicator--7be472f5-b70c-4ae7-bead-2e9f6a0593ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aacf1f1-4250-4efd-a800-5b252ff32134", "sighting_of_ref": "indicator--6c49726b-cc46-4533-96af-c1b0db99dd15", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cbff4d-d70c-4b8c-beed-fd2ac9c7549b", "sighting_of_ref": "indicator--3da43478-37d9-4afd-b75f-bd3c7f0daf74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfda0bf-f1c1-4787-9281-cc5664cf39fb", "sighting_of_ref": "indicator--fcaee98e-b3eb-4be1-91c6-6392664db55c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11650cd3-7e6b-4c2f-ab25-71cc02fe4ed8", "sighting_of_ref": "indicator--6089c9a1-212f-41ca-9a74-308604674076", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7aad25-8474-45f4-89ff-db5d1518d6d2", "sighting_of_ref": "indicator--9c54418b-1962-4200-b9a0-8594ce5375a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f28a3f5-13f6-4ee6-ada4-cd6f664c96c7", "sighting_of_ref": "indicator--12c7f7d7-b8c7-44f1-a956-da9f0ed95f18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69236c8d-5196-4673-8e6f-f2d75d1c4252", "sighting_of_ref": "indicator--452e55f6-8b4d-4bb7-acd9-486840f5a13f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa631e34-f150-41b5-b5c6-bb06b0026a2d", "sighting_of_ref": "indicator--b042e901-f36b-4ea6-b591-4df40acaed9c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9834bd2b-6597-4a65-8b42-22d531f3c27a", "sighting_of_ref": "indicator--7d1ed98e-85c3-4c00-979b-17acaff6aa0a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f2de5c-0179-4ba9-b3cd-7728e02e3a57", "sighting_of_ref": "indicator--77b045dd-8b91-42e1-a7f0-b8a4be0c1ce9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d8bc09-b91c-4e89-8450-1aafa2336a2f", "sighting_of_ref": "indicator--c83d56df-b355-4b4f-b1d6-4a2eaa369032", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9e5f3a-bc04-462a-a94a-d8200322ffd8", "sighting_of_ref": "indicator--056c7b6d-9876-4543-b540-ca49e3cf03da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f062f6c8-de3e-4530-8d97-3a12efa37eb1", "sighting_of_ref": "indicator--c878643b-6996-4278-a848-c0f0c1746b02", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee15804f-636d-4d19-a498-9e5ebc0e2136", "sighting_of_ref": "indicator--c52f86bb-7d67-4996-89db-3740cfce17e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1ef03f-1313-4d44-bf2d-5ca1884ea7a5", "sighting_of_ref": "indicator--c52f86bb-7d67-4996-89db-3740cfce17e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20055649-afb4-43d3-bfc6-ea4cfdce8285", "sighting_of_ref": "indicator--c52f86bb-7d67-4996-89db-3740cfce17e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7775d811-9ad1-4798-a3e8-6de9a6c1941a", "sighting_of_ref": "indicator--022ea75f-287d-49ce-ac27-d49e889510fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82ed35a-b00d-4feb-bcc6-73945b548bab", "sighting_of_ref": "indicator--c2763d0c-0c12-43ce-8323-ec5e16814bd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4a9293-8163-4f23-9a64-d400c8f5f957", "sighting_of_ref": "indicator--8fdcd0a9-046b-4245-a015-e42dc80614d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0eef37-eadb-44c1-ad7b-9cc97e608883", "sighting_of_ref": "indicator--4425ed95-b367-45f2-838a-a92d3b632b80", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87ad573-bcd9-40ef-9af1-a70910cec52f", "sighting_of_ref": "indicator--55e873f4-3281-4b88-bb71-dba3ef383c45", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c57e4bf-e277-4396-9783-83781755ca45", "sighting_of_ref": "indicator--09ee69fa-502f-48da-bf6a-3c62695ff17e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47834ea-d56c-43b5-b6de-8df9db3abc8d", "sighting_of_ref": "indicator--8da0c9d1-0231-49e6-9bce-379bdf3ec368", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c3556d-6d84-4105-bb20-2c60b23de3bb", "sighting_of_ref": "indicator--d9d5ccaf-02cd-454f-9100-0f54e0926f5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc65b187-5cb9-409a-a0fd-cf9425c3d497", "sighting_of_ref": "indicator--b64c0f09-e4c2-4fac-9649-ac8702c178f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae52576-5d0d-404c-9c27-feb54e42d463", "sighting_of_ref": "indicator--b64c0f09-e4c2-4fac-9649-ac8702c178f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e28f42c-8ccf-4a33-9624-7d18047185ff", "sighting_of_ref": "indicator--a8de2a47-ec1d-4f50-b0d2-193648d0e04b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0281029b-c869-4a8f-a24c-f591a791abcd", "sighting_of_ref": "indicator--a8de2a47-ec1d-4f50-b0d2-193648d0e04b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132fa5fb-c2ef-4810-aaf7-5bff4332f10e", "sighting_of_ref": "indicator--eeaba3e8-346c-4325-a020-fe263e7d5843", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894a6cb3-e89d-437c-9df0-abef9ceba63f", "sighting_of_ref": "indicator--bbb38494-45fb-41b1-91b4-545d540fdb50", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c174124-7849-4b29-8ad4-25355c84e91a", "sighting_of_ref": "indicator--f8088419-84ee-41ea-8674-b374bff0502b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb52625-8453-4631-87e9-2942a8db8d26", "sighting_of_ref": "indicator--ff7a6025-91e2-4dad-9327-37135cc02e7e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f05215-fd37-4ff2-83b7-43840760bb22", "sighting_of_ref": "indicator--af219fcd-4695-4087-9bae-a670c12f9156", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2958b6-35e1-4531-9c13-22bad8996919", "sighting_of_ref": "indicator--80e5ad4b-de8d-48ed-acba-f29f34a72670", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9128ccf-0fcf-440f-b6ba-f9de95a221ab", "sighting_of_ref": "indicator--0bd06d12-d157-4dfe-ace9-da9d7578a890", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ce0a20-4c91-480d-8d3a-84c8dcf08ca3", "sighting_of_ref": "indicator--03a900d4-7cb9-42bf-ade6-7e8fd3cac642", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541db14a-ad7e-4050-910e-2623f0271e3f", "sighting_of_ref": "indicator--b00bbd8a-61e7-47ed-ba07-f9639cba1482", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8d2fa4-bdcf-4a88-8d80-bf7ef088b9c7", "sighting_of_ref": "indicator--74c4591c-ef6b-410a-a97a-f7920fd73d81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babdf73e-baee-468b-baf6-d6ad9faf5ad7", "sighting_of_ref": "indicator--2796963b-499d-4ca3-adbe-d0fe79372da0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2109da8d-f1fb-473d-b477-b438ad12318b", "sighting_of_ref": "indicator--b28e255c-a051-4649-ad1c-13fe9fb5b9ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d9dba3-a053-43b5-9f44-834ed9f961a7", "sighting_of_ref": "indicator--b0b0e871-1618-48d9-a609-aad33ae842a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aafe326-61f2-4d96-abfc-ca19147381cd", "sighting_of_ref": "indicator--654f465c-52cd-4ef6-b259-435643e22108", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ad9abf-ec39-4b05-8cf7-6173bb60574c", "sighting_of_ref": "indicator--1039ef67-56a7-4aef-b2c7-188b6b04917d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5348ac-62e8-4be9-b885-b303ba7bfdbc", "sighting_of_ref": "indicator--1a624bdc-25ff-4ad8-8c0c-80f4afb7bee2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea17ad19-6944-4664-bd52-c0f0c9d15623", "sighting_of_ref": "indicator--1a624bdc-25ff-4ad8-8c0c-80f4afb7bee2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4d49e2-d9bc-4c3f-a5d5-09344b7a9876", "sighting_of_ref": "indicator--45857c35-a0f6-40a2-925e-2d1207512460", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe51bab-6f96-4a14-819f-87f1d828c629", "sighting_of_ref": "indicator--0e7f99c3-e4c2-4020-9b2b-8fb04365dd08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0fd066-ba43-4f00-a73b-09953a400bfc", "sighting_of_ref": "indicator--b3a33d2b-af41-4853-91d8-2986481d43f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2e0b24-468c-4649-8b78-318c3faa1098", "sighting_of_ref": "indicator--d8906f48-2801-4bcd-be71-e27b7e92f2dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb6ec44-7f02-4d67-8238-2f563109725e", "sighting_of_ref": "indicator--70b94288-1454-486a-a1b8-0906be101132", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b09e42e-7fdd-41a4-9803-37503fbceda9", "sighting_of_ref": "indicator--70b94288-1454-486a-a1b8-0906be101132", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ef2104-d050-4cd6-9085-1770ede05588", "sighting_of_ref": "indicator--3654ce1b-7195-4fac-b8cc-520a9f347a5d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da70b9f-c4ce-42cf-bf69-40fb605474cf", "sighting_of_ref": "indicator--775d2535-2053-4bdf-8f73-b0bfb2bb9b39", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc99b9a-6832-44b6-a941-734f68fed008", "sighting_of_ref": "indicator--940518c8-051e-4456-a889-d9070af3fa3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e86645-4a1b-4ba6-a315-7ccbdd3830e7", "sighting_of_ref": "indicator--a1d0b420-3b74-4bcb-b1e4-5f06254edfec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69df1bc1-c5e8-44f6-a58e-aec3f7773789", "sighting_of_ref": "indicator--a2ccccb5-2db7-4c77-b138-305ef5d7bc28", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f9a982-cf5a-4ddb-9687-d8b184389d1f", "sighting_of_ref": "indicator--24f29e0f-a77b-4894-94b5-be9c9eaee334", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0093920-b628-4b08-b6e2-a8f336c80955", "sighting_of_ref": "indicator--24f29e0f-a77b-4894-94b5-be9c9eaee334", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd6bacd-1948-462d-8794-e971f58d7e71", "sighting_of_ref": "indicator--9c0121ac-08e1-4535-9a71-dad787cc32c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ce84b4-5fa7-4856-9979-0621d186cbd4", "sighting_of_ref": "indicator--d06d33ae-a549-433e-b739-e16356882ed2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a1cc4c-9fcc-4900-a118-b13346884d3d", "sighting_of_ref": "indicator--14b37b10-0481-4806-951d-775a77f35c70", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c65ce80-d8b4-466a-b11d-39af55b3c0c6", "sighting_of_ref": "indicator--fe28c58d-b6c0-4f28-9e5e-23f622fd9e8e", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accedb96-f449-4632-acfe-3a0623c04704", "sighting_of_ref": "indicator--6e2b3e13-1229-4621-a718-b898905fb3b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305c41ef-7645-4e67-8ca9-672a2d9ac47e", "sighting_of_ref": "indicator--5d462107-e352-4e79-945c-e792174d05ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12311b2-abb3-4916-8afb-452b5dcdb75a", "sighting_of_ref": "indicator--12e77300-4a98-414e-b5b1-7d54491f6599", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ebd01e-a002-4917-bcc8-37957b2b4711", "sighting_of_ref": "indicator--53d4c19e-c716-48dd-a8d0-6bb1ec157ebf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c03a52-cc73-49a0-8932-8fc333059323", "sighting_of_ref": "indicator--cc8f85d5-f43a-4796-aa05-8dfcd5f51397", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5f9664-9381-449c-9bb4-c2bf128b2469", "sighting_of_ref": "indicator--cc8f85d5-f43a-4796-aa05-8dfcd5f51397", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3c6ae8-3fab-4425-a582-78efe304601b", "sighting_of_ref": "indicator--cc8f85d5-f43a-4796-aa05-8dfcd5f51397", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9bd91f-11b3-496a-a836-02d9362f1ec7", "sighting_of_ref": "indicator--d3253609-ad88-4fd4-8a6a-6f585de8c6a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c385e9-3b33-4b6c-ad4e-498ea81511c0", "sighting_of_ref": "indicator--d3253609-ad88-4fd4-8a6a-6f585de8c6a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43f242d-03cc-478c-90b5-e3f3a7ff1c87", "sighting_of_ref": "indicator--667cd083-5a3f-4fa5-a54e-09b3781d9e52", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576f8778-e7cd-4b8c-b2a6-5d70b4bf355a", "sighting_of_ref": "indicator--705f661c-343e-4752-af06-18739700397a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1762d39a-ca0b-40ae-82d5-364988d17742", "sighting_of_ref": "indicator--705f661c-343e-4752-af06-18739700397a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83e8c75-f307-45e1-810b-23917389f300", "sighting_of_ref": "indicator--c2c423bc-0eac-4012-9293-9465be760393", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0186a420-0ec9-48a8-9fd9-99d61d7e43e5", "sighting_of_ref": "indicator--42d65699-34b6-46d2-9f77-5f36df12a9ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc35020-7c19-4f3e-9189-81f67df6a71d", "sighting_of_ref": "indicator--42d65699-34b6-46d2-9f77-5f36df12a9ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94918674-93a6-4b76-8a1a-d450591c6341", "sighting_of_ref": "indicator--502c4004-5a95-4f4d-b722-5e42284a709c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcec49ed-12c6-46c9-bd51-6b720a693f4f", "sighting_of_ref": "indicator--0157e47c-5fe1-48a4-ba90-88f1e2e12e3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294e99d8-b75a-4779-8be1-ba7b574a4415", "sighting_of_ref": "indicator--f12fecb5-1dc3-4d74-9f09-8f02b95316d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5272027-df12-439e-bf3c-c0cc7f052d5e", "sighting_of_ref": "indicator--e9883b92-8e40-4948-bd1d-4dbce7af61a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83738dcc-00f8-4d0a-96ac-227dc35cb03c", "sighting_of_ref": "indicator--014491ac-9d35-4acb-a9ca-9c0ef51cdc0d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca11618-6e70-4394-977f-71b9ea881021", "sighting_of_ref": "indicator--7beb7432-2dab-469f-adc1-99c1b663830d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d16fd9-8a01-46e7-b1f8-cb7925b4afcf", "sighting_of_ref": "indicator--6a5ad5cf-5bf3-4949-acfb-9d51612847bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920b79da-cbcd-49ff-bade-94f874deb727", "sighting_of_ref": "indicator--7535ceda-d173-462a-a716-f54cefc21ddd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95083e18-dab5-4c20-a10d-02fd5d0cc8fd", "sighting_of_ref": "indicator--28dcd7c6-a3c1-4b1e-a254-5e3a53ec5d14", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7e268c-fce5-4a9e-b48b-8edfa6daee94", "sighting_of_ref": "indicator--28dcd7c6-a3c1-4b1e-a254-5e3a53ec5d14", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadf418c-26c3-4005-99b4-bc1190606e63", "sighting_of_ref": "indicator--bdc31b3e-1cb4-4e5b-97ac-8df5af10ad6c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871ce35f-a34c-4fa1-8ef9-d059a3398979", "sighting_of_ref": "indicator--f943e000-ef25-495f-9c6b-fbb1ad0b6adb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48216b3-341c-42f4-9ca7-6ca41344c3c6", "sighting_of_ref": "indicator--d27c6a26-57a5-480e-89dd-e115b388755d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce74912-0465-4280-88f6-d64232c860ce", "sighting_of_ref": "indicator--17636bf2-c046-4999-9fdd-b0645291e379", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25beaedb-6b88-40f6-b266-f6820d8ed571", "sighting_of_ref": "indicator--9e513743-b9cd-4468-98ab-114022e12bf2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772eb985-101b-49a3-be4f-82c281a14cb3", "sighting_of_ref": "indicator--6bd45799-1725-4a47-ab8f-d62e2ce287bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cda43d-4219-4e80-958d-44a0a4b83e6a", "sighting_of_ref": "indicator--703e8e51-aa70-422f-82c1-5e95c5fbc6d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a333eb6-1127-41f0-835b-bb0cbb526cc6", "sighting_of_ref": "indicator--b644acdd-8e27-4263-9b42-b58eacd26f64", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814bd59e-2694-4205-a980-16027381b6ec", "sighting_of_ref": "indicator--56b27898-600d-4497-9b65-a6d9126d28db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a900ff-3e79-4777-9663-3ef110681ba0", "sighting_of_ref": "indicator--56b27898-600d-4497-9b65-a6d9126d28db", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085795bd-cd23-4609-bc10-1b03f468a7cb", "sighting_of_ref": "indicator--bd4472bf-a87c-45fa-bec7-3f7ece25a078", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d3e6ab-bb8c-4b6d-b03e-a9bab153b339", "sighting_of_ref": "indicator--843fb7e5-c46a-40ac-8f9d-a206fc03bcd1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf7b28f-9e3b-4c2b-b851-dda73f9e820d", "sighting_of_ref": "indicator--1526b77c-94e9-4d8a-a303-ae6edea55f48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfaf0865-aef8-4d92-838f-587e4fb940aa", "sighting_of_ref": "indicator--c8a23156-9e66-4627-ad77-9cbe9907ff05", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5233a68-04ff-4b60-9b81-24adafe4d9cc", "sighting_of_ref": "indicator--c8a23156-9e66-4627-ad77-9cbe9907ff05", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3807aca8-016b-4e81-8bcc-19a935bca703", "sighting_of_ref": "indicator--c8a23156-9e66-4627-ad77-9cbe9907ff05", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb40f976-be27-4eac-a8e1-e9ff52517235", "sighting_of_ref": "indicator--c56db013-1a5a-42fb-b2ae-39db4d521bd0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622d4f25-f5bf-47b1-a7d6-78789f47025d", "sighting_of_ref": "indicator--c56db013-1a5a-42fb-b2ae-39db4d521bd0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25caca98-f2f8-4d54-a0e9-36b926d96580", "sighting_of_ref": "indicator--c56db013-1a5a-42fb-b2ae-39db4d521bd0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7802ee97-915d-4589-bef8-793e79497062", "sighting_of_ref": "indicator--b4371bb7-415c-4d0c-b6f4-22906947df1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abae181-fae4-408c-a94c-15953a40660a", "sighting_of_ref": "indicator--b4371bb7-415c-4d0c-b6f4-22906947df1c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656fa133-647c-41c0-aee7-a5167dffb952", "sighting_of_ref": "indicator--af251c68-d8ba-46ce-b9d7-b254ad1f760d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75e13f4-dca5-4e10-8689-1f36f8776e8e", "sighting_of_ref": "indicator--af251c68-d8ba-46ce-b9d7-b254ad1f760d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daa16f4-00c0-4645-93d1-800ab5543446", "sighting_of_ref": "indicator--af251c68-d8ba-46ce-b9d7-b254ad1f760d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b914ac0-c43c-4595-8748-8507becf9c8c", "sighting_of_ref": "indicator--5aff122e-2bb9-4127-8a80-61b7af31bf4d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2e849d-6e95-4d55-9036-2379534ff9b1", "sighting_of_ref": "indicator--5aff122e-2bb9-4127-8a80-61b7af31bf4d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce342003-3791-45fe-bdff-14837392b240", "sighting_of_ref": "indicator--5aff122e-2bb9-4127-8a80-61b7af31bf4d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1781d99-9daf-4877-ac64-77bd94badfea", "sighting_of_ref": "indicator--516b1ce6-11ba-484a-a647-2d5ee07a9d04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8ede85-8a4a-4790-be75-4b29f9b2c035", "sighting_of_ref": "indicator--516b1ce6-11ba-484a-a647-2d5ee07a9d04", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6ecbf9-0f5c-4fad-93f1-a0a525a8a322", "sighting_of_ref": "indicator--d82ef9cf-e222-4f7b-a077-10f378f6641c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e42c2e5-ef13-4b77-9877-5022179ca0aa", "sighting_of_ref": "indicator--d82ef9cf-e222-4f7b-a077-10f378f6641c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9953bd0e-0134-46ce-89e0-a9f5f78f4169", "sighting_of_ref": "indicator--97a44570-906d-47a8-aea4-9bff6629e2b8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d134c8-9ed9-4b18-95bf-6c8ca2c4246c", "sighting_of_ref": "indicator--97a44570-906d-47a8-aea4-9bff6629e2b8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7d859d-af3c-4d8e-846d-55be0776646c", "sighting_of_ref": "indicator--97a44570-906d-47a8-aea4-9bff6629e2b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab8ff2e-bb13-44b8-8b5b-32af554ad7a0", "sighting_of_ref": "indicator--981f1a56-e238-43a1-9901-1664a1dbf194", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d73210-0ecb-47ac-a1c2-3c1b196ff09e", "sighting_of_ref": "indicator--f0576c46-211e-4741-a03f-27ed9431e084", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66c9d14-b0e7-4266-8180-efe9c75a8b7f", "sighting_of_ref": "indicator--4848d06b-bfa9-4dd2-b37a-6a4d058d8e67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155ca9a0-61b3-492c-91b7-4001fe203b78", "sighting_of_ref": "indicator--81c66f11-8da7-4d5c-9873-f42ba4c434d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa69835-69c4-4fd3-8d4c-73fc4a3d818b", "sighting_of_ref": "indicator--74ebf62e-e0ca-4eed-978e-8a3c95b5e2d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5f5ecb-4706-4c64-b231-d829eb222c57", "sighting_of_ref": "indicator--f4b52268-aa52-4710-b2cc-d7bab45422c3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b686397-0484-417a-a51e-e6f73891880c", "sighting_of_ref": "indicator--e53a27c0-9371-445c-b0f5-55eaa065edd3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850fbb16-2f4c-4c25-aa19-92a5988bdd70", "sighting_of_ref": "indicator--aa4f0f39-d1f5-4b2b-820e-e627e189942b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0771a7a1-1455-4c51-b60c-80e8e8096b30", "sighting_of_ref": "indicator--aa4f0f39-d1f5-4b2b-820e-e627e189942b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f133045c-206b-4c58-add7-883f4ff00a70", "sighting_of_ref": "indicator--01070ac0-5cda-44e7-8b2e-c80e3144d415", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7868f0-27eb-4991-ac17-a2151719a016", "sighting_of_ref": "indicator--5bbbddc5-6f63-4974-bf70-62e0210034eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdab4d6b-e78d-4483-848f-5f3252e30117", "sighting_of_ref": "indicator--04135777-0a04-41fb-81f8-0f3c92e0b096", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca7114f-d4a4-4374-aa55-44aa7b56239d", "sighting_of_ref": "indicator--04135777-0a04-41fb-81f8-0f3c92e0b096", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3200e3b5-ab75-4305-aab5-2d289d471858", "sighting_of_ref": "indicator--96dc5c15-86a3-497d-a06c-c66d5a24c696", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b2d56a-9cc3-4b24-ae8e-54a73fa8c918", "sighting_of_ref": "indicator--96dc5c15-86a3-497d-a06c-c66d5a24c696", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f81075-d750-43db-904e-c56f569c1afa", "sighting_of_ref": "indicator--75b861e2-f63f-45c8-a1d1-2d6eb1dcf6a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896c65bd-f47f-4176-962a-a2aebe54e270", "sighting_of_ref": "indicator--75b861e2-f63f-45c8-a1d1-2d6eb1dcf6a2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27f9679-3951-44a8-b748-fb7b5f6e772a", "sighting_of_ref": "indicator--75b861e2-f63f-45c8-a1d1-2d6eb1dcf6a2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665d03e6-a16f-4fb9-942b-74b80c559ba2", "sighting_of_ref": "indicator--9fc5f246-482b-4c0b-b87b-d0ca03ba90e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29f4645-2ee6-4dbc-a863-aea29b4c2df8", "sighting_of_ref": "indicator--45684a05-b2b2-43d8-9aa0-e5aa0ce7e212", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c974f49e-f797-4fd0-9140-d4404e02d6e6", "sighting_of_ref": "indicator--bd28dd3b-421a-41ee-a265-c4cdaa7a8a0d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643773ef-4a30-449f-913f-e7671b074a6b", "sighting_of_ref": "indicator--5fd09832-c816-4f6d-a65f-d053010a5d97", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d4726a-3909-4e34-b1f9-db602bc240b5", "sighting_of_ref": "indicator--5fd09832-c816-4f6d-a65f-d053010a5d97", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c9626d-5038-40ae-8adf-f9f375886289", "sighting_of_ref": "indicator--5fd09832-c816-4f6d-a65f-d053010a5d97", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a836ba81-a90b-4c04-8351-489e6dfc6448", "sighting_of_ref": "indicator--b06d637f-ea0c-4880-8f16-bf314b9e0ce3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50418b99-9585-4a62-afaa-d75028dad1ff", "sighting_of_ref": "indicator--b06d637f-ea0c-4880-8f16-bf314b9e0ce3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e559db-ea2f-475f-b424-e22b27d0ca59", "sighting_of_ref": "indicator--f24997b8-2b15-4188-a4bd-33b5f418180b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9f1451-4629-46a4-b48c-b42e7bc69ec8", "sighting_of_ref": "indicator--f24997b8-2b15-4188-a4bd-33b5f418180b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed2039a-e2a7-4947-8580-2d7138802d54", "sighting_of_ref": "indicator--632ccf23-a8f2-4452-bd1f-1cf2d1da39eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8155dae5-0431-4d36-9400-55e6248d6a6b", "sighting_of_ref": "indicator--6ede826b-25d7-47c6-af85-b5a05e5f1c56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983f2fd8-04f4-42c9-a86a-8f80922c7865", "sighting_of_ref": "indicator--7656a9fb-3bea-4205-8b60-8280579ed705", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ac289c-7bee-46e3-8c76-c04eaf824e2a", "sighting_of_ref": "indicator--9d0d441f-89a3-4660-855e-0074fa975fc8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d271cc3a-7982-47cc-9595-b9f3bfbe470f", "sighting_of_ref": "indicator--5d082058-43a0-4d37-822e-93121291dd95", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9ad493-b91f-4661-80de-604e474b4c4d", "sighting_of_ref": "indicator--ef8a19a4-1654-40b8-83c8-f106aaeac562", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9a9b9d-4222-4265-a1db-22224fdae153", "sighting_of_ref": "indicator--f0716343-5d41-4875-a7ca-d8fb7b6c9590", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567cfe05-ae4b-4dca-817b-ccb08cd9295f", "sighting_of_ref": "indicator--f0716343-5d41-4875-a7ca-d8fb7b6c9590", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d93d0c6-c22d-4842-9ce8-12cce317b4d4", "sighting_of_ref": "indicator--f0716343-5d41-4875-a7ca-d8fb7b6c9590", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0493a2-65e2-4430-aef0-949836eef3b2", "sighting_of_ref": "indicator--93f62453-c36e-4c24-b778-0d0ef7785f2a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891f2e4f-65e6-4352-8fa3-bd3739b5c5cc", "sighting_of_ref": "indicator--c3af3b7d-65d5-48ab-96de-e6d38b153f24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f9ceb1-2c8e-4689-ba90-dcc93083d2ba", "sighting_of_ref": "indicator--19635a61-837b-4763-8ac3-ceecdf0e46f6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed405d8c-63ca-4a35-97a3-7e33d788872b", "sighting_of_ref": "indicator--b38c8f17-3d21-414d-91e1-13cb762708e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e902f964-dd35-4cca-b629-13225cb3c0de", "sighting_of_ref": "indicator--5078b0f0-f4a6-4889-9e1d-d3c9898eec9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a7d91-ee7e-49d0-bf88-1c5b7f505847", "sighting_of_ref": "indicator--bed17823-f1a6-4e6d-8c55-3aa5e7a9de89", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aee51de-83e3-47d3-b4da-a8d8def28845", "sighting_of_ref": "indicator--bed17823-f1a6-4e6d-8c55-3aa5e7a9de89", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52331ba9-5434-43af-b2b2-60f12f27b2c0", "sighting_of_ref": "indicator--bed17823-f1a6-4e6d-8c55-3aa5e7a9de89", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dabf59-4890-4af1-9db2-480a7be049e2", "sighting_of_ref": "indicator--f881a94f-9b63-44c0-9e3e-6582fbd86a13", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd66c09f-aba4-42ea-8632-6271a3fff196", "sighting_of_ref": "indicator--6cfc1b38-f93b-443c-9d21-c4ee8fcb0aa8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75a3524-01ed-45e8-8e86-ff304eeed6e4", "sighting_of_ref": "indicator--12734d8e-3140-4cee-97fb-3fbb90c2454b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccbd3c1-6849-47c6-9ef2-829c82e10479", "sighting_of_ref": "indicator--12734d8e-3140-4cee-97fb-3fbb90c2454b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e2f099-099f-4757-ad88-1ec04325180e", "sighting_of_ref": "indicator--f3310665-89e0-4593-9cb7-11fee7397d85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730805a1-fbb9-4a48-be9f-fdfe1b1e3f23", "sighting_of_ref": "indicator--72f75b42-6f29-4e9b-9128-4ed49f22d5a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8f8cdf-d2ab-4879-a316-b74b5c011aa7", "sighting_of_ref": "indicator--350268d3-64d6-4853-a07d-3f1114405347", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9870321-3e4e-4de2-98c3-58d3cac892e7", "sighting_of_ref": "indicator--98cdc5da-6e04-4cb0-bcb0-ae514bcddc25", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c40860-c20c-4a46-812f-2dd9a1480ef7", "sighting_of_ref": "indicator--36b1e4bc-54aa-4676-a35d-e235e02bd388", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90935b4f-fcaf-4744-9625-613d93d7d67b", "sighting_of_ref": "indicator--8cad302d-e474-4db4-97a6-9ab5711e1efb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59627491-2e42-44dd-8c00-403017b689a8", "sighting_of_ref": "indicator--c71c39a2-ede7-4499-9ca3-bbc1ce79b2ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06725e27-c2a3-4159-8f28-77ecc449512e", "sighting_of_ref": "indicator--869718d3-dc8c-42be-b1c9-3083632a312b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a0f6bb-beba-4afc-ba9e-ddab0e9a30bc", "sighting_of_ref": "indicator--9fc97b4c-ac00-4327-89ce-4060495602a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b26759-59c2-430a-a56f-1a88fed00f0a", "sighting_of_ref": "indicator--34fc5fd8-a422-44d7-bc23-ff999e8739c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f61a0b-393c-44be-9506-40bd6a6ea89b", "sighting_of_ref": "indicator--34fc5fd8-a422-44d7-bc23-ff999e8739c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d99eae-fd5b-4299-bcbd-641accfc9e7e", "sighting_of_ref": "indicator--34fc5fd8-a422-44d7-bc23-ff999e8739c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35477af-1dea-4cb6-b336-b275b4b6cbb9", "sighting_of_ref": "indicator--d306a8e7-21c2-4e4c-ae71-ea3c894e11a0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb838571-18f1-4346-87c9-718ad237b055", "sighting_of_ref": "indicator--510d870f-8fe2-492a-88f6-87cd7ecf33ef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87339647-d89f-4763-9a8d-70404eb2d475", "sighting_of_ref": "indicator--8b532ea7-1ea0-42c3-b2a9-f5c1bcf3304a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef3f97e-b3f4-40ac-b442-e3c4311fece3", "sighting_of_ref": "indicator--8b532ea7-1ea0-42c3-b2a9-f5c1bcf3304a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d8b868-22ea-433e-9f18-d9a117d9cf77", "sighting_of_ref": "indicator--5f7ba4fc-20cd-4eca-ad00-e796f75b611c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a796e1a4-0905-4872-89cc-65f0b5d0a364", "sighting_of_ref": "indicator--003428fb-5378-4293-bbde-6b5a9acffbcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcedf4bd-4ba2-49c8-a6a0-11eef987969b", "sighting_of_ref": "indicator--003428fb-5378-4293-bbde-6b5a9acffbcd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752206ec-981a-4a1a-b4fc-ccc09747cfee", "sighting_of_ref": "indicator--57bd8e0d-1e7d-408a-b416-bb1f51f0ff3d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cce78c5-8d6a-4745-9626-f4c8be550edd", "sighting_of_ref": "indicator--22164fe6-3e5f-4838-bc28-e04dd48a85f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeda67a-9108-4690-9b7f-3212e2668df0", "sighting_of_ref": "indicator--e34df9b0-b0ea-4151-8657-588c9872d916", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a050784-2417-4187-9e1e-3afeb66fdaf2", "sighting_of_ref": "indicator--807f1223-6223-437f-985f-32d588f57271", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8764a91-6240-4de7-9dbd-9b24e135a261", "sighting_of_ref": "indicator--807f1223-6223-437f-985f-32d588f57271", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb33a92-7443-4887-9f37-486051f9f144", "sighting_of_ref": "indicator--c84851d3-5fa7-4f54-a5ed-9f7c3d0ebe56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bff9be-710e-4a84-9866-2f43cdaf6ef9", "sighting_of_ref": "indicator--bac85bc0-5ef9-40bc-8348-05f648e41ba9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c36aa4-5514-46eb-8634-5afbc2370fd1", "sighting_of_ref": "indicator--bac85bc0-5ef9-40bc-8348-05f648e41ba9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24be122d-c167-44c3-967b-49715aadd28b", "sighting_of_ref": "indicator--1f0387d6-536c-48c1-b631-34d73c9c4672", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e495022-fdf3-4b97-9895-9bbdcf431c16", "sighting_of_ref": "indicator--dbab5b19-83a0-44ea-bd6b-7d313ac18158", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81ac716-8088-46ef-8f51-7b67b7996dd2", "sighting_of_ref": "indicator--6967ab2b-4d71-41d9-b914-d1a1bb6d1eaf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d263a1-4f91-42ef-80ae-4baf693b40b0", "sighting_of_ref": "indicator--bf77ebbf-9b23-4ce5-9027-5214ff53c410", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8098a809-20c5-4cd0-a134-1dd8b05532cb", "sighting_of_ref": "indicator--bf77ebbf-9b23-4ce5-9027-5214ff53c410", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672926cc-edf4-4537-bb9e-ea0c7ff87bff", "sighting_of_ref": "indicator--bf77ebbf-9b23-4ce5-9027-5214ff53c410", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ff2642-4e21-4adb-bc5b-c60be9f34649", "sighting_of_ref": "indicator--f2f2646d-69f9-4ffd-9fc0-892dde638c19", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a56cca-06cc-4c0f-a1c2-8cdbae328566", "sighting_of_ref": "indicator--f2f2646d-69f9-4ffd-9fc0-892dde638c19", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d82cf-e431-4775-bfef-20b9b435dd15", "sighting_of_ref": "indicator--f2f2646d-69f9-4ffd-9fc0-892dde638c19", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c491421-9fb7-4a11-a0df-ec66fa301494", "sighting_of_ref": "indicator--bb05a01a-148e-4d70-b477-aceb83182aee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ee7923-88b7-4c57-9dab-7c171f29fd0b", "sighting_of_ref": "indicator--bb05a01a-148e-4d70-b477-aceb83182aee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bce86d-5c98-4766-83bd-f3c7db913af1", "sighting_of_ref": "indicator--45637765-061a-45ea-92d5-4694287ccb3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cead703-a070-49a5-95d0-4c03044c87f9", "sighting_of_ref": "indicator--45637765-061a-45ea-92d5-4694287ccb3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4feb9ff-c28d-4c93-8778-05f255607b47", "sighting_of_ref": "indicator--30852a7f-5824-41f5-bebf-38377ddb9512", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b396cbc-3fb4-4b52-9cd3-750bed1798cd", "sighting_of_ref": "indicator--5da64b37-faa5-4951-815c-c3245bd1bdbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e368445d-eac6-442b-b4ac-0e2fc384719d", "sighting_of_ref": "indicator--e9f96def-8305-4e8a-adf5-cb2232e40d19", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cabbd3f-bf02-45af-a092-494fc1595df6", "sighting_of_ref": "indicator--c4877222-a2a6-4832-96db-5976e9a14962", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32fc43cb-11e6-4bf9-90bb-615a6f0195a3", "sighting_of_ref": "indicator--9d2c237b-4b19-420c-889c-d223abc5dfc6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e730db24-fcee-4338-b577-0ff95969bf8d", "sighting_of_ref": "indicator--39a3da43-3518-429b-8bd5-886c6eb7efcd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c642abf-cb58-4b55-b50b-dc903153db25", "sighting_of_ref": "indicator--fee590ec-8f3e-4162-97f7-3d0d0ce8efef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08c563d-d861-4f7b-88f7-2fbd24cd0384", "sighting_of_ref": "indicator--428a57e7-c57e-46f8-a937-5a9ddeff09da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732674c8-a073-4a00-ac9e-6e723a741dba", "sighting_of_ref": "indicator--428a57e7-c57e-46f8-a937-5a9ddeff09da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb5332d-7c64-43be-9042-bfdf15c9ddf1", "sighting_of_ref": "indicator--a02493c4-55f7-4828-9474-b10b8dce4bcc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8d8104-9a68-4dc5-8c4b-4b0f2b6ce142", "sighting_of_ref": "indicator--a02493c4-55f7-4828-9474-b10b8dce4bcc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f21e32-2ede-4059-8ee0-17cfecc09eef", "sighting_of_ref": "indicator--a02493c4-55f7-4828-9474-b10b8dce4bcc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fceee92-4950-4f2e-b153-cf5e314fe3e8", "sighting_of_ref": "indicator--db57a841-46b8-41fe-9cd9-13ab5abad034", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ce174-8fc4-4da2-bfda-090aa6d0f467", "sighting_of_ref": "indicator--82920bf2-ae93-4d85-8b18-5dd82e3fe63b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f866636d-2b37-434d-a7ae-4925e05f8350", "sighting_of_ref": "indicator--82920bf2-ae93-4d85-8b18-5dd82e3fe63b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1028995e-8e23-4a47-ae2f-b2c244e17991", "sighting_of_ref": "indicator--82920bf2-ae93-4d85-8b18-5dd82e3fe63b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affbcc9a-a459-4523-9c25-2011a1f7f521", "sighting_of_ref": "indicator--be4328b1-a7ae-406b-b64c-fe8da9b60aa1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff40b38-469f-48d8-942f-f40b3641a834", "sighting_of_ref": "indicator--09d88deb-cc01-42e3-bdfe-c00424524510", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eea5b1f-adf3-4185-8557-e59a600803c6", "sighting_of_ref": "indicator--09d88deb-cc01-42e3-bdfe-c00424524510", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda4592b-2513-475e-997a-478769834eff", "sighting_of_ref": "indicator--3f6ee303-01b8-47f1-bf8d-bfed44c46969", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42acce0-8b9d-4948-852a-2eb32a1e5bd0", "sighting_of_ref": "indicator--3f6ee303-01b8-47f1-bf8d-bfed44c46969", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42444084-cebc-4e17-bdd1-a2f9630bd26d", "sighting_of_ref": "indicator--4c6c3fb4-f4da-4c99-ae07-44cb675050ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3fd8d1-8ac6-4755-82f9-cc253c43683b", "sighting_of_ref": "indicator--4c6c3fb4-f4da-4c99-ae07-44cb675050ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d409c1d4-0abe-4c4a-ab44-73ff4985f7e1", "sighting_of_ref": "indicator--6549f49e-2b27-4dc7-be27-88b052156964", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa37b8ed-9446-466e-9535-e4d30c3a12be", "sighting_of_ref": "indicator--6549f49e-2b27-4dc7-be27-88b052156964", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a3da9d-6371-4a39-95af-eaf701e941bd", "sighting_of_ref": "indicator--a83c83d1-1cc6-4f70-93dd-62a696ae0485", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bf85ec-b16a-44b7-b102-b3a24a35761b", "sighting_of_ref": "indicator--a83c83d1-1cc6-4f70-93dd-62a696ae0485", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae491b6b-57a5-4086-a5f5-5de71b1b2b45", "sighting_of_ref": "indicator--48cb42bc-50c6-446c-8da1-be7872857fdd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae167f1-16c6-4b1e-a1dd-b6d1e585fbe7", "sighting_of_ref": "indicator--48cb42bc-50c6-446c-8da1-be7872857fdd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d443a0eb-5953-42a7-be8d-a8bbfb9d8c6f", "sighting_of_ref": "indicator--afe65663-5eb2-4956-884e-5fa6cf9dfcbd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b88978-8c71-4300-8766-5dedd23274a5", "sighting_of_ref": "indicator--ca9a1c77-8484-4d9b-95f2-8717b6af0e22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8a72b9-9262-4ae3-9831-d5776778b850", "sighting_of_ref": "indicator--ca9a1c77-8484-4d9b-95f2-8717b6af0e22", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084597c4-64fa-41fd-8987-530a83a4045f", "sighting_of_ref": "indicator--faaca470-7677-4c5c-a36c-94c0a5aa0e36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a135e7-3968-4572-a5c8-33b0074c261a", "sighting_of_ref": "indicator--faaca470-7677-4c5c-a36c-94c0a5aa0e36", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0d7e42-d8ea-42c0-9214-b85bf3bde48f", "sighting_of_ref": "indicator--faaca470-7677-4c5c-a36c-94c0a5aa0e36", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ed94c4-8b09-4c3a-b7a2-bd1df4ac7ac7", "sighting_of_ref": "indicator--d4d1e240-40bc-42a2-9117-6d4eaf6008eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745b8d3b-bee0-4ea0-a69c-cd82633f94b6", "sighting_of_ref": "indicator--d837cfc3-ece2-4e67-80a2-b0fba98da393", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af185cd5-ea70-499f-a079-2a8eb08f47bd", "sighting_of_ref": "indicator--3dbd65cd-a9a5-418b-ab48-fd0daf096b1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a6d0ef-2852-4476-93c0-d52d7aedcc64", "sighting_of_ref": "indicator--ea1a4564-d97b-418a-a6e6-f1d9b06fdbea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce91472-4c6c-4696-9be5-07bce8e1d07f", "sighting_of_ref": "indicator--9d6bf8db-4655-47bc-93f3-fd63784b1f0f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98aa0d18-bfa0-4088-bae7-c6a1ffa0341e", "sighting_of_ref": "indicator--9d6bf8db-4655-47bc-93f3-fd63784b1f0f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527f116e-e401-4503-acb1-6ea012e39ccf", "sighting_of_ref": "indicator--554fcc93-7a1a-48b4-878a-0e5e66f4e696", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194119a5-b16a-406d-af85-53817999c4fb", "sighting_of_ref": "indicator--f3b93e2b-3c8c-41d9-88d5-e474b1d596a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90005e26-df25-4970-945e-83670c04584f", "sighting_of_ref": "indicator--16695da4-c4d3-43bc-849d-656cd19a3737", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4f8d3a-17d4-4252-9ea2-69a71805959f", "sighting_of_ref": "indicator--16695da4-c4d3-43bc-849d-656cd19a3737", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b395ef-a819-4350-b81f-4599d985585f", "sighting_of_ref": "indicator--16695da4-c4d3-43bc-849d-656cd19a3737", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3026af7d-052d-4941-9ff9-8bd94f2e660d", "sighting_of_ref": "indicator--a83fa1be-a6e6-443d-9897-ae5bc50cc5c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3101902f-b976-4bd0-974f-668149089573", "sighting_of_ref": "indicator--a83fa1be-a6e6-443d-9897-ae5bc50cc5c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca0e362-b0a6-4f09-812d-de71d1d8355d", "sighting_of_ref": "indicator--9c90dfc3-f4cb-49c0-a974-089963af5fe6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e167caae-814c-40d5-af46-e58facc564e6", "sighting_of_ref": "indicator--9c90dfc3-f4cb-49c0-a974-089963af5fe6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c853a2-3999-4bd3-b8d8-a2ac83766e1a", "sighting_of_ref": "indicator--269d88fc-8ef3-4d33-9eb5-2ac6d08477a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bdaa33-6b52-476b-94a9-78a70ab5704c", "sighting_of_ref": "indicator--269d88fc-8ef3-4d33-9eb5-2ac6d08477a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b1fd79-d785-43e8-af6d-c40268d4218a", "sighting_of_ref": "indicator--5dc85cf8-a5b9-4619-8305-b0d6d83f7035", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd651ff-6fc1-4c08-bb52-9291f1099c1d", "sighting_of_ref": "indicator--5dc85cf8-a5b9-4619-8305-b0d6d83f7035", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277168c4-e931-4f0a-a9fe-4c96cfa09e40", "sighting_of_ref": "indicator--d1f99648-8524-48a1-b4ec-354b17bdaa40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc8d44c-b607-4c28-be41-3c82efb9e1e4", "sighting_of_ref": "indicator--430b4c98-12f3-4b76-8808-f876d715a511", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a97b36-31ff-418f-a882-2ece7f792224", "sighting_of_ref": "indicator--e24cf5a0-67db-4f3b-946c-b1c8de9d3e55", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d3e6fc-b483-42e4-890f-2aec71e40573", "sighting_of_ref": "indicator--6e0a1c16-2176-401e-a867-a41b78ffceba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5861efe2-9104-42b4-aced-f85c4509efbe", "sighting_of_ref": "indicator--ec5ef755-a23f-44b6-a886-52f0b937e873", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c39bfa-b515-4ec8-ac58-c2039600cea2", "sighting_of_ref": "indicator--ec5ef755-a23f-44b6-a886-52f0b937e873", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f977da5b-246d-4db3-a60b-0d8bb68cf041", "sighting_of_ref": "indicator--ec5ef755-a23f-44b6-a886-52f0b937e873", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d3b05f-7756-44e4-8bbe-1cf544f432b8", "sighting_of_ref": "indicator--219754a3-70ab-48b2-bfbb-496a6bff4d17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9781ea0e-d163-4321-ba40-2dd04965c0d9", "sighting_of_ref": "indicator--c50b134c-713b-4a94-8ecf-8fc46bb8a772", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e497c36-0d88-446b-8ad8-1bf0e7b514d2", "sighting_of_ref": "indicator--65e73ac1-a235-42f6-97fa-de89921ec91a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310bf3b4-723c-44a8-b4c2-c967a15ae628", "sighting_of_ref": "indicator--667910eb-017a-4d74-848a-95dc000cfad5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0351757-d512-4adf-89f2-8d89dce5f55f", "sighting_of_ref": "indicator--667910eb-017a-4d74-848a-95dc000cfad5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5198ea00-1f0c-4ce4-9a99-0ac746ae3a0d", "sighting_of_ref": "indicator--667910eb-017a-4d74-848a-95dc000cfad5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea3e6eb-a34d-485e-bb6b-2014d6277894", "sighting_of_ref": "indicator--330bfcd8-690a-49c6-814a-120b9e983f7f", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8c1099-3a6b-45eb-b57a-da1701b98e13", "sighting_of_ref": "indicator--094037a9-0673-4ba7-ad7f-5f1326463c20", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e497d438-e24f-4696-a70e-0f50e4a94e52", "sighting_of_ref": "indicator--f9c76509-7a5d-4af9-b55c-c678d7e9dd3d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097240e0-6325-4adb-a1da-546ae5506f71", "sighting_of_ref": "indicator--4bc17380-0ddd-4c1e-9474-5483a3aa0753", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddcbd52e-9606-455b-a5bf-64c285d88439", "sighting_of_ref": "indicator--4bc17380-0ddd-4c1e-9474-5483a3aa0753", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8018ba77-f587-44a0-825d-c06bf7de64b9", "sighting_of_ref": "indicator--4bc17380-0ddd-4c1e-9474-5483a3aa0753", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7118f629-a6ff-475b-9ad4-7de6c0d71c1e", "sighting_of_ref": "indicator--8923bc97-110c-43d7-8242-18d5e5a21f45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4effdc4-3a8f-440d-ba93-e885a3b2da1e", "sighting_of_ref": "indicator--d9738c7e-2d2c-4649-ab93-bfad5b42f4be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a18eec-4d09-42ec-b1f4-1308af5ede8c", "sighting_of_ref": "indicator--487ef649-798c-4a3e-8454-ea2a46268207", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c62184-a95c-4b5f-961b-7b727b8303ab", "sighting_of_ref": "indicator--5509fb69-ae8c-4101-920f-19cd39a3b899", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799cb454-6062-42e0-99c2-f0cfd3a9cf05", "sighting_of_ref": "indicator--a0cec8ab-a0e8-46a7-b4fd-930fcc4b0895", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6da3087-63a9-48d7-8be7-dcb7c64d896a", "sighting_of_ref": "indicator--a0cec8ab-a0e8-46a7-b4fd-930fcc4b0895", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62a0545-8df8-4677-86c2-ea1eabc83bf4", "sighting_of_ref": "indicator--df50ef4f-9efa-49dd-8c8e-1e65d06bd135", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8314dee-0992-461b-ad36-954dddaba120", "sighting_of_ref": "indicator--df50ef4f-9efa-49dd-8c8e-1e65d06bd135", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0b4a5d-8d04-4696-af9e-e448a2e40ad4", "sighting_of_ref": "indicator--0461253c-255b-43f1-80ec-aac838966da2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59aea547-fa9b-46e8-878b-b10c770af067", "sighting_of_ref": "indicator--0461253c-255b-43f1-80ec-aac838966da2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36089282-9653-4b78-a9e9-d33b43c0fd90", "sighting_of_ref": "indicator--e9b2601d-b219-4166-951d-a4b0711ed063", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74aa3ce9-0c9d-428f-aebf-b3361a7394c7", "sighting_of_ref": "indicator--9bef2e70-996b-4f58-9e5d-2ffbbb603a54", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35879a2-f27b-47d4-abad-d33aa7793181", "sighting_of_ref": "indicator--c8b16bef-775a-4f41-a377-4331760f0873", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42d0ca2-3257-43b3-bdc0-2e4a2b983aac", "sighting_of_ref": "indicator--69ec26e5-046c-491d-ab9d-c6b4a382228b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea6907f-b3e3-4d6a-b6f7-bb58bab31a77", "sighting_of_ref": "indicator--69ec26e5-046c-491d-ab9d-c6b4a382228b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85beb661-e1d4-4f5a-b46c-faa566829fd4", "sighting_of_ref": "indicator--69ec26e5-046c-491d-ab9d-c6b4a382228b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29ec301-7c74-4612-a695-190e8833de30", "sighting_of_ref": "indicator--1089bf22-2c73-4291-8763-046e508164d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35aecf4-770b-4a9b-9e02-5548779e66fe", "sighting_of_ref": "indicator--1089bf22-2c73-4291-8763-046e508164d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3610224-6ace-47ac-b137-c7371f2251d9", "sighting_of_ref": "indicator--31404747-08e2-43f0-885e-7b3118c99c0d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5d1eef-1d9e-4128-af1a-52dc3099cae7", "sighting_of_ref": "indicator--2a02f94f-c139-4169-85e4-703ed1b68588", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3e369f-4a28-42d5-b4c2-1f74f975cb67", "sighting_of_ref": "indicator--e6b9bc87-96fc-497e-9ef5-70be78c5706c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c45858-a21c-4106-9855-cbfa26fb7e21", "sighting_of_ref": "indicator--c0b01763-e7d1-4372-97d4-5740e837e57f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9a3599-66e1-4598-b4fa-6015bc5fee25", "sighting_of_ref": "indicator--c0b01763-e7d1-4372-97d4-5740e837e57f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3884cd-1e4b-4988-a61a-19d9a9f188d5", "sighting_of_ref": "indicator--16a29a5a-7f04-4330-8ba4-331c6ea93ec5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a53adc1-7849-4d83-be79-cfcaa0dfa9cc", "sighting_of_ref": "indicator--1250fe49-23bc-453a-a7c6-cff39051d862", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbf2254-f637-444e-9792-0ba84361a2ef", "sighting_of_ref": "indicator--1250fe49-23bc-453a-a7c6-cff39051d862", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b40ad80-6106-4cd1-afaa-bd60af59bd84", "sighting_of_ref": "indicator--dd83b618-e865-4834-b449-7227b1d4231f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719bd9d0-666e-4760-bfbc-21a0ec6353f0", "sighting_of_ref": "indicator--9f315eda-9a3b-408b-871b-ae04f662d394", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28119505-3836-4628-9d96-63a7194d0067", "sighting_of_ref": "indicator--b1dd4c60-02cb-4cfb-96ed-2b79238fe8f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f1fe07-7df2-45ec-95ca-8e770e061979", "sighting_of_ref": "indicator--3b44671b-ea0b-4f57-bfba-3033e003897e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94979c29-dbfb-4ff7-8c0e-273c4c2c8752", "sighting_of_ref": "indicator--11f52760-e7f2-43ba-bd20-8539ead519ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ab1f25-378c-4906-a41e-86e7239514e9", "sighting_of_ref": "indicator--6f8b9aaf-f30b-46cf-ab67-9972e1f13786", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5fd8ae-8fe8-4386-827f-a96236788a52", "sighting_of_ref": "indicator--6f8b9aaf-f30b-46cf-ab67-9972e1f13786", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90098a6c-27d4-49da-ada1-1d4d00d6b011", "sighting_of_ref": "indicator--6f8b9aaf-f30b-46cf-ab67-9972e1f13786", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd82db5c-4916-4341-92e5-d52b1fd7f6e4", "sighting_of_ref": "indicator--5846455f-3dad-49d9-a8e5-0a573b9351fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cad16f-d2d4-41f8-badc-cd6e428433af", "sighting_of_ref": "indicator--5846455f-3dad-49d9-a8e5-0a573b9351fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e63d71f-6e0b-4003-8963-8e69953b09c3", "sighting_of_ref": "indicator--f6421a1e-7c88-4dca-85c7-1e71fafa5a02", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b033ea1f-8912-445d-9432-4bcec71d0ed0", "sighting_of_ref": "indicator--3cf362af-8f21-4e5f-a082-ee96739d6433", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144ed653-e00b-4463-ab80-e0cfa29d9667", "sighting_of_ref": "indicator--3cf362af-8f21-4e5f-a082-ee96739d6433", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eec9b6-72cd-4596-851e-d6da82902e16", "sighting_of_ref": "indicator--0542a8a8-2013-4150-817c-f56692a85ffb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c258de-610a-4a00-9187-037c56da8ffc", "sighting_of_ref": "indicator--0542a8a8-2013-4150-817c-f56692a85ffb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9810a39b-771f-4b6e-b778-993d3cbcaa73", "sighting_of_ref": "indicator--ab4aaabc-f9f3-4b31-b236-6cdfe90289d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b67315e-20a5-4627-b908-40f04074e89b", "sighting_of_ref": "indicator--72f3254a-a9ef-4ea2-973f-c9a076591d6b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a99591-490c-43f9-8efb-9b4663691efd", "sighting_of_ref": "indicator--d1a01836-9cb6-47b4-a995-fe286095e3ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529336dd-7dd4-40b2-b1a3-00e456ef4208", "sighting_of_ref": "indicator--0e1ddacf-675d-48d5-a694-8c5cd3d1b85a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbd78f4-6288-467c-81f7-671009760980", "sighting_of_ref": "indicator--0e1ddacf-675d-48d5-a694-8c5cd3d1b85a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fae005f-f6c7-4311-9834-7a4b49f5a8e5", "sighting_of_ref": "indicator--5d966bd8-0d16-49d0-b1eb-f95d292a061a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f24160-2d13-4e91-93e5-a878f7fcef9c", "sighting_of_ref": "indicator--7e17628b-2a4b-4ac0-af7e-46b71f3e9ff1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d074ddfa-59d7-412d-9ee5-7e4c16681a2d", "sighting_of_ref": "indicator--8888b113-912e-42f0-b159-988690b9478e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bdef41-b3b4-4440-8695-fb2bacd51575", "sighting_of_ref": "indicator--8888b113-912e-42f0-b159-988690b9478e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62387ced-6f85-4747-9dbd-f2b083e5f7a2", "sighting_of_ref": "indicator--b7a0fbcc-2af0-4778-af73-b093b51be695", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7a7f9a-3976-4026-8a57-872e34e5012c", "sighting_of_ref": "indicator--f785560a-ad5f-4031-a5a0-67f769ae08c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca72a845-b371-4365-a151-8aec8fed947f", "sighting_of_ref": "indicator--f785560a-ad5f-4031-a5a0-67f769ae08c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d86f5c-0098-4a51-9efc-e1a4e2f3dcd3", "sighting_of_ref": "indicator--adad3cc6-fe5e-47aa-87a6-eb99cee52851", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510efd1a-ac97-4c51-83cd-3630b00e46dd", "sighting_of_ref": "indicator--adad3cc6-fe5e-47aa-87a6-eb99cee52851", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5290ac-c443-4a1b-afcb-5bab7282d301", "sighting_of_ref": "indicator--ab148d2d-1a3e-42b3-9d40-9e1a848d0af4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09b10c4-c0a5-4e3b-93d0-b27ad2f29d7a", "sighting_of_ref": "indicator--58019690-944b-4ca7-82b1-537825a5e672", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184da4b0-474e-4633-a682-5bdc172e871f", "sighting_of_ref": "indicator--58019690-944b-4ca7-82b1-537825a5e672", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9212048c-322a-4035-90fc-10ef370accdc", "sighting_of_ref": "indicator--58019690-944b-4ca7-82b1-537825a5e672", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b338322c-63cd-4def-8908-160123554596", "sighting_of_ref": "indicator--28e1eaa3-0b13-49d8-849b-10622ac769b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d4b8f9-f2bf-46e6-a4fb-499ea491aa70", "sighting_of_ref": "indicator--28e1eaa3-0b13-49d8-849b-10622ac769b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c46ad48-a7ca-400c-af18-e86f951dc5b8", "sighting_of_ref": "indicator--28e1eaa3-0b13-49d8-849b-10622ac769b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb34ba4-2943-4772-88b2-be37eaa50462", "sighting_of_ref": "indicator--6e43fb0d-7523-4e63-9862-18db86272c09", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9365ec81-ec4b-403d-8589-52b36fb64b78", "sighting_of_ref": "indicator--7dd14b05-3058-480f-b373-c991d5a567d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f414db-c7fe-44cf-a077-df1a2a6b4d63", "sighting_of_ref": "indicator--7dd14b05-3058-480f-b373-c991d5a567d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09354d57-dc8a-44d1-9fc7-2cf97201f343", "sighting_of_ref": "indicator--0506f67d-6f43-4259-b108-10a989f849d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a76d76-56f8-4e76-9987-24b78d962a0e", "sighting_of_ref": "indicator--7882a3ee-6656-40ec-b77a-40eaa1d4b00e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59fe9a4-c24a-4f4c-aea9-6a4df53b82f5", "sighting_of_ref": "indicator--7882a3ee-6656-40ec-b77a-40eaa1d4b00e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768824e5-1dd9-4a8d-aa82-7f19f266adc4", "sighting_of_ref": "indicator--7882a3ee-6656-40ec-b77a-40eaa1d4b00e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daf6df9-c9e0-4f46-88a2-e0cc12bc9a84", "sighting_of_ref": "indicator--a0890f4f-fc76-457c-adec-7b20ced6eff3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44873ca-b900-4dd5-b48a-0bc53f43443d", "sighting_of_ref": "indicator--a0890f4f-fc76-457c-adec-7b20ced6eff3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4be263-438c-4ddb-adcf-1034945b6857", "sighting_of_ref": "indicator--b8658f36-4cba-4fd9-afaa-708f27662c91", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df75544-2961-4c59-8a07-ea71e6066386", "sighting_of_ref": "indicator--28ddad06-2ab7-47d2-8226-7374065f32e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270e4b48-c0ab-4d63-9ba5-563300eb7596", "sighting_of_ref": "indicator--a68041ff-28e3-4bf0-9039-2f4885e4ac04", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25eceb1c-c145-4fb4-8654-5fb626d4f5f0", "sighting_of_ref": "indicator--a68041ff-28e3-4bf0-9039-2f4885e4ac04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccf5caf-5426-411b-9e70-62cdac650b28", "sighting_of_ref": "indicator--27c241fc-6552-4259-8d99-1f525dc26b25", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0045ca88-7803-496f-a24f-31fba9d1f9f6", "sighting_of_ref": "indicator--44f1fee1-3166-4437-a230-794bf2ae5554", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf77aab-23cc-4cec-a680-80924b9c0e77", "sighting_of_ref": "indicator--72b7e81c-8bfb-47f6-a758-0e17450ba8fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac20d9e-e912-4cf4-bb5b-4d4a0038eabc", "sighting_of_ref": "indicator--ed0efa1c-2437-40c2-92cd-dbbf6461f472", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa56d54-03ee-441c-ba00-3c794d62d0ab", "sighting_of_ref": "indicator--ed0efa1c-2437-40c2-92cd-dbbf6461f472", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455683c8-cee9-4c58-946d-0d2af3df670a", "sighting_of_ref": "indicator--a05e3a68-2cba-438b-b717-b4535e42708e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b742590b-f711-4c49-8da9-61439043e9c2", "sighting_of_ref": "indicator--d8f26403-c583-417a-a9ff-20bb679785bc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a153f0bc-555f-425f-8984-72a0a3c230c1", "sighting_of_ref": "indicator--d8f26403-c583-417a-a9ff-20bb679785bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19267534-f3df-49cf-84cf-56554e095855", "sighting_of_ref": "indicator--d8f26403-c583-417a-a9ff-20bb679785bc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11282931-1127-4468-ab8f-33e5f155b33f", "sighting_of_ref": "indicator--3b69b432-ae52-4ad9-955b-e9b0d7432fe4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8749ba06-4489-437c-973c-cebb104a1383", "sighting_of_ref": "indicator--da8d2672-e94e-4d6a-a020-3f53ed72685f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c236763-5afe-4095-b068-b6d8a934db46", "sighting_of_ref": "indicator--8bb01157-0539-4b82-9d87-4f3dafaa9e10", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52890e6-7ad0-422f-91c4-288574097d7d", "sighting_of_ref": "indicator--8bb01157-0539-4b82-9d87-4f3dafaa9e10", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a76493c-d2f2-413e-8888-ef9416a0f5fc", "sighting_of_ref": "indicator--8bb01157-0539-4b82-9d87-4f3dafaa9e10", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3631e35a-6540-4f42-bfdf-74ba114c574f", "sighting_of_ref": "indicator--80e3c171-db8f-429d-b89a-ef2b8a9fff34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3346f3b-0112-45c4-b4e2-896d7d035a56", "sighting_of_ref": "indicator--cbc0d087-f490-4d69-9df7-ccb54295c51b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea1fc71-1b79-4584-b053-f7d9e68b70f1", "sighting_of_ref": "indicator--75ed4c6e-5d21-4d4a-ba3b-9c9960b2c03f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb9e9bd-30ac-48b5-bb99-f3a5505e9464", "sighting_of_ref": "indicator--7e2d2250-e320-4916-b10f-97b757c6aa95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af64d75-2f4f-4626-b8b1-a27625489ec9", "sighting_of_ref": "indicator--7e2d2250-e320-4916-b10f-97b757c6aa95", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8117af22-4bc4-411f-9c12-b50360854050", "sighting_of_ref": "indicator--7e2d2250-e320-4916-b10f-97b757c6aa95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e5c82d-8b2e-4787-9c15-1d1a06786069", "sighting_of_ref": "indicator--0f626a80-4d87-492c-a2df-54894c4e6785", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f728d1-8080-41c1-9822-beee242a2f48", "sighting_of_ref": "indicator--0f626a80-4d87-492c-a2df-54894c4e6785", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a0500a-368f-4205-b1e4-d15240d335ae", "sighting_of_ref": "indicator--0f626a80-4d87-492c-a2df-54894c4e6785", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719a9339-bd78-40ef-b77f-ec1c9ad106ee", "sighting_of_ref": "indicator--deb21b23-3765-4dc4-8d62-465077465c7f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc3eaa3-27de-44d5-b69a-e511f3e7ea32", "sighting_of_ref": "indicator--351aac08-f437-4ea2-95ad-0a1fcff95f45", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff53cd6e-4bef-4706-94dc-5a454396672e", "sighting_of_ref": "indicator--2f57c601-de35-4031-96ca-d846ebf2e3f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c04b5e-6e11-4dfa-958a-77a81424f9dd", "sighting_of_ref": "indicator--272bc59e-9395-4941-9601-16965d8ddbe6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018babb1-7013-4907-a687-d70fa747b4cd", "sighting_of_ref": "indicator--0c069c50-f2b7-4666-a7ac-5dbe56f22fca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6907a4-2709-401a-a70e-2de704f4d7dd", "sighting_of_ref": "indicator--4da897c1-590f-437b-bd7f-63f0e183bbbd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170bbf34-3525-489a-964c-b6e98fd96d92", "sighting_of_ref": "indicator--4da897c1-590f-437b-bd7f-63f0e183bbbd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9246c809-9773-4873-956a-1b081768097f", "sighting_of_ref": "indicator--3c012580-dbfb-42be-ac66-283ff7b7eaf1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6c4d95-3eef-4f6b-bf84-ac1693162f60", "sighting_of_ref": "indicator--3c012580-dbfb-42be-ac66-283ff7b7eaf1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65f87e5-695f-4be6-b5c9-1342ff0cb4a4", "sighting_of_ref": "indicator--7fc77d4e-28cb-4149-a56d-e05e599ecfe5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feaf6da-71d0-4f3a-a6ea-85fcb0d79d1f", "sighting_of_ref": "indicator--c90b6b2f-a12c-43de-ae51-925ae093371a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3449a841-2da6-4422-911b-242868f6eecf", "sighting_of_ref": "indicator--c90b6b2f-a12c-43de-ae51-925ae093371a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c1b24b-0cac-4167-8093-9f7fe65c4e94", "sighting_of_ref": "indicator--c0d9f20b-9589-48b7-a2d1-0f0667195e84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62dc13e-9db2-4994-a32f-59a91260a342", "sighting_of_ref": "indicator--accc3247-5a20-4162-9134-75cc4f4934ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d18d48-11c8-4772-9951-9f27cf979399", "sighting_of_ref": "indicator--b25e0efb-26ef-445f-ab4c-4216fad781f7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce72f637-8136-4be3-bbed-eda4c490bd8e", "sighting_of_ref": "indicator--b25e0efb-26ef-445f-ab4c-4216fad781f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140500a6-244b-4358-b5d1-9c7c008c4f6c", "sighting_of_ref": "indicator--a3cc9713-58eb-4637-959e-9a27b4c73acb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7b13da-a13b-435b-b753-67827d03facb", "sighting_of_ref": "indicator--13cc939f-b9b7-4cb4-9502-4a90f51d2401", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b27691-1c98-4afe-bb5a-eed8954240ba", "sighting_of_ref": "indicator--c58a9fc3-5f29-42c6-a5c0-d3f76daa33d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57af899f-67d0-4457-af8d-c5207686d706", "sighting_of_ref": "indicator--c58a9fc3-5f29-42c6-a5c0-d3f76daa33d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80ae030-80e5-4c84-a029-3e96d539944d", "sighting_of_ref": "indicator--b8ad6597-dab8-4871-acaa-c0b2e5842564", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4ef5d9-74d2-4657-ae6f-3ad02b39a1ae", "sighting_of_ref": "indicator--39b466aa-7e62-414e-812b-7ce0a141a3ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779f82cc-189d-426b-b4e2-1d801f014578", "sighting_of_ref": "indicator--39b466aa-7e62-414e-812b-7ce0a141a3ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937bfb32-52b8-491b-83d0-115ec72e5a8a", "sighting_of_ref": "indicator--239a2319-8a3f-442e-a788-2049eb3573e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9703a4-bd59-4bc1-85df-c2daa568957a", "sighting_of_ref": "indicator--8ec573fb-0439-49a4-8987-5320e35e8cc0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130e9dca-6fa0-4d7e-adf1-43989237d518", "sighting_of_ref": "indicator--aad38c7c-4d00-4ae3-b20b-6e630325f4ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbce01f-997f-4875-81fd-a69a1141e83e", "sighting_of_ref": "indicator--aad38c7c-4d00-4ae3-b20b-6e630325f4ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3961f63f-d505-45a9-9696-7a5a1c63beb3", "sighting_of_ref": "indicator--5c60590b-55df-4b73-90ec-2faa38dd2058", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eb7e23-68d7-4095-b5ac-59018dd6ddec", "sighting_of_ref": "indicator--5c60590b-55df-4b73-90ec-2faa38dd2058", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6732c62a-262b-4ce8-8a8f-3b17e7392028", "sighting_of_ref": "indicator--5c60590b-55df-4b73-90ec-2faa38dd2058", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4441e2ba-fb31-46cd-a18d-2ec738dc3c00", "sighting_of_ref": "indicator--4d3a0971-c3a1-4b18-96af-d2ae7c943c4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8c9702-892b-42c2-9b21-efd7571eb8f8", "sighting_of_ref": "indicator--4d3a0971-c3a1-4b18-96af-d2ae7c943c4e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad710da5-e4ae-4424-9457-a9eea9fa9bb5", "sighting_of_ref": "indicator--4d3a0971-c3a1-4b18-96af-d2ae7c943c4e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf4d9fc-3c04-42d9-8de0-db31f5d5f979", "sighting_of_ref": "indicator--d61d2dec-ea17-42ac-8dd9-89c3b7068e40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667c2609-983f-4886-9ad0-84381b35120c", "sighting_of_ref": "indicator--fda425a2-7363-4f72-97cc-7175fcc65e9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ffd3ab-0e29-4694-82c8-611b245ec971", "sighting_of_ref": "indicator--bc26fe76-5956-44a4-925d-c61a08948fe2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e3d92d-4a95-4417-ba7a-185a83e2d063", "sighting_of_ref": "indicator--6b7414d6-f24b-47f7-a05f-9fa608148e9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f6d7c2-e945-4076-b926-62978a1d9878", "sighting_of_ref": "indicator--546fff04-1e3c-47ed-afe4-1d7a3375dd30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d2c180-34f6-40c8-b276-8acf2d831bd1", "sighting_of_ref": "indicator--546fff04-1e3c-47ed-afe4-1d7a3375dd30", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32af136f-ec29-44f5-8bf5-e92d109b5209", "sighting_of_ref": "indicator--546fff04-1e3c-47ed-afe4-1d7a3375dd30", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2716378-8c88-44f2-8452-6f573d0447e7", "sighting_of_ref": "indicator--f349aad0-045a-4fae-904d-671682a365dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ef3b27-3d81-4561-803b-bebb69367cf4", "sighting_of_ref": "indicator--f349aad0-045a-4fae-904d-671682a365dd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ef3d8f-e75a-4d01-bb2f-003f1e35ea4d", "sighting_of_ref": "indicator--9b57a451-307d-4f50-955f-7c362faac20e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f826bc3-cf7e-4540-84ce-fa901f6afa77", "sighting_of_ref": "indicator--9b57a451-307d-4f50-955f-7c362faac20e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200b8ff1-bda0-4ccd-8d73-9f3db6483d2f", "sighting_of_ref": "indicator--00fb4273-50f1-4f5c-ba42-b902cd0a0817", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863c247d-4eec-4d26-aaee-b52b007916d8", "sighting_of_ref": "indicator--3a450890-c223-4c55-9f35-b15437721955", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7c6f65-a103-4e77-84bd-29beb382c1e8", "sighting_of_ref": "indicator--bc0ecb84-ef80-4ebf-83a4-e393ef4d270b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36312778-bcc1-4852-a50a-4faee3c98b96", "sighting_of_ref": "indicator--bc0ecb84-ef80-4ebf-83a4-e393ef4d270b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d35e91-9606-48cd-b4fa-60e65160209d", "sighting_of_ref": "indicator--974fe430-9db7-4dd5-a476-a8d79b9319c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2df8e4b-1369-4157-ac1c-7ad2868be21c", "sighting_of_ref": "indicator--30149991-01b0-42de-a655-5361c1139197", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0badcd-4bd1-475d-b337-9df22b72724d", "sighting_of_ref": "indicator--7e311a8e-d8b2-41f6-b62f-e9cc59c423e5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba516658-f662-4c1f-8b21-933ba408ee99", "sighting_of_ref": "indicator--7cf7bfc5-7e80-4ee7-9e6a-bed1507815af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213bf8e8-2bf7-4a73-8fd8-45fd78562fea", "sighting_of_ref": "indicator--96fefc7a-6a2d-4a83-9c29-305fcd821bcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ee2179-96d1-4399-9aa0-bc80c677588f", "sighting_of_ref": "indicator--7323eaeb-0291-41ab-8cfe-918aa26e262f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898beb38-fb47-43c7-aac4-5ca65ad576e5", "sighting_of_ref": "indicator--2ba834b4-15c3-4bca-a466-4a9d992b52be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6238165-686b-4291-a1c8-ce28258806bf", "sighting_of_ref": "indicator--811b08ea-cc45-4bf7-95f5-344f5fe5c46d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e324a7a4-70b6-47ad-83cb-c871ef27bc06", "sighting_of_ref": "indicator--4ea9cf0b-3b0d-4c2e-a677-f58a9a265f18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56b3686-0b31-4d8f-8b2f-22111b0c6d7f", "sighting_of_ref": "indicator--93dde6fd-bbcd-4f51-a2c5-01abae65bcaa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a7ac1a-56a8-4bec-974b-028e04ae1922", "sighting_of_ref": "indicator--257bf02b-5ab1-4430-a378-ab9dc8d60e10", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892e54e0-9699-4b34-bfbb-a9e028cda484", "sighting_of_ref": "indicator--c20f5a3b-1087-49c6-a621-c2ef1ed0c9dd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa335295-96c2-4d10-a306-ae046c5ad61a", "sighting_of_ref": "indicator--c20f5a3b-1087-49c6-a621-c2ef1ed0c9dd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e69628-bed0-47fa-8570-903446150f83", "sighting_of_ref": "indicator--e5b314cf-9dba-432c-b15d-2cea2570a1d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9d7f21-926d-469e-89f5-cc66b9dcccb9", "sighting_of_ref": "indicator--e5b314cf-9dba-432c-b15d-2cea2570a1d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb512a6-615d-4ca4-be31-382769e35016", "sighting_of_ref": "indicator--b27c1b05-d328-4105-80d6-546d7b5c06c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48d01b9-1c1f-4f7a-a090-d168cfde3c11", "sighting_of_ref": "indicator--b27c1b05-d328-4105-80d6-546d7b5c06c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e877d50f-5834-452f-b3e8-038f56b0aa62", "sighting_of_ref": "indicator--44f1853b-345b-459f-8b88-1f5d21bb4d08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0af6a5c-63ca-4ccc-b989-c970f82ba253", "sighting_of_ref": "indicator--44f1853b-345b-459f-8b88-1f5d21bb4d08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40b6dd7-703b-4e8a-9c42-4b953645f5cc", "sighting_of_ref": "indicator--eac81251-8f90-4132-9069-a15f2d2976c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e967107-64ed-4e6f-af8e-a34786838c3e", "sighting_of_ref": "indicator--afa5fce4-4cd4-41ac-bc96-8eb70f46092c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e6de74-c9a5-4ef6-a69d-3caa67fa30d3", "sighting_of_ref": "indicator--afa5fce4-4cd4-41ac-bc96-8eb70f46092c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1278ba-434d-41ad-8cba-ea98bd59cf9e", "sighting_of_ref": "indicator--bb6e74e3-f1b2-474c-a253-1bb259dbd1b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f3c720-a633-43ad-be35-e443f122c29d", "sighting_of_ref": "indicator--8826c0e2-5958-45e0-8c39-3efa8583893b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410b3069-3983-44fa-ba46-d37caafe2f76", "sighting_of_ref": "indicator--8826c0e2-5958-45e0-8c39-3efa8583893b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154714af-15e8-4513-8c76-f7dbfeafb310", "sighting_of_ref": "indicator--483324c5-4986-4775-81e8-abed203272d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8170310b-fa75-45d2-b8af-f373f8d532e4", "sighting_of_ref": "indicator--483324c5-4986-4775-81e8-abed203272d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d7accc-4ad1-4d24-a42e-1ba1a88e5086", "sighting_of_ref": "indicator--677e2590-8784-45e1-84e0-568be0b15b0f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77e65a8-eaf1-40f4-981d-1bb7b0680ece", "sighting_of_ref": "indicator--53bec46e-c691-4d90-81b2-e1ce9807e139", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb25d4b-522e-4e99-b393-37c7119a8277", "sighting_of_ref": "indicator--53bec46e-c691-4d90-81b2-e1ce9807e139", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212071fa-20a0-444e-a88c-978e174a44e4", "sighting_of_ref": "indicator--ce5802a6-35b9-417f-891b-1d0aea891aaf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82ca31c-df63-42ac-8e21-85dc4f8a47e7", "sighting_of_ref": "indicator--bdddee96-849d-458e-b708-79f2617ae41d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ecd68e-ad60-40a3-9bf6-efa3ebb751e5", "sighting_of_ref": "indicator--c207112a-3439-4631-8cb5-7070c165ca74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5e028c-e524-45f1-b399-e99e7a4d55b2", "sighting_of_ref": "indicator--df6b352e-7270-4a85-bc06-3f5de79bd062", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a527e149-fd95-448b-87fd-0dcc124a09c0", "sighting_of_ref": "indicator--df6b352e-7270-4a85-bc06-3f5de79bd062", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cf5b63-42f0-4a1f-ba39-c35faaddac68", "sighting_of_ref": "indicator--c859334f-d3db-44f5-9626-0736d4471879", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e115222-f619-4b80-be54-c135cb23ac59", "sighting_of_ref": "indicator--c859334f-d3db-44f5-9626-0736d4471879", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa801ac3-ed1a-423c-b3c3-7573acf1aaac", "sighting_of_ref": "indicator--cb2ba10b-eeb5-4cdd-a536-0fdc7ca9a6eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a481b9a-6881-4567-9c1b-7ae13230b4cc", "sighting_of_ref": "indicator--440ced1c-78ad-48ec-8cd0-a8071ca5be03", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc697ea5-c6da-4cbc-80d1-dbe86be8d153", "sighting_of_ref": "indicator--662ba2a2-169d-4170-b431-8ace0a669644", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60b8b69-b158-48dd-9cc2-33acbd4fc1b7", "sighting_of_ref": "indicator--6ddd7283-9070-4cd0-a95f-b0da70293ad2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd7f03d-47de-4945-99e7-b66aebb024ab", "sighting_of_ref": "indicator--6ddd7283-9070-4cd0-a95f-b0da70293ad2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1387a6ec-c72d-4158-b98a-ec754ec6605a", "sighting_of_ref": "indicator--27375fa3-1f64-4386-ba3b-04b9dff4a633", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b20fb7-6c4d-4998-aa53-eac93a997718", "sighting_of_ref": "indicator--27375fa3-1f64-4386-ba3b-04b9dff4a633", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e49173-2837-40b7-834d-687ef3d9bc9e", "sighting_of_ref": "indicator--27375fa3-1f64-4386-ba3b-04b9dff4a633", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b9f556-f4c0-404a-8832-fab2adb0bddf", "sighting_of_ref": "indicator--42d9dfe0-ad50-4251-89e6-f01083331301", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5d720f-a917-4c0f-a83a-addf3771bdfa", "sighting_of_ref": "indicator--42d9dfe0-ad50-4251-89e6-f01083331301", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a59aa48-bfd1-493e-afa6-c981cb657146", "sighting_of_ref": "indicator--6151737a-856c-4bab-9bf3-a2791be5c19c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b84f46-98b2-43ea-9968-c025133d274c", "sighting_of_ref": "indicator--6151737a-856c-4bab-9bf3-a2791be5c19c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7431ef41-ea49-4754-8f0f-030faf34ca11", "sighting_of_ref": "indicator--725a8080-73dd-4261-b8e6-30aea611da86", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7450d78f-0556-4f58-a761-51a12161aadf", "sighting_of_ref": "indicator--87e81bc6-a44d-445b-8f9f-1a575bd32b16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac98069-925e-4575-a2fc-23e3066d354a", "sighting_of_ref": "indicator--87e81bc6-a44d-445b-8f9f-1a575bd32b16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af694609-6d11-4d1c-a074-cf8b678a9850", "sighting_of_ref": "indicator--91277efc-f4f7-4c5f-a98b-50300338e06d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79506ec6-420b-4137-b45c-81ad036ad929", "sighting_of_ref": "indicator--91277efc-f4f7-4c5f-a98b-50300338e06d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713cbb48-5907-4b39-ace3-9ba6527a0052", "sighting_of_ref": "indicator--dd61288e-2c16-40df-8698-ff217994a0aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3e086e-b2b1-47bf-bd93-be6a343fd67f", "sighting_of_ref": "indicator--826bb132-62d3-45a0-8a84-1c25ca8a30e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488f2045-4ae1-4c2e-a9c7-4029a7fa97af", "sighting_of_ref": "indicator--826bb132-62d3-45a0-8a84-1c25ca8a30e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76452294-6ce1-412f-a5c5-5e5e1dbbbb1d", "sighting_of_ref": "indicator--2d693772-043a-40ab-a865-36b100263a07", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022ca68b-1811-47af-9f55-355455c677a9", "sighting_of_ref": "indicator--697b0035-2d80-45c6-a8e6-fdf091f4b28d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b63decb-aa62-496e-a5d7-2531c28c22f0", "sighting_of_ref": "indicator--697b0035-2d80-45c6-a8e6-fdf091f4b28d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dda715-12e5-48a2-beb5-369b0e3d1f6c", "sighting_of_ref": "indicator--e19074be-6003-4722-8cf3-1d7b4869df11", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9909b94-bad7-4e57-8e6d-218f034bdba1", "sighting_of_ref": "indicator--e19074be-6003-4722-8cf3-1d7b4869df11", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b04029-6a63-4b14-91f2-74afdb499c7f", "sighting_of_ref": "indicator--e19074be-6003-4722-8cf3-1d7b4869df11", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fdce2c-9861-4852-959c-d26a3febad25", "sighting_of_ref": "indicator--e9c60ec4-3880-4616-8120-400c7edf3cc2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a20e3f-ad17-4770-a8b7-964b1053a633", "sighting_of_ref": "indicator--b86fe1fa-7af1-48fd-9818-d05d755c5366", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202b983d-0edd-4e0d-883f-52be856acc4a", "sighting_of_ref": "indicator--5531d863-1a42-48d4-9780-75ae5c51cfe9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d115451-3762-4fc4-aba9-18688096d24a", "sighting_of_ref": "indicator--5531d863-1a42-48d4-9780-75ae5c51cfe9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d66f45-d224-4b5f-a82e-cf0f33fa4b3f", "sighting_of_ref": "indicator--6a4de2e7-6e82-4e71-9a6b-20e53c2a4928", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4392c40f-99c2-4df6-b751-fa46bbcdac4b", "sighting_of_ref": "indicator--6a4de2e7-6e82-4e71-9a6b-20e53c2a4928", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9418bfd-d3bb-44ae-b007-1bbcec63a206", "sighting_of_ref": "indicator--6fbd99c3-0705-4cf9-9dd0-d3570be47811", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726c7333-5ddd-4d3f-bbd8-674b4f3e8e5e", "sighting_of_ref": "indicator--6fbd99c3-0705-4cf9-9dd0-d3570be47811", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39cdcf2-014f-4454-98ba-4fde3872f9e7", "sighting_of_ref": "indicator--6fbd99c3-0705-4cf9-9dd0-d3570be47811", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec6c660-b290-4cfb-8b71-cc67df7a6f21", "sighting_of_ref": "indicator--65d4dae5-e84b-4e23-8aa7-519338a73443", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a21c6f-db0c-4d89-b8c6-975307c40eaa", "sighting_of_ref": "indicator--a5b88cd4-d74c-4cb0-af1a-fae4f73c43f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e58507-22a1-42c7-8b02-88549d611c37", "sighting_of_ref": "indicator--6255f452-2e56-4216-a954-473d6c67aca5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c6bec6-93e6-4cdb-b5d7-c2e9efe28e92", "sighting_of_ref": "indicator--6255f452-2e56-4216-a954-473d6c67aca5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5b5777-cd20-4d44-b6f4-18d2b5dc451f", "sighting_of_ref": "indicator--6255f452-2e56-4216-a954-473d6c67aca5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ea2b4d-eb85-4bf0-9550-ec0c3becfc04", "sighting_of_ref": "indicator--2b57fbba-b73f-4ff5-b10b-a77f5bfc36ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5812f853-e93f-480f-9508-566e1d3f7a67", "sighting_of_ref": "indicator--54f2554b-1171-4219-8719-cd66301c8595", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0455cb7-4fc5-4d87-b4f2-89a6852b5059", "sighting_of_ref": "indicator--54f2554b-1171-4219-8719-cd66301c8595", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71fa54d-db8a-4402-93a9-28e26b2ef2f5", "sighting_of_ref": "indicator--f3bdc66a-ab2f-4006-82ab-4fdde7f6704c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00be8862-d87e-4199-880c-a70993310d8f", "sighting_of_ref": "indicator--f3bdc66a-ab2f-4006-82ab-4fdde7f6704c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d0e760-6157-49e7-b906-27c85a55d5a7", "sighting_of_ref": "indicator--f3bdc66a-ab2f-4006-82ab-4fdde7f6704c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9cfc7d-d9e9-40cb-8284-d103d3082b7a", "sighting_of_ref": "indicator--142bf3ae-fd69-4884-9121-322661000162", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d889212-6f9d-4be2-9fa2-f7dc28f8216e", "sighting_of_ref": "indicator--142bf3ae-fd69-4884-9121-322661000162", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ab238f-c8b4-41ab-b289-fa3f8134f23e", "sighting_of_ref": "indicator--848dec18-4359-4864-ac7f-67c649a7a8ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b8bdeb-5f38-49ff-8e7a-bc0bedde0407", "sighting_of_ref": "indicator--9a2253a3-3f17-499a-a603-fdaef514c6cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf00fe4f-d9e7-4735-8786-be6ce34e6bbf", "sighting_of_ref": "indicator--9a2253a3-3f17-499a-a603-fdaef514c6cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2813c9d-5920-461b-9ba1-590de5bf752c", "sighting_of_ref": "indicator--f334a3a2-624f-4cda-94ac-2811f703c8de", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634670d0-1a0a-469c-b72b-99530aae4d2c", "sighting_of_ref": "indicator--49087427-1897-450a-b6c3-45e7c65e47d9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9140bd-a562-41d0-8d35-37a3de7a3ee9", "sighting_of_ref": "indicator--27dfdea4-5ec2-48c2-ad0f-49c5434dcf0b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65960214-fb59-4a14-8e6a-b3fcafd6ea3e", "sighting_of_ref": "indicator--d3b6b689-ac29-4117-9ef6-d41db8686377", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73a9389-6e4c-41cd-aa8f-ec53f20006fa", "sighting_of_ref": "indicator--d3b6b689-ac29-4117-9ef6-d41db8686377", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a88a34de-f8ff-4170-bfcb-d441ed434996", "sighting_of_ref": "indicator--f49a33a2-aeb7-4f6e-9ffe-beed7106ec06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3972ed0-bbc7-4db2-8c6b-739b0fd0bff3", "sighting_of_ref": "indicator--462a469a-7225-4241-87a8-48a16537b14b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7165081-61a5-4f89-8440-f1c7a09f60bc", "sighting_of_ref": "indicator--462a469a-7225-4241-87a8-48a16537b14b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8734f86d-d8f4-49f9-89c5-243b28bbc8ed", "sighting_of_ref": "indicator--d3936372-2ee5-4eb9-9f16-aab60ae75a9e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0840bed6-8d40-40e4-a003-652a08cfb3bd", "sighting_of_ref": "indicator--d3936372-2ee5-4eb9-9f16-aab60ae75a9e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824c42a0-cf36-41c2-b964-84da72509997", "sighting_of_ref": "indicator--291424d0-be3e-409a-aa9f-a349620558ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b7a01b-4b59-4d01-bd16-cd9bfa6a3c5c", "sighting_of_ref": "indicator--a6d9fdb6-20f8-425f-85e6-59e26b19db0a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b510ead-e322-4086-9417-f9c919ac76a4", "sighting_of_ref": "indicator--00c08a06-ff9a-493c-93d3-5e218c009fcb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944574a3-9cbc-4411-9182-af25649457d4", "sighting_of_ref": "indicator--00c08a06-ff9a-493c-93d3-5e218c009fcb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafa55db-b740-476e-9d4a-ac140e977772", "sighting_of_ref": "indicator--9ffc1888-14b9-4a76-bdf2-2e581e96bb80", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23794afc-a2e1-4377-8ec1-038331d27ebf", "sighting_of_ref": "indicator--9ffc1888-14b9-4a76-bdf2-2e581e96bb80", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dfc63d-0cc7-4f98-b2dc-c800c5565795", "sighting_of_ref": "indicator--9cdc9acb-b667-4213-a093-7f423c817458", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05aaf326-b8ca-4f24-946d-0ca70744171a", "sighting_of_ref": "indicator--e9c09225-058e-4841-9b04-c35e8ad6f77c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cff9423-d793-42eb-9005-a3765e573346", "sighting_of_ref": "indicator--e9c09225-058e-4841-9b04-c35e8ad6f77c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53929dd2-dc3f-4c78-8322-edf65c9c1151", "sighting_of_ref": "indicator--8c3653eb-694e-4767-8647-f9648703287b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beadc647-96a9-4f0d-a075-9f7446a7b7b3", "sighting_of_ref": "indicator--8c3653eb-694e-4767-8647-f9648703287b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a70540-8586-4be0-9a9a-77ffca84f412", "sighting_of_ref": "indicator--8c3653eb-694e-4767-8647-f9648703287b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820f8015-9985-48be-8e27-fd4b424cbc08", "sighting_of_ref": "indicator--ab878a07-846b-4da6-8a52-8db0acded4ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8d3025-8969-4eb8-84cf-529da48dc8b3", "sighting_of_ref": "indicator--ab878a07-846b-4da6-8a52-8db0acded4ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f68664-e2ef-42e1-91db-35536cc3f8b2", "sighting_of_ref": "indicator--b733ffe0-a7f2-49f6-98ab-71f5439149b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053f1636-4fcc-4214-bbe3-801b0ad3765c", "sighting_of_ref": "indicator--4283a879-f245-4a59-921a-0a08d8244858", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d6df72-43f3-46c5-89cd-7f748c50e30d", "sighting_of_ref": "indicator--4283a879-f245-4a59-921a-0a08d8244858", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c040775-3287-42a9-89e9-b5900519fc74", "sighting_of_ref": "indicator--4283a879-f245-4a59-921a-0a08d8244858", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c8928f-1051-4e8f-b3f4-1359358dec5a", "sighting_of_ref": "indicator--f8b452fc-dc3e-4d25-95f5-9d6e311785c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a94dc53-3528-48fa-af2f-b6fdb15f1ad0", "sighting_of_ref": "indicator--f8b452fc-dc3e-4d25-95f5-9d6e311785c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0b889a-8ded-431d-a11f-f052dda5f683", "sighting_of_ref": "indicator--8e1a4979-8b0b-4593-b1fa-4e02932c63db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bed2186-abc5-4f6b-865b-79dac4105c64", "sighting_of_ref": "indicator--dd2909f4-7016-472f-9e24-9e59c9427155", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effb182d-568a-49cd-b62a-3c3a9ec1bfa0", "sighting_of_ref": "indicator--f2c1aaab-4450-4263-88cf-8177d8312451", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8246f23-22f2-442f-ab89-c981d9496035", "sighting_of_ref": "indicator--71a82454-71f5-4851-8073-c5dcf752f58d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daa98f1-55db-4e0a-9ea7-7487233a2abf", "sighting_of_ref": "indicator--71a82454-71f5-4851-8073-c5dcf752f58d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc793831-ae09-4e8a-9715-1958de7b4afe", "sighting_of_ref": "indicator--1a4b8d95-267e-4e87-a943-9133d222000a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2840ef96-db2e-4933-a216-75b69dd367ce", "sighting_of_ref": "indicator--1a4b8d95-267e-4e87-a943-9133d222000a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb106749-71a7-4096-903a-85f3325b0384", "sighting_of_ref": "indicator--35c020b1-e355-4cee-817a-45705bd269f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6436fa08-2b81-4068-9506-d62e3be6b1a2", "sighting_of_ref": "indicator--35c020b1-e355-4cee-817a-45705bd269f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6afdec-1754-4606-b969-fb05a9a35d79", "sighting_of_ref": "indicator--6a5cb9be-f7eb-4376-8a3b-cb13a7d35b01", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4742fb6e-df72-47a8-8850-12515d260090", "sighting_of_ref": "indicator--52e24fbc-8c1c-45c2-90d0-34c79b7b40b5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6c3959-2577-4386-a9b1-b7b7a912590e", "sighting_of_ref": "indicator--20ea4996-fd16-44f8-bee6-e12f76302c82", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdce15d-659f-4abe-9c12-a307b177e610", "sighting_of_ref": "indicator--4a14daac-285e-487d-94a7-864abe864c79", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57480478-63b9-451d-8c09-29b9de603c15", "sighting_of_ref": "indicator--21a6e0f0-591f-4f3e-a5cc-b73606960fda", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3e8823-051d-4eb1-8cda-44d6d4315fb4", "sighting_of_ref": "indicator--21a6e0f0-591f-4f3e-a5cc-b73606960fda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebc2803-18d5-4574-ac54-a29315c06077", "sighting_of_ref": "indicator--ffbfe3a5-dc84-4f12-9e6c-c95e64ea8d7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9631badf-7f55-4eae-a49a-6372e49aeb42", "sighting_of_ref": "indicator--ad19800a-d9c5-4dbf-a255-4d5a1d468e7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9224b8e-4848-4747-ab82-4b7d1439f793", "sighting_of_ref": "indicator--a40526b2-c6fd-4247-9c2e-e07b2db35989", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c6d9d7-c1d4-4526-911c-42a8c7719e21", "sighting_of_ref": "indicator--bdd6164d-c7d8-4993-a859-50493d040802", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2175fed4-619f-427d-98c6-0fd924d11ad6", "sighting_of_ref": "indicator--bdd6164d-c7d8-4993-a859-50493d040802", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8468c5-32f9-44e0-91fd-818da4034b17", "sighting_of_ref": "indicator--b388f6d8-dba6-4bea-9f5c-8c80768edd4a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0e1141-178b-4fa1-a866-4cf8734a7277", "sighting_of_ref": "indicator--b388f6d8-dba6-4bea-9f5c-8c80768edd4a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6383a1-c061-464b-9ddc-b8ebc053715d", "sighting_of_ref": "indicator--74b6600f-5833-41d0-8288-ad31da5c3371", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a9d68c-1973-4521-9161-1d1e89a5e042", "sighting_of_ref": "indicator--909ec2bc-573c-4a03-83e3-e83ba4873462", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbbdc71-9b06-4d45-9278-a3de086ab671", "sighting_of_ref": "indicator--7e801acf-304c-4697-813c-e33b7aa0f575", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ba6b01-6b12-4243-a7d5-4512aaa8141e", "sighting_of_ref": "indicator--7e801acf-304c-4697-813c-e33b7aa0f575", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c307a6-84ae-42b2-9a17-b1cf2a0ebb1a", "sighting_of_ref": "indicator--7e801acf-304c-4697-813c-e33b7aa0f575", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399c5fee-02e7-4e4b-afad-2e4b1cf46bdd", "sighting_of_ref": "indicator--b0696f26-af86-4973-8273-f0c22d185e5e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29583806-a403-44cb-b3a6-2eff41a06ced", "sighting_of_ref": "indicator--b0696f26-af86-4973-8273-f0c22d185e5e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58617fa2-f6c1-45c8-9fd7-b270c96c7ec5", "sighting_of_ref": "indicator--293340de-2cae-4644-9f6e-db2e07e13fd4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a03966-66d8-4f43-8311-465369824d83", "sighting_of_ref": "indicator--293340de-2cae-4644-9f6e-db2e07e13fd4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9adfcc4-a6c1-4e85-be47-1650467a1810", "sighting_of_ref": "indicator--e0157cd8-89dc-4669-933b-aa2c6f155506", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2e0c34-337a-438a-ae88-bceb6675e257", "sighting_of_ref": "indicator--8ae26523-8d3a-4071-a466-e631055ee4a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e05f3d5-7533-41ee-ba22-8fec25aaa761", "sighting_of_ref": "indicator--dcff8dfa-25cd-4a76-805f-7d82b34b44de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f712071f-982b-49a1-a617-db9c2c78cfd7", "sighting_of_ref": "indicator--dcff8dfa-25cd-4a76-805f-7d82b34b44de", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02513a82-8821-4454-a7dd-f9a601e1c4a6", "sighting_of_ref": "indicator--0429b267-b83b-4065-a783-9cea1c3b6677", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0af799-cef4-4526-a439-8a46da6c03b3", "sighting_of_ref": "indicator--0429b267-b83b-4065-a783-9cea1c3b6677", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe49ca7-b47f-40b1-942f-64afa67c35c4", "sighting_of_ref": "indicator--e6b67611-75d6-415a-8a47-e004a7874f4b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f59f00d-ee7f-424b-81ce-91c2d7bf2bf9", "sighting_of_ref": "indicator--211a5546-f83d-4c0e-bf56-0883777208fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0b4ffe-a484-4b35-8218-539ca32deb0c", "sighting_of_ref": "indicator--211a5546-f83d-4c0e-bf56-0883777208fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fbcdc1-2668-4705-b84e-08591026c2f5", "sighting_of_ref": "indicator--2f67fadb-d317-4fb2-846a-a05e0857f49c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43bfdc5-3ac1-459d-8d6b-5f8ea3bda8a5", "sighting_of_ref": "indicator--2f67fadb-d317-4fb2-846a-a05e0857f49c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32377fef-c413-4485-be9b-0da217c48808", "sighting_of_ref": "indicator--17e29820-b1bd-4859-92f1-9c43c3a043cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58af5d76-447d-4f9c-ab88-e3070022e918", "sighting_of_ref": "indicator--81045aef-49c6-4df9-aea7-2b96c7a0cb7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc09a5b0-6479-4188-b346-d4adce8d4ddf", "sighting_of_ref": "indicator--81045aef-49c6-4df9-aea7-2b96c7a0cb7f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5daa367a-d971-4d84-8eee-aee03a802f1c", "sighting_of_ref": "indicator--81045aef-49c6-4df9-aea7-2b96c7a0cb7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1691540b-81cc-4a0b-a8e8-25d2625795f1", "sighting_of_ref": "indicator--9b0b0a07-3b2f-4e30-bc9c-fd61fc73af45", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1c8646-2047-43c4-b8bd-7a7d6010a046", "sighting_of_ref": "indicator--9b0b0a07-3b2f-4e30-bc9c-fd61fc73af45", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1409420-7303-4752-8b9b-f08b519cca02", "sighting_of_ref": "indicator--628710b0-0ec7-411f-82e7-58d27e9c7988", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9365d4a-6c7c-4969-926c-1128af98a8c7", "sighting_of_ref": "indicator--4ca9ef75-f17d-4702-9cdc-b39d257bdf21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeb1e5f-12ad-4790-a69f-f39772ad2d17", "sighting_of_ref": "indicator--4ca9ef75-f17d-4702-9cdc-b39d257bdf21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce44d9e-067b-4783-8a63-146a426c7775", "sighting_of_ref": "indicator--32e4ea12-fd93-4243-9314-40472a3b1661", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd67918a-f74f-47b2-a446-63795ba22b14", "sighting_of_ref": "indicator--d680a140-2565-4275-85c1-76afb31ee8a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e97306-db86-42f6-ab43-2bed8411c4b6", "sighting_of_ref": "indicator--d680a140-2565-4275-85c1-76afb31ee8a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd44dfeb-1c93-4a97-948a-e19dc87da865", "sighting_of_ref": "indicator--6a43f29a-b102-41a8-b6ed-13a5a6c99d9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99c831e-186a-4f8e-817d-da9f0c6a6e9e", "sighting_of_ref": "indicator--6a43f29a-b102-41a8-b6ed-13a5a6c99d9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b409a5e5-687b-46e4-bd61-786059314dcf", "sighting_of_ref": "indicator--6a43f29a-b102-41a8-b6ed-13a5a6c99d9d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afc0559-a93c-4afa-a754-ef54957dc97d", "sighting_of_ref": "indicator--7ebe2ff2-30cc-48d2-b253-4e65484cff06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f15d22-15b6-4371-b175-ab9a6e2e2b7c", "sighting_of_ref": "indicator--7ebe2ff2-30cc-48d2-b253-4e65484cff06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18857050-d7e7-42df-940b-454d7da1301e", "sighting_of_ref": "indicator--7ebe2ff2-30cc-48d2-b253-4e65484cff06", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38139ea-f986-4cc6-9734-8f917814b5d0", "sighting_of_ref": "indicator--3afb19af-39af-480c-a87a-d0668c3ba4e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa54b1b4-cb2e-496e-abf3-89ef5043248f", "sighting_of_ref": "indicator--3afb19af-39af-480c-a87a-d0668c3ba4e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584a0cff-0988-4c3d-9913-eb9ff54b4a44", "sighting_of_ref": "indicator--3afb19af-39af-480c-a87a-d0668c3ba4e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e731d9cc-5227-4032-8d87-140e9e3dc0de", "sighting_of_ref": "indicator--021a1d85-75bc-41c3-b5bd-40aa190122e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5315c259-e468-4bec-8b44-bb3b9f4779ea", "sighting_of_ref": "indicator--96a33a90-956f-475f-afa0-01d3e2f68562", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a10b1e-eb1f-43df-8783-6a50e6048879", "sighting_of_ref": "indicator--f0ed8dfd-f825-4ab5-86cf-54217ca3df30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c440bbc-77e3-4772-a2a7-1ecc1264a574", "sighting_of_ref": "indicator--f0ed8dfd-f825-4ab5-86cf-54217ca3df30", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22c63aa-09e7-42a5-917b-08aba9f4f114", "sighting_of_ref": "indicator--28f4531f-ea92-4d4f-a08b-b3a2e6c190ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8296224a-f3e2-42de-8fff-c2fbf476e109", "sighting_of_ref": "indicator--28f4531f-ea92-4d4f-a08b-b3a2e6c190ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48141d3-a4e9-4803-a661-e05f9798cf5b", "sighting_of_ref": "indicator--6d5847fb-1278-428d-abb3-730e84a301e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a751498-1ecd-4580-b248-78afb6f0a9e2", "sighting_of_ref": "indicator--e6f5656a-26df-471b-a2d1-e63fedb80771", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c0cf9a-c39c-4e84-9b16-a8477bfb9fd4", "sighting_of_ref": "indicator--e6f5656a-26df-471b-a2d1-e63fedb80771", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66737f8a-b65c-457d-9fb8-29b4a5a1e371", "sighting_of_ref": "indicator--e6f5656a-26df-471b-a2d1-e63fedb80771", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801ba67d-2842-481c-9553-303af2935955", "sighting_of_ref": "indicator--b0472b67-ad73-4a71-aaed-0f3f3cba9dfa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee2304c-574c-4718-8153-4822d33fdea2", "sighting_of_ref": "indicator--2e16cf4a-d0c3-412f-a826-d9235f0615f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ec260e-1ffb-4a4c-afe5-2dc12438b160", "sighting_of_ref": "indicator--0fb2445c-f752-4335-9486-e46ffe81a0b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28218e96-dcae-4bb9-9265-a1a7d1cf0743", "sighting_of_ref": "indicator--0fb2445c-f752-4335-9486-e46ffe81a0b5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf94728-85b7-4246-8cb2-a64308518557", "sighting_of_ref": "indicator--855e0714-a854-4c81-8727-422925266d81", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e74c821-0229-4a8a-9ecc-302777cfb6c5", "sighting_of_ref": "indicator--855e0714-a854-4c81-8727-422925266d81", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f36f2e-4cd1-4cfc-b8d1-826f253328dd", "sighting_of_ref": "indicator--e6786866-c4c5-416a-804c-1bd6391a6743", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e649b3-2b4f-4f2f-ad7c-e3da5c4e83ef", "sighting_of_ref": "indicator--e6786866-c4c5-416a-804c-1bd6391a6743", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbc0d61-04b8-4220-8c16-89a768bc6409", "sighting_of_ref": "indicator--b110a55c-53d5-4783-8bdf-7f849a2903d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f48a9b9-c451-406b-98c9-6cc9822c48d1", "sighting_of_ref": "indicator--b110a55c-53d5-4783-8bdf-7f849a2903d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a7fa9b-f250-4af1-bc21-1102b6efbb3e", "sighting_of_ref": "indicator--d90a78d3-7486-414b-8d8b-84970124adab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc9cbea-b13e-40ee-97d0-3bf217db2176", "sighting_of_ref": "indicator--d90a78d3-7486-414b-8d8b-84970124adab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f995c1c-6c75-4907-8aa9-0794f9acc5c5", "sighting_of_ref": "indicator--6365b05d-5b22-4e4b-8374-fc64d4de215e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8178ff69-0cff-458c-9183-17666ab26ccc", "sighting_of_ref": "indicator--f848c7c1-77b4-4e1f-847f-98471717d5a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7367019e-e85e-4f00-b751-8d55f2c8722b", "sighting_of_ref": "indicator--1bac755e-099d-4421-848f-ff4da47f3b13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cd25e1-a177-49d2-a058-9eb9f1d90ad2", "sighting_of_ref": "indicator--35b9d37e-19ca-4862-821e-479728a712e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59369f4-ad2b-4bd8-a2b4-5fa6b87a00bf", "sighting_of_ref": "indicator--d50c7498-caf3-4649-89f2-7cb39e3f6a3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8339c7c-483b-4776-ad05-b69144b2d1df", "sighting_of_ref": "indicator--d50c7498-caf3-4649-89f2-7cb39e3f6a3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6a44ba-f633-49e0-992e-06970870158f", "sighting_of_ref": "indicator--8b1dde8d-718e-4cc2-99c0-c611ae5dd438", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bae35dc-2215-43c8-aa63-17bf9227a181", "sighting_of_ref": "indicator--8b1dde8d-718e-4cc2-99c0-c611ae5dd438", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a507557a-1e7c-46bb-8d5a-b701dcb20759", "sighting_of_ref": "indicator--941db2e7-5dda-4709-95b2-3e5ed115a9b0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f30fc79-b0a3-439b-8aaa-d93da6a5e3b2", "sighting_of_ref": "indicator--3ba80d9a-abbe-4c3e-b685-ecb5b9d5e09a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a88f2a9-8c54-436f-98b5-31443419d948", "sighting_of_ref": "indicator--3ba80d9a-abbe-4c3e-b685-ecb5b9d5e09a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25644c4-87db-4bff-83c8-8e6800836d39", "sighting_of_ref": "indicator--3ba80d9a-abbe-4c3e-b685-ecb5b9d5e09a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4cf751-ba6b-473a-b14a-a496d1fc0ab6", "sighting_of_ref": "indicator--b6026b61-e95f-4363-b04f-0c8a47e25aa5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b9eafd-5ca0-476d-859c-49caa6fe7db5", "sighting_of_ref": "indicator--b6026b61-e95f-4363-b04f-0c8a47e25aa5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bd9d76-284a-45bf-a736-62368f9d8a2d", "sighting_of_ref": "indicator--d854660e-3ccb-4237-867d-68c44a49cdc9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec84bf2-c785-41d9-82ac-45916253e8dc", "sighting_of_ref": "indicator--408b5674-1c4c-4184-927c-96f8a105068e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff6fd1d-2327-4f5a-ab6d-2c0a4f536571", "sighting_of_ref": "indicator--88678a34-123e-429e-9094-ac39211e8d5d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906813c4-b4d2-4a9f-9a9d-3dddc43f4727", "sighting_of_ref": "indicator--456ddf73-22b5-456a-908e-4ebe197070a0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300e6cd0-47a0-4f85-baf1-8d8a0587633b", "sighting_of_ref": "indicator--079fd9ba-18aa-4cbd-963b-711d5cefa745", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e785839-71b9-4fa6-b20f-7eb331ede8bc", "sighting_of_ref": "indicator--31c60f56-517c-4d69-b6eb-6bc8fb7e851b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276d076d-66a3-474e-93da-d427921402bb", "sighting_of_ref": "indicator--31c60f56-517c-4d69-b6eb-6bc8fb7e851b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6187c413-265a-4912-8cd4-9e93477d21db", "sighting_of_ref": "indicator--5d2bb8f5-87f4-48c1-8a8c-7be6dea195d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b979a62b-7daf-457e-96b6-b8f7d8a3e288", "sighting_of_ref": "indicator--7d38323f-d10e-40b5-afc5-7486625847bc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cd73b2-af6a-42e3-b4e0-dc7400458a12", "sighting_of_ref": "indicator--aee9778f-9ffb-4dd7-97cf-b1b15b5a952c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e71c41c-dced-4ec5-aaaa-439bcadfff7f", "sighting_of_ref": "indicator--f0e17dde-3b6f-4213-8867-0e0bff6ecc43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae66ba9-3a22-45a7-9714-58f9e8ce342a", "sighting_of_ref": "indicator--f0e17dde-3b6f-4213-8867-0e0bff6ecc43", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18d63a5-f5a0-4046-89f4-c0714f682f40", "sighting_of_ref": "indicator--01afb121-6ec5-4639-9467-26d02553a4b7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13531a09-9960-4322-b98b-cacdc65d83c6", "sighting_of_ref": "indicator--01afb121-6ec5-4639-9467-26d02553a4b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0c1df2-24f1-4fb9-a02d-8482298cf959", "sighting_of_ref": "indicator--b33be070-c26e-45e4-8dd3-3532e5c60998", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f0aa56-d72a-4520-b6b8-2b41cee1561c", "sighting_of_ref": "indicator--b33be070-c26e-45e4-8dd3-3532e5c60998", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d54009-facc-4c55-8a6d-5d71f877a2f5", "sighting_of_ref": "indicator--07d106e4-fc66-4d95-ae5b-a08be0c167c5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e549d08-c1d9-4e9a-9257-6163d62824f0", "sighting_of_ref": "indicator--35a41a8d-7d9b-4d10-bdb0-7db1a4d62a9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554c61a4-a1b4-48c3-b6d0-176b145ce746", "sighting_of_ref": "indicator--2a3b1f49-7a0a-4c15-9d19-8a7f30b677cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7315b3c-9c3c-4dd8-9912-fc142c0192f1", "sighting_of_ref": "indicator--2a3b1f49-7a0a-4c15-9d19-8a7f30b677cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db27684e-979f-4df4-a042-2425fa411991", "sighting_of_ref": "indicator--2a3b1f49-7a0a-4c15-9d19-8a7f30b677cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c07552-cfb4-4206-95e2-eab313b8538d", "sighting_of_ref": "indicator--eb8bb492-7bbf-43ca-b724-90f17247f22d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0b53eb-11d1-4fa2-98f9-140a5a9b51f5", "sighting_of_ref": "indicator--eb8bb492-7bbf-43ca-b724-90f17247f22d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b38866a-d8fb-4542-9742-3edeb995f38c", "sighting_of_ref": "indicator--65184439-a0fb-4b44-898f-646ccb7568e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c610c792-6476-402d-a970-c083ffc1cc1f", "sighting_of_ref": "indicator--65184439-a0fb-4b44-898f-646ccb7568e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2819de40-5875-4765-8c8b-ed40889dd697", "sighting_of_ref": "indicator--65184439-a0fb-4b44-898f-646ccb7568e9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b1f610-74f4-479f-82d9-964d9c1906ff", "sighting_of_ref": "indicator--a23bd6fa-b629-47b8-b7ba-3c1cc0db8025", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486e8502-efef-4c88-81ec-83bee3efbcc8", "sighting_of_ref": "indicator--7c7ade7c-00c5-4927-9b5e-d0e913eb7a76", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d3932b-8b75-453c-9ce8-90288f1c17af", "sighting_of_ref": "indicator--c349621b-3d4f-4306-ba99-5db9ad9a5ea6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d4b051-d299-4b61-80f6-affe9239a4dd", "sighting_of_ref": "indicator--c349621b-3d4f-4306-ba99-5db9ad9a5ea6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ba652c-3cd9-43ba-bfac-b748abd4e471", "sighting_of_ref": "indicator--db9f7958-d4e1-4c35-9bca-b9e4c54f4cf4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a76a69-d00b-45c7-a5be-b2061ba20eb3", "sighting_of_ref": "indicator--db9f7958-d4e1-4c35-9bca-b9e4c54f4cf4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efcbfcf5-1722-4313-ba41-48282a2fc085", "sighting_of_ref": "indicator--b27af19f-0762-4757-9c62-e045c0f591cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38597d6-1811-4399-b13f-52faab196757", "sighting_of_ref": "indicator--b27af19f-0762-4757-9c62-e045c0f591cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5942d4a9-5427-4430-a09c-d0a349011819", "sighting_of_ref": "indicator--41e614e5-18f5-4407-83a2-b241b9162cf8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7705ea4c-9712-4f6e-9363-7915f0bf8db9", "sighting_of_ref": "indicator--9fd7f3b8-e6a6-40fa-8909-a2582bda43da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb5c526-b8ec-4cf7-bd1b-21d99318731e", "sighting_of_ref": "indicator--9fd7f3b8-e6a6-40fa-8909-a2582bda43da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c59e6cd-3824-4f79-a6a7-b30226b9f9f1", "sighting_of_ref": "indicator--2ab2d795-8e80-4b9e-86d0-814f2c22178d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3956ceb-2b33-4784-9101-4350ce8365ee", "sighting_of_ref": "indicator--2ab2d795-8e80-4b9e-86d0-814f2c22178d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca43b6cb-a246-47d7-9816-86830a591142", "sighting_of_ref": "indicator--e2ea13ca-ea73-40ed-bd17-c3bbcbfc7b12", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7323d998-1d1e-4ca5-b8cd-07c1315491a9", "sighting_of_ref": "indicator--e2ea13ca-ea73-40ed-bd17-c3bbcbfc7b12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a79e84-d97f-40da-9d6e-46a0f5cf36ad", "sighting_of_ref": "indicator--e2ea13ca-ea73-40ed-bd17-c3bbcbfc7b12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779dc9e2-e198-4413-a5f0-00eb223833c2", "sighting_of_ref": "indicator--3deb5cf6-8f63-4210-8dbd-43c56724d5e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14fc4a07-b72d-4758-9dd6-fa1d22457623", "sighting_of_ref": "indicator--b07a300d-fb9d-49e4-8465-908c4d19efea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a8a8b6-57a9-4cb0-89b9-6bd01dc8d019", "sighting_of_ref": "indicator--5b142fd8-d656-4387-ba4f-1317ffed5131", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898fe1ff-c083-4ada-8137-91528aef953f", "sighting_of_ref": "indicator--5b142fd8-d656-4387-ba4f-1317ffed5131", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea87184a-f5aa-47ef-9eda-c4b6a9d3a132", "sighting_of_ref": "indicator--0703ba0a-2107-41be-9d2e-71bbdfdc1805", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f1c058-0978-425d-9870-b95ae8f65fe2", "sighting_of_ref": "indicator--0703ba0a-2107-41be-9d2e-71bbdfdc1805", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76b082d-5848-4fd2-a45a-c0bd627d96cd", "sighting_of_ref": "indicator--fe19a054-3210-43f1-bfa7-16e1c0a9d47a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee83cc4-3c63-4850-85ee-95415f8c0a54", "sighting_of_ref": "indicator--0e26ccb0-1859-4ed9-a967-c4dfcbfa9fc2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc18b8d-eb53-4b5f-bf83-102da43d980f", "sighting_of_ref": "indicator--0e26ccb0-1859-4ed9-a967-c4dfcbfa9fc2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5108a926-ed83-4c13-b765-77ccff4b91a2", "sighting_of_ref": "indicator--8d26c57e-6ddf-447f-a219-048c4ff4c05e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32697325-0ea7-4f3e-b2b7-4736b017b454", "sighting_of_ref": "indicator--8d26c57e-6ddf-447f-a219-048c4ff4c05e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11597e2-38a5-4b3f-91e9-5a842f33da02", "sighting_of_ref": "indicator--4d3dba7f-4e8e-4744-ba75-328ad1bab6ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79256b81-e890-444b-b3b7-6a779be0d9da", "sighting_of_ref": "indicator--4d3dba7f-4e8e-4744-ba75-328ad1bab6ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bb2689-3f82-4413-8a15-13fd21505979", "sighting_of_ref": "indicator--b2228ec8-5cc5-41e2-83d2-ebf8c1cc917e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e863802-8ae7-4a84-9481-bab8218791c4", "sighting_of_ref": "indicator--c9b52c38-8893-4803-8bde-8e185f859806", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f105d5c5-8c9f-4b6a-a634-0530ac938805", "sighting_of_ref": "indicator--93ee9ef1-a70b-4b16-badb-4f950ddc2f75", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d545484-da9c-429b-8c17-fc7a6a8a96aa", "sighting_of_ref": "indicator--c05734e0-9e68-4f0a-8a4b-06ac1b03eefd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259cb6d7-0955-4810-9f3d-133552ed5029", "sighting_of_ref": "indicator--c05734e0-9e68-4f0a-8a4b-06ac1b03eefd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58d3129-cf86-4b6f-b147-f0a278141a7c", "sighting_of_ref": "indicator--c05734e0-9e68-4f0a-8a4b-06ac1b03eefd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b29301-f840-4fdc-8450-62cb06dcec83", "sighting_of_ref": "indicator--70ead6bb-b164-42ec-a507-1defc89cc647", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cfcf07-6d30-47bb-afe5-92130b041cd8", "sighting_of_ref": "indicator--182a822e-0f6c-4bf1-b1e0-1d18539fbe15", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd83d149-948a-466f-a13c-70c3c6aa4ca7", "sighting_of_ref": "indicator--182a822e-0f6c-4bf1-b1e0-1d18539fbe15", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bb4fbf-d47e-4646-8ca5-783b4d0aa8bf", "sighting_of_ref": "indicator--8b899e4c-81e8-4bac-abcf-1bff5a1867b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214360b3-e0a3-4d7c-904b-c101891271c7", "sighting_of_ref": "indicator--b1d467c0-6e87-4586-baab-82e438187755", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e419e313-21bc-40a0-b2f9-483d880f846a", "sighting_of_ref": "indicator--b1d467c0-6e87-4586-baab-82e438187755", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c146ac8-1ea6-40ce-97b0-f5fb0964ee82", "sighting_of_ref": "indicator--b1d467c0-6e87-4586-baab-82e438187755", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f18e05-3d37-4950-9003-1058b6b33144", "sighting_of_ref": "indicator--d027f997-fec0-4359-a4ef-b9ea4e1b5ef8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e73272-f7b1-48aa-af53-99577726be89", "sighting_of_ref": "indicator--d027f997-fec0-4359-a4ef-b9ea4e1b5ef8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ced0ba-2031-43bc-aa3c-c5a615c9957b", "sighting_of_ref": "indicator--d027f997-fec0-4359-a4ef-b9ea4e1b5ef8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d4dae8-0a7d-4ce6-865e-719574ec3c24", "sighting_of_ref": "indicator--9d19488f-439a-4b69-a223-c2e18935535e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3c94ee-9a0e-4c89-960a-7585c8f076c3", "sighting_of_ref": "indicator--b9c965fc-56e1-47d7-93be-a99221f00161", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2116ec16-89ba-4149-abde-efb0f3db7814", "sighting_of_ref": "indicator--99f5f329-6119-40c1-b809-a1ea810f7d14", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1481eadf-c5e5-44fc-8580-4015960f3a7a", "sighting_of_ref": "indicator--b8c22f6c-c168-42fe-8fa3-be8c4f97fdab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c381fde8-f62d-4870-b02b-6c5bfc26bfcd", "sighting_of_ref": "indicator--b8c22f6c-c168-42fe-8fa3-be8c4f97fdab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142e93a2-5afe-4140-a0b7-3b19997cca3d", "sighting_of_ref": "indicator--6ebfef7f-4e1f-4f4b-9c9b-c0a3c2a45f31", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef010534-9857-4a18-89f2-6bb21df2c652", "sighting_of_ref": "indicator--a6e8d27b-64b7-4be2-af2f-8b9b45246bd9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bdec89-cec9-478e-969a-a4aa1bf6cd9f", "sighting_of_ref": "indicator--212ab5e3-dccd-4198-b969-b6b5305bd86a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b66972-213c-4e52-bfd8-1a3541a7253f", "sighting_of_ref": "indicator--212ab5e3-dccd-4198-b969-b6b5305bd86a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa712ecb-8b48-439e-b488-afda4b26890f", "sighting_of_ref": "indicator--212ab5e3-dccd-4198-b969-b6b5305bd86a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036d2928-586d-4b27-9405-8eab6a2f45ee", "sighting_of_ref": "indicator--be329879-ea28-473c-9e3e-34a4d2b5c09c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289b54f3-ed1b-46ac-ae4f-a26527a598d3", "sighting_of_ref": "indicator--be329879-ea28-473c-9e3e-34a4d2b5c09c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61262d1-c45c-4498-a67d-6247145cffda", "sighting_of_ref": "indicator--f97e4916-2999-46c6-ae2d-2832bacfbcab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d21d44-b156-439e-8cef-746352dccfcd", "sighting_of_ref": "indicator--f97e4916-2999-46c6-ae2d-2832bacfbcab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98909ec-fd29-4de6-98c2-37eeea07157a", "sighting_of_ref": "indicator--f97e4916-2999-46c6-ae2d-2832bacfbcab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067e3cdf-f5a5-4f16-83f8-9e428ef3d850", "sighting_of_ref": "indicator--91a260a2-789d-498b-96ba-1d2a051ada86", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23b6e45-4fc7-45d1-888a-5822435f68c1", "sighting_of_ref": "indicator--91a260a2-789d-498b-96ba-1d2a051ada86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a752ed-b119-4df1-9bc5-93f14dc3ddf9", "sighting_of_ref": "indicator--91a260a2-789d-498b-96ba-1d2a051ada86", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01b375c-4fd6-4435-8960-0a8796245511", "sighting_of_ref": "indicator--d6f4e0c9-2a11-43c4-b0b6-971eee76de1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91eb266-3d37-4ba2-b426-11d91a731b3a", "sighting_of_ref": "indicator--d6f4e0c9-2a11-43c4-b0b6-971eee76de1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dba73dc-abb6-446e-8d9d-ac4b2706799b", "sighting_of_ref": "indicator--a9beaf78-7af8-4b7f-bc13-0fbc726c64db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d59145-9a46-4f20-b210-0dcb8b5d96ec", "sighting_of_ref": "indicator--a9beaf78-7af8-4b7f-bc13-0fbc726c64db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33b3082-f622-4d53-a947-a3bacabd9d3d", "sighting_of_ref": "indicator--6de08a5e-5cdd-40a8-a942-ea281b2a68ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743c71dc-2f51-4d37-a5cb-71cc8c52e08c", "sighting_of_ref": "indicator--ab4399f8-34ae-465e-9229-4564567089fd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489b6e73-5854-4e09-8232-02b51d89db86", "sighting_of_ref": "indicator--5ab579b8-200e-479f-865f-bd2f54be7bce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44add2e3-ba94-48ae-9a4d-0796a8adeeb2", "sighting_of_ref": "indicator--5ab579b8-200e-479f-865f-bd2f54be7bce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc23512f-80ee-4dac-a502-e35049a84327", "sighting_of_ref": "indicator--5ab579b8-200e-479f-865f-bd2f54be7bce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b2b8a2-a857-40be-8961-af2d09916080", "sighting_of_ref": "indicator--b98662d6-6162-4aa8-baec-69582e792b3a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a3b396-829b-4ca1-8ee0-93ed09794be0", "sighting_of_ref": "indicator--b98662d6-6162-4aa8-baec-69582e792b3a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d6d0f1-d47f-410d-9b46-6265384f22c0", "sighting_of_ref": "indicator--5dadb97c-1c3b-4e10-b6fc-acdb3ba91a55", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9148e3ac-f25b-4af4-a4ad-34234c7db0a2", "sighting_of_ref": "indicator--5dadb97c-1c3b-4e10-b6fc-acdb3ba91a55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae274566-edaf-4106-aa14-84c546e658a2", "sighting_of_ref": "indicator--eeed7a1e-d366-44c1-9999-46ff4485dd60", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe968a71-f3d9-4c87-92eb-a6f16fc46073", "sighting_of_ref": "indicator--eeed7a1e-d366-44c1-9999-46ff4485dd60", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f980f2-9a8c-4cb2-a4ee-de0ced4ab584", "sighting_of_ref": "indicator--4bc72a6e-07e0-43f7-9c36-eb73ea5fcda4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a93a97-64e5-42a2-9683-4a47db81e4cc", "sighting_of_ref": "indicator--4bc72a6e-07e0-43f7-9c36-eb73ea5fcda4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e0533b-653f-42d1-9d4a-c9286d0f8dad", "sighting_of_ref": "indicator--4bc72a6e-07e0-43f7-9c36-eb73ea5fcda4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f51ea07-8415-41ea-a376-8e0a835755bc", "sighting_of_ref": "indicator--8f273756-0494-4ee6-b367-390ae1c1cf5f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27a40e7-a1ec-4da4-a54d-81844965bcb7", "sighting_of_ref": "indicator--715fe6f3-870c-4faa-8cf9-5b73d0529ce2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e2c3be-cd03-4dc3-9bbf-96126ca9fabd", "sighting_of_ref": "indicator--d26e3140-ab64-434e-b2b7-eb37595a9491", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01d5228-1390-48ca-a8fe-bd40eb869d3e", "sighting_of_ref": "indicator--d26e3140-ab64-434e-b2b7-eb37595a9491", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b484f9-53c0-4911-849c-40ac4042e40b", "sighting_of_ref": "indicator--66887063-46af-4d1e-b1a4-540878efbb81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ce4b00-3e95-4005-8b78-12bb84968fd9", "sighting_of_ref": "indicator--75de010b-6517-4fad-9b0a-c0a0ef16d216", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0062d07f-9e5a-43a3-8e04-cc3695f1232a", "sighting_of_ref": "indicator--a5628946-5754-4d53-944d-221127ac18df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a911ca-b765-41b4-b8e9-e5413ebd51f2", "sighting_of_ref": "indicator--315ff756-7918-40a3-80df-6257e5997dad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727744ef-f6fc-41a4-b77e-77bbc3539a98", "sighting_of_ref": "indicator--3d86a1c7-ca88-4631-82fe-0208aa357faf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2911d56-c418-4321-82b4-f09d1764e82d", "sighting_of_ref": "indicator--3d86a1c7-ca88-4631-82fe-0208aa357faf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9291d86e-daad-4831-acb0-cedf2deff159", "sighting_of_ref": "indicator--3d86a1c7-ca88-4631-82fe-0208aa357faf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8200678-dbc1-42fc-977e-c0db70d8bd28", "sighting_of_ref": "indicator--5e2ea837-b845-42f7-91c7-9a4f2540fcdb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1c2e18-e208-40c5-816e-50e6583bb0a7", "sighting_of_ref": "indicator--5e2ea837-b845-42f7-91c7-9a4f2540fcdb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a6eee9-fd1e-4282-afdb-c75c7bf5e71e", "sighting_of_ref": "indicator--d895f0a3-275c-4b6e-a4a1-3660db06f951", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f035b68-1f85-47f9-b0cb-fefc2210b460", "sighting_of_ref": "indicator--d895f0a3-275c-4b6e-a4a1-3660db06f951", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb61d94-6138-4755-bc90-5c36c15c1645", "sighting_of_ref": "indicator--ebad6640-739e-44c0-bcce-83530e797da9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ae8798-57af-482a-934b-3f7df011ac54", "sighting_of_ref": "indicator--ebad6640-739e-44c0-bcce-83530e797da9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bc2e22-f7ea-49b2-9314-90bc70c71a45", "sighting_of_ref": "indicator--ebad6640-739e-44c0-bcce-83530e797da9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1efd9be-3cb6-4f8e-906c-7582f5d53a2c", "sighting_of_ref": "indicator--935a353c-b9b4-4282-9120-021f214b4c53", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d935271b-ae29-4ccf-9f64-d8694d7f900b", "sighting_of_ref": "indicator--b55a8c16-3fd6-4ac1-8ac1-f94ce1bde7e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acc4a17-321f-443c-b8c5-60869cf83364", "sighting_of_ref": "indicator--b55a8c16-3fd6-4ac1-8ac1-f94ce1bde7e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee117b6-0e8b-426a-9f81-89d49919c72d", "sighting_of_ref": "indicator--85880465-739e-41a7-8ddd-78bc440d709d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e4b472-f98c-4379-b3e7-67b3aa04b761", "sighting_of_ref": "indicator--85880465-739e-41a7-8ddd-78bc440d709d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b708dbfd-1331-48f2-949a-221d98b805bc", "sighting_of_ref": "indicator--ed92219c-0f17-4a7c-8da9-9d5b14c896cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2e6068-db45-4423-9082-5eae77c09ce1", "sighting_of_ref": "indicator--ed92219c-0f17-4a7c-8da9-9d5b14c896cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80995955-57f6-44f7-abb3-a2144b28b29c", "sighting_of_ref": "indicator--ed92219c-0f17-4a7c-8da9-9d5b14c896cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8408ee-0fc4-4a8c-8193-327772290646", "sighting_of_ref": "indicator--ec07e324-23da-4a41-b18b-f05836a1d50e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cf4c52-88de-42ed-a51c-adf3db6c0c80", "sighting_of_ref": "indicator--ec07e324-23da-4a41-b18b-f05836a1d50e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddd627d-28d6-4c00-af5e-069b51a11c61", "sighting_of_ref": "indicator--f6dd1a42-3856-49e8-b128-ea49513ff310", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638df766-7e20-47f9-9bba-d4b8b4d24f82", "sighting_of_ref": "indicator--f6dd1a42-3856-49e8-b128-ea49513ff310", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960bf314-a004-4695-8d21-f454fac6f214", "sighting_of_ref": "indicator--f4643fd1-7287-4351-8585-5061ef98e3ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57717eb0-499c-4223-a641-ee9f076591f1", "sighting_of_ref": "indicator--f4643fd1-7287-4351-8585-5061ef98e3ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb9ac08-031d-46d3-a402-4603509d694e", "sighting_of_ref": "indicator--f4643fd1-7287-4351-8585-5061ef98e3ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f414d3cd-330b-4b8c-99ff-3fac233c5f19", "sighting_of_ref": "indicator--19d9ed2c-150f-405a-aaec-ce39314e3fd6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce56b09-9930-491a-b63d-d63a8e872d5d", "sighting_of_ref": "indicator--d70d6679-d9e3-4258-9756-d86d01e6ccbe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2bddd1-4f1c-4ae9-a3ad-1070252833f9", "sighting_of_ref": "indicator--cba9d601-b2e9-4e66-afa0-c3a8604e3af3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff95900-975b-4f9b-890d-f5d8779bc8cc", "sighting_of_ref": "indicator--cba9d601-b2e9-4e66-afa0-c3a8604e3af3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6910d025-ea4e-4eef-b5f2-bebcb575a334", "sighting_of_ref": "indicator--9805f0c9-ee06-4496-b52e-9425e899b7a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70af7d1-b919-4c95-b755-07fb407d604d", "sighting_of_ref": "indicator--64df72a2-20b5-4193-8b0f-2b32fde876af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17361f29-a723-4ba7-a71d-e2776b63b553", "sighting_of_ref": "indicator--64df72a2-20b5-4193-8b0f-2b32fde876af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9aee0a-182a-446f-b1ff-af1acb8e07e0", "sighting_of_ref": "indicator--8799067e-3fb9-449d-a15a-2f6aaf39a9b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274832c0-a11c-4bdf-bdac-208a800abf37", "sighting_of_ref": "indicator--8799067e-3fb9-449d-a15a-2f6aaf39a9b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fe1e8b-470e-4e7e-9b66-2da4da4fd9ab", "sighting_of_ref": "indicator--9b404d2e-f6da-48b9-bb6d-0397bbdfe085", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f51ee7-a5d0-436f-95cf-7940669b0ace", "sighting_of_ref": "indicator--9b404d2e-f6da-48b9-bb6d-0397bbdfe085", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73501539-f29b-42fd-8779-f15b285ae4b3", "sighting_of_ref": "indicator--09b42dce-e448-4d6f-a123-3809465c631b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5745e2af-02bf-47cb-a29b-ece9829d3016", "sighting_of_ref": "indicator--09b42dce-e448-4d6f-a123-3809465c631b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42974776-f3a3-467c-9030-b6bf26e5d1d7", "sighting_of_ref": "indicator--f505b4e4-6878-48d3-b28f-711df6f89169", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7636244a-b888-44f5-b8ef-65b58b46b2b1", "sighting_of_ref": "indicator--daa4f5e7-7d1b-4714-a37a-7a4480a90651", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4c9351-24ad-4774-9ccb-e3d513d79f19", "sighting_of_ref": "indicator--daa4f5e7-7d1b-4714-a37a-7a4480a90651", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e880255-6612-4cb7-b93d-afe57af615a8", "sighting_of_ref": "indicator--eaf11311-de62-4f85-acf3-2d9207bfbd32", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8874a6be-485f-465b-8c9b-9aae9b5a6a2e", "sighting_of_ref": "indicator--7bbdeca4-e51a-48d5-9977-6897370b34ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea98876d-aeb1-444a-bd12-42306b81312e", "sighting_of_ref": "indicator--7bbdeca4-e51a-48d5-9977-6897370b34ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2039e54-30c0-4fec-b813-fd36a44cb343", "sighting_of_ref": "indicator--7bbdeca4-e51a-48d5-9977-6897370b34ce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcfcd84a-8dcc-4183-b952-954918559ca3", "sighting_of_ref": "indicator--06ddb0c1-46c3-43ca-b7b0-07fef5f6234c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6dd04a-9880-42fb-b8ce-7d4674ab1ac9", "sighting_of_ref": "indicator--e1c5a4f4-0f55-4c72-8f01-2e5797856789", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58e408c-d1cc-458b-a0de-1d0c03e5d7fb", "sighting_of_ref": "indicator--92d2093d-9905-4f00-b70a-5777b88058e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed8c79fd-6a41-40b5-b05b-17102c24be4d", "sighting_of_ref": "indicator--2ed4e157-cdef-4913-92cb-f381a9ef4b95", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edff48f-742c-4028-982d-5d014ba0f24c", "sighting_of_ref": "indicator--c568a2d7-cf1f-401e-8293-020ed316c0c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6a2649-831b-4594-963e-8b55337e077f", "sighting_of_ref": "indicator--c568a2d7-cf1f-401e-8293-020ed316c0c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8439a14f-f9ad-4fd0-ae13-6aa14d3d22a1", "sighting_of_ref": "indicator--52c81f39-ad2c-4adb-b5fd-e0071f2875d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a12a78b-437a-4d38-b928-211b3ce11bc7", "sighting_of_ref": "indicator--52c81f39-ad2c-4adb-b5fd-e0071f2875d1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefdaed5-feea-4cc6-b086-ce178d1745fc", "sighting_of_ref": "indicator--3f3aeeb9-cbbe-4115-8f09-e73535e0a71d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f390eca6-e853-4ae4-bc5d-6ef9dfda8286", "sighting_of_ref": "indicator--3f3aeeb9-cbbe-4115-8f09-e73535e0a71d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16de903-3407-4eaa-9a4c-c800739dba85", "sighting_of_ref": "indicator--3f3aeeb9-cbbe-4115-8f09-e73535e0a71d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13314d6c-bea4-4efc-8aea-022e4b58e587", "sighting_of_ref": "indicator--62128fde-054d-4fa6-894f-125f0124612e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca86aed-fa3a-416c-9c7a-368f87080fc4", "sighting_of_ref": "indicator--62128fde-054d-4fa6-894f-125f0124612e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb9301a-39ee-487a-99f6-9dc7d65fc46e", "sighting_of_ref": "indicator--bf9bc922-4a5b-4037-83f3-e4f933ffb36d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24f2bb0-2d3e-4eae-b941-71d842c5bac9", "sighting_of_ref": "indicator--bf9bc922-4a5b-4037-83f3-e4f933ffb36d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f96d0f-b70d-4c75-bad2-b0b15091de73", "sighting_of_ref": "indicator--87f6164e-7aa0-4f83-8c1a-4f502a71eb94", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328d8c16-fd1a-4fc8-aaf4-73c71aacc03e", "sighting_of_ref": "indicator--87f6164e-7aa0-4f83-8c1a-4f502a71eb94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4ac116-fd64-4ad2-92af-6ab80c80f842", "sighting_of_ref": "indicator--eef9a747-2850-4bd9-bb69-ebffa48b5c99", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2579539-afcd-4190-8713-19c5574bc0b2", "sighting_of_ref": "indicator--eef9a747-2850-4bd9-bb69-ebffa48b5c99", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67df9eb1-3ec9-4409-92c0-b9d8eb17b1b5", "sighting_of_ref": "indicator--08690c21-e568-4957-b880-f9a4c7886e95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1146c9bc-1c34-48ee-97b1-88277b93f788", "sighting_of_ref": "indicator--08690c21-e568-4957-b880-f9a4c7886e95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332a337e-4891-42f4-8631-ff1efb85d2e3", "sighting_of_ref": "indicator--ea5531e4-6e54-41d1-8ff0-412041cdcd0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57bf6d0-1e68-4e1d-b56d-ad388316cca2", "sighting_of_ref": "indicator--102d0c64-bd51-42e3-bc7e-3bea6ad13c74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfab470-9377-4b8e-817a-7bdfd74e7c6c", "sighting_of_ref": "indicator--628ef7f5-bead-4f25-b9d8-d8c5fcec6b6f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d2662f-ba21-4028-87fe-0f94952bfd90", "sighting_of_ref": "indicator--04cbfca5-6320-46e3-bb63-8ba891b7abfd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e480d926-ae85-4f04-8275-c4695eda42e1", "sighting_of_ref": "indicator--04cbfca5-6320-46e3-bb63-8ba891b7abfd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbc8d1d-1dc7-482d-8367-d472db78960b", "sighting_of_ref": "indicator--a361e5d4-ffa8-4718-9e29-f54a40b9ae44", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88d1e0d-d38a-4a83-b6e7-106e5c3cb628", "sighting_of_ref": "indicator--a361e5d4-ffa8-4718-9e29-f54a40b9ae44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08648ab4-c863-4e94-be2a-346f4b5abc73", "sighting_of_ref": "indicator--535393a3-2026-424f-b0da-afc838dd69c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf90335-04af-4fd9-9b7a-aa54482b50d8", "sighting_of_ref": "indicator--535393a3-2026-424f-b0da-afc838dd69c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5321d0d-c107-4111-aafc-9e178ddeecc8", "sighting_of_ref": "indicator--5d517a7b-e47c-4af9-94cb-5445dc21c6d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a706d619-f5f9-4f7b-94de-5404de82bff9", "sighting_of_ref": "indicator--5d517a7b-e47c-4af9-94cb-5445dc21c6d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c15ac1-0724-4343-be06-4dc40c7c5f8e", "sighting_of_ref": "indicator--5d517a7b-e47c-4af9-94cb-5445dc21c6d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acf4188-93e5-46fe-89e8-0b824dff7e5c", "sighting_of_ref": "indicator--96ed3e8d-e9b4-44da-b1c3-1346666e8151", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698e69ce-278e-4ef5-b6e0-abf80eb29f3e", "sighting_of_ref": "indicator--96ed3e8d-e9b4-44da-b1c3-1346666e8151", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca2fb3f-0b96-4523-9d00-bea0155d5917", "sighting_of_ref": "indicator--6d13ffb0-ffa0-42c5-83c1-b204ba2587e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ac4736-c489-42a1-a30e-9e206c66b150", "sighting_of_ref": "indicator--6d13ffb0-ffa0-42c5-83c1-b204ba2587e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc76416e-2a3f-4416-af61-be4038f81c10", "sighting_of_ref": "indicator--6d13ffb0-ffa0-42c5-83c1-b204ba2587e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551788f0-bb5e-4adb-9768-697775b93e00", "sighting_of_ref": "indicator--af96326b-4ded-4faf-aaa2-88ead9c6a2b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6e21b7-121a-4c81-b2b7-495044da202b", "sighting_of_ref": "indicator--41cc4e73-b2d5-4573-94ec-1ac59b67c78b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56fadd3-1241-41a8-a16e-047e412502c0", "sighting_of_ref": "indicator--bb8a6d0b-a791-4b63-83b6-abb0a0477668", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23294868-c4c1-4650-9cb1-5beb86f80ee8", "sighting_of_ref": "indicator--13570bc7-ad05-4e16-ae76-8cff258f7496", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bd444c-3c14-4d24-b785-d155f9d39096", "sighting_of_ref": "indicator--b3fe11cb-22a6-4ed5-b56a-8d6c6088a81e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28477ef-1ff2-4f53-971f-9d7ad71893c1", "sighting_of_ref": "indicator--de821d44-19c8-42f8-97e4-5206ca566110", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fc33d1-064e-4d23-9abf-d1a293f538f5", "sighting_of_ref": "indicator--de821d44-19c8-42f8-97e4-5206ca566110", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5703d65e-ca50-4df0-88c5-17a0b28da269", "sighting_of_ref": "indicator--4246aa6b-aac2-4ed3-8bf1-be6b50a21002", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c32377a-10d0-4491-a77b-76738575e3f7", "sighting_of_ref": "indicator--329df87b-831f-44fe-8bbb-8e4b86ea9183", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe2b07c-f06d-4ddf-b21c-8d3e26976c3f", "sighting_of_ref": "indicator--3ce36b18-9d00-47c3-b8cc-8af82f0a6b11", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f15b37c-3be1-4a01-979e-2cf9d1c998b8", "sighting_of_ref": "indicator--3ce36b18-9d00-47c3-b8cc-8af82f0a6b11", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2304c02-bc60-4ece-ada7-e9fd1cb8d560", "sighting_of_ref": "indicator--3ce36b18-9d00-47c3-b8cc-8af82f0a6b11", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2661458e-661a-4695-a2a6-42c956762100", "sighting_of_ref": "indicator--df8311c5-c420-4abb-bcd3-8c2acec53bca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653b5580-83a6-43e7-83c9-5710498c6353", "sighting_of_ref": "indicator--df8311c5-c420-4abb-bcd3-8c2acec53bca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4203769a-3041-405e-96b1-8e89bbcb2be6", "sighting_of_ref": "indicator--4809eb1f-e6b2-48f4-a74b-a196415cfb73", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e6fc42-6bef-4745-84b9-93990d10f434", "sighting_of_ref": "indicator--4809eb1f-e6b2-48f4-a74b-a196415cfb73", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0921fc-7c1a-4fe4-bb38-10f697e2b76f", "sighting_of_ref": "indicator--8be1a7ed-20f5-44c1-a9a9-de8071ff08a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db592de-0eb1-4ea1-9ef8-36356a0cd03a", "sighting_of_ref": "indicator--8be1a7ed-20f5-44c1-a9a9-de8071ff08a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d882f6-891a-4a60-b554-34b17c33af69", "sighting_of_ref": "indicator--8be1a7ed-20f5-44c1-a9a9-de8071ff08a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4551034-11f0-4d5f-83b3-80b0d2529a25", "sighting_of_ref": "indicator--08f04af8-1a97-43d4-8d41-f3b47f9d95ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdf6557-b359-46e6-adb2-8d1579b65520", "sighting_of_ref": "indicator--08f04af8-1a97-43d4-8d41-f3b47f9d95ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19279248-4baf-4a14-b72a-b05f511cc3f0", "sighting_of_ref": "indicator--a840c14e-50d7-4dc9-bf3a-09288d894a70", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf280186-77ce-45c0-a645-7aa5ea821820", "sighting_of_ref": "indicator--a840c14e-50d7-4dc9-bf3a-09288d894a70", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76456cbd-a743-4f34-8d3a-c7a0f7ccf537", "sighting_of_ref": "indicator--1792b87f-db4e-4331-b18e-ab792e0e5a82", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c65d85-400a-4d5d-95d5-11c2d02c30ac", "sighting_of_ref": "indicator--1792b87f-db4e-4331-b18e-ab792e0e5a82", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975c51cd-4e7e-4a8e-94e4-e1108fef5b1d", "sighting_of_ref": "indicator--05a42488-f88d-450c-8dfa-6fb0dc7b8575", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1136dea4-5bf0-47d8-80be-723081b9a820", "sighting_of_ref": "indicator--05a42488-f88d-450c-8dfa-6fb0dc7b8575", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd5b7de-98a4-4133-8b04-6641d6a3320a", "sighting_of_ref": "indicator--f515097b-5d92-41d7-87a5-c7a3b391938a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6f3c30-2aa7-4f1d-811e-1d32a6587420", "sighting_of_ref": "indicator--f515097b-5d92-41d7-87a5-c7a3b391938a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d953967d-d157-4643-afcb-5c26aba24048", "sighting_of_ref": "indicator--f515097b-5d92-41d7-87a5-c7a3b391938a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c49c7e5-1032-4ae2-9246-357072ecdbd3", "sighting_of_ref": "indicator--28a956f8-ae7d-4f54-b0a9-4be1e70c0ed5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f3d0b8-2301-4aca-8e2e-88ba10749c2f", "sighting_of_ref": "indicator--28a956f8-ae7d-4f54-b0a9-4be1e70c0ed5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12713ae1-c5f3-4ccd-a75d-a4933aaa961d", "sighting_of_ref": "indicator--e4e695f9-4b3e-46cc-bf13-8cf6820cc3d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820a1fc8-4802-48d0-a502-17b1f23b0710", "sighting_of_ref": "indicator--89770df4-ba8e-463c-b454-7b988f098c07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6e5827-5774-46a3-9603-bfb9fe595d44", "sighting_of_ref": "indicator--89770df4-ba8e-463c-b454-7b988f098c07", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a966d19-021a-4159-b642-03dd28c3e824", "sighting_of_ref": "indicator--89770df4-ba8e-463c-b454-7b988f098c07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af18f3b-df02-46f2-9a75-af3c948c8811", "sighting_of_ref": "indicator--c7bb6567-d2e8-43f2-a3de-b3d12c756bb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62626ed0-d843-422c-82ef-86ab0ead1182", "sighting_of_ref": "indicator--8429064e-0771-4fe7-abcc-dbb110100be6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1150a070-4709-4871-b135-bfafef052bd7", "sighting_of_ref": "indicator--8429064e-0771-4fe7-abcc-dbb110100be6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad85a45e-fdee-4426-bae6-2c026de5be39", "sighting_of_ref": "indicator--17727f7a-2e18-4a07-938a-b80d9bcbb6d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba81828-5ddd-41d6-854d-29d6b20990d2", "sighting_of_ref": "indicator--980854ef-4b6b-4737-9671-bbdb84aa77c8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed0bf27-850c-4e50-a177-d2bd94cffde0", "sighting_of_ref": "indicator--395d72ba-6d52-4e85-8864-b74262273a71", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0759781c-d82b-4a62-92dd-524fe6e2f7c3", "sighting_of_ref": "indicator--c63061a4-c81b-421d-b4cd-1e79fd2e3d76", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5ac7b4-cf59-48b9-842f-e0e3aa0019dc", "sighting_of_ref": "indicator--c63061a4-c81b-421d-b4cd-1e79fd2e3d76", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babee14b-4ad3-4abd-8ceb-f0f7a3cc4f49", "sighting_of_ref": "indicator--7d38a8b2-e7ed-421e-a723-189c0536b81c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c7e731-5bd8-424b-92ec-ac88664c3996", "sighting_of_ref": "indicator--7d38a8b2-e7ed-421e-a723-189c0536b81c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06991f7-54dd-477e-92dd-db8f3fcfa718", "sighting_of_ref": "indicator--7d38a8b2-e7ed-421e-a723-189c0536b81c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3535bb2-860a-4971-a668-733087ff5b00", "sighting_of_ref": "indicator--2d4cd7ca-12a7-445d-b8dc-5f373ade21fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca108d8-7cbf-485e-9216-1b17852a6841", "sighting_of_ref": "indicator--2d4cd7ca-12a7-445d-b8dc-5f373ade21fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d3e39f-cf1b-43c0-85f5-bcf203a56597", "sighting_of_ref": "indicator--e159eda9-4900-4c24-a4d4-08ffd0bc27c5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98c2ec0-a683-477a-90dd-7bf2f3e0f761", "sighting_of_ref": "indicator--c267a2e2-7e5c-4b89-9a8a-ac656ae0ced5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e417f46-437a-4988-ab6d-b2e31e661910", "sighting_of_ref": "indicator--c267a2e2-7e5c-4b89-9a8a-ac656ae0ced5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50876e00-5517-49a9-89a9-9bd2fe87d1cf", "sighting_of_ref": "indicator--c267a2e2-7e5c-4b89-9a8a-ac656ae0ced5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127b2ff9-c174-4be4-99e4-74eaa236b69e", "sighting_of_ref": "indicator--6fbe9068-cd08-4a3c-a6fb-38b26e51f1c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbb3226-9c3f-425e-9da8-f3bc42139b64", "sighting_of_ref": "indicator--bebde01b-34e4-4e9c-91ad-aa0ecb056555", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672e0375-447b-4363-87fb-f0f8b6666688", "sighting_of_ref": "indicator--bebde01b-34e4-4e9c-91ad-aa0ecb056555", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f5e10d-0b42-4232-b76c-60e2026295e6", "sighting_of_ref": "indicator--44614194-02ec-4519-b300-bb63430c88a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f16fa7-0806-4b21-8840-301c31f726ea", "sighting_of_ref": "indicator--44614194-02ec-4519-b300-bb63430c88a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d82018c-2bc3-4770-b0e6-6d21ab4529ee", "sighting_of_ref": "indicator--a11ae33c-6714-436c-bb2c-918a7b8cc0c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae7c546-0bd6-4d3a-ae74-2b643584a14b", "sighting_of_ref": "indicator--34745c70-5d2d-41e6-9855-7524f463f4af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf49d73-adfb-4e43-bf09-539f26b1f21e", "sighting_of_ref": "indicator--d8e12c72-b72f-490e-b7e6-7734d42c81eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87363ca-61d0-4d2c-b619-18e138b82e96", "sighting_of_ref": "indicator--b5d05bfe-b2e2-49b5-a3d8-35806d8e8cac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a231182a-98bf-477d-b7f7-837e2bdd1461", "sighting_of_ref": "indicator--b5d05bfe-b2e2-49b5-a3d8-35806d8e8cac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b1c1a9-98dd-452a-8b0e-b5466bc7b141", "sighting_of_ref": "indicator--536012f5-dc7d-4455-8d8b-b497f737773b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654d9cea-dc1f-47d8-b05f-3da10610cbba", "sighting_of_ref": "indicator--536012f5-dc7d-4455-8d8b-b497f737773b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93e744d-a49f-492a-b17c-cc3f6a3b0ce5", "sighting_of_ref": "indicator--06bb511b-530f-4cf7-bf59-32b7ad9a99c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dbef87-0144-4712-a3d2-354a2f80afc9", "sighting_of_ref": "indicator--06bb511b-530f-4cf7-bf59-32b7ad9a99c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350987d0-e320-4642-89e5-96125194a61f", "sighting_of_ref": "indicator--06bb511b-530f-4cf7-bf59-32b7ad9a99c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7937813e-1acf-42cc-9889-b7515b66d010", "sighting_of_ref": "indicator--59bb1e59-c469-4075-b474-bc0c57ec1daf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a97900-55ec-4f2a-8cf3-d59488909d3f", "sighting_of_ref": "indicator--59bb1e59-c469-4075-b474-bc0c57ec1daf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b165d615-1e7e-439f-a20e-b69f95d35493", "sighting_of_ref": "indicator--3f0174d2-ad48-4d06-8869-c065c22bc40a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298b054c-2621-495a-aa4b-72d6b1e6ebac", "sighting_of_ref": "indicator--3f0174d2-ad48-4d06-8869-c065c22bc40a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cba3231-9c57-4fad-b4cb-c284261a2995", "sighting_of_ref": "indicator--044adaeb-7582-41d1-9708-ba3672b15076", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9360bba-2150-4826-b9d3-98893dbce2a8", "sighting_of_ref": "indicator--044adaeb-7582-41d1-9708-ba3672b15076", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19126afd-2920-4ab3-a35c-db03440275ef", "sighting_of_ref": "indicator--5eecf67d-efbf-49a4-91e7-42c7c6b151a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e415dc2-46b4-46a1-96e8-8bc4b1c9c3c4", "sighting_of_ref": "indicator--5eecf67d-efbf-49a4-91e7-42c7c6b151a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9302e85-6168-43b7-aaf0-8f13b287eedf", "sighting_of_ref": "indicator--4b645212-748f-402a-a530-2cd4b4810249", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f62e685-0ba9-4559-b77f-608313f693fb", "sighting_of_ref": "indicator--488b9403-8615-440e-93bf-0f4bbea0d4f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b6a759-9f24-432f-b4fc-206f50ddc4bc", "sighting_of_ref": "indicator--d9205e6b-14b3-48bb-8860-19a378d89176", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469c41cd-50aa-433c-9fc3-29b730433ec9", "sighting_of_ref": "indicator--1874c799-a25d-47c3-8c93-de778437ddcf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6926b80a-9ec7-4e0a-b68f-377cee26a0f8", "sighting_of_ref": "indicator--ace4f2df-e178-4cd3-91a2-100121e49f34", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eaafc1-7a87-4d9e-9529-83d1952dc306", "sighting_of_ref": "indicator--ace4f2df-e178-4cd3-91a2-100121e49f34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5812838b-44f2-40de-ba54-f1c3db54c64c", "sighting_of_ref": "indicator--76934820-0bcf-49a0-9a5b-e4cd37b2d5a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ac5f5-227e-4769-9f2e-a8a166fe4ec4", "sighting_of_ref": "indicator--76934820-0bcf-49a0-9a5b-e4cd37b2d5a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814530b6-e341-452b-90d8-ffaaf89f6e8d", "sighting_of_ref": "indicator--76934820-0bcf-49a0-9a5b-e4cd37b2d5a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a5c8e0-790c-4cd3-88f3-0ca1795cc638", "sighting_of_ref": "indicator--169317ba-70e7-4dd1-9e10-012586cbad06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2f70d6-7940-4511-94fb-882d5baee4bc", "sighting_of_ref": "indicator--db957770-dfe1-4c02-b9fc-670a83c53400", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b5f4c1-4615-48a6-861c-465039b0ff72", "sighting_of_ref": "indicator--2f6fe6f7-91b5-4309-bbc6-59c27f36ef77", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ca0b90-eb67-4f4f-bdd7-4268d0b41865", "sighting_of_ref": "indicator--b413d456-fecc-4fd4-9606-9045752818dd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59090fd-1c3c-4f6f-bb7a-cec0be827953", "sighting_of_ref": "indicator--b413d456-fecc-4fd4-9606-9045752818dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a050212-a2d9-48ec-8ce2-6fd0cf3ff325", "sighting_of_ref": "indicator--b413d456-fecc-4fd4-9606-9045752818dd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe640c8-ef31-4e43-b215-7374b266835e", "sighting_of_ref": "indicator--ba8a4495-7eb9-47c5-ba75-aec055ab1f9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f602ed65-b93a-4778-b29d-32aeab89ac70", "sighting_of_ref": "indicator--ba8a4495-7eb9-47c5-ba75-aec055ab1f9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a15f009-ad73-4c90-a261-f7387a396ad7", "sighting_of_ref": "indicator--88fe6cd8-58a0-478b-8c50-39e7f68b9f9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28570af4-1c71-42cc-b1b3-1036ec789886", "sighting_of_ref": "indicator--88fe6cd8-58a0-478b-8c50-39e7f68b9f9a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32c715c-1b42-418c-888b-e5f8cf74543b", "sighting_of_ref": "indicator--bae39b4a-3748-44bd-a2a9-6037ae686fc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2defa684-612e-4e9d-bb12-3e1c937aaba1", "sighting_of_ref": "indicator--bae39b4a-3748-44bd-a2a9-6037ae686fc9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af4b8a1-de31-45fa-a3df-b266ec55c696", "sighting_of_ref": "indicator--7fd09999-6e7c-468a-aba0-aec716f7df1e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b4c661-9199-42bf-8b41-9f959ce06838", "sighting_of_ref": "indicator--76c2aacf-397e-4320-b854-9b808e15ecf4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e003aa43-f4e5-445c-9165-d1e3767bb532", "sighting_of_ref": "indicator--03acb387-8348-451f-b74d-9336b5129c14", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b72686-e235-4cfe-a7a0-9b47f526f095", "sighting_of_ref": "indicator--b65c75de-b30b-4528-82ea-f74f54807fe9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5417456-1419-4f58-8967-f1ddaafa14ce", "sighting_of_ref": "indicator--b65c75de-b30b-4528-82ea-f74f54807fe9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2298db1-300a-49c5-bced-ea59b460ad37", "sighting_of_ref": "indicator--d39bab69-760f-48be-b507-105b8658941e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4577d9f0-64e8-4072-a269-6fd0deadcf87", "sighting_of_ref": "indicator--d39bab69-760f-48be-b507-105b8658941e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c66601-4e4a-4e26-ac5f-601b52e7b7d6", "sighting_of_ref": "indicator--6bd81a8a-87cc-41de-b176-a7767817d7d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381ec920-49c1-465b-9c4f-3757466b6b04", "sighting_of_ref": "indicator--6bd81a8a-87cc-41de-b176-a7767817d7d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992f5165-88c2-4450-b62f-ea3061019190", "sighting_of_ref": "indicator--147afbd8-9a20-4456-9c7f-fa0b68b61f55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccc4978-dc03-4b45-9e23-9fc756a09fdf", "sighting_of_ref": "indicator--147afbd8-9a20-4456-9c7f-fa0b68b61f55", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf490b4-1215-48f9-8d4a-0977ce1c7954", "sighting_of_ref": "indicator--1150c837-5228-48bb-84df-b4696118904a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a2754d-2fb3-4763-ac67-47d08c01531e", "sighting_of_ref": "indicator--894e3790-2510-4b7b-a6e6-d91966b26ab4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e24af86-7fb7-49f9-aacc-63cc8dbace4c", "sighting_of_ref": "indicator--5fb9fba3-7bde-4e68-bf69-030e6e1f8805", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a034804d-aa06-4686-ac67-fb21ea335421", "sighting_of_ref": "indicator--5fb9fba3-7bde-4e68-bf69-030e6e1f8805", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea310c4-757e-4f66-8bb9-bacb87d67cf6", "sighting_of_ref": "indicator--8340893c-d1d9-4a0d-a3bb-f11ebcbee8e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c7bcb1-5e33-4e0f-8b42-a9c39fb02069", "sighting_of_ref": "indicator--fc4fec0c-a76b-49c8-bbc4-94200b8ef614", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8ce71f-2e62-4705-9a95-3d1e4422fe49", "sighting_of_ref": "indicator--fc4fec0c-a76b-49c8-bbc4-94200b8ef614", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd92113-d97f-4931-9e3f-d84479fa0ed0", "sighting_of_ref": "indicator--96c969c1-4d9a-430b-b88c-709c969e848e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b43bf26-5100-4377-a7bb-e91557ca016a", "sighting_of_ref": "indicator--9496226d-be1e-4f3f-ae7f-43a300ce1459", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ada9900-ed04-47a5-8e5e-9e6078853aab", "sighting_of_ref": "indicator--9496226d-be1e-4f3f-ae7f-43a300ce1459", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374d8b22-767a-4222-bb9b-bb55d06abab5", "sighting_of_ref": "indicator--9496226d-be1e-4f3f-ae7f-43a300ce1459", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fec4c3-83ae-4b23-9d05-de6cc35ead47", "sighting_of_ref": "indicator--f4c55768-d953-4e21-b907-c2096e45ec21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aa5616-aa46-4072-89e1-2243410b1164", "sighting_of_ref": "indicator--f4c55768-d953-4e21-b907-c2096e45ec21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504c4b37-b4bd-4c71-95dc-1796b9a9a810", "sighting_of_ref": "indicator--cd340c11-5820-46ba-9618-56d0b3225a9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02662920-9e1f-4ca2-b15c-77fda93cf359", "sighting_of_ref": "indicator--12ced3c1-3b99-4012-bb86-15e5087d0e56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3a0900-7196-428a-ac80-9f70b9290902", "sighting_of_ref": "indicator--12ced3c1-3b99-4012-bb86-15e5087d0e56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbceb979-0f2d-42d0-90ea-acbc1cee668d", "sighting_of_ref": "indicator--6158da16-82e6-4760-81c5-a20fbf8ee942", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c69cba-6bed-4bad-940b-e6aee2bd74f0", "sighting_of_ref": "indicator--6158da16-82e6-4760-81c5-a20fbf8ee942", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6036ca-21e1-4cbb-9de3-110dcb9c5116", "sighting_of_ref": "indicator--0d5e0f52-acdc-4958-afde-19bef67e6060", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f1e94e-ade7-4b5b-9185-7a973dae49c1", "sighting_of_ref": "indicator--0d5e0f52-acdc-4958-afde-19bef67e6060", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83166c4d-6875-4e36-b75c-01f50e69f459", "sighting_of_ref": "indicator--def75523-d1c1-492d-9c5b-836fde757941", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d820068f-782a-4162-8366-674e979653cd", "sighting_of_ref": "indicator--73e964ff-3a2b-4ae6-9f4d-9bad10360c52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa1da50-2e71-491d-9546-908baa561cb4", "sighting_of_ref": "indicator--5866b843-1514-446c-b949-f20525eb10bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50c5059-a4b5-4a97-94b2-f2e00f62d747", "sighting_of_ref": "indicator--13dc56f0-ae7e-49c1-abf4-b4c800bd0c6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2e44c9-aad2-4c98-8787-71fac6cc3800", "sighting_of_ref": "indicator--13dc56f0-ae7e-49c1-abf4-b4c800bd0c6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6df4ab-42f7-4474-98ee-e1cb91e95ff9", "sighting_of_ref": "indicator--18dfc3a3-ab94-4938-90b5-916b41b2d1b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d941b34-e67d-417c-b274-15ed2d748da7", "sighting_of_ref": "indicator--18dfc3a3-ab94-4938-90b5-916b41b2d1b5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cfff4a-61e0-4831-b5cc-33b635a9ff62", "sighting_of_ref": "indicator--18dfc3a3-ab94-4938-90b5-916b41b2d1b5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39b7dba-966b-43cf-9a10-4efd5230e1cc", "sighting_of_ref": "indicator--f77a0951-b94b-43ff-87c1-71b780748911", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8aad1b-d9e6-4d7f-bdda-c86f855844bb", "sighting_of_ref": "indicator--f77a0951-b94b-43ff-87c1-71b780748911", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68e06c6-d6b8-4c1f-a446-4f364e4e5b79", "sighting_of_ref": "indicator--b3d55ed0-d56a-4d24-aac1-d3983f03a1ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d82e91-6d35-42f9-9c02-b11ac2f1ff51", "sighting_of_ref": "indicator--b3d55ed0-d56a-4d24-aac1-d3983f03a1ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda85805-d558-4219-aa8c-03b86032c381", "sighting_of_ref": "indicator--f61aebb2-7fae-4b54-83d4-efbdd4fde870", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58360e91-79e0-4c25-940a-bd9f61e0bac6", "sighting_of_ref": "indicator--f61aebb2-7fae-4b54-83d4-efbdd4fde870", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ed37ef-3d6d-47ee-ae1f-af8a7450dedf", "sighting_of_ref": "indicator--9662c47c-f133-4544-a4d8-6f9bbb12387f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d41fe0-0603-4503-b01e-35590642eee0", "sighting_of_ref": "indicator--9662c47c-f133-4544-a4d8-6f9bbb12387f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63b1fc7-6350-4610-b417-2eff3f730888", "sighting_of_ref": "indicator--d2fffdd6-80a1-4d72-a94f-1d0eb9f08fea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7eead3e-7ee8-44c8-8fcd-c43007a564c1", "sighting_of_ref": "indicator--d2fffdd6-80a1-4d72-a94f-1d0eb9f08fea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbe6f30-7deb-47ea-b795-135e3d98a15b", "sighting_of_ref": "indicator--d2fffdd6-80a1-4d72-a94f-1d0eb9f08fea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06aceab0-40ea-4b50-bdef-a232c85f5a61", "sighting_of_ref": "indicator--86689914-b5a3-49df-a8e2-96c58696d43a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05874a72-787b-4b43-a704-7089beb2e326", "sighting_of_ref": "indicator--54825c59-3f3e-4f2b-96c8-3092d8333d25", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c79204f-c90a-4b13-a277-5809fa60ddea", "sighting_of_ref": "indicator--54825c59-3f3e-4f2b-96c8-3092d8333d25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3275cb92-7ba4-4666-a5aa-9c77db445dfe", "sighting_of_ref": "indicator--54825c59-3f3e-4f2b-96c8-3092d8333d25", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0387163-53fd-447e-a4e5-214496dc06cc", "sighting_of_ref": "indicator--ba1ff195-5796-413d-908d-9d847989322d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e13caa-0545-4977-87b2-f48af9ef1beb", "sighting_of_ref": "indicator--14d0adc2-ca19-43bf-9563-1cb701cd010a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd9a917-5af3-4dc1-99b1-c493adc29187", "sighting_of_ref": "indicator--14d0adc2-ca19-43bf-9563-1cb701cd010a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39abba92-01d8-450e-b36a-392d813ad172", "sighting_of_ref": "indicator--14d0adc2-ca19-43bf-9563-1cb701cd010a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e09be2-f1be-4304-87e6-3702cc3caffe", "sighting_of_ref": "indicator--5a10b24e-c0ea-4e94-9337-7adf2a5bd443", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902278e8-2c29-41ad-9f2f-679a5843f131", "sighting_of_ref": "indicator--5a10b24e-c0ea-4e94-9337-7adf2a5bd443", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2c3ee7-fd73-44b2-b3ef-d73052acc033", "sighting_of_ref": "indicator--5a10b24e-c0ea-4e94-9337-7adf2a5bd443", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6734e9-a7d0-42c4-bb84-09c8aaed06e0", "sighting_of_ref": "indicator--59292a43-894c-457f-9f2a-89bdac13c8f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cb7b9b-3edd-4ce7-9f18-f8c97de05b48", "sighting_of_ref": "indicator--30eecece-005d-487e-b841-738e726ba2a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5872bc9-c18a-4026-af0b-1d3bcc54a46d", "sighting_of_ref": "indicator--30eecece-005d-487e-b841-738e726ba2a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c56bf7-e934-4ba5-9e22-83dc1a03a953", "sighting_of_ref": "indicator--30eecece-005d-487e-b841-738e726ba2a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4760ab-564a-4374-bc71-a6906b39af17", "sighting_of_ref": "indicator--3a6d5fce-458b-4e25-8498-76a316efffcb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9367c340-60a4-4bc1-998e-27ff2abfbaf1", "sighting_of_ref": "indicator--28047081-947a-4210-b67e-06536dbb55d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d075cc-0ab3-4796-bb97-d7f678c55a70", "sighting_of_ref": "indicator--4499bc9b-75c8-4a7d-85c6-d2545b8603ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384eb5c2-6bb4-4c01-a3b6-d2d78ee43a95", "sighting_of_ref": "indicator--4682abba-f12e-49bb-8be3-172bba76796c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529114b1-531d-40c1-8ebf-55e9e9aa1ae5", "sighting_of_ref": "indicator--5b32470f-55a0-4cbb-9d72-641193e57efa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aa0e7a-fd23-41a7-beb2-bedb53840e6d", "sighting_of_ref": "indicator--8a759c7c-8cec-4d5c-9c42-aab71a20ebac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a971268-9326-45b9-90b1-6f1423401524", "sighting_of_ref": "indicator--8a759c7c-8cec-4d5c-9c42-aab71a20ebac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84297859-549a-4ad8-b125-6d0ba98cfd44", "sighting_of_ref": "indicator--8a759c7c-8cec-4d5c-9c42-aab71a20ebac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15f0453-304c-4496-9dd8-a6cb9098661d", "sighting_of_ref": "indicator--6b9912b5-2022-40ba-9b21-fafb95805674", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520345d2-53d3-477e-a758-e0367cc54078", "sighting_of_ref": "indicator--6b9912b5-2022-40ba-9b21-fafb95805674", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b769957-14c1-4d18-bc7d-f9ebcd7f1d66", "sighting_of_ref": "indicator--6b9912b5-2022-40ba-9b21-fafb95805674", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02be31d-bec9-4fe5-9753-c0f73b6c4041", "sighting_of_ref": "indicator--8cfd610d-5f9d-4c72-9862-823e110f21ed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7476d5-7753-4ad9-92b8-2663086c1994", "sighting_of_ref": "indicator--8cfd610d-5f9d-4c72-9862-823e110f21ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7382b0d3-76dd-46a0-8876-524654b0f0f3", "sighting_of_ref": "indicator--30dbe68c-0e37-45d3-9627-39002fa6620a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe8a475-ce8f-428a-96cd-8fb18abd35ea", "sighting_of_ref": "indicator--30dbe68c-0e37-45d3-9627-39002fa6620a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f386367b-27c0-4217-a3be-bf7f512f92bd", "sighting_of_ref": "indicator--e4c25f88-4339-4368-829f-481c9338d145", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b1b23b-f704-46cc-b942-ba9659103893", "sighting_of_ref": "indicator--7bf6ac74-dc08-476e-b452-22a347bcd044", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ac210e-d41a-4f46-99f4-6253eb68570b", "sighting_of_ref": "indicator--7bf6ac74-dc08-476e-b452-22a347bcd044", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fd0eb7-ae50-46a6-a578-5e4783ad4a3e", "sighting_of_ref": "indicator--b2194dad-870d-4b77-a24f-86329211e9c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed2df9e-3282-42e9-bc91-84d165de2f71", "sighting_of_ref": "indicator--9b13b93b-d1ac-4e92-904a-d56ee3740771", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5158600b-1231-4585-a0e4-a230a03fff99", "sighting_of_ref": "indicator--7c6d0af7-1d43-4549-8ed0-7f8fdf736558", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9fcc9c-d751-489c-b4a1-816d7dc39696", "sighting_of_ref": "indicator--033c2a8c-3078-48df-b96d-585f3dc0a678", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c0f079-c790-4bcd-84d3-29ca3cf0db59", "sighting_of_ref": "indicator--033c2a8c-3078-48df-b96d-585f3dc0a678", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4c9916-7743-48db-943e-d7bbead98f1a", "sighting_of_ref": "indicator--06cbb09c-6e0d-490f-b087-904e48e7c4ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53461d73-e08a-4a5c-a830-88e00d5a74b3", "sighting_of_ref": "indicator--06cbb09c-6e0d-490f-b087-904e48e7c4ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04e1172-6eed-4358-b754-10da4e9342e9", "sighting_of_ref": "indicator--849675e1-c44d-4d40-96fd-4b8204beed0a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ed2531-6a40-4dbb-a349-31cf36a9457a", "sighting_of_ref": "indicator--6bfbc4d0-f778-446a-8437-32a08903577e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0950376f-3dc8-4c4b-acc7-48f1b50fddde", "sighting_of_ref": "indicator--6bfbc4d0-f778-446a-8437-32a08903577e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc214576-3960-422b-b55c-d37b0b33d1e0", "sighting_of_ref": "indicator--22de1aa7-cdcd-42a7-9c80-b39cdc23c803", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295be5a5-79f6-44dd-b7d5-5c453d68bb22", "sighting_of_ref": "indicator--22de1aa7-cdcd-42a7-9c80-b39cdc23c803", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451822d1-2436-4c76-9845-47b5cd4a5174", "sighting_of_ref": "indicator--22de1aa7-cdcd-42a7-9c80-b39cdc23c803", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea944c5-0097-49f7-a2d7-278aa6e909e7", "sighting_of_ref": "indicator--e999e3a1-6d3f-4ce1-a295-5e798854cc59", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13eae771-03c3-42de-8d02-d63818ba4173", "sighting_of_ref": "indicator--e999e3a1-6d3f-4ce1-a295-5e798854cc59", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cbf62a-6018-44f7-b21d-b5d14689b580", "sighting_of_ref": "indicator--3fdf5169-3186-45cc-9605-edadc880e9b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e0ec1b-2e12-4fd9-9141-52f92069ed37", "sighting_of_ref": "indicator--66f8b0e4-d0ce-4c2e-8360-b541a2dcc65e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1689f5a7-1c7a-4e03-b153-2ef555159449", "sighting_of_ref": "indicator--593716e7-0ffe-436c-a6b5-677b9f5f9621", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7334f9-cafc-489b-ae35-7c960fd7e5f4", "sighting_of_ref": "indicator--593716e7-0ffe-436c-a6b5-677b9f5f9621", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14db4837-6349-4289-9466-fc3fc6032164", "sighting_of_ref": "indicator--593716e7-0ffe-436c-a6b5-677b9f5f9621", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab26125-0c53-438e-a6ad-13d41aee7953", "sighting_of_ref": "indicator--fc351471-c4d3-4238-b614-6676c2a2764f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3e6d5a-5468-4816-b357-ef83aca1c855", "sighting_of_ref": "indicator--9bfeaf7b-08e1-40bf-aa97-61e36ac62b15", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1442be2-daa9-4db1-9de5-fcc1122c447a", "sighting_of_ref": "indicator--52fd53a9-e06e-4330-99ce-b7f68f92f57a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19970a69-cec7-459f-aec9-671a05206614", "sighting_of_ref": "indicator--bebb5a3a-0e74-48e4-a524-4334fb420846", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4950ffd8-1332-4b0f-bacc-2a252fbd9c2c", "sighting_of_ref": "indicator--bebb5a3a-0e74-48e4-a524-4334fb420846", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c24270-07da-4135-8cfd-5e687458e5af", "sighting_of_ref": "indicator--3fa21836-ea79-4a03-acce-23e09f4b3e9c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0388231-056e-4a1a-a2e5-f311f1533630", "sighting_of_ref": "indicator--3fa21836-ea79-4a03-acce-23e09f4b3e9c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559ac5e7-a9fd-4ff1-8b0d-6b3161fd7e19", "sighting_of_ref": "indicator--3fa21836-ea79-4a03-acce-23e09f4b3e9c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fc219a-0f9c-4d0e-800b-d7eb1e924043", "sighting_of_ref": "indicator--ae4efc90-c169-4d64-99b5-6820bedfb88c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29d37ec-695e-4796-ae26-51ef01129a2a", "sighting_of_ref": "indicator--ae4efc90-c169-4d64-99b5-6820bedfb88c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9afd43d-813d-410f-8501-ac3d34d6f020", "sighting_of_ref": "indicator--41462603-5154-4086-9da9-c267d08f9895", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddd4ea3-0fa5-45a6-a492-33b0ede57f0b", "sighting_of_ref": "indicator--41462603-5154-4086-9da9-c267d08f9895", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360f5f79-3db4-411c-8a54-aabf371f7f55", "sighting_of_ref": "indicator--74cff57c-ede6-4940-ae07-24719cec9f1d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba339f8b-1818-40e7-9e12-4839ca35384b", "sighting_of_ref": "indicator--a79b17bf-d3a1-402d-bb36-9bf82c9c1038", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d280020a-d64f-4669-be0e-cc7a5ea3e8fb", "sighting_of_ref": "indicator--df9e04df-1cc4-4fa2-807a-472f74680e58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b664d777-95cf-4e7a-96b2-f7ce7d787690", "sighting_of_ref": "indicator--07c60053-4955-4ee1-a1c5-5822e1cd25bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532a6d0d-4a24-427b-8b84-252589521dc6", "sighting_of_ref": "indicator--4b212c36-5dc6-48cf-b071-98535777f4dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ee2cb9-7c08-4db2-910e-0bc1a4638d62", "sighting_of_ref": "indicator--50052be3-abb8-4d98-8b18-983dfe898909", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef31919-1e0b-44b6-9034-7e0f91f9c6aa", "sighting_of_ref": "indicator--50052be3-abb8-4d98-8b18-983dfe898909", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4e1f57-21f4-47ec-bcc9-efc65e6f261a", "sighting_of_ref": "indicator--5b5ab59f-4f77-4f4a-bf42-752794f96297", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efd17f2-ec48-4bf3-a8d6-d70c7b379600", "sighting_of_ref": "indicator--8bc1ae79-fb2b-4dc1-8ce8-dd3502a899d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b392e5bf-8a75-4daa-925f-e568c5b41f12", "sighting_of_ref": "indicator--bb7800c5-ff1a-49af-a769-316e620b18d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c94fa8c-9990-4243-9bf1-1e7fc40a5557", "sighting_of_ref": "indicator--0a816c7c-0462-42d5-a420-5de4fa5e0e87", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641fccd5-f600-4639-bdc4-dc721cce6900", "sighting_of_ref": "indicator--9279896e-228d-4e72-9f17-8cba42717dc4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a641698e-08c9-44bf-b676-7c0be3ac19bf", "sighting_of_ref": "indicator--9279896e-228d-4e72-9f17-8cba42717dc4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de7eec8-ee6e-44a3-974d-37cc4e82e554", "sighting_of_ref": "indicator--3987a0f7-7f63-4397-b1c8-dabb73859407", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e972cb-a197-491a-8c08-44d3ec18cb26", "sighting_of_ref": "indicator--26391b27-94a9-4e50-bd8c-5aabfccbcd1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f783544-5f40-4c8e-bf10-725f23ab1d2b", "sighting_of_ref": "indicator--26391b27-94a9-4e50-bd8c-5aabfccbcd1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181bc8ec-96b4-4a06-a473-964e2f3213fd", "sighting_of_ref": "indicator--4797579c-0b06-47e2-86b7-9d849324376c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533b5e19-b136-4fb8-b480-3e92149b299f", "sighting_of_ref": "indicator--36f0a43a-c813-4646-a6b6-6f4600c3da21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac297085-4517-4432-8335-fef708a6b0ff", "sighting_of_ref": "indicator--36f0a43a-c813-4646-a6b6-6f4600c3da21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56940036-0cc5-4a5e-ac6f-0919fc722058", "sighting_of_ref": "indicator--c39f72fc-9fdc-4d09-844b-f4fd3e941d7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a506df2d-8e18-4356-a5c4-de64a0525968", "sighting_of_ref": "indicator--c39f72fc-9fdc-4d09-844b-f4fd3e941d7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f54cf0-abff-4767-b7ea-121dd6d7bdd6", "sighting_of_ref": "indicator--d0c77d6f-300b-43e5-aa8c-2633eee97d86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34148f5-2062-494a-8490-90e361dfe2e2", "sighting_of_ref": "indicator--d0c77d6f-300b-43e5-aa8c-2633eee97d86", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bbf36c-0bf0-4b62-acb4-9ae52dcaa8b6", "sighting_of_ref": "indicator--d92c8de2-2cf1-499a-9809-71aefb53ee74", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99422395-06ce-4826-bfd0-ca3b12642bdb", "sighting_of_ref": "indicator--5e7ac503-dc74-4356-82c4-3f1745edb9c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68fa2b9-e3e4-4de7-ad7c-72dee9e1764a", "sighting_of_ref": "indicator--fc07006c-ff4e-4723-83a2-6f8439e17477", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c9409a-815b-40d4-882d-5fade07acf18", "sighting_of_ref": "indicator--fc07006c-ff4e-4723-83a2-6f8439e17477", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974b59b3-8ced-4799-9774-03769227fe82", "sighting_of_ref": "indicator--54fa5200-660e-4763-8ace-f4ba5f24d42d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc035c1-cc33-4772-bb7c-3315d8d5e531", "sighting_of_ref": "indicator--3a8dc669-d167-4749-96a4-424e7e64d6d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c99969-c696-46c7-9803-7fb7f588cdea", "sighting_of_ref": "indicator--3a8dc669-d167-4749-96a4-424e7e64d6d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50adea0-8ccc-4dd7-a475-1501f1aff623", "sighting_of_ref": "indicator--fefa536e-d805-41c7-9726-a3339b03f94a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a68bd3-0de7-47c4-ad49-2b45bbc78f8a", "sighting_of_ref": "indicator--fefa536e-d805-41c7-9726-a3339b03f94a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dac950b-7b70-4e33-bf0c-cee9762cb00e", "sighting_of_ref": "indicator--fefa536e-d805-41c7-9726-a3339b03f94a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6c60d8-aaca-4ee5-8ce8-6aec8ae7c6c8", "sighting_of_ref": "indicator--4e1f6267-1115-4755-a030-99f437ae423e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d02e8ff-d512-4e25-96f5-f7346553463b", "sighting_of_ref": "indicator--d00e6906-e0c2-4318-9424-7929f18b7116", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529cfcec-df99-407e-bf00-3047c6ea0718", "sighting_of_ref": "indicator--d00e6906-e0c2-4318-9424-7929f18b7116", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864115a2-4b64-47a4-85e4-7856e19f52fc", "sighting_of_ref": "indicator--d1ca7d19-441a-47f2-ad36-cbfde7483dac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094ff905-c684-472b-b868-b334a15207af", "sighting_of_ref": "indicator--d1ca7d19-441a-47f2-ad36-cbfde7483dac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d857d06-f8c6-4e55-8f91-d261c81ae659", "sighting_of_ref": "indicator--d1ca7d19-441a-47f2-ad36-cbfde7483dac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e63d0fa-c400-4572-a92e-fbb5d386039d", "sighting_of_ref": "indicator--de98e982-47a2-48ad-b75d-dd9b173bd8c3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94223920-3f3c-41bd-b21e-d5a59d1066ba", "sighting_of_ref": "indicator--de98e982-47a2-48ad-b75d-dd9b173bd8c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254ca4c2-edd6-4dee-8d88-dcf24cf52291", "sighting_of_ref": "indicator--94a103d8-621b-4a90-a167-0e895464f328", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af833444-7f73-4bb0-97b8-0a85df66baad", "sighting_of_ref": "indicator--6e8ec324-029c-4b46-88db-67a51fffe728", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adf771a-835e-44c1-a137-5211bf21ee0a", "sighting_of_ref": "indicator--6e8ec324-029c-4b46-88db-67a51fffe728", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280615ab-672c-4c1b-890d-6d94ceed42ce", "sighting_of_ref": "indicator--26a3286e-12ce-4c30-a703-f897e1c3e2bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d011836d-efd9-43a2-a8f2-311908733622", "sighting_of_ref": "indicator--19085306-8596-44bb-9106-ea19f2c787d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d3d5eb-5b47-48e2-97c2-ac212cffbf2c", "sighting_of_ref": "indicator--eeb6e0e4-0f34-4ae9-98de-867191c427b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7c00f8-9f0a-4c84-8b85-3346469c39e1", "sighting_of_ref": "indicator--51171cb5-9b1f-46bd-912f-014d835089fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5850734b-9b35-461e-b944-d87da70ed53f", "sighting_of_ref": "indicator--1b92ad90-83b0-4986-84c1-1f73074e5871", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea90ee3-b452-4a2b-9964-3bc7d814e98a", "sighting_of_ref": "indicator--9933405b-dc2e-4fd6-bce4-1b296f9b3a55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6f7f88-3ec4-4459-9add-ed21c84986bf", "sighting_of_ref": "indicator--d09c8562-d6b6-44fd-848f-04b2bb22a63d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cd5c24-70ca-49bb-915a-7db241cb8c6b", "sighting_of_ref": "indicator--f2b9ed5a-f876-472d-b4af-2ec205d97551", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4f51e0-6521-4b04-807f-cdca63f29600", "sighting_of_ref": "indicator--95ccbe2c-b1eb-4b02-ba40-5055c973028a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b428e242-5e74-46de-8237-bb7dd596e81a", "sighting_of_ref": "indicator--2b025781-d193-4250-8bea-c88aae42e616", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e1e3c0-8029-4642-bb49-946010f88f44", "sighting_of_ref": "indicator--2b025781-d193-4250-8bea-c88aae42e616", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297891dd-5ab7-42e1-af90-8d0a9e2edaf7", "sighting_of_ref": "indicator--60688522-81d8-4fc4-a36a-a9cf9c6e97d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5f9c04-28ed-4e16-a3d3-2df74e3a3ac1", "sighting_of_ref": "indicator--edab2d0c-ccd2-4370-b230-575ece2ee552", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fae0e52-ceb9-40e9-850d-1e2bf9d8efd2", "sighting_of_ref": "indicator--edab2d0c-ccd2-4370-b230-575ece2ee552", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c000e7bc-c54e-42ba-8a50-e3741ccf465b", "sighting_of_ref": "indicator--1742cb3d-434c-4263-90e6-d3bc0631ab25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec821520-6677-4ba6-8876-1ac68b7e08aa", "sighting_of_ref": "indicator--8e74e700-c24f-46b8-8467-4d909b4d67e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5498940-e13a-43f3-84da-b26c7404be1d", "sighting_of_ref": "indicator--d535ee2c-c770-487b-bcb0-168911e11f86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e70082b-1d6c-49aa-aac7-91d93c935081", "sighting_of_ref": "indicator--39492537-8a52-4a07-9fc4-cc7d6f1c659c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a7ed8f-2314-46d2-97cd-241a29b48d8a", "sighting_of_ref": "indicator--1b13ca2a-efe9-4b2b-b0d1-37db177d8b8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a38b88-6101-4a02-b72d-0e178563c9f4", "sighting_of_ref": "indicator--aed76362-36f4-4b80-886c-98e2576dcdd5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab277d7-50ef-4e37-8a51-330f33468a01", "sighting_of_ref": "indicator--8eaac01c-2529-4769-9397-1bdbf1d1a5b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f707e5e-aefb-4257-95f6-e5e4f037ec3b", "sighting_of_ref": "indicator--37842a0e-32b7-4179-aad9-e92ae12efb5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8730085-c73f-470d-9df2-3bc7f8214da6", "sighting_of_ref": "indicator--37842a0e-32b7-4179-aad9-e92ae12efb5b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddebbe9-772e-4fbf-9b35-f2cafb4ce694", "sighting_of_ref": "indicator--3c2d26cd-fe9b-427b-936c-e7326b1ff024", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daefd452-d10f-436f-94bc-afc821689e86", "sighting_of_ref": "indicator--3c2d26cd-fe9b-427b-936c-e7326b1ff024", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fa2c0f-acb2-44b4-8048-311f82528b08", "sighting_of_ref": "indicator--3c2d26cd-fe9b-427b-936c-e7326b1ff024", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e32767c-0b9c-496f-a1a3-1c3be3bd6e57", "sighting_of_ref": "indicator--34c097aa-a222-4008-847c-5e187882ef41", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0e573e-1045-432b-9f5a-aaa785248498", "sighting_of_ref": "indicator--34c097aa-a222-4008-847c-5e187882ef41", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7697cf-2d7a-4a3e-824a-69f17b3e0970", "sighting_of_ref": "indicator--34c097aa-a222-4008-847c-5e187882ef41", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab884d97-36b0-4bb7-9fe2-40497a718894", "sighting_of_ref": "indicator--0d5d63a9-f8f6-41b5-a73c-fc6ec5149c1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a35742-a43b-4a03-a2f0-c90992edf596", "sighting_of_ref": "indicator--aaf214f6-0fb4-4a0e-bba9-d0b52a4855b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3e5927-15a1-42cd-83c7-ddb5789e193f", "sighting_of_ref": "indicator--bfbb7e53-38e4-4dd7-9bb7-ae40fe9c6b6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8113a834-3974-4e82-9063-0ea4ebf4bd4d", "sighting_of_ref": "indicator--bfbb7e53-38e4-4dd7-9bb7-ae40fe9c6b6b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944997ec-4254-4070-9d48-4a7f61ef4c87", "sighting_of_ref": "indicator--bfbb7e53-38e4-4dd7-9bb7-ae40fe9c6b6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c985ca-e6e6-4ee1-86e6-b321c98d1711", "sighting_of_ref": "indicator--7faae674-3430-40be-bbcd-5083bc55e212", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8c0bf0-92be-4c0e-87f4-88faf3308f43", "sighting_of_ref": "indicator--7faae674-3430-40be-bbcd-5083bc55e212", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62d1d0d-e8df-4fd0-92f5-df88b867139e", "sighting_of_ref": "indicator--e5af861d-a360-4fdc-84ba-91ee473af01d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d08d34b-2e8d-4d75-8cd8-c6dd2b3a3952", "sighting_of_ref": "indicator--306d4416-7714-4493-8870-b4360406dcd1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b137784b-2dee-4e6f-9b3c-b055cc5ccfc7", "sighting_of_ref": "indicator--306d4416-7714-4493-8870-b4360406dcd1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d126f8c5-e2ee-4f3d-b240-108b4fa85e8d", "sighting_of_ref": "indicator--fef1c435-ba63-47b0-8e2e-aa448a12324b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fab4b10-a2c7-4953-bc72-b9026fb5748a", "sighting_of_ref": "indicator--12fd1ccc-d2e6-4a7d-94a6-6b64e78b1beb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fa7127-5b6e-427e-a287-ea3f080efc8b", "sighting_of_ref": "indicator--12fd1ccc-d2e6-4a7d-94a6-6b64e78b1beb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbcbcf3-4ca6-4db8-9a2d-eb9d10fc3166", "sighting_of_ref": "indicator--14eaad76-bf2b-484a-adf5-5c9fed997f0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad51cdb3-90ba-4e77-a6c8-57221b4ed04e", "sighting_of_ref": "indicator--14eaad76-bf2b-484a-adf5-5c9fed997f0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8310b5b4-2809-442a-958d-5d6507249ea4", "sighting_of_ref": "indicator--14eaad76-bf2b-484a-adf5-5c9fed997f0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba268d9-fc57-41d9-bd4c-1b2677e52735", "sighting_of_ref": "indicator--7b32f8b5-9073-4ff9-98f5-75992ca0c2ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9120c753-0ad8-4282-bfc8-00cdf89a02e4", "sighting_of_ref": "indicator--7b32f8b5-9073-4ff9-98f5-75992ca0c2ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ffa5c1-8d0b-4f71-9729-ca6a2e08c852", "sighting_of_ref": "indicator--020eb12e-8ce5-4b6c-8e84-3b8f0145f3af", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0f4858-06f5-4e32-8175-1b5c74662eb8", "sighting_of_ref": "indicator--020eb12e-8ce5-4b6c-8e84-3b8f0145f3af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f306b3-8ba0-4a0f-8df3-e16a0394ce69", "sighting_of_ref": "indicator--edbe6294-0f07-499c-a313-3bd16fb9cd9b", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7f7117-f830-40e7-b9b2-997eec6b48ff", "sighting_of_ref": "indicator--f531bf30-4acd-43d8-aa27-bbc2a848c971", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eace02-2148-4819-a3d4-a5adcc42bbef", "sighting_of_ref": "indicator--f531bf30-4acd-43d8-aa27-bbc2a848c971", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3f9fdd-9895-47ef-a72b-67884fabd381", "sighting_of_ref": "indicator--efe15040-4d29-4799-b17f-35ea3a98ba1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d605bd78-738c-47de-8049-78bcebbdddc4", "sighting_of_ref": "indicator--efe15040-4d29-4799-b17f-35ea3a98ba1b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a9bdb3-4b01-476c-a130-21ee6689519f", "sighting_of_ref": "indicator--6cf339dc-ef8f-47cb-b456-b18bc8f2572f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0b4d8f-a71c-4939-a998-9bd63045cbd1", "sighting_of_ref": "indicator--6cf339dc-ef8f-47cb-b456-b18bc8f2572f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3de300-bedc-4088-be14-5f7a22fa2a89", "sighting_of_ref": "indicator--3983e46a-2b98-4482-a7c3-242d2010d946", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08a150c-2cc3-43e6-8722-b8ce912a9239", "sighting_of_ref": "indicator--3983e46a-2b98-4482-a7c3-242d2010d946", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2e276a-36d9-441c-bbfc-4cd4df5ac174", "sighting_of_ref": "indicator--3983e46a-2b98-4482-a7c3-242d2010d946", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077e3817-1685-4614-a30f-0b67795419f9", "sighting_of_ref": "indicator--2a266b3b-8c52-4205-80cc-bacf3e7ab777", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291be019-f143-48b9-9ec0-4335291cb4d4", "sighting_of_ref": "indicator--3b4fcce2-db3e-47cc-82ef-4df7e68c6b90", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d018f06-a1f0-47c4-8011-d58c24fec7c7", "sighting_of_ref": "indicator--250ecd25-d502-4c2f-a4eb-24ec1903c37e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1510fcc2-019c-4e16-9de1-26c4de9b74f8", "sighting_of_ref": "indicator--250ecd25-d502-4c2f-a4eb-24ec1903c37e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c785abf-6ca4-4a29-873d-11156660d7c6", "sighting_of_ref": "indicator--250ecd25-d502-4c2f-a4eb-24ec1903c37e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72078c0-3d64-4f7d-b7bc-453afb2ff2e5", "sighting_of_ref": "indicator--5452f7d5-639e-4b23-8946-0df2c3977392", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdb5a9d-6df6-47ea-8be2-20fe0efba411", "sighting_of_ref": "indicator--dafdcac7-59d8-4588-ba8f-1876b3c3fda3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe8f81c-d527-48ab-86a3-7667f0eda96c", "sighting_of_ref": "indicator--dd48ae2e-48a6-4162-807d-ec828a7bcaab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3282e25c-2d52-4df9-a8a4-7b2a97af8226", "sighting_of_ref": "indicator--e1ef6a16-0500-4a5e-8cc0-a748d58b728b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e95f84b-1d7a-40ca-b5b0-e63b9d4d5e3c", "sighting_of_ref": "indicator--10251051-5a5e-4615-8ee4-c7cedff36dc3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2596ed-6301-4837-8736-71681c442bdc", "sighting_of_ref": "indicator--04d3100a-dd25-41b4-a6be-c3c0e1cd186a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cc419c-ecdb-49f5-a660-be28e7874ee4", "sighting_of_ref": "indicator--b67946f2-1955-42cb-94f4-6a8f21070f38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c96ea99-4943-4f14-8a0d-b402064644d3", "sighting_of_ref": "indicator--ae680b54-fd2a-4002-b6cd-8702599918aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c1c68b-7439-445f-a582-2acd3d790637", "sighting_of_ref": "indicator--06db5f1b-72e6-4d45-abc8-8df281b5bb43", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3658dab7-eff5-466a-a92e-9c7ee57fa47c", "sighting_of_ref": "indicator--f70d26a4-52ff-49ac-b323-ff2f3a31edc8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d94bed-df2a-4889-b11f-a551c307a54a", "sighting_of_ref": "indicator--1f51073a-2888-4fa1-b3f1-ac27802f2e51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773d9c93-63dd-413d-b6bb-740f639a275a", "sighting_of_ref": "indicator--e6bf1f7c-db90-4e14-a89a-e88f7cb236d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfd3235-3f1b-4220-866a-5f7d3f57b353", "sighting_of_ref": "indicator--ae4cd7fc-0140-465c-a2b3-78fe239ba418", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f787b313-2c4e-4027-974c-10a7e360d67f", "sighting_of_ref": "indicator--073601aa-6b94-4b7f-8417-13106952fa31", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef49837-54ce-473b-88c8-a1c1808b4dd8", "sighting_of_ref": "indicator--c6741b9b-f3a6-4a70-b549-9da4b5714e81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692cfcea-9979-4a49-8f72-67b7d1601126", "sighting_of_ref": "indicator--c6741b9b-f3a6-4a70-b549-9da4b5714e81", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9f3e47-5125-474c-bdf5-7edd887bb8bd", "sighting_of_ref": "indicator--c6741b9b-f3a6-4a70-b549-9da4b5714e81", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da52da08-f89b-4597-b426-b5cc866381a2", "sighting_of_ref": "indicator--7c1774a8-93bb-4e24-9278-7874c8fe6238", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd35c5c-e4b6-471b-92bf-f79bc0118e7a", "sighting_of_ref": "indicator--10a653c8-ae7c-4bec-81a6-5a7e4551bf3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e87a70-f436-4194-bc98-a0fa56a64f09", "sighting_of_ref": "indicator--10a653c8-ae7c-4bec-81a6-5a7e4551bf3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca5a8d7-ec65-4a37-bd83-dcbc3ce001a4", "sighting_of_ref": "indicator--10a653c8-ae7c-4bec-81a6-5a7e4551bf3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ab6130-a218-4fb1-bbf4-8f8d2f397813", "sighting_of_ref": "indicator--c12dd0c2-fc15-45a4-88c2-4c7c58ba3627", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede515c-6010-4874-b776-d8d0b7336aaa", "sighting_of_ref": "indicator--cf82c27c-8263-41fb-b133-ecf87a7470fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019ece59-6fb5-4473-b398-006e2ed4d7af", "sighting_of_ref": "indicator--6e75c853-4cde-4b05-9412-c9e582f3be4e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4c6052-8780-47bd-b8e0-8646a86a5c96", "sighting_of_ref": "indicator--7698ff46-31ed-4e47-a697-8cedf3505d59", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4104e6-3fcb-44e6-83b7-a6c453aad526", "sighting_of_ref": "indicator--cc3668d9-072b-408f-b673-f1c6796a732e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa6a1f9-42f6-4806-962a-b14929cdc8e5", "sighting_of_ref": "indicator--da49755c-3659-4b31-af5d-ebb2bfa3e0da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33427a32-7950-4470-9490-67a4d219c234", "sighting_of_ref": "indicator--da49755c-3659-4b31-af5d-ebb2bfa3e0da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81d9d11-ce59-4088-9a45-6de8c5932c62", "sighting_of_ref": "indicator--f8b00df0-332f-4d92-9e16-9f6b147ef99a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ac72aa-43ae-4111-9a0b-e1896803f394", "sighting_of_ref": "indicator--466931af-698b-4a70-85f6-0b9c7ae6ae98", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd2056e-b50c-4369-8938-988a84f08fcc", "sighting_of_ref": "indicator--49bf2de7-de9b-40d7-a80d-c48860f754af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7351934e-043d-4a1f-8913-9b32bd5f8055", "sighting_of_ref": "indicator--de5cb91d-bbb6-47cf-9789-d7fe2617df1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f974850-e2a5-41f5-9d62-7bcd1153fcb6", "sighting_of_ref": "indicator--b2b5c1a9-436d-4fd4-ad08-bf59f9322c19", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0901bc15-24e8-458c-9c86-c8911d8ac091", "sighting_of_ref": "indicator--6a434c1e-cb24-43bf-abe9-1b258569cea3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fef75dc-3b33-49df-8a93-1516c4d415d5", "sighting_of_ref": "indicator--d0e32aeb-0da4-4b0b-8ec1-2ddbdeb87c6c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dc7303-b07e-43bf-8c4a-41bc8f0cdcc7", "sighting_of_ref": "indicator--72f0ff3a-df16-4e98-b362-d390f9d17a40", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78318bf-43a1-4329-9fa6-2792b16529d4", "sighting_of_ref": "indicator--72f0ff3a-df16-4e98-b362-d390f9d17a40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3fe1c4-2885-4d57-bb08-0290354167bf", "sighting_of_ref": "indicator--808919df-326d-450d-8e85-9c6959c1925a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cf3bd3-e451-4ac8-be2f-ae6bf26ff4cf", "sighting_of_ref": "indicator--5f9bbe43-37ca-4a9e-9ec1-1ff9ef43ccd2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96072356-9f91-4af9-8327-e51178f3433c", "sighting_of_ref": "indicator--5343e109-ad16-46bf-aaf4-b4a4dc6b405a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488273b6-5429-405c-a339-7b2eae4c8ec0", "sighting_of_ref": "indicator--ca5739aa-8539-49dd-bfa7-ec992ed090ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb36385b-59c1-44c0-b63f-b99e84e04913", "sighting_of_ref": "indicator--b8856dfd-c303-4747-afed-f39202c28cba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa64992-59b0-4559-a25a-dbbd51de5c20", "sighting_of_ref": "indicator--581e1025-31af-47c2-b812-63a9e8b5fd5e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726c4bc1-9c60-485b-8e8b-385ddf6a5ce7", "sighting_of_ref": "indicator--a58b099b-c811-4f6d-a473-151e10174de6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3425096-a556-4899-a000-90ee9a987ec1", "sighting_of_ref": "indicator--0a3cf707-9309-4a7a-b8af-63e88d605a21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef27c20-6f38-43db-bf5c-edd4c54f8342", "sighting_of_ref": "indicator--0a3cf707-9309-4a7a-b8af-63e88d605a21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80f1863-a463-445f-8786-5785ad574fa6", "sighting_of_ref": "indicator--928964c0-bf70-41a4-a232-67f63e870a75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3084d801-a4e3-4413-b45a-7dea86f91719", "sighting_of_ref": "indicator--9cd5ee4e-4046-4b93-9187-d21b2add2fa9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26101724-ee07-4f24-b3a6-da874d40f66b", "sighting_of_ref": "indicator--b0d486df-5e81-48b9-af1e-d8df88d408aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3b21a5-b62f-4ac8-93f0-2f81cdb0fe5a", "sighting_of_ref": "indicator--28fa46af-4209-4d65-b797-6b36629e4f6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03cdc4c-0d53-4b09-beee-9e7ad4203058", "sighting_of_ref": "indicator--c6e4f9f5-9034-4d97-ac4c-88c6199949af", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba410273-c01b-4851-9440-013dddcb6bd4", "sighting_of_ref": "indicator--c6e4f9f5-9034-4d97-ac4c-88c6199949af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23835e9-dac7-455a-8663-0824ed99f598", "sighting_of_ref": "indicator--85e54ccc-067f-4ffe-8139-f402445e0b74", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086f5bc6-a43d-4b81-b139-ca24396c8896", "sighting_of_ref": "indicator--72ea8d93-03f1-47c1-bbcd-2366d0c619b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fc40ad-f359-4a3e-ac8b-e1aaa97089ce", "sighting_of_ref": "indicator--26b28583-5a77-444e-8bbb-d73ae21b3908", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b15584b-d3e5-434e-b836-c01b1ce5dd2a", "sighting_of_ref": "indicator--07696498-3492-4d76-9708-5e7875c20dab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07769e6f-ec03-457a-a831-0e970a5e23d7", "sighting_of_ref": "indicator--8c91bfcc-ba1b-452e-8960-aa27d752f074", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82460d76-aa5b-4676-b182-95acee171642", "sighting_of_ref": "indicator--df717980-1989-48c3-b143-9703710b56d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79632185-7be0-46f7-9a2b-2cd1c26e7b3b", "sighting_of_ref": "indicator--7028ad64-fa48-4cb0-b246-60bb0318ac90", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b467d3-0f62-43d8-90d1-1fb44b138ff2", "sighting_of_ref": "indicator--ce7adcbd-5375-4d38-9e25-29e42857c688", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f414cb2-86e1-46bb-8670-c6effaff1c35", "sighting_of_ref": "indicator--ce7adcbd-5375-4d38-9e25-29e42857c688", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d1bb01-4c74-44b1-9398-093f1ea5a0c6", "sighting_of_ref": "indicator--657c9a90-cdf8-4e8c-bd21-145c3486f6be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9579be1e-39c4-44ac-bd58-846caff92bea", "sighting_of_ref": "indicator--573b467c-77d1-4a27-a003-d4c3bc0a2bc0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84df5673-76de-4e38-8427-acbb3c4a8d58", "sighting_of_ref": "indicator--39dc0f4d-23b5-402d-b186-aa3bc2fb89b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12f0658-9437-4328-b453-7512dbf328c8", "sighting_of_ref": "indicator--b2b73a22-4eed-4096-bc11-00d5042bbacb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171f4274-6c14-4cbf-b1fa-bf37f672349f", "sighting_of_ref": "indicator--c69af04e-2cd7-434b-b1a4-7de36dc60088", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca419d8-28e2-4f7a-9f67-f57864375f68", "sighting_of_ref": "indicator--c69af04e-2cd7-434b-b1a4-7de36dc60088", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d480dc75-2d4d-4cbc-b5c8-b2a5041aa9d2", "sighting_of_ref": "indicator--99bc0a28-25c0-4e42-8938-7c884d9dfa08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c9e44a-9977-4828-9542-0a4d6b7d79d6", "sighting_of_ref": "indicator--fdce696d-ec86-40ee-8d83-572661707f7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88dfe941-7cb6-49fd-be26-d863ba09b55e", "sighting_of_ref": "indicator--fdce696d-ec86-40ee-8d83-572661707f7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0518c995-92fa-48c0-9f7e-835b8b8afb0c", "sighting_of_ref": "indicator--670a62c1-6770-4bb7-a506-cf9697bb2e50", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cc6154-d595-443a-945b-0c1f8483a195", "sighting_of_ref": "indicator--d346f6f6-ea03-4105-92ba-6ef13dd1b384", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f66e49-1c74-4628-8c9a-820639a49e85", "sighting_of_ref": "indicator--7a2d63e6-7a92-4730-b283-7416bceaa948", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951e3748-4439-40ce-a8fe-7c7b9399ddbe", "sighting_of_ref": "indicator--edc40192-7d80-498d-9fd6-77aa495968f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4f2e7d-ad4b-4235-b3be-4758258b9f51", "sighting_of_ref": "indicator--ea84d541-19b7-4612-9510-692803b34a4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09298b71-d2c5-4b64-8904-abefd3399452", "sighting_of_ref": "indicator--0a84f83b-3069-43d6-912c-285b7b46aff9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da579fdb-a484-4092-a065-9c4468137075", "sighting_of_ref": "indicator--2a149ead-7093-4f11-b3bc-12716b609082", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d860006e-f346-4a26-abbd-cccd75c1bb81", "sighting_of_ref": "indicator--054f97ff-ac40-475f-8d6e-c8b50ac8e132", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eb0f37-9c8e-4483-992f-96e7d68d3bad", "sighting_of_ref": "indicator--7c1fa8e3-5736-4145-83dc-e85c4b06ae34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5d8cf9-42fb-44aa-92a1-f3121799aebb", "sighting_of_ref": "indicator--eb2cfce4-85ad-4daf-9b67-b50c9248557b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaaf83d-6946-450e-ae43-6144d182a8bd", "sighting_of_ref": "indicator--47022acd-a48b-4a5c-97c4-64765c2d261f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84e01f2-867e-45d9-b1e5-2c98cc6c135f", "sighting_of_ref": "indicator--54516cea-f98b-43ce-b79a-c91e83a305b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978e6a5d-ce02-4fd0-859f-fdd5780d0620", "sighting_of_ref": "indicator--94e1d828-90a2-430f-9826-d93f60a9dc6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aa131e-1e2b-46ac-87fc-436ef5fa6008", "sighting_of_ref": "indicator--74a954db-4bde-40d2-820e-15b1a48c5533", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6364c54b-64ee-4fcb-82fe-c44b898a5993", "sighting_of_ref": "indicator--a8831976-daae-449f-acd5-a041b8a65a67", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9533afe1-ebbf-4218-8b19-3cdf274d7788", "sighting_of_ref": "indicator--a9a1735a-e992-4399-9095-68223638ad21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e556971c-9356-4167-a28e-8021154c950b", "sighting_of_ref": "indicator--87bfa135-c2ce-4f54-b90d-ccbc79762fcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfb52dc-3760-4cea-95f9-88fd28630e21", "sighting_of_ref": "indicator--036342e7-6f4d-49f8-9724-1844634fbf85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb032ce-054b-4ae6-9a63-299c787fa589", "sighting_of_ref": "indicator--9f9673af-3efa-48c8-922b-6bffc9b6647a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7672531e-b17a-4afd-8540-978cfefebd78", "sighting_of_ref": "indicator--c421c6be-3f76-459f-a56a-0cfdd43eacad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d16004-c146-4bde-8076-23e69488a205", "sighting_of_ref": "indicator--105304a1-b8f2-41a5-89b8-31f8a660d111", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5f49ea-5cb1-43a0-ab5c-b45f99a2c5e3", "sighting_of_ref": "indicator--4493d19a-8daf-49b6-8fc9-660a9b4d96f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71803b68-40a9-4a72-afab-c933c9043b38", "sighting_of_ref": "indicator--f6f0de4c-f0d5-4e40-a8ac-d4d9d9019ac5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff3552a-fe7a-475b-8cd7-9ba09bdd7479", "sighting_of_ref": "indicator--6238ff45-5730-4f4d-92bb-a7e31373f18d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030a6bbf-8548-48bf-bd25-da7c97d968b2", "sighting_of_ref": "indicator--09c4a639-8b55-457b-88fb-244043723923", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a641378-8cda-4011-9938-8b5368b47f66", "sighting_of_ref": "indicator--09c4a639-8b55-457b-88fb-244043723923", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b045a92a-40b6-4615-9bab-bd5f11d59db5", "sighting_of_ref": "indicator--3d27bc5f-c93f-4e57-95f1-5c99e0f092ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f7c8ac-b7d5-4242-b87f-2afad850474c", "sighting_of_ref": "indicator--fbb7402a-7706-4b02-9d8f-4521ea2bc232", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57385411-4461-4f43-88a0-f635e6ff7c03", "sighting_of_ref": "indicator--fbb7402a-7706-4b02-9d8f-4521ea2bc232", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e7eb7f-ceff-4291-a554-4bbcfa1aad50", "sighting_of_ref": "indicator--30b9a73c-dd47-4efa-97fa-7f53a7ef8d29", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a578c917-999d-47d4-ab43-35ef757e59b1", "sighting_of_ref": "indicator--4c79d2a3-1d66-4cf9-85ec-9bf87a1a604d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1470eb3-a252-4401-b6a4-1aec90957531", "sighting_of_ref": "indicator--4c79d2a3-1d66-4cf9-85ec-9bf87a1a604d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943b6d3d-d4cb-486d-a71a-365e9095511c", "sighting_of_ref": "indicator--83204b77-c8e5-4d41-abb0-8962bc803225", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff71193-2a1e-480f-af81-0a3abb07c39f", "sighting_of_ref": "indicator--7d190cd9-01a3-4dec-ae56-91aa0bb269c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb8a452-9132-4ec8-bc6d-145d431571fd", "sighting_of_ref": "indicator--a4f80329-0562-4fe8-a3c1-500a696cf754", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41c603b-ce6c-40a7-97b6-f71c72d0af72", "sighting_of_ref": "indicator--25ada2a4-2ab5-42ef-90cf-943a09f789e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f62f6f2-fdc0-432f-acbb-5ec926d0a9cf", "sighting_of_ref": "indicator--5cd9cd7b-f701-4299-8101-aba6a88a63d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f431e8a9-ecd2-43c9-8461-29c60923e0c1", "sighting_of_ref": "indicator--1c97c8cf-627e-49ad-92d9-212f2e15c16f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcad5517-e8d0-45c2-992d-eb95b6dfcb70", "sighting_of_ref": "indicator--ad06215d-a27c-447a-8a9d-e29365684420", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd11b71-6e59-4fc2-be05-0ed4be756bf0", "sighting_of_ref": "indicator--d7f70d96-c450-4fc5-b5d1-7d2b8576c02c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f92eff8-5291-4dd4-a701-80552ba6d0fc", "sighting_of_ref": "indicator--449e094c-5fb5-4109-abe9-98a1b431ec67", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26baab30-13aa-4888-8f06-4a683d6832a6", "sighting_of_ref": "indicator--ebe4339f-17c2-4866-bb8b-e36b0517b491", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8123f42d-f6d7-400c-8481-7db35c3edb41", "sighting_of_ref": "indicator--d357d622-06a9-484d-a7a4-8fdc32d5235f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71eca90c-cea0-4a24-8931-2987a0b428f0", "sighting_of_ref": "indicator--010331ae-6c5f-43af-bb49-4cfae9e81998", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6bfea5-8951-47ba-a2cf-2f8eab1137c7", "sighting_of_ref": "indicator--552a8a65-813e-4769-869f-5f2aa2b8e8e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833d8e0e-9865-4d63-98cc-cb2ed6965c3f", "sighting_of_ref": "indicator--b8812759-df87-4847-9049-6907c0034305", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2514167f-a573-4fdf-a9c0-bd07a512e448", "sighting_of_ref": "indicator--8ce7b924-3e8c-49ef-90a7-bc6e3a2c0b7f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bd7778-8aef-4db3-a3a4-70c4c48b7755", "sighting_of_ref": "indicator--bd379f0e-40ed-42fc-99fd-66faf0ee5e83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca7d79a-c2c8-4a31-a6fd-ad9ce8c9be90", "sighting_of_ref": "indicator--00c477d2-d0e6-4d2f-a3d8-c6b62b25c98f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3912dbe-3b04-4e0d-aa8c-b4d35d42d836", "sighting_of_ref": "indicator--6ab63138-900f-4d98-994d-763a7831b9f6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cbcd33-64f5-49e9-9b1e-112d92d6adc9", "sighting_of_ref": "indicator--293330e2-75a2-4b31-a64d-e34d6553e2ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e7c189-55d0-4493-b769-3cdafffb6b01", "sighting_of_ref": "indicator--b05b857e-6e46-4ed6-a9c5-646a152bb840", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c727d472-cc35-4265-84ee-7723ebb20bfd", "sighting_of_ref": "indicator--da9a7a9d-34bd-4698-8530-592df1714410", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6852ea6b-b895-4c20-8473-ddd8f8a37bab", "sighting_of_ref": "indicator--a7643829-efdd-4104-a911-4d336a5fb77c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbde974-4b0e-4845-b83e-f61b41587198", "sighting_of_ref": "indicator--26aaa588-7e9f-4b8a-ad07-a7d4bd0519a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ffc6b1-992e-42a4-ad3a-2413b120091e", "sighting_of_ref": "indicator--17b68232-6ca9-462a-bb53-7170d6af9000", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685343ce-6e6c-4bbb-b9f9-e82b7851529a", "sighting_of_ref": "indicator--ab512df6-a5a6-440c-afa1-49d8c44e4e04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0e7a88-3180-44de-9d35-781a60450c9a", "sighting_of_ref": "indicator--3e7d24a2-83c1-4de9-9b77-59290bc2009b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9e12c8-f8ad-4ed7-8b62-74144c283bb5", "sighting_of_ref": "indicator--7e2a92b6-f645-47c4-84de-0a0f40f2d2ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec19ce7-5b3c-476e-827b-760820994c4b", "sighting_of_ref": "indicator--018d97ba-786f-45d1-b0ee-4af1ecf2047f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b495f5cb-4213-4279-ac37-80f5f9343f38", "sighting_of_ref": "indicator--6791a08f-a54e-46d4-b167-a7080302f1c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9dac69-8e5a-47eb-afaf-428abbd37089", "sighting_of_ref": "indicator--7c4a4dbf-c5f0-44f8-b12d-f4ba6907a788", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0e359b-90f3-428a-9ad7-fcc3e2f29922", "sighting_of_ref": "indicator--89442058-4ece-4f39-9561-d5951e4c1d53", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cda9ab7-3948-4626-8850-eba3723c648f", "sighting_of_ref": "indicator--007e6939-cecc-4c71-be97-424a18a3702d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01d4305-4b16-4377-8070-60d0fae25b01", "sighting_of_ref": "indicator--78231398-0621-4ee3-9785-f0a26c2754b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7be617b-9244-43ca-9b83-3339248e9c49", "sighting_of_ref": "indicator--af498cad-f12b-402d-9f95-25c346b42324", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ad284b-4d2e-45b6-a720-6a7a201b1f33", "sighting_of_ref": "indicator--f43ec0d4-b773-418e-b284-f603b5abf1c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7631c0ba-7bca-4146-964e-7b9cdc9626fa", "sighting_of_ref": "indicator--15e336a8-20a8-4674-9bbe-15afa3eeeb4c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b22d10-0f64-4cc3-b4b1-b2945518488f", "sighting_of_ref": "indicator--1ab4b098-c6e2-47da-a9e0-7fd2ac6c69f4", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566a43a5-cc31-487d-b1fe-acdddc115625", "sighting_of_ref": "indicator--c53ef535-808b-4415-a8f6-137e75074f1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eacff5b-3542-4bcc-ac1d-343524f11711", "sighting_of_ref": "indicator--43f92bde-263f-44a5-a405-f41cf2361513", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a590acfe-3ca8-4139-8de0-a06654a1150d", "sighting_of_ref": "indicator--99b73169-c24e-428a-a5da-a4675e13b5bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c64a16c-f628-4e70-b6ca-9067f6f18b3a", "sighting_of_ref": "indicator--8085453f-31b2-45a4-9ef3-1ded8721498c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11aa3d9e-7443-4193-85f6-70b300015a2c", "sighting_of_ref": "indicator--937ad051-1517-4189-a37e-204ef5925cc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b58225-c6d5-4c2b-816f-8b5fb6f76915", "sighting_of_ref": "indicator--2a3078a2-1abf-43c9-b550-6032fc9146aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48fa9d2-b83d-4140-82dd-0094aa7e30c1", "sighting_of_ref": "indicator--e2d48db9-69e8-4262-9646-14d073156c25", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dd60d1-aeb1-47e9-9a16-49f3fcfb93ff", "sighting_of_ref": "indicator--2e9eaad3-1761-4a3b-83ca-e2778a5ed8e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b62449e-1e2a-41a0-a57f-506441022580", "sighting_of_ref": "indicator--2e9eaad3-1761-4a3b-83ca-e2778a5ed8e8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd9147f-511d-419c-829e-173c78b84ece", "sighting_of_ref": "indicator--ed4945f9-6f6f-4dc3-bdac-5e11504042ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c2e76f-4e1d-42be-8972-1f91a740a284", "sighting_of_ref": "indicator--4fbade9c-19c1-4bc5-b653-973fa222474c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172c63c4-3296-460e-a7e0-b1e45f83ce7b", "sighting_of_ref": "indicator--62f3587b-3217-4597-86fc-628a6130529a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3b7fa7-d554-481a-8d88-2b6af60488ff", "sighting_of_ref": "indicator--b67a7c9d-2ee6-488a-adf4-f80e577ac38a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e835f1a3-7cea-4164-9223-f41c501a821b", "sighting_of_ref": "indicator--79c52035-3366-4d86-8da4-3a9b5d9baa47", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53dd3b6-cb4d-4e99-8e6e-10ec2c9a2d56", "sighting_of_ref": "indicator--8fc1fcf1-4629-48fa-b5a7-75950e56ec20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76bb5e0-f644-406d-83ff-8cc2c55b0e9a", "sighting_of_ref": "indicator--a4432fd4-f534-45ab-bd13-eeee7ab3dd49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0f815a-c5e4-4049-a4ba-625cc8325892", "sighting_of_ref": "indicator--b6b5bb87-ac05-45ba-bade-0810ea645a0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd9f1aa-51ca-4db1-ac31-21ee79d09ac5", "sighting_of_ref": "indicator--970695d8-caad-4822-a31e-20ad5961ab12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336ecaf8-4a97-4ec6-8e97-f68df6f603d1", "sighting_of_ref": "indicator--84d40f0a-ce02-4fc4-a04b-59b7f05970d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b3f22c-d05d-4e44-a432-80c89de19565", "sighting_of_ref": "indicator--512bc907-1f75-4c58-aaf8-203e2a8cc11e", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2035bad4-bce8-4faa-be9e-433f7397a274", "sighting_of_ref": "indicator--c28711e2-2772-43fd-bb7d-723c7a2f6a73", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab24c68f-063d-4756-b14a-60f589a91161", "sighting_of_ref": "indicator--04a967f3-418a-4275-a9db-0580a05f8668", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001ff0b3-5925-4ca0-894c-f7e794ad1a08", "sighting_of_ref": "indicator--c41b290f-7661-4740-90b0-056cb0777005", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c555ebc-a2d5-4ce4-bb3d-d5434f995336", "sighting_of_ref": "indicator--61d2e0b4-21a9-41dc-af8b-3a1c0727985a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dff9b1-cd17-421b-b81e-77a0a305f03f", "sighting_of_ref": "indicator--61d2e0b4-21a9-41dc-af8b-3a1c0727985a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29691210-ef75-4a95-bdde-62b533e47af5", "sighting_of_ref": "indicator--95f23b17-8171-4008-98ee-dd9c5c732ad0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084bb7da-c676-4f4c-93a3-efe42c6d9ac1", "sighting_of_ref": "indicator--95f23b17-8171-4008-98ee-dd9c5c732ad0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa02bcc9-28ff-4dc3-a45b-4d12eaf3d912", "sighting_of_ref": "indicator--c114351f-8d1e-4730-9375-2f8e689711ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e6f2df-0bc3-4c6d-ab74-87a23a891eac", "sighting_of_ref": "indicator--0ccbbf55-144a-40d3-a887-537d7db1824e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45661e98-6395-401e-9622-a4cf8e972682", "sighting_of_ref": "indicator--3a0972ff-b7b0-4b38-9c9a-40c8633a1ad9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b604194-5ac1-4edd-ae8c-ef6044a2f45a", "sighting_of_ref": "indicator--1e44f87e-f6ae-4050-97a7-1ad50748768d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ccaee0-0131-4415-9cfd-07ed49252b29", "sighting_of_ref": "indicator--4ef9c716-fe49-4af3-a4ae-cf7b983bd50e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c231950-536b-4f29-8916-e4b7c5e38819", "sighting_of_ref": "indicator--a540e348-8572-457e-abd4-411aa123c771", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceab327a-7408-40be-abc1-44ffe0346ba8", "sighting_of_ref": "indicator--f2a1eab0-943c-4dad-aa4f-756425ca5514", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4913f52-35c1-490c-9b0f-e8f664bd0f6d", "sighting_of_ref": "indicator--807c4999-1949-4cc7-b8ac-87eb810e79a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c26da85-a570-4bd0-a025-627fb2be9d07", "sighting_of_ref": "indicator--102b142a-ab1e-41d2-bf46-6c87520bd3f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991a5a7e-2a4c-433f-ab6b-b9481cea1ae2", "sighting_of_ref": "indicator--275eae85-2605-4c6b-8393-540b832ed819", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1f9bca-2efa-4529-bbf9-0114f8e9e9c9", "sighting_of_ref": "indicator--0db74fc0-eed1-4ffd-b6de-034b260606b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65da289-6c80-4948-8bb7-9994a775fb2b", "sighting_of_ref": "indicator--0db74fc0-eed1-4ffd-b6de-034b260606b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f438e12b-8b32-4f95-bb0c-25e13445c38c", "sighting_of_ref": "indicator--2fd53950-758a-4dad-be41-4edc7a0b3e4b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d93292-c657-4060-9b70-5b48a8dc556a", "sighting_of_ref": "indicator--16930988-b2c2-4c7f-9791-3408b15d1f9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de126bf-4bd1-4b1c-b569-3d662564b47e", "sighting_of_ref": "indicator--dbf8dea7-ffd9-4493-9fb3-a85e97de7152", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7c948a-f327-4e3e-852e-56c6e033ae25", "sighting_of_ref": "indicator--dbf8dea7-ffd9-4493-9fb3-a85e97de7152", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e234f07-4624-49ed-b667-88ea2438e5b8", "sighting_of_ref": "indicator--dbf8dea7-ffd9-4493-9fb3-a85e97de7152", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74b1498-effb-4df2-b9f1-41f68a3aa5b0", "sighting_of_ref": "indicator--21d21dcc-169f-4ede-9087-2c571bde5322", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388884bb-1121-4212-971d-2db74f4a8421", "sighting_of_ref": "indicator--21d21dcc-169f-4ede-9087-2c571bde5322", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4b1f48-59b9-429f-8b8e-7368a3771b5b", "sighting_of_ref": "indicator--21d21dcc-169f-4ede-9087-2c571bde5322", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5222a28-51ec-471f-b291-cdfaedc7747a", "sighting_of_ref": "indicator--0b3eb194-205c-4b69-904c-26a49f59ff8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c2bb50-4973-4367-b0a5-fa5a808cc4c2", "sighting_of_ref": "indicator--0b3eb194-205c-4b69-904c-26a49f59ff8f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1958336d-75aa-45f2-bee1-623f0612bb50", "sighting_of_ref": "indicator--0b3eb194-205c-4b69-904c-26a49f59ff8f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17dad73-3e1a-448e-8b32-35cf550a6ef1", "sighting_of_ref": "indicator--5bc9daa4-5524-4cf1-ba97-969884111009", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae50ba72-5cdf-4b76-b630-a4c09f992444", "sighting_of_ref": "indicator--5bc9daa4-5524-4cf1-ba97-969884111009", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64357db1-bb0d-4d1f-951c-1ac414d0cad0", "sighting_of_ref": "indicator--5bc9daa4-5524-4cf1-ba97-969884111009", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609fcb3b-cd88-43a5-8912-9600bf2b5201", "sighting_of_ref": "indicator--4eba2a76-cd98-435c-9796-1da78a008da5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc19e790-b5ae-49e2-9972-062babb693fb", "sighting_of_ref": "indicator--83e44e40-258d-450f-94dd-c8ba951610fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6f519c-d887-4323-ad92-523c38eb7513", "sighting_of_ref": "indicator--b12f4c69-5155-4af9-b904-fd7300762e06", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62aeef5-3540-4670-b25c-cf4605ce29d8", "sighting_of_ref": "indicator--beb751cb-25ef-4878-8767-84b95c05b33b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3119a5-9768-479e-b6c0-302c7347ded1", "sighting_of_ref": "indicator--69e2a09d-39d3-46aa-9003-c5b924a88ba1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67249685-1a97-4706-9dd7-b9224b725174", "sighting_of_ref": "indicator--bad14225-c597-4b52-aeab-967f884ce25c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd89b1c-204a-47a2-8b43-3decd0c946db", "sighting_of_ref": "indicator--4afc012e-5cc2-4c10-9f23-ca842604df85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012de5d0-aec5-4405-bd2a-664e72b45f23", "sighting_of_ref": "indicator--e276d406-5292-4d86-b181-dbb03d24b84b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef65b34-adea-4ac4-ad31-ef247dcb582e", "sighting_of_ref": "indicator--f5853d36-8816-4c6f-b3df-90753903c53d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218df90e-608e-49b0-832f-b5804add74ba", "sighting_of_ref": "indicator--f15a9082-4ca9-4046-9bd6-0b553325a6fd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccecdec-0915-4579-9f81-82a5c6de07ef", "sighting_of_ref": "indicator--372f7f95-d67f-466c-9cfb-98eb26d3f1f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fde6ef5-a6e8-4b4c-8e74-778521b61c5b", "sighting_of_ref": "indicator--4f7a353a-278a-43ef-a559-93507938eb26", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b86ae7-dd4e-40e1-9147-f4aec3d22d09", "sighting_of_ref": "indicator--958c18b9-43dd-404a-a24b-7e5dd44d3c03", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a44420e-feff-4ccb-9a2b-86bf4921a8c6", "sighting_of_ref": "indicator--61f8afc0-9489-473b-b3aa-f51b41066156", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673d17d8-3c7c-4962-88d5-cb999a2a5fdd", "sighting_of_ref": "indicator--2ed25bd7-6b1a-4289-85b3-34f4e6989491", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9cb1a0-39ad-40af-afce-f14c598ae9a4", "sighting_of_ref": "indicator--5d3a87b7-06ad-4659-9d3b-f9bd5d254fc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cbd862-43e5-4ec5-8be4-f6420ffa0761", "sighting_of_ref": "indicator--4f49012c-d1cb-4d00-ae77-98239dfd9179", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a645bce-4be4-4536-847e-246f45a791ed", "sighting_of_ref": "indicator--1a231ea5-eb5f-4d43-9f99-424936c657c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd921c4-feec-44c0-859b-aa5cbf13c2f7", "sighting_of_ref": "indicator--1a231ea5-eb5f-4d43-9f99-424936c657c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483a345a-d6aa-4c43-b257-636de06606e0", "sighting_of_ref": "indicator--1a231ea5-eb5f-4d43-9f99-424936c657c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4805248d-853d-4835-bd8e-345f5c949f78", "sighting_of_ref": "indicator--4beec575-9c10-4666-8d99-45919c574d97", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b25a10-ceaa-4c01-9a8c-dd22e68d8ea4", "sighting_of_ref": "indicator--cd69b8d0-b175-4174-acfe-8e85360febde", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46630e5-b56d-4b90-b706-8b8af0dc8648", "sighting_of_ref": "indicator--688a1847-adfc-44c8-9ee4-975a4cf713fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f1c609-e84b-4af7-9889-3649663e4daa", "sighting_of_ref": "indicator--29a61031-db36-49fb-ad5a-f3a89cfba041", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a145c4-8e06-48e8-80f7-33d0a04c8600", "sighting_of_ref": "indicator--29a61031-db36-49fb-ad5a-f3a89cfba041", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc9a439-5fd6-4464-b2d9-4a4d24d1a57b", "sighting_of_ref": "indicator--4c8745e0-695e-4fef-96df-b6ba7b05807d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56aab2e-ea08-4b4c-91b6-23d091073f1b", "sighting_of_ref": "indicator--68a25c26-f1d4-402a-93b7-a8beb731828b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3245f97-08dc-400e-be61-82b32b68cab4", "sighting_of_ref": "indicator--68a25c26-f1d4-402a-93b7-a8beb731828b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9082b5-1ece-4137-82bd-ded9dc9a3d98", "sighting_of_ref": "indicator--68a25c26-f1d4-402a-93b7-a8beb731828b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782485e6-a250-4c31-8aee-21ac5e9c4861", "sighting_of_ref": "indicator--77878cca-3340-40d5-9915-f074eb3f7c3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544a5d22-51a1-48c2-bc90-5b7166dffdc4", "sighting_of_ref": "indicator--d1b45d6d-7090-4d54-8664-9516ca58c67d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572ef1cd-13ea-4089-b6dc-ddd9cf4e2506", "sighting_of_ref": "indicator--3d37700a-99ff-47e1-857d-778129247bed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba0b6b5-4c48-4787-a8d4-44807c04be3c", "sighting_of_ref": "indicator--7df0329e-6aa6-47e9-9311-9b492dc4ea6f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2af30e7-b944-4c91-8da4-82a3a9c0708f", "sighting_of_ref": "indicator--7df0329e-6aa6-47e9-9311-9b492dc4ea6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055002c1-0469-4bda-9617-3261af4b61d1", "sighting_of_ref": "indicator--7df0329e-6aa6-47e9-9311-9b492dc4ea6f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2077ad64-c7cb-4db2-81fb-fb942ae5280d", "sighting_of_ref": "indicator--c118e68e-244c-4ba0-979a-11dcbe3dddc2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064a0636-f2da-452d-8d48-63af4e1a8b4b", "sighting_of_ref": "indicator--c118e68e-244c-4ba0-979a-11dcbe3dddc2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b35c9ce-4e48-4506-a10a-b534bee3620d", "sighting_of_ref": "indicator--c118e68e-244c-4ba0-979a-11dcbe3dddc2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c8670f-041a-4f0e-9d6d-bde0ffed0c19", "sighting_of_ref": "indicator--9b8c8c62-4782-46b3-83ec-dfbf54af272f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57146aef-e969-4464-9f04-d23610a8b983", "sighting_of_ref": "indicator--9b8c8c62-4782-46b3-83ec-dfbf54af272f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcea29c2-0e23-4383-bbfa-f946abdab653", "sighting_of_ref": "indicator--2f35c4e4-0386-4330-9dcb-32697fc1ec38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783168f2-e2bd-4b6e-b13c-caad680df57d", "sighting_of_ref": "indicator--2f35c4e4-0386-4330-9dcb-32697fc1ec38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdda2632-f3f7-4f7f-a0e3-0e7db8360980", "sighting_of_ref": "indicator--d9c70f64-5f57-42fb-8d01-51f9e83ebbdd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b249f69-417c-47e7-ac39-1f7ffed60479", "sighting_of_ref": "indicator--d9c70f64-5f57-42fb-8d01-51f9e83ebbdd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f04bcb-ceae-46f7-9b3f-69b88f40f171", "sighting_of_ref": "indicator--d9c70f64-5f57-42fb-8d01-51f9e83ebbdd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37804f36-5173-49b8-810c-622f034bcaf4", "sighting_of_ref": "indicator--bba7cb95-2d45-4905-912a-b912b4ca0637", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33525ffb-a562-4979-9f04-ec6910a8f92d", "sighting_of_ref": "indicator--bba7cb95-2d45-4905-912a-b912b4ca0637", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4808092-66a1-45b8-8e3a-6c21381e4220", "sighting_of_ref": "indicator--bba7cb95-2d45-4905-912a-b912b4ca0637", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2fca69-12f6-40a2-b0e2-bcdbaf2b472b", "sighting_of_ref": "indicator--cbb70f47-b5f6-4a91-889e-043eda3e1d5f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13419df6-cf0b-4e4f-aaaa-6fd0644d6e4a", "sighting_of_ref": "indicator--1cbd2554-f6d2-4f43-9dd5-f99d1ec882a0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e62b530-7235-4fdb-8670-72d638292f3b", "sighting_of_ref": "indicator--1cbd2554-f6d2-4f43-9dd5-f99d1ec882a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47bf0d2-94a1-4fc9-9aa9-074869d8f4d1", "sighting_of_ref": "indicator--1cbd2554-f6d2-4f43-9dd5-f99d1ec882a0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bafd65-431d-4b47-8355-35627113f63a", "sighting_of_ref": "indicator--37b2ea71-1f7d-4e28-8520-e4d6a30b709c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61af8eeb-b5f2-4e15-92de-b0370ced7263", "sighting_of_ref": "indicator--37b2ea71-1f7d-4e28-8520-e4d6a30b709c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77122d5-cbef-4a92-bae4-13ae84d0089f", "sighting_of_ref": "indicator--37b2ea71-1f7d-4e28-8520-e4d6a30b709c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e8a2c8-2819-4329-9862-14fe0be492b3", "sighting_of_ref": "indicator--6aca45b3-13e6-425d-b4d2-e6ad910d96dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe3482c-f9e4-457c-8dc3-9d6075b72fb5", "sighting_of_ref": "indicator--6aca45b3-13e6-425d-b4d2-e6ad910d96dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bd07c1-c565-4264-a080-ed6ccea69d5f", "sighting_of_ref": "indicator--6aca45b3-13e6-425d-b4d2-e6ad910d96dc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775af89d-b60e-4f9b-99fc-784fb2b9f3ac", "sighting_of_ref": "indicator--b64d50ba-abdd-454f-a567-2063f8da346a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b00b44e-63ca-4c9f-9916-b2150145ce35", "sighting_of_ref": "indicator--b64d50ba-abdd-454f-a567-2063f8da346a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1d40ec-7f48-402d-a863-5b37f1111a97", "sighting_of_ref": "indicator--b64d50ba-abdd-454f-a567-2063f8da346a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6b556e-1f3b-4f78-a30a-f0f989c25084", "sighting_of_ref": "indicator--aaaa94dd-a792-4eb6-b987-a41abb2d6a0e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54ed53f-3ba0-4724-b1c9-6af558757afd", "sighting_of_ref": "indicator--aaaa94dd-a792-4eb6-b987-a41abb2d6a0e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b45def-8b49-4477-9465-7c067b243275", "sighting_of_ref": "indicator--aaaa94dd-a792-4eb6-b987-a41abb2d6a0e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3e719d-79be-4eaa-b23a-540c42f7a380", "sighting_of_ref": "indicator--e0a21f8e-3d41-40b2-be3a-44e98c4a59ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca290ee2-5ddf-4d5c-96d7-4b4775c74c3f", "sighting_of_ref": "indicator--e0a21f8e-3d41-40b2-be3a-44e98c4a59ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44d2caa-c123-463c-aa7b-0676c789afb3", "sighting_of_ref": "indicator--7aec1fb4-a0a2-415e-a490-f04fce114274", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a9e4e2-32b2-4a79-acd3-469b03413382", "sighting_of_ref": "indicator--7aec1fb4-a0a2-415e-a490-f04fce114274", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c5575d-7146-4a43-9c07-bcd1c09c04ae", "sighting_of_ref": "indicator--7aec1fb4-a0a2-415e-a490-f04fce114274", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327273a9-de81-4f23-bebf-378c6d447fb5", "sighting_of_ref": "indicator--8ef6d670-82bf-4942-a0d0-c7e5214d1265", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69df4f8-4f35-4ea2-9b55-23aa1398a468", "sighting_of_ref": "indicator--8ef6d670-82bf-4942-a0d0-c7e5214d1265", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f92fee-9092-49d7-bbcb-bf897470ad28", "sighting_of_ref": "indicator--8ef6d670-82bf-4942-a0d0-c7e5214d1265", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5d3895-053d-41c2-bdce-e51ec568b5ba", "sighting_of_ref": "indicator--a97381c5-5bb4-475f-83d3-5e3348f5ef6e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bbe857-3858-4268-91c1-fa2bb9584a76", "sighting_of_ref": "indicator--a97381c5-5bb4-475f-83d3-5e3348f5ef6e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a738d3-4ff7-4932-aadf-b2429c223f73", "sighting_of_ref": "indicator--a97381c5-5bb4-475f-83d3-5e3348f5ef6e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af94b87-afc8-49a3-a3ce-ef5505678042", "sighting_of_ref": "indicator--7734ca26-702c-4932-8ada-9a954c103068", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7ad746-198a-45a6-b54a-75c78e5da7b0", "sighting_of_ref": "indicator--7734ca26-702c-4932-8ada-9a954c103068", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1a2f52-7aa4-4abe-ac41-1449bccb5dff", "sighting_of_ref": "indicator--7734ca26-702c-4932-8ada-9a954c103068", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dc2c33-e30a-44d1-a644-b02359592339", "sighting_of_ref": "indicator--d8eb8f82-fd33-416f-bdba-c24d7b072caa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591336dd-0cb8-49d9-b0d8-fd3d9232fcdd", "sighting_of_ref": "indicator--d8eb8f82-fd33-416f-bdba-c24d7b072caa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac437d64-0c38-4ebb-aafc-cf3cdf794d7e", "sighting_of_ref": "indicator--d8eb8f82-fd33-416f-bdba-c24d7b072caa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9862dc3d-3794-448f-ad40-921fb9b6212b", "sighting_of_ref": "indicator--a6d2c2e9-d93f-4ddc-938c-c67676edcab0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad38605-4821-4da7-ad9c-5835958cdbd5", "sighting_of_ref": "indicator--a6d2c2e9-d93f-4ddc-938c-c67676edcab0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b281b53b-7382-433e-8256-4c960a37e0bd", "sighting_of_ref": "indicator--a6d2c2e9-d93f-4ddc-938c-c67676edcab0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274f10a7-8e61-4fbd-8d61-3eb1ecb19cff", "sighting_of_ref": "indicator--6cc1599b-c2f8-47eb-b324-48498f46177a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f453daa7-d79d-497c-8e83-29497c0e3bac", "sighting_of_ref": "indicator--6cc1599b-c2f8-47eb-b324-48498f46177a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddfeb96-7038-4e87-bd38-15b07ea91195", "sighting_of_ref": "indicator--6cc1599b-c2f8-47eb-b324-48498f46177a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129d1e2a-9365-4e27-b2e3-dd03e74d807f", "sighting_of_ref": "indicator--5f410e0e-3868-4d01-9af4-48ea02265137", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819ba1c8-06d2-4fe3-ad70-b914aed04b5d", "sighting_of_ref": "indicator--5f410e0e-3868-4d01-9af4-48ea02265137", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c36445-c4b7-4657-9f2d-8f1e9f402806", "sighting_of_ref": "indicator--5f410e0e-3868-4d01-9af4-48ea02265137", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1600397-284e-4253-b98e-564c57e68f07", "sighting_of_ref": "indicator--49dcb430-7e40-400b-bebd-3fefe21f0cc9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc4f7f-f041-471a-adbf-abdecc215a54", "sighting_of_ref": "indicator--49dcb430-7e40-400b-bebd-3fefe21f0cc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d258c6-7c3b-4c8d-b28f-2980ce5b819b", "sighting_of_ref": "indicator--49dcb430-7e40-400b-bebd-3fefe21f0cc9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99ef2e0-c4f0-4d5d-a67d-f70aebb162a6", "sighting_of_ref": "indicator--08f8b1ac-a594-4398-a902-9eb033e1bd34", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e8d4f1-d5ec-42a6-aa18-2d2d4efaed31", "sighting_of_ref": "indicator--e61687ae-6a16-420e-af5d-0675029739de", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358f0ff9-cebd-4745-b3a2-64d9aceaac1d", "sighting_of_ref": "indicator--e61687ae-6a16-420e-af5d-0675029739de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3507f5ef-c592-43b1-9695-d9fb9e976e96", "sighting_of_ref": "indicator--e61687ae-6a16-420e-af5d-0675029739de", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5add9e17-ce27-4020-852d-766da75e9198", "sighting_of_ref": "indicator--e61687ae-6a16-420e-af5d-0675029739de", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ed387a-d5bc-435c-a1a9-a0b2c42e4968", "sighting_of_ref": "indicator--74760bb0-0683-4346-b0d6-c0634750d915", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3711b7f-b31b-4955-ae81-bc771006ff8b", "sighting_of_ref": "indicator--74760bb0-0683-4346-b0d6-c0634750d915", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d775279-6ba9-4941-9305-415f10463343", "sighting_of_ref": "indicator--74760bb0-0683-4346-b0d6-c0634750d915", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6494235-326d-4acb-84ff-3d9e9689400f", "sighting_of_ref": "indicator--74760bb0-0683-4346-b0d6-c0634750d915", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd21bb70-4032-4837-8230-6a01f2269c10", "sighting_of_ref": "indicator--40be9c18-0387-4692-8c8c-5a5fa52ead5f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d093a13f-648c-44ec-8013-d47b296f0ef2", "sighting_of_ref": "indicator--40be9c18-0387-4692-8c8c-5a5fa52ead5f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45edc627-0ff2-4b4d-92af-b8d54e66c72c", "sighting_of_ref": "indicator--40be9c18-0387-4692-8c8c-5a5fa52ead5f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3ff1bb-efb6-4114-abd6-bb2194997791", "sighting_of_ref": "indicator--40be9c18-0387-4692-8c8c-5a5fa52ead5f", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d08747-8593-41c5-b732-a0821df197da", "sighting_of_ref": "indicator--3ddab629-6483-4831-8afc-9d1df4be9e65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab17603-8564-4022-85c8-e8aad8447811", "sighting_of_ref": "indicator--3ddab629-6483-4831-8afc-9d1df4be9e65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c9866b-61d8-4774-8803-6798b16d71b9", "sighting_of_ref": "indicator--3ddab629-6483-4831-8afc-9d1df4be9e65", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb100951-c32e-4b5b-821c-7d89237dc390", "sighting_of_ref": "indicator--3ddab629-6483-4831-8afc-9d1df4be9e65", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50134fc7-4855-4058-9c83-0cd331ac1cef", "sighting_of_ref": "indicator--1015095c-05fa-4314-9f48-2f4e5a0bf8ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea123d7-56e9-4320-a281-23dbdc2be9f6", "sighting_of_ref": "indicator--1015095c-05fa-4314-9f48-2f4e5a0bf8ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00453560-0211-4787-82a2-21319a98ac71", "sighting_of_ref": "indicator--1015095c-05fa-4314-9f48-2f4e5a0bf8ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8483ac89-bc65-454d-951e-83f0c85632d4", "sighting_of_ref": "indicator--1015095c-05fa-4314-9f48-2f4e5a0bf8ca", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8494dfa-edd6-40b7-95f2-9099ebbc55d2", "sighting_of_ref": "indicator--fcff9f3b-b81e-4a3c-b251-0281ddd61fad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c82a1d-376d-41d7-931e-e40690bd65ff", "sighting_of_ref": "indicator--fcff9f3b-b81e-4a3c-b251-0281ddd61fad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b54359-118a-4610-94f6-441e3ca137e8", "sighting_of_ref": "indicator--fcff9f3b-b81e-4a3c-b251-0281ddd61fad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e15d16b-9257-42f2-b5af-154bfde9f84d", "sighting_of_ref": "indicator--fcff9f3b-b81e-4a3c-b251-0281ddd61fad", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d78e45e-35c0-4e87-af6f-130b624edf24", "sighting_of_ref": "indicator--0b0bfee0-2416-433d-89d3-0626a802e6e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bb22d7-2a59-4f67-8f2c-945862399195", "sighting_of_ref": "indicator--0b0bfee0-2416-433d-89d3-0626a802e6e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e45209-8519-42c3-9526-6a88c869293f", "sighting_of_ref": "indicator--0b0bfee0-2416-433d-89d3-0626a802e6e7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6fb1fb-639b-4b21-b43d-18eab7bf5206", "sighting_of_ref": "indicator--bd6e410e-0b7a-4517-81d8-43fe5ff9cc17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340104ce-e8bb-4b0f-bbfc-ab43ca0b7af7", "sighting_of_ref": "indicator--02222552-644c-4e7e-ab8a-88c557f938d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4578cf-eb56-42da-a877-639a71324d0f", "sighting_of_ref": "indicator--d9c5e3bf-ccd3-488b-86d3-266a57979031", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40789f50-bfa9-42d5-975a-adb5ae968859", "sighting_of_ref": "indicator--d9c5e3bf-ccd3-488b-86d3-266a57979031", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e751d17-4574-491d-b01a-97e9cc72d2b1", "sighting_of_ref": "indicator--d9c5e3bf-ccd3-488b-86d3-266a57979031", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49aae79b-1821-4a65-8765-0ddc809180d7", "sighting_of_ref": "indicator--a442643e-0216-49b2-8d78-eade6b48c7f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbf2db1-dd1b-4242-bb1b-877b9d4fb540", "sighting_of_ref": "indicator--36cc1dfd-bd68-4e59-9b2e-9d744c385eae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd5260c9-2e79-437f-b715-cc3f555fb586", "sighting_of_ref": "indicator--36cc1dfd-bd68-4e59-9b2e-9d744c385eae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b646833-1a53-4aec-96e8-b2485d15930a", "sighting_of_ref": "indicator--36cc1dfd-bd68-4e59-9b2e-9d744c385eae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1822d2f6-89cc-415e-91f6-6aab6f15ac3a", "sighting_of_ref": "indicator--1c7c59f6-8bfc-422d-92f3-b764251f838a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b4559c-7dd7-41c4-aadc-454c06ef904b", "sighting_of_ref": "indicator--303824ba-7d0f-449d-b69b-32933a7083ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8865810-74c6-43d9-aa99-f9fcac003571", "sighting_of_ref": "indicator--1f5b3bff-9c40-4c62-a4a8-f3672bfc8b2b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9364294a-c741-4772-80c3-2db894342aee", "sighting_of_ref": "indicator--17bf03d4-0705-4242-a6c6-8854d50690ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67776a0-4b83-431e-8c55-bfab9d3c31fe", "sighting_of_ref": "indicator--17bf03d4-0705-4242-a6c6-8854d50690ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b34f1e6-cc8d-4fed-8beb-a0d86b73a620", "sighting_of_ref": "indicator--17bf03d4-0705-4242-a6c6-8854d50690ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602d87cd-32b2-4092-8d3a-c4e0ab22acc6", "sighting_of_ref": "indicator--fa3700c9-b231-4d31-82ab-4d01ee4726ef", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f34994-1741-4ee1-9d5a-860de5cd311b", "sighting_of_ref": "indicator--98134b56-9f05-41e0-a61f-22ecded03edc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb9712c5-50d8-466c-966a-f459db5c1160", "sighting_of_ref": "indicator--56b141f2-9a3b-49fe-8cc7-a65974e1145c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6997a651-206e-4793-9fa1-9eb79da4d346", "sighting_of_ref": "indicator--56b141f2-9a3b-49fe-8cc7-a65974e1145c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da9647b-3513-4c8f-aa54-bcdee99b1a3e", "sighting_of_ref": "indicator--56b141f2-9a3b-49fe-8cc7-a65974e1145c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ff9c30-f343-41fb-8ff3-55c6a371f0a2", "sighting_of_ref": "indicator--276c8b25-66de-4c31-be30-d2b2556e2da3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96de8343-fdca-4953-93c8-a950f370f2eb", "sighting_of_ref": "indicator--1b6ba88d-936e-4214-98ee-f0cbb0ecad7d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c307ce2-e224-49b5-a1a3-9d3e83be50df", "sighting_of_ref": "indicator--1b6ba88d-936e-4214-98ee-f0cbb0ecad7d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6b26c8-8a5a-4e3a-837b-9f0d05e52e69", "sighting_of_ref": "indicator--1b6ba88d-936e-4214-98ee-f0cbb0ecad7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72ddc6b-b6aa-49a4-ae17-2cca626607f2", "sighting_of_ref": "indicator--d016a99b-5cac-45d3-aa28-a4fe4ee5093c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f76a379-dddb-435e-ba70-fd38f92a523f", "sighting_of_ref": "indicator--23e1eee8-cafd-4c1d-b443-f506419ecc5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3104dbd6-0cb3-4da4-962b-7b659748775b", "sighting_of_ref": "indicator--51e6574c-bcd3-4ffa-ad2a-577fc321e259", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb93d307-d4bd-4171-a54c-9d701da0b9e7", "sighting_of_ref": "indicator--51e6574c-bcd3-4ffa-ad2a-577fc321e259", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99404362-2bd1-49d0-b85a-0b9fe8a3e905", "sighting_of_ref": "indicator--b19f0331-9d7c-4f0d-ae8a-a75c5f19db2a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9d17bd-c64d-496d-b942-59e92f069822", "sighting_of_ref": "indicator--b19f0331-9d7c-4f0d-ae8a-a75c5f19db2a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc0c612-0f90-49ac-a5ad-9f10124ad6c1", "sighting_of_ref": "indicator--f629b97f-f550-4173-86e9-e7ee7794fc33", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb147c97-5d56-4b0b-a23a-f6d17072375b", "sighting_of_ref": "indicator--7974115c-17ff-4d60-b3cb-a207a37d560a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceef1520-4542-4dc9-95cb-0205566d5e0a", "sighting_of_ref": "indicator--a57a2abc-8741-4032-ba04-8b9d09b171ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0766b327-9c00-4be0-8b4b-379df52aad8f", "sighting_of_ref": "indicator--07ac63e8-432a-4d1f-9013-f3b89c87526b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58533a6-c0a7-4d0b-8865-0ce3303e1bc6", "sighting_of_ref": "indicator--c5dd87e7-ec82-458e-a6da-482b397895ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd890a23-1959-478e-a87d-e61952534267", "sighting_of_ref": "indicator--a44c66f0-69fa-4ff2-b2dd-7df3777afbc4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712afe68-f0bc-4ab0-90a2-3b5b67c7e633", "sighting_of_ref": "indicator--b984ecb7-be12-46b2-a42c-556c74b981f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778949b1-cdfb-4d4e-bf92-8091ee2b615b", "sighting_of_ref": "indicator--d1c8d082-51be-4ba7-9976-d245cfe0df6a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dab663-ef9c-4dfe-a430-9599ff3878ac", "sighting_of_ref": "indicator--f4c7e213-fe06-4716-9be7-e1fc3087af60", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c053abe-f2fd-481c-951f-206ee67217b1", "sighting_of_ref": "indicator--2c49bde1-7450-48f5-8d81-624df47aba80", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6632a5c6-9639-4001-a3c3-9d2693eb99a8", "sighting_of_ref": "indicator--f9f6e1ba-99b4-48ad-8249-2cfa4ecab462", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d54c2fb-2dfb-4fcd-9ab9-0a0a0ccd0ebd", "sighting_of_ref": "indicator--021254da-47d4-49da-888b-cc9a55201426", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd1baf5-0c24-4b83-b676-0adf45f41bf5", "sighting_of_ref": "indicator--59eef4d4-e2cc-4507-bd40-99ab7805469c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a59020-91b0-464a-9f57-079d0e85e0c9", "sighting_of_ref": "indicator--74cde0e7-47ab-4c78-aff6-bbc083f67f0f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c369b14f-3ff7-4cf7-90e4-bd1ea57e18d7", "sighting_of_ref": "indicator--0b5583d2-362e-432c-8e00-3fe9b5edb93e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b68d1-d6d3-43a8-9084-0ccf0255b056", "sighting_of_ref": "indicator--21e90c93-d312-4816-98ac-ad97445a560e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c9a74d-d7ac-465e-993b-01b56ddba4f8", "sighting_of_ref": "indicator--8e679add-f6ae-4e95-8837-a1b5d74bf0e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8445a280-0a05-4c9c-9a9e-840b7254541e", "sighting_of_ref": "indicator--068fc46c-6d2a-4c56-bea6-5d76f03b7bd8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64831bd4-af57-403b-9e7c-e59468f20bff", "sighting_of_ref": "indicator--e579ba07-f933-4360-bde6-bd33fa7aebae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428fa46a-7709-43ec-8be2-d284dfc0a834", "sighting_of_ref": "indicator--23bfea17-2963-4c0a-b3d2-a2e893436676", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d2b752-2ff7-4f6f-8fa4-863e41be3764", "sighting_of_ref": "indicator--de47f76a-5755-47ee-afd0-25046bd9fae9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3a8e99-36ff-4169-83eb-7f28ed2cbca0", "sighting_of_ref": "indicator--dcfed325-2f3d-4ce6-ae9b-575cb950c650", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a002897d-7cca-487d-9bb6-aefe838ea3e6", "sighting_of_ref": "indicator--db93c783-6bba-4188-b0c1-f60588f5001f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a4c8b5-e68c-4ddf-bd87-1303932cb568", "sighting_of_ref": "indicator--db93c783-6bba-4188-b0c1-f60588f5001f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cc1709-ae63-4469-9261-0f7692b12e6a", "sighting_of_ref": "indicator--db93c783-6bba-4188-b0c1-f60588f5001f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c0e003-ce3e-4e8d-9802-bad4afeb83db", "sighting_of_ref": "indicator--a8f6cb2d-75c9-411f-92cf-932e431d2517", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc1f149-f636-4794-a58d-7faedf841ab9", "sighting_of_ref": "indicator--99f0c7e2-5919-4001-af2d-233cf5ff1219", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6785b5a7-7dd5-448e-afd0-d7fb304da289", "sighting_of_ref": "indicator--1ee4836b-4a0a-424c-b054-b933c3ea32ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ce12d-74c0-433f-a261-78ee39056ff4", "sighting_of_ref": "indicator--1ee4836b-4a0a-424c-b054-b933c3ea32ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00b368a-54b7-469f-b5b6-4c54cfa3d97d", "sighting_of_ref": "indicator--e656f3b4-e104-41be-94b8-33443611614c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76be08bc-275a-44f2-9376-4a3d8a4b3d62", "sighting_of_ref": "indicator--fe672aa5-19ee-497a-afae-e5733572e39b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fa706c-13f9-4e2f-b935-f2806bf7467d", "sighting_of_ref": "indicator--5b524843-4e56-4e1d-a07f-ce880a42a7b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d704f80e-d0ef-47b8-aa98-52a0cef397ed", "sighting_of_ref": "indicator--791ac01c-9d62-439f-a600-4d968e0cd896", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1a6bcb-50ff-4b10-919c-ad8838ed895a", "sighting_of_ref": "indicator--616228bb-21b6-4c3f-ad2c-dccf229e733b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c1ee1e-b176-450b-a77d-491e1e6da4f5", "sighting_of_ref": "indicator--8202aa05-1302-48f9-9b36-c4848be4a55a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d765ac2e-ad13-4e57-b0b9-cd04a98ede6f", "sighting_of_ref": "indicator--03cfc963-f722-43fe-8a7c-3a411831d754", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b01bbd-d4a1-4074-af10-97530627159e", "sighting_of_ref": "indicator--03cfc963-f722-43fe-8a7c-3a411831d754", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ce2364-b0ec-4c33-b187-df8a461d3239", "sighting_of_ref": "indicator--03cfc963-f722-43fe-8a7c-3a411831d754", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ca40b2-d785-4db0-8a87-bb88b43b6904", "sighting_of_ref": "indicator--05f07eeb-9f03-4d61-8560-25053cee4768", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031daef7-2351-4646-91ec-819bd48e406a", "sighting_of_ref": "indicator--3d237b36-a0ba-4bbf-8c08-50e53cd14927", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5215ac-41a1-4000-ae92-7a831495b74e", "sighting_of_ref": "indicator--5fdd7699-75e4-4715-b652-cdf1ce6ffd18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f84e17-3008-4676-8469-ddc26cba53e0", "sighting_of_ref": "indicator--5fdd7699-75e4-4715-b652-cdf1ce6ffd18", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3776a07-111f-4d39-9cc2-d324eb7f2eb3", "sighting_of_ref": "indicator--5fdd7699-75e4-4715-b652-cdf1ce6ffd18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e62c75-502f-49f2-9764-6ac28c013305", "sighting_of_ref": "indicator--203f0f20-7646-411c-878d-4e142044a103", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fc9c3d-239b-46a0-98ff-a5b7f3a82e09", "sighting_of_ref": "indicator--203f0f20-7646-411c-878d-4e142044a103", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21454456-0b62-464f-8f06-38543aa7c3bc", "sighting_of_ref": "indicator--203f0f20-7646-411c-878d-4e142044a103", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69ebc70-782c-4931-aa7c-4db8341f915b", "sighting_of_ref": "indicator--93543329-52f9-4ed1-bebe-b8628f487a37", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd32d46-0012-4d4b-b2b1-7909a506b2ff", "sighting_of_ref": "indicator--6dfb6404-7c83-46ae-92fa-8ec8f8886604", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080b25fa-3d16-421b-a8af-9b8be525b25d", "sighting_of_ref": "indicator--f3601822-dd59-4777-9fb2-c902dfe43c8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d653ce-1a1e-48fb-9a93-325645c1ad7b", "sighting_of_ref": "indicator--f3601822-dd59-4777-9fb2-c902dfe43c8f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da15c26d-e81f-458e-9796-e02483e09a6b", "sighting_of_ref": "indicator--f3601822-dd59-4777-9fb2-c902dfe43c8f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7daddbe-61ea-4ea1-adc5-247b6674d4f0", "sighting_of_ref": "indicator--c07cb401-15c2-460a-980c-06d75b87236b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8451f73-1027-49be-964e-7ceddf7b52b9", "sighting_of_ref": "indicator--56a453c1-34ad-4aa5-826f-6ac405ccfd55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f935347c-d97c-44dd-af42-4be8e243f59d", "sighting_of_ref": "indicator--6e31ad86-bfc4-4be9-90a2-2609efbc49a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5517a816-04ae-450c-b636-ca3cef491f2f", "sighting_of_ref": "indicator--6e31ad86-bfc4-4be9-90a2-2609efbc49a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c220a43-5cc1-4118-b1d9-1802b21ae403", "sighting_of_ref": "indicator--6e31ad86-bfc4-4be9-90a2-2609efbc49a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631ce74a-aa1c-4a3f-aa8f-f920db977f7d", "sighting_of_ref": "indicator--a658165e-4989-453b-a097-05e82af07f08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8b140d-a2d0-4c49-bdb0-51a3825bdeb0", "sighting_of_ref": "indicator--a658165e-4989-453b-a097-05e82af07f08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef2ca7c-2e1c-47c9-aca4-405e759521a4", "sighting_of_ref": "indicator--a658165e-4989-453b-a097-05e82af07f08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d20386-7e7c-49a3-ad6a-bf980531092b", "sighting_of_ref": "indicator--45d273a4-415d-4a42-9c6d-3ee258045639", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbff0b6a-5f87-4190-8e11-4ec7c4742c6a", "sighting_of_ref": "indicator--45d273a4-415d-4a42-9c6d-3ee258045639", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d56a86-50a6-416b-b3fd-cc0c720bcaaa", "sighting_of_ref": "indicator--45d273a4-415d-4a42-9c6d-3ee258045639", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7cba99-5be0-481d-aeb1-1f50b47bd22b", "sighting_of_ref": "indicator--df799ac4-4aca-49d8-898c-ca85f44af3d1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b487ff-0445-4e5d-93de-3297943a78bc", "sighting_of_ref": "indicator--df799ac4-4aca-49d8-898c-ca85f44af3d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df85fc5b-2213-4bc8-9b22-12dc5721f1bf", "sighting_of_ref": "indicator--df799ac4-4aca-49d8-898c-ca85f44af3d1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8386f249-9e40-41d9-8dab-f1b5b94ab129", "sighting_of_ref": "indicator--35f92192-ea7c-4ef9-a148-957f9bf5e8c8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40757b2d-09d6-4c21-bc07-f4939a18aa57", "sighting_of_ref": "indicator--35f92192-ea7c-4ef9-a148-957f9bf5e8c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79401f6e-da59-4c0c-a56b-5a651010cca0", "sighting_of_ref": "indicator--35f92192-ea7c-4ef9-a148-957f9bf5e8c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de8654f-b15a-4136-86e5-1a555e063d38", "sighting_of_ref": "indicator--7c98aa44-1809-4c71-9830-77eec0b8db11", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceac8ae-e87d-4078-b58c-25927d1295d0", "sighting_of_ref": "indicator--7c98aa44-1809-4c71-9830-77eec0b8db11", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b63cecb-619a-44ca-afb8-7e00f6f9f1af", "sighting_of_ref": "indicator--7c98aa44-1809-4c71-9830-77eec0b8db11", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e977c2-d6ba-4594-8ca8-17899fe89ae1", "sighting_of_ref": "indicator--e6a21d02-f6ad-4214-a2d3-c3b1227b0927", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160cc9fe-b187-497f-93af-2a6dd9dd9de9", "sighting_of_ref": "indicator--e6a21d02-f6ad-4214-a2d3-c3b1227b0927", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f880b921-90c1-4e46-a193-33eac302ec0a", "sighting_of_ref": "indicator--e6a21d02-f6ad-4214-a2d3-c3b1227b0927", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e32a3c-5e24-4f46-b0d9-7675d77326fb", "sighting_of_ref": "indicator--36be7531-8391-4c34-aa0d-c5466b08baf6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818d8719-2225-4a27-8ba0-b7d49b73fc7a", "sighting_of_ref": "indicator--067fbeea-4332-483e-9dcd-8d18645e97b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ad6644-6f91-4320-841d-86918895916c", "sighting_of_ref": "indicator--067fbeea-4332-483e-9dcd-8d18645e97b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e9979b-8b62-4a07-b5d4-afd8d135dd8d", "sighting_of_ref": "indicator--36802900-4d27-4679-b6b6-5bbed92a21ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2983207c-e413-470f-9a75-17751cef7b58", "sighting_of_ref": "indicator--36802900-4d27-4679-b6b6-5bbed92a21ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6fe55d-2ffc-42db-a5ef-3947dfeaa91e", "sighting_of_ref": "indicator--36802900-4d27-4679-b6b6-5bbed92a21ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0944678-d9b6-4f28-a90c-10cc282668b1", "sighting_of_ref": "indicator--a95b7a47-69c6-4811-ab9b-6b42925cba65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0297689b-e49d-49e1-83a4-568793e8ee98", "sighting_of_ref": "indicator--a95b7a47-69c6-4811-ab9b-6b42925cba65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b1ff0a-a0e4-4371-8656-100c8b7d8a80", "sighting_of_ref": "indicator--a95b7a47-69c6-4811-ab9b-6b42925cba65", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301fed7d-120e-4aa5-83e4-60e4895c3320", "sighting_of_ref": "indicator--04be40d0-4688-4757-ac22-7b347f524c44", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f154489-423f-42ed-a85f-a591b0a7882a", "sighting_of_ref": "indicator--04be40d0-4688-4757-ac22-7b347f524c44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054c37a4-c5e9-43fb-8534-85eca79107aa", "sighting_of_ref": "indicator--04be40d0-4688-4757-ac22-7b347f524c44", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ce58f1-7a0c-471d-ae25-c10bcf40c3a2", "sighting_of_ref": "indicator--012cd7bc-2f2a-48f3-bc50-79659015dda9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e80c0dd-83bf-43e4-b83f-16225e7e9ab2", "sighting_of_ref": "indicator--e1a973e9-648c-4331-8bc9-46140ad4689c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4515ae1e-535d-480c-b492-64faf1292772", "sighting_of_ref": "indicator--e1a973e9-648c-4331-8bc9-46140ad4689c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b106ca-533c-4043-8f4a-3e1f76ddb851", "sighting_of_ref": "indicator--e1a973e9-648c-4331-8bc9-46140ad4689c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619743ba-8abe-4d00-8adb-df2bf1c6a777", "sighting_of_ref": "indicator--501ea93d-a5f4-41b1-bb39-97352f59917f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e87df6-55f4-4110-9263-d8ac9b35593b", "sighting_of_ref": "indicator--f07c2c5c-1a61-4fdf-b190-14c8713f22cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01536f1c-1b7a-45d9-9d2f-618679f827a2", "sighting_of_ref": "indicator--f07c2c5c-1a61-4fdf-b190-14c8713f22cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ab5b08-a813-4a5e-8a43-bdd1ba454bdd", "sighting_of_ref": "indicator--f07c2c5c-1a61-4fdf-b190-14c8713f22cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e42a520-597a-4d7b-8a4b-02a8ad44bb96", "sighting_of_ref": "indicator--09dde160-d2c1-49d7-b5e9-38fd8e4d8760", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8fd314-2a85-4d73-ae23-fb876161dd0d", "sighting_of_ref": "indicator--11057d74-0e26-4bbd-bb99-97426aa84f2d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1222df3-a917-4ed9-b835-567a193c2231", "sighting_of_ref": "indicator--d60a3e2c-a8d5-4339-a479-69b23b7f5f41", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aeb253d-24f1-4ffc-aae5-9f5f93d2545d", "sighting_of_ref": "indicator--5c52c7ea-1ae7-4981-bc72-f76c219e64be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedc4665-84c2-43ef-ad20-ba348295de94", "sighting_of_ref": "indicator--61431ec4-fbdc-47f8-a5d9-9fc29cf0f167", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef77aae-fd03-465d-8f36-0db76532b509", "sighting_of_ref": "indicator--e608850f-637e-4375-a2a9-59f1212c7777", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78720393-f57c-4ade-b8db-52fc5118dd53", "sighting_of_ref": "indicator--87a08525-8e40-4d35-bd82-b7675f6f2697", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd809441-c22d-44a3-8b07-cc607ec3f189", "sighting_of_ref": "indicator--0c2efc27-203b-4cc2-8bd9-cbf8b7647c72", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eccae3e-95c5-4d3b-a449-9d80a44904fb", "sighting_of_ref": "indicator--0c2efc27-203b-4cc2-8bd9-cbf8b7647c72", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2b9dbd-25f3-4d8d-8a6c-0a2a90c3ee4e", "sighting_of_ref": "indicator--0c2efc27-203b-4cc2-8bd9-cbf8b7647c72", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96947d35-9252-4316-9675-eaa861dfd4d0", "sighting_of_ref": "indicator--0c2efc27-203b-4cc2-8bd9-cbf8b7647c72", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741cc706-287d-4e65-a9c6-18c821690d86", "sighting_of_ref": "indicator--113ff353-c010-4eb1-ad99-9edcc45a48f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549e99ed-49cf-4c0a-b343-8bd62ffdaa22", "sighting_of_ref": "indicator--07f5ab94-59d9-4eeb-8564-6098b1cda49e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6907049-0872-484d-907c-9c04a4142e8f", "sighting_of_ref": "indicator--fa08d607-4e28-4643-960b-75626b6096a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38bbc51-470b-4832-9603-3a9f9012b813", "sighting_of_ref": "indicator--a7efd7f7-d6ca-4689-b426-80d67916ce38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1900f3-941c-4394-894a-057ab957f166", "sighting_of_ref": "indicator--dc64dbf5-7b1c-483c-abd6-48e92316f3cd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257690eb-f1ad-420d-b778-c24f18b9878e", "sighting_of_ref": "indicator--dc64dbf5-7b1c-483c-abd6-48e92316f3cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ed97a0-bca2-4fec-9074-925c0067b2a9", "sighting_of_ref": "indicator--dc64dbf5-7b1c-483c-abd6-48e92316f3cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f5204a-4fae-4101-b521-8fc42a7f882b", "sighting_of_ref": "indicator--9318f22c-66b9-4a40-b819-6504bc496351", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a77b13-ea2f-4cbf-8dda-88416ecc2f2e", "sighting_of_ref": "indicator--9318f22c-66b9-4a40-b819-6504bc496351", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959c94d8-b9f5-4700-bf1a-24def180c723", "sighting_of_ref": "indicator--df52765e-6c68-45f7-9825-b964d1c9b373", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15f4d21-df44-4de0-ae1f-da3e81f4fb19", "sighting_of_ref": "indicator--df52765e-6c68-45f7-9825-b964d1c9b373", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628decf0-88dc-4e4a-b90f-7fb73b683920", "sighting_of_ref": "indicator--df52765e-6c68-45f7-9825-b964d1c9b373", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44ca7a3-67fa-4d23-a79c-32e997622a41", "sighting_of_ref": "indicator--35c59528-4663-4b4b-8a07-471f9d8d514f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aefe607-943a-4586-89ae-0e12ed513353", "sighting_of_ref": "indicator--35c59528-4663-4b4b-8a07-471f9d8d514f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb02aea-d9c0-4b1f-85a9-6598cc288b3f", "sighting_of_ref": "indicator--35c59528-4663-4b4b-8a07-471f9d8d514f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d346b16-32c7-415b-a0a7-5c0b5c6ca6bb", "sighting_of_ref": "indicator--3c545c1e-93dc-430d-8daf-a454ebfe4d9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd95eca-baf3-4a25-8e82-18a329040fc7", "sighting_of_ref": "indicator--3c545c1e-93dc-430d-8daf-a454ebfe4d9b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a09293-b177-4481-8b74-422c910cb45c", "sighting_of_ref": "indicator--3c545c1e-93dc-430d-8daf-a454ebfe4d9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906c3bea-9c21-4825-aa93-c546b15d355d", "sighting_of_ref": "indicator--a0058629-df80-4f04-ae5e-a27233532d7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb2e90d-ef4d-4f2d-8d00-96d88a532b0e", "sighting_of_ref": "indicator--3fa2f81c-d871-401e-8473-ce8f3f1203d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc73a36-1ef1-4dd3-b306-360914ef118b", "sighting_of_ref": "indicator--3fa2f81c-d871-401e-8473-ce8f3f1203d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c8b8ec-5049-4090-b4d8-583e14214025", "sighting_of_ref": "indicator--3fa2f81c-d871-401e-8473-ce8f3f1203d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a5b3f7-984e-44b5-94f7-0f9ec7684491", "sighting_of_ref": "indicator--7dd6ebb2-36ac-42cd-84b4-f0635c03594c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468c0c32-10c0-4489-8638-db5ec2c9b0d7", "sighting_of_ref": "indicator--7dd6ebb2-36ac-42cd-84b4-f0635c03594c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504518ed-01de-4b86-bf6b-2fe32ad1b6c9", "sighting_of_ref": "indicator--d4d0ddae-93ba-4da5-9781-806ae4a2f08d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fdc21f-9755-46da-a8b9-2731c6d5aa9e", "sighting_of_ref": "indicator--d4d0ddae-93ba-4da5-9781-806ae4a2f08d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d475f399-19c0-411c-afec-a76a73e38b94", "sighting_of_ref": "indicator--d4d0ddae-93ba-4da5-9781-806ae4a2f08d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c616b88d-d6c3-4e41-ade7-32c5296b6da3", "sighting_of_ref": "indicator--c794176f-a1c4-4c23-a64a-4007024acaf4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877c5cc7-46a0-4a3c-8c17-f040b694ea75", "sighting_of_ref": "indicator--c49493f9-c1b9-4d50-8235-392c220868b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f402d3b-87a7-4265-a9e8-4859a7726837", "sighting_of_ref": "indicator--17ea6a6f-8ad5-4507-82f0-cb12e94dda39", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d4f96e-176e-4b13-af92-1c10d4e42cea", "sighting_of_ref": "indicator--17ea6a6f-8ad5-4507-82f0-cb12e94dda39", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e356114-356e-4d2f-8825-3488be97ca44", "sighting_of_ref": "indicator--e18bb21e-9c18-49a7-ae8b-4085caf4f2a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05fbd95-8491-46e8-b717-0e7b202f484a", "sighting_of_ref": "indicator--a7898838-c2f5-4af6-8727-7c7b9ae0dee3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db261222-49a7-43c4-8cf9-860b7f9f473f", "sighting_of_ref": "indicator--a7898838-c2f5-4af6-8727-7c7b9ae0dee3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60ae7f6-9948-4515-be72-9cc2e6dc63d0", "sighting_of_ref": "indicator--ee3bbb73-99b8-45e9-9ef6-4717cdcf0842", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a0d5ce-136d-44dd-b45b-cda6b4500361", "sighting_of_ref": "indicator--ee3bbb73-99b8-45e9-9ef6-4717cdcf0842", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326fbd9d-c6a2-4f16-9bf7-e075a2db86a2", "sighting_of_ref": "indicator--c0b4e53e-a97e-46aa-b492-67a0b2a222c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f9de8c-098f-466d-a959-0219116d3937", "sighting_of_ref": "indicator--6e5a5182-571e-4030-83dc-7006cf601053", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9c9f9a-095a-4f35-8618-f7d4fce5c98f", "sighting_of_ref": "indicator--6e5a5182-571e-4030-83dc-7006cf601053", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47d2d87-6e99-4d9a-8985-ca53f84160f2", "sighting_of_ref": "indicator--6e5a5182-571e-4030-83dc-7006cf601053", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980c88b2-5bdc-4ca9-b3b6-0c37179acbf1", "sighting_of_ref": "indicator--f754e620-8b86-4b12-a8a6-84396cbfd8d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9775ca5-198c-4c68-8a6f-99e21d4e01d9", "sighting_of_ref": "indicator--f754e620-8b86-4b12-a8a6-84396cbfd8d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438d10ab-900c-4f77-9527-c3e0f3507641", "sighting_of_ref": "indicator--f754e620-8b86-4b12-a8a6-84396cbfd8d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1f9a3c-2af6-474d-86bf-7730a2bbb06c", "sighting_of_ref": "indicator--0d328262-11bb-4940-b38f-7ddbf5488861", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f59a63f-73d0-48dd-8d17-e6e426d9bfad", "sighting_of_ref": "indicator--0d328262-11bb-4940-b38f-7ddbf5488861", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dff1755-905f-46ff-a5bc-296035fd1259", "sighting_of_ref": "indicator--0d328262-11bb-4940-b38f-7ddbf5488861", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92ee7a1-ff76-4629-b3bd-3ae4d88546bc", "sighting_of_ref": "indicator--49233344-d8b3-4ddb-8809-7c687db90c77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fc3b16-9383-43d7-b6ab-8ac12426c61f", "sighting_of_ref": "indicator--06b6ae40-e6f5-4ee8-9052-4572eca5ce07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943cc017-7b4a-498c-8945-a1a8c2b577ac", "sighting_of_ref": "indicator--06b6ae40-e6f5-4ee8-9052-4572eca5ce07", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abc771c-cc54-428c-8ae1-851c15f9b983", "sighting_of_ref": "indicator--06b6ae40-e6f5-4ee8-9052-4572eca5ce07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542f0bc0-71a8-4c90-bd34-7fd6482e13e0", "sighting_of_ref": "indicator--d2fb7ea9-ae0f-4579-a912-65ed75694b6e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c7613d-acb2-491f-b9ae-02335804e9bc", "sighting_of_ref": "indicator--d713352f-d0a6-4c37-8f44-309601b7a4ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791e5b62-0ae0-42b1-a8e7-0972571fd5f2", "sighting_of_ref": "indicator--ce4db2a9-8601-4619-b302-10c7f778da18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4887ae38-ec01-454e-b7ee-85ec091743e7", "sighting_of_ref": "indicator--fe2ca530-586b-47aa-91e9-a05a6a45978b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0176061-215e-45fc-9b65-55eae22fbdbe", "sighting_of_ref": "indicator--77919be3-73ad-4c46-bf49-b38fd0ea7787", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0383e7ad-da4d-48f9-ab7e-fcb2bf9d849b", "sighting_of_ref": "indicator--eccbb472-4fa4-4ca5-a3ad-7c3d0bdca3be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9df1b35-ac7d-400b-82ab-d5c0847955eb", "sighting_of_ref": "indicator--eccbb472-4fa4-4ca5-a3ad-7c3d0bdca3be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e73f54b-aaa1-4ccc-8e1f-7857d8ae08cb", "sighting_of_ref": "indicator--770b1155-4d30-41e7-b425-8ae91bf5f344", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f3e592-68d5-4feb-a397-eabeca861345", "sighting_of_ref": "indicator--770b1155-4d30-41e7-b425-8ae91bf5f344", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14203f4b-43b0-417d-be91-abe54f2ce6ed", "sighting_of_ref": "indicator--636856cb-501a-4255-bee6-0818b284d1cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942447b2-51a7-463e-9a18-c8238869b9c5", "sighting_of_ref": "indicator--0aa63518-bca0-44eb-8aa6-af8a466f1e0d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18871cfa-d7e6-4f51-a355-7a3ae9b13b7c", "sighting_of_ref": "indicator--69dea3cf-b030-466e-8db2-f52c776cfac0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f570511d-204e-4a4b-9b19-7603c036f41e", "sighting_of_ref": "indicator--f5cf947b-50e7-4d97-a6d5-5888a4402faa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14636ec-2c3c-4714-80d2-a080a5893d5a", "sighting_of_ref": "indicator--56b1c67c-6571-4156-a828-b732d5c20850", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19f97b3-cfca-4a42-b17d-1dc4a25ca274", "sighting_of_ref": "indicator--e74fadf2-988b-4ca6-80ce-90879a87ac57", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a560d0-4ffe-43fa-9705-0a01027659e2", "sighting_of_ref": "indicator--caf87eeb-65cb-4d2d-8bdc-b247bf81540d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dab9229-2fc4-4a9e-90ff-2a221f6deeff", "sighting_of_ref": "indicator--f859efd9-24a5-49df-b25b-949a99f0c1a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438a664e-27d1-4f0d-b545-33f8a41a64ea", "sighting_of_ref": "indicator--63a3854e-1566-4410-8ddc-432989acb63d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a00c28-e3ef-4b9c-9d58-2f5167dcadb2", "sighting_of_ref": "indicator--63a3854e-1566-4410-8ddc-432989acb63d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7facae-6daa-4db1-a85a-cae8925adf36", "sighting_of_ref": "indicator--63a3854e-1566-4410-8ddc-432989acb63d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bee14f5-3170-44b3-ba18-c1032f880128", "sighting_of_ref": "indicator--b981b128-f393-4b71-85e0-0c17ccf97291", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899fdfd0-bcc7-48cb-ab26-22af8df698b0", "sighting_of_ref": "indicator--b981b128-f393-4b71-85e0-0c17ccf97291", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c0d418-d17a-41bc-b8c7-5182b723f7b8", "sighting_of_ref": "indicator--b981b128-f393-4b71-85e0-0c17ccf97291", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c449a86a-2281-4882-8656-fae1fcb34b51", "sighting_of_ref": "indicator--fb9b5bf6-aac4-42ff-97d0-e284d5c75376", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722095a9-bfd9-4df2-b9d8-933833261381", "sighting_of_ref": "indicator--fb9b5bf6-aac4-42ff-97d0-e284d5c75376", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7497a9d-876e-4d43-9b9b-49be01a7c168", "sighting_of_ref": "indicator--bb97c500-e007-41ad-bda7-3b89134c4a6e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6064ca2-ac31-476f-87ca-9df514d10349", "sighting_of_ref": "indicator--bb97c500-e007-41ad-bda7-3b89134c4a6e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fbddb2-21a3-4681-9efa-3c0ad461ec5c", "sighting_of_ref": "indicator--968c2005-e27a-49f9-807a-e747bc146e24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9ca743-0815-47ae-a4cb-10160bf1ed50", "sighting_of_ref": "indicator--968c2005-e27a-49f9-807a-e747bc146e24", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61a83af-94af-4ec8-90c8-ad5613761843", "sighting_of_ref": "indicator--968c2005-e27a-49f9-807a-e747bc146e24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870bab02-ed2e-4502-9660-25e3202b2bd2", "sighting_of_ref": "indicator--31417c0c-7c5b-4b30-b57c-4b0e8cff364e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ad100e-da96-4b24-9d14-588ce3673982", "sighting_of_ref": "indicator--31417c0c-7c5b-4b30-b57c-4b0e8cff364e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097e5809-68aa-4c25-b5f6-fdcc7f3466eb", "sighting_of_ref": "indicator--0a842e7d-405a-40ae-9bbc-11f72ef18092", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d86c0d-4d34-4dd1-8756-bb245092ada5", "sighting_of_ref": "indicator--8524c32d-7123-48c1-adef-00e3aa6d446d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6c92de-eac0-4970-8cc7-78a3aadd6ede", "sighting_of_ref": "indicator--6071c018-add0-4740-bf44-e353b2d284cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3afdc3-bab2-484a-9958-6e99d2db6971", "sighting_of_ref": "indicator--6071c018-add0-4740-bf44-e353b2d284cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476d58b8-11c6-4b7a-9ee0-4e0007eed8fe", "sighting_of_ref": "indicator--25f4e2bc-41af-4066-a70e-49f141621589", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418e98e0-a662-4415-aeaf-277225838560", "sighting_of_ref": "indicator--25f4e2bc-41af-4066-a70e-49f141621589", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0d8bee-6993-4011-bf52-da963069aa65", "sighting_of_ref": "indicator--25f4e2bc-41af-4066-a70e-49f141621589", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d2f372-fc07-4cfd-b715-8fa83e5adeb2", "sighting_of_ref": "indicator--98d86a3b-d91a-499f-b8b0-68fccf299786", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c3388f-c9c3-4063-9263-0ed8909e21c2", "sighting_of_ref": "indicator--b1dfe404-e0a9-4428-85c7-8cce4d6dbd25", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6ef2a4-e58a-4cd7-8c77-421c2d7a5033", "sighting_of_ref": "indicator--b1dfe404-e0a9-4428-85c7-8cce4d6dbd25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c15664-8bba-46b9-9afc-f4323da96865", "sighting_of_ref": "indicator--f4ce6dbf-ed5b-4ff8-8ffb-526bd70e35be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b06125-ddcc-427b-ae7b-d6f4c4a7dd45", "sighting_of_ref": "indicator--f4ce6dbf-ed5b-4ff8-8ffb-526bd70e35be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77969965-222f-47e7-acd5-c044ab39448b", "sighting_of_ref": "indicator--f4ce6dbf-ed5b-4ff8-8ffb-526bd70e35be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2819b10d-cb2a-4358-b841-82a9d996d348", "sighting_of_ref": "indicator--1d3f4723-78f5-4683-a73d-18a011989a3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da16e719-0fb8-4a0d-a71a-b2f74d57a759", "sighting_of_ref": "indicator--1d3f4723-78f5-4683-a73d-18a011989a3f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6bff3b-3118-4493-998a-da57d1024405", "sighting_of_ref": "indicator--1d3f4723-78f5-4683-a73d-18a011989a3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322c7a8c-6d10-4425-b997-a69335401ef4", "sighting_of_ref": "indicator--8f8217d3-e72b-40f3-a779-ea3a6fe34c2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4406fe-0937-4a05-87a1-6e9cc327b4c5", "sighting_of_ref": "indicator--8f8217d3-e72b-40f3-a779-ea3a6fe34c2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beef5b3-e06f-4578-b80d-8e7e37b16e09", "sighting_of_ref": "indicator--8f8217d3-e72b-40f3-a779-ea3a6fe34c2d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e837c11-cd1c-4051-8914-5fcd7e5bc752", "sighting_of_ref": "indicator--4db1b12e-1822-45e9-b401-8500ea1ab388", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d355835-920f-42f1-9264-02b346e5f3bf", "sighting_of_ref": "indicator--9fbfee9b-cbdb-4f1b-bc4c-d6a0d5c5f6e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a912631-6243-4d9c-aeb8-0a982e39f024", "sighting_of_ref": "indicator--9fbfee9b-cbdb-4f1b-bc4c-d6a0d5c5f6e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de982239-ffd8-4bb4-8a74-f6ff5cfe845b", "sighting_of_ref": "indicator--9fbfee9b-cbdb-4f1b-bc4c-d6a0d5c5f6e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309aa40e-9c56-4499-871b-3dfc02a39276", "sighting_of_ref": "indicator--cceddca4-d33b-4cf5-bf7c-dc670ddabb61", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aba0787-6b8a-4f9f-b086-0cd0f186ff90", "sighting_of_ref": "indicator--b2bc08ab-1165-4523-83f3-ae47dbf52d1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03df1ecf-f025-4540-94a7-4624af6eb64e", "sighting_of_ref": "indicator--049921bd-e40e-4e3e-adef-e26361663e59", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd5f084-452c-4a40-a4b6-c2b2e0d671be", "sighting_of_ref": "indicator--36bba651-1aa5-4dcc-a4b8-3cd3b763fe32", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3db5968-07f7-4f5a-8b60-3a5411151c85", "sighting_of_ref": "indicator--494e9ed2-a7e9-4e03-888d-07107fa5820b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb19d23-f21a-46bb-a612-7e9aa8859bd0", "sighting_of_ref": "indicator--1baa5c9d-ea95-451a-9147-8c7788335be2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54d9150-db57-4196-9e1c-ed33cb1601df", "sighting_of_ref": "indicator--1baa5c9d-ea95-451a-9147-8c7788335be2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2872bd73-b768-435d-831a-125a8b07b8a5", "sighting_of_ref": "indicator--9f1a7d89-7387-46d4-97af-4d69aa6c7fff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6ade0f-9ac6-488b-b1ab-effdad28105f", "sighting_of_ref": "indicator--9f1a7d89-7387-46d4-97af-4d69aa6c7fff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c957cd74-8b7d-432b-b28f-7da61a09db74", "sighting_of_ref": "indicator--6137116c-fc91-4b6f-8afa-118a730902a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa5653d-dbf4-4193-8830-c79237d931f8", "sighting_of_ref": "indicator--4b721117-546f-4218-b7f2-73f06e0028e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c41051-7325-4566-a2e1-f6988ec14aef", "sighting_of_ref": "indicator--d7112784-f034-4087-9039-d2dfab82aed4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e57bb7-547d-40ef-bd2a-86b7e9c72bd9", "sighting_of_ref": "indicator--fd8e317f-180f-46d4-b1d7-18be068068c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a504bc-f278-4597-b86c-73997163458d", "sighting_of_ref": "indicator--eb076f4c-89c2-4cf9-a294-8f6df06778e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a550fdd-6cf3-4659-99dd-428f0bf9244c", "sighting_of_ref": "indicator--9b0e2b1c-50e8-4c74-8a12-4bffd5d14726", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436759eb-3874-4760-9c39-c2438957f406", "sighting_of_ref": "indicator--9b0e2b1c-50e8-4c74-8a12-4bffd5d14726", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cd21d1-cc60-44dc-87e7-22be0744e3a5", "sighting_of_ref": "indicator--9b0e2b1c-50e8-4c74-8a12-4bffd5d14726", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df60479-7296-4571-87cd-c55850b05917", "sighting_of_ref": "indicator--339f0963-fa34-44c9-86fa-8b805c284595", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0287405-06a2-4dc8-82c7-b6f3512734a7", "sighting_of_ref": "indicator--339f0963-fa34-44c9-86fa-8b805c284595", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0360a06e-32af-4c0f-b542-3dd127e11cb9", "sighting_of_ref": "indicator--a4ad1a48-e32d-4ae3-a9ed-a060f8e879a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d7a7e4-63e5-4cd9-87f1-2b875d92216b", "sighting_of_ref": "indicator--96fd4a83-36dd-48e0-a638-7eec356a1dd8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df6e94e-a7bd-429f-8878-ef682e8b9e1c", "sighting_of_ref": "indicator--244132f8-add2-40f6-ba41-a0fb53afcba4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4e0d59-d002-4584-8aa3-52555d220e09", "sighting_of_ref": "indicator--9e2e4675-abf1-4791-bb56-fdc885d704e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ad9ade-47f5-4a29-a72e-1f78e823c38d", "sighting_of_ref": "indicator--aa6feaf4-3965-423a-805a-b5a07b911346", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3de8bf-f460-49d7-993c-a9aec54c5b23", "sighting_of_ref": "indicator--410409f0-ee88-43f9-a801-a5adf5a0b4c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497a47a4-9045-415b-aa95-4b9d18dba207", "sighting_of_ref": "indicator--da1bc3fb-913b-451f-be59-840e8116b406", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4f339e-6726-4ef9-8d74-e86ed2bab4ab", "sighting_of_ref": "indicator--4743fc1a-d7e7-428c-8281-3907ad9cf20f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09829c61-a8b3-47e8-bb15-dae23013443b", "sighting_of_ref": "indicator--8594185c-02a8-4ad4-9e5c-6c6a27d640a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f90d68-d978-4b50-acaf-56f727b9297d", "sighting_of_ref": "indicator--dc856357-4cfe-4962-a7c7-3a8f494504ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84179a8-5a80-4cc8-a342-2d418b4eaf39", "sighting_of_ref": "indicator--dc856357-4cfe-4962-a7c7-3a8f494504ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac14652-7ca0-4d0d-a177-0d5fbd3f8291", "sighting_of_ref": "indicator--dc856357-4cfe-4962-a7c7-3a8f494504ce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7eb616-be78-4527-a596-d47e65cf8fdb", "sighting_of_ref": "indicator--dea9e5ce-333f-42ef-8c32-fe39e1f08d76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1065716-ee17-4625-97ab-dfd2abeebe8e", "sighting_of_ref": "indicator--8273cbbf-026c-4e2b-87f3-4a69364d1ac1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ecb418d-ae46-4612-9d79-5e741ed4c8ee", "sighting_of_ref": "indicator--8273cbbf-026c-4e2b-87f3-4a69364d1ac1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966a33a8-b273-4f88-b6be-1e022d8492f2", "sighting_of_ref": "indicator--71cf52d2-934f-4db6-9c8d-12e27bcee1d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e07e9c-55ec-4e3d-ade8-02df585dcbac", "sighting_of_ref": "indicator--38dcca4b-16c6-42e0-ba1d-699eb9bef952", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f961060-5858-45fd-bb6b-3b17829eeee8", "sighting_of_ref": "indicator--38dcca4b-16c6-42e0-ba1d-699eb9bef952", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7498d639-4ef6-442c-88b0-21670b71c3b8", "sighting_of_ref": "indicator--38dcca4b-16c6-42e0-ba1d-699eb9bef952", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c8486d-db7c-4065-8013-fbc7db8f365e", "sighting_of_ref": "indicator--03159e30-5522-41b4-aff2-3d05f3ea9412", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5621a8-82ad-4af5-b6da-7f4acdea394f", "sighting_of_ref": "indicator--03159e30-5522-41b4-aff2-3d05f3ea9412", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ae40af-2ec4-4b56-9122-7f03e21b9ad3", "sighting_of_ref": "indicator--03159e30-5522-41b4-aff2-3d05f3ea9412", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0734eac0-8f9f-4b1f-86f6-05c10bb960d5", "sighting_of_ref": "indicator--242daeeb-493e-4598-a6bb-32b617df4685", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5eaed8-8109-4ed6-a290-083b9c49cd1d", "sighting_of_ref": "indicator--242daeeb-493e-4598-a6bb-32b617df4685", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba17f1-b3af-465a-a5ea-8dd9cf3aa5a3", "sighting_of_ref": "indicator--242daeeb-493e-4598-a6bb-32b617df4685", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a3e861-c6d7-404b-a5e3-da1d1b2f056b", "sighting_of_ref": "indicator--a94c1570-92b6-4671-8ad1-982d2a9a09ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f056384e-7c3d-4470-8373-483332f84ec3", "sighting_of_ref": "indicator--a94c1570-92b6-4671-8ad1-982d2a9a09ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f8fdeb-7a75-4fbb-81a6-28ea53ba8267", "sighting_of_ref": "indicator--a94c1570-92b6-4671-8ad1-982d2a9a09ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f706617-593b-4830-b511-509fedbf9605", "sighting_of_ref": "indicator--4fba1dab-a688-4eac-b81f-2c37244e3e23", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff2ff4d-f5a5-4484-adf0-9bfaabcda8a4", "sighting_of_ref": "indicator--4fba1dab-a688-4eac-b81f-2c37244e3e23", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9d2899-5b61-4249-939e-c2e143291a3f", "sighting_of_ref": "indicator--4fba1dab-a688-4eac-b81f-2c37244e3e23", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52dfb9b-b37f-45ab-8f4d-850f20adf8e3", "sighting_of_ref": "indicator--d8b22807-302b-4089-a196-b53c984dc824", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc531adb-a1fd-47fa-9c52-374dbdfc9fcf", "sighting_of_ref": "indicator--a02013a7-4fd3-427e-8212-5edb522fbd48", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824d2aec-db76-42f3-9905-6717af6bf408", "sighting_of_ref": "indicator--4bb5763c-f26e-40d6-b58a-ca65790af990", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2942d9-b64f-4313-86a2-62f06a419e7b", "sighting_of_ref": "indicator--53bd0a37-debc-402b-ba33-c3f24023486b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4847d604-92f9-4b3d-825a-cca8e3dc63a7", "sighting_of_ref": "indicator--67104db8-33a8-4c2f-923a-219519c31df6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b4b4c9-4c9c-4519-b74c-a4ce22257d37", "sighting_of_ref": "indicator--e2d79e49-0636-489e-8802-fa4a5d209b74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77efcba6-9b92-4360-ba25-4e4f5acb311d", "sighting_of_ref": "indicator--e2d79e49-0636-489e-8802-fa4a5d209b74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5dffa1-436b-4d1e-8ad6-70e7eb727ca8", "sighting_of_ref": "indicator--e2d79e49-0636-489e-8802-fa4a5d209b74", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ea630e-ecfc-42f5-98fa-e9e54766d139", "sighting_of_ref": "indicator--92dbafe4-3e20-46e1-b52d-9c4a441bd8fc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8044d4eb-3220-4e69-aced-3a65d2b60820", "sighting_of_ref": "indicator--e96b48fa-915b-4cdb-aee4-9252237ab685", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fead62-ba9d-4756-a209-3228cf52ec9b", "sighting_of_ref": "indicator--e96b48fa-915b-4cdb-aee4-9252237ab685", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a606637e-0174-4953-a1f9-3dcc23349ed7", "sighting_of_ref": "indicator--d9ea6805-9327-419a-8961-543003325b06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7ef969-802a-4f1c-baec-8b3190904c9e", "sighting_of_ref": "indicator--ee088518-6b73-4d37-814d-f7d5ea4d05bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb04f4cf-b246-48e4-8908-a9ece728529e", "sighting_of_ref": "indicator--fd7ffbdd-a9f4-441d-8882-08f1190f8c97", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e20bc12-068b-4403-bb12-9a268a7f2091", "sighting_of_ref": "indicator--9f653ce0-04b3-4e49-b7d5-13cd85221210", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf373c8-f160-4e05-8816-486b8fa2b259", "sighting_of_ref": "indicator--2bccc8ae-1550-4de6-ae17-f34c21107a85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b39bfe1-d9b2-40c0-a435-30ab2ebc7cef", "sighting_of_ref": "indicator--2bccc8ae-1550-4de6-ae17-f34c21107a85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e1594b-2aec-418f-a84e-1903d251714d", "sighting_of_ref": "indicator--2bccc8ae-1550-4de6-ae17-f34c21107a85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4a24df-accc-4097-8b6a-119dc86ec54b", "sighting_of_ref": "indicator--b09129bc-b586-4a19-922d-6fcd18511387", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa40f4f-1317-42b4-a4d6-842af0811b2e", "sighting_of_ref": "indicator--b09129bc-b586-4a19-922d-6fcd18511387", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e368469-0cb8-4ff4-a532-b13c1f85b364", "sighting_of_ref": "indicator--b09129bc-b586-4a19-922d-6fcd18511387", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf3addd-e54e-4d65-9b29-cc7b18c94b5d", "sighting_of_ref": "indicator--3f023b94-547a-40ef-bd92-bb9f70f1ed6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242d096b-0fe0-4781-a1a1-fe3de6df470d", "sighting_of_ref": "indicator--3f023b94-547a-40ef-bd92-bb9f70f1ed6c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2a6270-cc2c-4620-a69d-01f2a6cb754a", "sighting_of_ref": "indicator--3f023b94-547a-40ef-bd92-bb9f70f1ed6c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e9230d-5cd9-482f-be5e-81890f309da5", "sighting_of_ref": "indicator--b90e842a-b1a5-49d8-817d-43cacf1d41ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5827bf-7dda-4259-b6a0-22325a79fe59", "sighting_of_ref": "indicator--b90e842a-b1a5-49d8-817d-43cacf1d41ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8775f314-087a-4f23-9d78-9f71e0719482", "sighting_of_ref": "indicator--b90e842a-b1a5-49d8-817d-43cacf1d41ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1b7401-f912-4547-9f76-cca25c6466ac", "sighting_of_ref": "indicator--5ab7532b-795e-4818-a05e-adfd9a02637b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3dbcaf-08c7-4ccc-89ca-9eb8b5c7889c", "sighting_of_ref": "indicator--5ab7532b-795e-4818-a05e-adfd9a02637b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32d7862-c6cc-4ae2-917d-940fde7f618e", "sighting_of_ref": "indicator--5ab7532b-795e-4818-a05e-adfd9a02637b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a9eaf8-392d-497c-b8cf-eaa1b1683d5d", "sighting_of_ref": "indicator--3a662475-f65b-4a66-a50e-3c3ec6781335", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e8a2d7-1bed-444a-8c6e-aa204c9f50aa", "sighting_of_ref": "indicator--3a662475-f65b-4a66-a50e-3c3ec6781335", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ef612c-16fc-4d62-b9f6-427b67ca0760", "sighting_of_ref": "indicator--3a662475-f65b-4a66-a50e-3c3ec6781335", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1afc6c-a622-4115-a8ff-723618f13aba", "sighting_of_ref": "indicator--aafd48d2-d4dd-4d93-89c4-1e8cf27b2c42", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130c4e8b-e5b2-4aac-bf7b-e4a7b1755665", "sighting_of_ref": "indicator--aafd48d2-d4dd-4d93-89c4-1e8cf27b2c42", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bc4cdb-280c-4cac-a1a2-3eae3a1b094d", "sighting_of_ref": "indicator--aafd48d2-d4dd-4d93-89c4-1e8cf27b2c42", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492430b6-c127-4bd3-896d-b3afccc2a55d", "sighting_of_ref": "indicator--46ac1b52-347d-479c-9b44-d2af11b93c6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007da9dc-dd78-420c-b6eb-03f191829fa9", "sighting_of_ref": "indicator--d7957555-8b1f-44f2-8a5e-bcbcb5d7e3f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891653e1-f99d-4175-833e-5adeeff64c24", "sighting_of_ref": "indicator--d7957555-8b1f-44f2-8a5e-bcbcb5d7e3f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58c6684-c2e0-486e-8560-07af2b13a718", "sighting_of_ref": "indicator--b2a43eba-b51f-4292-9848-843d0823129d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb1d42b-ca88-471d-8c19-6c2d2b043aba", "sighting_of_ref": "indicator--b2a43eba-b51f-4292-9848-843d0823129d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8383dfd5-ea9b-4ea3-82be-55e067286f14", "sighting_of_ref": "indicator--d00b838a-a5dc-4606-a4b3-688cc0a67f16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb27331-532f-4414-a130-a4007e513eec", "sighting_of_ref": "indicator--d00b838a-a5dc-4606-a4b3-688cc0a67f16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a48a668-d6ca-4ef6-91d1-bda65ff24f90", "sighting_of_ref": "indicator--d00b838a-a5dc-4606-a4b3-688cc0a67f16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36762ece-217b-4fc5-8b20-d56b5b4ab134", "sighting_of_ref": "indicator--84f0e32e-dd19-4650-a136-d3611fcaa260", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c100650-cc57-47eb-a5e1-7d6928d43c66", "sighting_of_ref": "indicator--d97a5cbc-edff-4af6-aa3f-942cfa76ad3c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bd0d13-0550-4636-8cab-e8e274f2e7a4", "sighting_of_ref": "indicator--7bb8e420-55df-4834-b974-36e6f77ca7c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7e736f-c126-49d0-9bd0-82c3717ab5d2", "sighting_of_ref": "indicator--414af28f-b5a6-42d4-b3d0-bb9a6c5f472d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4736f86e-2394-4f4f-a33f-6cf12a53d49b", "sighting_of_ref": "indicator--414af28f-b5a6-42d4-b3d0-bb9a6c5f472d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5d7791-ccea-42b1-b393-de78ecbbe02b", "sighting_of_ref": "indicator--a1341015-944e-4199-a78a-bb57b0210e04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c2f360-5f5f-4fca-b4cb-2e43af98de08", "sighting_of_ref": "indicator--a1341015-944e-4199-a78a-bb57b0210e04", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbed6bc8-81a5-4ad5-9f10-39759664d5b0", "sighting_of_ref": "indicator--14d741eb-cd0d-4555-9334-1afc98ae1014", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb7c834-42cf-46dc-ab93-d715664643b4", "sighting_of_ref": "indicator--aa23efd0-7823-419c-ae53-e999659393c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c39110-3420-4fa2-bd72-806ab4e6a8cd", "sighting_of_ref": "indicator--b5e095d4-d2ef-436b-955c-89f99231943c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8614d2be-3021-4fa7-92c4-150503f60d0a", "sighting_of_ref": "indicator--842d7657-d322-432a-b642-f899916f879b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c661fe-3d46-4584-9730-27a329f30c64", "sighting_of_ref": "indicator--3ddf21bf-88da-495a-a6bf-e1e4c9caf28d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c03517-284a-44c8-ab22-cffc012d3b83", "sighting_of_ref": "indicator--91f8deb3-7dee-42ca-8e65-29b1b8ce5bb4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe490a0-9c23-44a9-8c8b-44e527449897", "sighting_of_ref": "indicator--51b8a3dd-07f6-4bf2-bb1f-5c86f2f8df2c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90270de0-a5ce-4ea4-b335-44a41c44087d", "sighting_of_ref": "indicator--d1601cbd-74ea-41f4-b757-b9044d0c0924", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0233d9c7-2329-4dcc-9a78-c88abf2e4c51", "sighting_of_ref": "indicator--d1601cbd-74ea-41f4-b757-b9044d0c0924", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ca93c7-c328-428a-9266-d451911fa4ac", "sighting_of_ref": "indicator--d1601cbd-74ea-41f4-b757-b9044d0c0924", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9b804f-3f48-4aa1-834e-4bedc82d4a5f", "sighting_of_ref": "indicator--f3a67617-a5fd-457c-9aee-ec56d2701bef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9ace38-1fc2-46c0-b894-10edcb858424", "sighting_of_ref": "indicator--f3a67617-a5fd-457c-9aee-ec56d2701bef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c53647-0225-443e-8c57-daa22bf5645e", "sighting_of_ref": "indicator--f3a67617-a5fd-457c-9aee-ec56d2701bef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0053edd6-0886-4928-9a2a-a59be122027e", "sighting_of_ref": "indicator--03a6f025-4a6c-4340-9858-8c7b6b58fe5f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b75a19e-e374-4c9e-b4a6-2d8c3dd93e12", "sighting_of_ref": "indicator--03a6f025-4a6c-4340-9858-8c7b6b58fe5f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73d7a26-9851-4285-b248-286e269cc5d5", "sighting_of_ref": "indicator--bab2ecbd-cd95-4506-9dbf-f40e1e8cc1f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a1318d-fa49-4b20-98c7-87aaf5995aca", "sighting_of_ref": "indicator--4ed587ae-cd93-4864-a487-cb3a437d45db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b610505f-03c8-4244-b1c2-fafb57051cfb", "sighting_of_ref": "indicator--4f151077-a36a-4d7c-90bf-dc193dad36d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0148c70b-fa9d-46c1-a5f2-10f8faf236f2", "sighting_of_ref": "indicator--4f151077-a36a-4d7c-90bf-dc193dad36d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5900397f-363e-464c-971f-c1d915917da2", "sighting_of_ref": "indicator--2156f9e0-74e1-46a0-a368-72f96eb8992f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b17595a-c391-4c35-a016-8df7115a0462", "sighting_of_ref": "indicator--9e31f62f-1007-4f3c-806a-c3eed09ee4c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4643ba38-f428-4c8d-8371-af26e584ce08", "sighting_of_ref": "indicator--5326ee5f-b6f0-4200-b0e0-6238c1f21816", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfb933f-2525-407f-aa26-0de4cd0c3d1e", "sighting_of_ref": "indicator--39520666-6057-4c5d-8ea7-86bd43a8dbf5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdeb9bbe-19a6-4563-9df6-76beb6f207ff", "sighting_of_ref": "indicator--2e9ac180-ff1e-42bd-92c7-2c4c399c893a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2203705a-aa7b-4542-9a40-2ec2cbdff706", "sighting_of_ref": "indicator--a7c4a18f-a796-4d10-9285-5dbc8a98e4ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbee60e-7d22-42a5-b566-bce755853d0a", "sighting_of_ref": "indicator--acb3dad8-01cb-48ff-a1e4-a35ab7453436", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b9cf99-fefe-4aad-9f7a-541f699f11ba", "sighting_of_ref": "indicator--15706bd2-0bc6-483e-97cb-ecab0a1ed3fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32681eca-9b84-4dda-bf07-41c4efab0b06", "sighting_of_ref": "indicator--2682afb6-a6fc-4a75-982c-5faec62e444d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a745496f-e230-472c-a79c-0fae776b8642", "sighting_of_ref": "indicator--2682afb6-a6fc-4a75-982c-5faec62e444d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dfd611-f846-4e3d-82ea-f0bde967eba3", "sighting_of_ref": "indicator--2682afb6-a6fc-4a75-982c-5faec62e444d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e18335-1738-4358-8133-7d8070d69f18", "sighting_of_ref": "indicator--6c30e4fd-65e6-4897-99c7-923173f96ee2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c81e3ff-f01c-4fb1-a05f-d383d95bedcc", "sighting_of_ref": "indicator--24ee12e2-54c3-440a-953d-0964fa631bb3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b12303-b688-4f06-af15-997ce2eb0d3b", "sighting_of_ref": "indicator--c7e2b849-22f7-43b4-a960-4de1f363f5ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18afcfe0-ccfb-4401-9857-96ea55fb3b32", "sighting_of_ref": "indicator--0775d7c1-1663-409c-9ca2-bfdfb18a216f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a786b7-121e-47f2-867c-16c3befa9a2d", "sighting_of_ref": "indicator--1f320fcc-6012-43b6-95e0-afcd74fa1c64", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35eb49a9-c061-4154-b7f4-1221f85ae815", "sighting_of_ref": "indicator--16e95965-c88f-4e1a-8e50-1eb6ea0bc038", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173e3ae4-7865-4654-8a8c-4b5eaa169857", "sighting_of_ref": "indicator--e671bdf2-3299-437f-a2a3-a8b4e0aa76cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1786ff1-e22e-40f3-a097-00948be8b175", "sighting_of_ref": "indicator--83b0212c-c6fd-4625-92ba-2490858caddd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e42c570-6c14-4707-80d6-586e4e0398ff", "sighting_of_ref": "indicator--83b0212c-c6fd-4625-92ba-2490858caddd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a414e30b-ad2a-4af5-9c73-502117e8b3c6", "sighting_of_ref": "indicator--b5c23ab0-5537-436c-8784-25a341ce200c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c4cb28-3344-4d61-a622-751c332e8888", "sighting_of_ref": "indicator--8256b6a0-fb6c-410f-86c7-faf7a7c50dec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aadb785-eb62-4799-98a1-6f8ac625ed98", "sighting_of_ref": "indicator--9a0968ec-3f86-4449-bb55-8e1c05637607", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebe29be-37db-41dd-8a2e-722b8df90d0f", "sighting_of_ref": "indicator--ce30fd83-cdb6-43b8-9539-63bc426bf567", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01897735-c543-4042-aaac-44122dd2194b", "sighting_of_ref": "indicator--4bc74b40-65cf-4842-9115-73808d6a8d16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad62813-acbb-4550-b433-799439e150ba", "sighting_of_ref": "indicator--2577eebd-7a4f-4e40-82a7-56f6fe50605c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11167b87-9ed1-42d8-bb8a-b94459e19be5", "sighting_of_ref": "indicator--e3f63608-6d26-424e-8a25-9146094ad5a0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336a8434-5e28-4c8c-b3a2-869b7d8dcc16", "sighting_of_ref": "indicator--0f78464d-9e4d-4ea8-aeba-f53bf10f30b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79b3f7f-af1c-49d5-8900-dcfd74ae462e", "sighting_of_ref": "indicator--6fed3a29-5eed-4c26-a170-bf04902aa087", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187f17ff-7282-452e-bec9-0421efc83cbf", "sighting_of_ref": "indicator--6fed3a29-5eed-4c26-a170-bf04902aa087", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58d0b45-1b53-41a6-b15e-8e88c8f4cde7", "sighting_of_ref": "indicator--6fed3a29-5eed-4c26-a170-bf04902aa087", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd06186b-2e3d-4930-8be7-5aa37babf1d9", "sighting_of_ref": "indicator--540f4bdb-3f3d-40ef-95fc-d4d21c70df22", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7a2c10-daf0-4cda-8ff7-c09aaded204f", "sighting_of_ref": "indicator--e48019c1-e9a2-47b5-9c35-a733a750d0bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a8235e-fa95-4df9-8417-bf13ec81afdb", "sighting_of_ref": "indicator--c9023e83-bb54-4754-9c11-7ff97d19cb76", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a08c1cf-99ff-4f9f-88e5-78389b0be58e", "sighting_of_ref": "indicator--cc9acd8e-688b-4f63-a147-193cf41c6687", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bf50fa-1070-4ad8-bfc1-6d99f11ae97f", "sighting_of_ref": "indicator--e178e9fb-7142-4348-9e50-faf91334b826", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783f3aa0-d427-48aa-a68e-e6939899af16", "sighting_of_ref": "indicator--fb3c2e57-26e9-42eb-baa0-a5346b9020a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7861d0b-027c-414a-9d84-b2e76d63cdc8", "sighting_of_ref": "indicator--fb3c2e57-26e9-42eb-baa0-a5346b9020a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b77d17-a612-4669-a32a-20e124672056", "sighting_of_ref": "indicator--fb3c2e57-26e9-42eb-baa0-a5346b9020a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a47b63-79f1-4027-8561-38691af6ebc3", "sighting_of_ref": "indicator--16a4dc18-82b3-4216-a69b-c22a4e7a1d24", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5bafed-ecc2-4200-98a2-63d09a786a2f", "sighting_of_ref": "indicator--126587c7-51b8-421f-bfcf-916e5dbb07c1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d5aaa0-5558-40a0-b993-311f37dfdeab", "sighting_of_ref": "indicator--b1277d93-89c7-4e3b-841e-e1d43308020b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192b26e7-c4a4-432a-bb6c-9d351166d4e4", "sighting_of_ref": "indicator--b1277d93-89c7-4e3b-841e-e1d43308020b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d24a5e6-3f52-4915-bc55-0c4f369925f4", "sighting_of_ref": "indicator--b1277d93-89c7-4e3b-841e-e1d43308020b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a56b6bc-24a5-4356-a1e9-dab529150e5b", "sighting_of_ref": "indicator--65b13d76-c78b-4384-8f31-0d698bc55ddd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcb0fc5-a265-4c12-96ec-33ba63cbefb1", "sighting_of_ref": "indicator--20f2f828-b5b7-4a80-b48c-00f849c3e82b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccbd00e-5261-4b71-9ac1-b3791e32a887", "sighting_of_ref": "indicator--22f16ed6-9b2b-4bb3-9097-a8f7e8913e82", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba3afae-aea1-4082-beed-1a676a6f4d96", "sighting_of_ref": "indicator--f41aca84-aad8-4b04-9231-1bf3f42ce3ec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed73495-826e-4c3c-9d06-b19190574b52", "sighting_of_ref": "indicator--1bf54fa8-f322-4d54-a2e0-155fce5a5a16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3542ec69-366e-446c-9626-4d6d353dfa6b", "sighting_of_ref": "indicator--1bf54fa8-f322-4d54-a2e0-155fce5a5a16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f575fb1-1d8a-43f5-9109-076b03c9a930", "sighting_of_ref": "indicator--d7d7540c-f76d-4cb8-9196-7ab35d561dfd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21478f29-7800-4f02-9b25-c11cb77fdc68", "sighting_of_ref": "indicator--d7d7540c-f76d-4cb8-9196-7ab35d561dfd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b2cd47-a598-42f6-a236-c956f007582c", "sighting_of_ref": "indicator--fa1d7574-69a7-4786-be69-e50fd6c20236", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cbccd1-7756-4758-9463-efeb4a933626", "sighting_of_ref": "indicator--903fbc43-01ce-4da9-b0ac-07e15555c1bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761321a7-aa47-4675-b802-47a570683960", "sighting_of_ref": "indicator--6bc420d1-dbae-433a-ac54-0d74b76d539a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8cc123-c3c3-4632-991f-b7ae66d2457e", "sighting_of_ref": "indicator--6bc420d1-dbae-433a-ac54-0d74b76d539a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a85efa5-622e-4205-a5e9-5e01daebb61c", "sighting_of_ref": "indicator--6bc420d1-dbae-433a-ac54-0d74b76d539a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f68821-665f-4eae-bec5-4e30f1b7487c", "sighting_of_ref": "indicator--a1acdafa-5b03-40bb-b71a-764ccac7b121", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988d87bc-98b8-4ed5-9c53-8da9e087e450", "sighting_of_ref": "indicator--98c9a778-f2d4-456d-8544-d2289ef1087d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5f377b-f980-4252-bb50-ac6a809602b0", "sighting_of_ref": "indicator--81f7b85f-d421-4d6c-9855-c1703fb6bd21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cefeec1-b5c4-4efa-aacc-7b1f3f05afd0", "sighting_of_ref": "indicator--d29316d8-896e-4605-bcb2-b40d4b06ddcd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0d316a-fa07-4677-8969-2f741d1421b6", "sighting_of_ref": "indicator--d29316d8-896e-4605-bcb2-b40d4b06ddcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecfaab3-83e2-4727-9c5c-4afad871535e", "sighting_of_ref": "indicator--d29316d8-896e-4605-bcb2-b40d4b06ddcd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abb4f2c-342a-4fd4-802c-522119ba6653", "sighting_of_ref": "indicator--8173d548-48bb-4868-9450-f6aa0143a405", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e51abe5-384b-43b7-b338-919992bbd8f8", "sighting_of_ref": "indicator--70a2e090-984e-4dd7-bf34-5c0e3ee4df04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adf4bbc-3918-4da6-bc96-3f7a95648c87", "sighting_of_ref": "indicator--70a2e090-984e-4dd7-bf34-5c0e3ee4df04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b30054-768f-4c99-add5-ca3b1073735d", "sighting_of_ref": "indicator--79b45bf9-2da2-4d8e-ac8f-80658418206e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42c3d14-6392-4384-9955-891ef9543f31", "sighting_of_ref": "indicator--79b45bf9-2da2-4d8e-ac8f-80658418206e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f847f26a-8b67-45f2-8294-5b441cbc5493", "sighting_of_ref": "indicator--79b45bf9-2da2-4d8e-ac8f-80658418206e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c45c477-b110-4371-8cdc-2c8c03f77893", "sighting_of_ref": "indicator--ec22915a-84fa-43de-811b-df975149b8f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd949812-a232-46e6-86b3-2a77c03b80ab", "sighting_of_ref": "indicator--ec22915a-84fa-43de-811b-df975149b8f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c823a7c9-0c66-4da2-913d-49b0197fb0b8", "sighting_of_ref": "indicator--ec22915a-84fa-43de-811b-df975149b8f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560805b9-8725-4608-9717-c1b3adfcd49a", "sighting_of_ref": "indicator--ff498d4f-f1c3-4057-8b17-cc423f8b1e4a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec1174b-725c-42eb-9854-4b63144f0735", "sighting_of_ref": "indicator--ff498d4f-f1c3-4057-8b17-cc423f8b1e4a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8f3b50-6a7e-423f-a725-97336805237a", "sighting_of_ref": "indicator--ff498d4f-f1c3-4057-8b17-cc423f8b1e4a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d8293c-cde7-4cb7-b09d-74dcabd2890f", "sighting_of_ref": "indicator--f08cc956-a1ed-4700-a30a-766ddf002148", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8273e276-0fa2-4f74-a1aa-399d4998fbac", "sighting_of_ref": "indicator--f08cc956-a1ed-4700-a30a-766ddf002148", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c651b8-60d7-4da6-ac72-eb56079c12df", "sighting_of_ref": "indicator--f08cc956-a1ed-4700-a30a-766ddf002148", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b2ef85-b6df-4dbf-a1a7-a88d1d03aeb1", "sighting_of_ref": "indicator--7085211d-b655-47ba-9b17-1ad929fd6db4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f3da8d-0870-47d2-a883-9eb8fec632c5", "sighting_of_ref": "indicator--7085211d-b655-47ba-9b17-1ad929fd6db4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ff0886-c90a-4090-a1ff-f35de6c59e52", "sighting_of_ref": "indicator--df2cbd11-4119-49a1-a0fd-c0b429418080", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15a390d-7155-465d-9476-db117c21e337", "sighting_of_ref": "indicator--df2cbd11-4119-49a1-a0fd-c0b429418080", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33879bf8-cc3e-40e6-bc06-c36b7ff0a0f5", "sighting_of_ref": "indicator--2cb236f8-7a61-4adb-8de8-e201224601ed", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d46b2e7-1f21-4842-a2b4-95722d966878", "sighting_of_ref": "indicator--2cb236f8-7a61-4adb-8de8-e201224601ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619bf6e6-30a8-487f-bba7-71423421ddd3", "sighting_of_ref": "indicator--2cb236f8-7a61-4adb-8de8-e201224601ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7787ba82-4632-4292-8713-165c22372a47", "sighting_of_ref": "indicator--475cb57b-baec-4f31-b331-aa8fcb9df2d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a238b40-92c7-4c2a-a783-f892f99844ba", "sighting_of_ref": "indicator--475cb57b-baec-4f31-b331-aa8fcb9df2d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31638775-4db8-48be-8336-ed2dd264b3aa", "sighting_of_ref": "indicator--475cb57b-baec-4f31-b331-aa8fcb9df2d4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64836c2-e821-432b-a410-80279ee46cb2", "sighting_of_ref": "indicator--da3e1d77-3144-422c-b808-973056e51d17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972bdad7-249b-4094-9f30-23afa3577a92", "sighting_of_ref": "indicator--da3e1d77-3144-422c-b808-973056e51d17", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfeecc8e-2e7f-4d9a-9cf5-f95384badbcb", "sighting_of_ref": "indicator--8c110c3d-7ee4-4449-9bdd-89bf15e6cbf5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ad851a-f422-46a8-ac46-81c7e26e234e", "sighting_of_ref": "indicator--8c110c3d-7ee4-4449-9bdd-89bf15e6cbf5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf949bd-15ee-449e-aff7-8ef4d4be5c0c", "sighting_of_ref": "indicator--8c110c3d-7ee4-4449-9bdd-89bf15e6cbf5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b497cc8-9427-480e-8fe2-b23792f9f3a2", "sighting_of_ref": "indicator--304eca0f-9ee5-4ef7-80ff-6968220da041", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735f74d5-da8f-4239-8914-62d6be42cbba", "sighting_of_ref": "indicator--304eca0f-9ee5-4ef7-80ff-6968220da041", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c05fdf8-906e-4826-9aa3-0c67a7f86e64", "sighting_of_ref": "indicator--e3f3bae1-0f7b-4012-8cc5-09ac4fd7b5bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4553870d-3118-4713-8f59-fdc327d1b834", "sighting_of_ref": "indicator--e3f3bae1-0f7b-4012-8cc5-09ac4fd7b5bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d466b8d0-3a9d-4670-a58d-1072164f0f25", "sighting_of_ref": "indicator--e3f3bae1-0f7b-4012-8cc5-09ac4fd7b5bd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e55690-9366-4716-b3a4-753107c2cbc9", "sighting_of_ref": "indicator--03e60422-ca48-4071-a562-a374764ed981", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12717b2b-985b-4d7a-bc39-1eb0ea0e303e", "sighting_of_ref": "indicator--bb285054-1f13-4f4e-b28b-53a7d466c0ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0471fab-da5f-406b-8edb-f216a966d9b6", "sighting_of_ref": "indicator--bb285054-1f13-4f4e-b28b-53a7d466c0ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685a8f91-3af0-4b84-a2ea-33ed5ca3e257", "sighting_of_ref": "indicator--bb285054-1f13-4f4e-b28b-53a7d466c0ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1b69fa-53aa-4ea8-ae79-5ed9341106eb", "sighting_of_ref": "indicator--40b7c668-40dc-4b21-aa92-39b8b9e369ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2144d4-43e5-4aa7-b092-438ec342112b", "sighting_of_ref": "indicator--40b7c668-40dc-4b21-aa92-39b8b9e369ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cef06d-62e3-499f-a0f1-6967bdc14d4d", "sighting_of_ref": "indicator--207c38ab-ae90-4577-a28c-61fa6998de95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f77da0-1110-434d-b609-f2a7c5767b45", "sighting_of_ref": "indicator--8c5c06ca-d4c4-4551-b01a-36511323c0a0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3b8401-b9fe-4bf6-b71a-c57983627eef", "sighting_of_ref": "indicator--7d1f6991-32d3-433f-855a-4fba52108547", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df23cc1f-8deb-4463-b688-b37367465ecd", "sighting_of_ref": "indicator--7d1f6991-32d3-433f-855a-4fba52108547", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8758d1-767a-45dd-90b3-2ab0df7f3b42", "sighting_of_ref": "indicator--7d1f6991-32d3-433f-855a-4fba52108547", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318eaa4d-ec4f-4ee6-b034-e73742a373c1", "sighting_of_ref": "indicator--cbb8c0f3-3805-4e6c-a167-5c75373b8b25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db44b4f-8406-44fb-bc19-4eec1ca5d030", "sighting_of_ref": "indicator--f20707b0-8cbe-4d04-96b3-79eb389d410a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49e22d3-e831-4a22-a7d8-08964515a1cf", "sighting_of_ref": "indicator--f20707b0-8cbe-4d04-96b3-79eb389d410a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea8b4d0-97a2-47c5-8089-27f209adaa18", "sighting_of_ref": "indicator--dd2c5c7e-3b1f-4497-adb7-c4fc9ef474ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7ea213-7099-4ef7-9f1e-78435e6c0beb", "sighting_of_ref": "indicator--dd2c5c7e-3b1f-4497-adb7-c4fc9ef474ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58289cd2-2630-4213-8a7a-ab96ddf3379e", "sighting_of_ref": "indicator--dd2c5c7e-3b1f-4497-adb7-c4fc9ef474ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b519ed22-e5ad-4ee3-b9bc-89767a1df6a7", "sighting_of_ref": "indicator--e26c16fa-0c6d-4fe7-9824-71f94aaaf594", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26f2f1c-66bd-4c7d-88ca-91aacac2a892", "sighting_of_ref": "indicator--325945f6-58d3-479d-817c-9a85099e5ca0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9b6971-8fe9-4525-b9f3-583facc59a03", "sighting_of_ref": "indicator--325945f6-58d3-479d-817c-9a85099e5ca0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8484d65e-b05c-4894-a04b-2491125f34ae", "sighting_of_ref": "indicator--325945f6-58d3-479d-817c-9a85099e5ca0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c708b2-3031-4b98-be4d-2258ba29af84", "sighting_of_ref": "indicator--5c049c19-0b54-40f6-b653-c660076decb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ef22e8-d8c0-4638-97c9-eb64d3a8e7a3", "sighting_of_ref": "indicator--5c049c19-0b54-40f6-b653-c660076decb0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f18ed8-4be9-4490-84ab-149f2e395cb0", "sighting_of_ref": "indicator--5c049c19-0b54-40f6-b653-c660076decb0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b00970-56f7-43e7-8749-6be8c106ca0e", "sighting_of_ref": "indicator--f6e52770-6454-4213-b621-c2b80f97036a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98788161-f7b9-4b55-9673-9ffe9c47b8fd", "sighting_of_ref": "indicator--f6e52770-6454-4213-b621-c2b80f97036a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c53927-d0c8-4574-ad8e-e8e6a88bee80", "sighting_of_ref": "indicator--f6e52770-6454-4213-b621-c2b80f97036a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae9cabe-bb69-436d-9795-2d903a5ef90f", "sighting_of_ref": "indicator--d32209b8-01fc-4ec2-aaf8-bf17454c0d1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376b50c7-ed26-4253-98e7-9febc8153d44", "sighting_of_ref": "indicator--42049262-6e12-4fcc-bdfb-b027763db392", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a008ea3-7c39-40a3-84bb-6db0c733558e", "sighting_of_ref": "indicator--42049262-6e12-4fcc-bdfb-b027763db392", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7885eae-700e-400b-bd86-e13102b44771", "sighting_of_ref": "indicator--7dd99db3-0cef-4bd6-83c9-8928558ba22e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53d93de-5ebb-49fc-a396-f0dc268e174c", "sighting_of_ref": "indicator--7dd99db3-0cef-4bd6-83c9-8928558ba22e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502362c6-c417-4df6-b17e-88157d531010", "sighting_of_ref": "indicator--5b52fd25-5d10-41d3-bd83-82a477fe7d56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ccc0ff-802e-412e-b141-571660e4d9f2", "sighting_of_ref": "indicator--5b52fd25-5d10-41d3-bd83-82a477fe7d56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d70fea-6067-4c31-8e9f-d94b010fec04", "sighting_of_ref": "indicator--0fca40b8-e9a7-4284-90e7-914c4eb0fd58", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be8bd16-9f30-458d-a62e-99bf1232d346", "sighting_of_ref": "indicator--546f3da6-6646-477a-8945-624df4f5c3a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19522670-8c99-4740-af27-965c012f72f1", "sighting_of_ref": "indicator--fba88ce7-b12a-4a21-b433-80eab62b679a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196be890-e605-440c-9111-dc07e8972c84", "sighting_of_ref": "indicator--fba88ce7-b12a-4a21-b433-80eab62b679a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e560284e-c9c3-4a7e-9099-422f101b064b", "sighting_of_ref": "indicator--b5e78bb9-e2b8-43dd-88d6-48dc463ead87", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736e7b6f-3a2d-49b1-bbfc-28af38ba6163", "sighting_of_ref": "indicator--b5e78bb9-e2b8-43dd-88d6-48dc463ead87", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6268d2b-a60e-497b-b2ea-8524b1288a92", "sighting_of_ref": "indicator--b5e78bb9-e2b8-43dd-88d6-48dc463ead87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40c8a56-104e-4d26-8179-a2d7a33924c7", "sighting_of_ref": "indicator--d975f72a-2eb9-43f3-b2b0-d9c45e241f5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2d2c8b-b620-4ac8-9d2a-959574e1067d", "sighting_of_ref": "indicator--d975f72a-2eb9-43f3-b2b0-d9c45e241f5d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b601210-3a42-44c1-a782-5be3876d16dd", "sighting_of_ref": "indicator--bc9c8d78-88e3-4cff-888e-1d668e0bbebd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b73a61-2feb-464e-b43c-aa06184fc1ca", "sighting_of_ref": "indicator--bc9c8d78-88e3-4cff-888e-1d668e0bbebd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a81fc7-7fee-4bf1-bafa-a311c9351fd2", "sighting_of_ref": "indicator--bc9c8d78-88e3-4cff-888e-1d668e0bbebd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67c25f2-9c90-461f-8d0c-68be0e16c325", "sighting_of_ref": "indicator--ab3832f7-1129-4486-b5ab-cf3c89674519", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2166a9-061f-4198-98ef-70643261d0cc", "sighting_of_ref": "indicator--ab3832f7-1129-4486-b5ab-cf3c89674519", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcd93c3-30d9-4bcd-99f1-c892db73e475", "sighting_of_ref": "indicator--87c60a92-20e6-459c-bd3d-034a9b3cf92f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66799e74-0b84-4e31-95b0-f3749d7f189d", "sighting_of_ref": "indicator--87c60a92-20e6-459c-bd3d-034a9b3cf92f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2813b748-bf4b-4bcf-b1f7-e3394d45e18a", "sighting_of_ref": "indicator--0aa9b1fa-ba64-49b7-8020-7a45ff0a02e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c9d4b1-4029-4cd3-810e-8d365515bb2c", "sighting_of_ref": "indicator--0aa9b1fa-ba64-49b7-8020-7a45ff0a02e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acd1f46-a964-49d6-9eb5-caf8e513e608", "sighting_of_ref": "indicator--0aa9b1fa-ba64-49b7-8020-7a45ff0a02e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5d3035-f569-4c2c-80f4-3385022149cd", "sighting_of_ref": "indicator--fbe7ad41-bc0f-4efc-b4ba-87ba6aa054dd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc27eae0-37a8-48e0-98fa-fb7155a3b467", "sighting_of_ref": "indicator--fbe7ad41-bc0f-4efc-b4ba-87ba6aa054dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad15049f-1633-40f6-95a0-85d8629433cd", "sighting_of_ref": "indicator--7651613f-b242-4293-8e96-b3d58e7d57e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36e6f48-d060-4bed-b89f-86ab827aa0c4", "sighting_of_ref": "indicator--7651613f-b242-4293-8e96-b3d58e7d57e6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb488fa1-7adc-4e71-ada5-cdfd27ec0eda", "sighting_of_ref": "indicator--af7c97e0-126e-43ff-872a-e1964f5e91d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086da2f2-4764-4cbc-9b27-b8244105c779", "sighting_of_ref": "indicator--af7c97e0-126e-43ff-872a-e1964f5e91d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e9d95f-bcba-409a-bd61-55588427dd0c", "sighting_of_ref": "indicator--41de8090-b608-40ae-8650-a8150e25adaf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70838f8a-cf32-44b6-95b6-b79020e85664", "sighting_of_ref": "indicator--b4465aea-1c03-4500-83e7-732eedfb3ac9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd9139d-d9a4-4eda-b60c-b094097f31fd", "sighting_of_ref": "indicator--c08e69d6-7cb2-4fc0-95b3-7442751c12cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac969ea8-87ba-411c-b17c-f4c6aade52ec", "sighting_of_ref": "indicator--d78a7787-b146-4059-9aba-e26cd090980b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40965be2-4b03-4ca7-b1f8-a1985826319f", "sighting_of_ref": "indicator--94040289-dfd7-4e63-ac84-628020ebfd5c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade0164e-be34-4dc2-b70b-e3c7845b30a5", "sighting_of_ref": "indicator--94040289-dfd7-4e63-ac84-628020ebfd5c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610fe823-6171-4a9d-8529-9f590f54a465", "sighting_of_ref": "indicator--7f53ae9e-ecaf-4080-9dab-7dda4a0ad0e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1202bf17-528b-4253-86c5-30470a2ceeb6", "sighting_of_ref": "indicator--3bb3a3b1-41e0-4bd6-bff7-970af79c4b79", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf99a65-3bf0-4802-8e18-d2f4f7abea5e", "sighting_of_ref": "indicator--a3d0662a-62a6-4f64-9c7c-58faec4826b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bfc9c8-d69a-4b8d-bc92-7107e96029fd", "sighting_of_ref": "indicator--4eacf9b4-879c-4965-bfc0-9822feab9d53", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6cf318-2d4d-4b6a-90c8-43d41255b82a", "sighting_of_ref": "indicator--786b4be1-e283-4540-9b07-e4986771b2e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f04457-c322-44e2-a201-109eaba2440e", "sighting_of_ref": "indicator--7468260b-3ba8-4864-b35a-4c8803542353", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc837a09-6270-41e1-9a36-7f36ddd4055e", "sighting_of_ref": "indicator--7468260b-3ba8-4864-b35a-4c8803542353", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e4277f-ac5c-463d-9fcd-0c97bf07441b", "sighting_of_ref": "indicator--a577fd56-9447-451d-ae99-a47c8f44a2c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a254bab9-c86d-45bd-a27e-a92e578b8544", "sighting_of_ref": "indicator--c993ae67-5f67-4a41-8b75-93fcbf4c6f4f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a15d52-876a-4884-af14-391d25945b15", "sighting_of_ref": "indicator--95b17c15-7f1b-4f3a-991b-cdfc4d3683be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c568b85-b9ca-46f5-89c2-126af3b2cd76", "sighting_of_ref": "indicator--8e3b41b5-3f34-4166-8177-cf10ae4bc9ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436481d0-aeb7-484c-82c9-e50ad07e1b69", "sighting_of_ref": "indicator--9d062056-f102-45ea-9fe0-a7de242d8f47", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da4528-6507-4611-a8cb-0e8ba48b55a2", "sighting_of_ref": "indicator--9d062056-f102-45ea-9fe0-a7de242d8f47", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eadd3ad-0acf-459d-8c30-5bd39e952cf2", "sighting_of_ref": "indicator--d974817e-673a-44bd-8381-addc9aca2e08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3efa7969-3ee5-481d-903d-ab73a2b5e1f2", "sighting_of_ref": "indicator--41adb2d0-0a5a-4372-8750-dd163b7a98d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221f2b4e-9ec2-4142-999e-1916fc0cb516", "sighting_of_ref": "indicator--91035136-4b5b-4d05-9e45-94fefaafe37c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584b0e40-fe5b-40a5-8230-ffe579505def", "sighting_of_ref": "indicator--1f0b2861-f9e2-4441-b33d-71aea989b7c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634fce83-6d04-4ce4-80b1-154bbd3d2b87", "sighting_of_ref": "indicator--2bad73a9-22bb-4237-ad80-036400cb9a7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31dfa1c-b013-4684-97e3-884267ccb23c", "sighting_of_ref": "indicator--d9b6bc11-d9b9-4165-959d-7062292750ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353bda7a-375a-43f2-bfc4-779deb9b8579", "sighting_of_ref": "indicator--d9b6bc11-d9b9-4165-959d-7062292750ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e4f01a-c127-436f-94df-c6885e52d3db", "sighting_of_ref": "indicator--d9b6bc11-d9b9-4165-959d-7062292750ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be476a0-ec4e-4584-b55f-e1c3778b729f", "sighting_of_ref": "indicator--6166e6b3-9cc3-44d0-a90f-daaad5f80cff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6123189f-9fcb-4fa4-9e32-a8691343ed41", "sighting_of_ref": "indicator--6166e6b3-9cc3-44d0-a90f-daaad5f80cff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7983b93c-9913-474d-b5ef-a6ab19c81ba5", "sighting_of_ref": "indicator--6166e6b3-9cc3-44d0-a90f-daaad5f80cff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9fad544-b4f5-4467-8347-5e2081966034", "sighting_of_ref": "indicator--1088d0ac-7bc4-446c-bf6f-21299224a58d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdf4582-bd7e-458e-a994-0ba7a1f78ade", "sighting_of_ref": "indicator--ad22c878-7f69-4c92-bf13-cf41f92328d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517755ac-98cf-41dc-b98f-2ffb9cc6f2b9", "sighting_of_ref": "indicator--ad22c878-7f69-4c92-bf13-cf41f92328d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44fef37-3db0-4fd4-b7d4-4637c391eb3d", "sighting_of_ref": "indicator--97ff3ab5-671d-408c-bdcd-af1c2ff8b7a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e087c8b-f9cd-4d23-8037-feefe1f0abaa", "sighting_of_ref": "indicator--97ff3ab5-671d-408c-bdcd-af1c2ff8b7a2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f632a8ca-533a-4226-ba26-5e98757c0416", "sighting_of_ref": "indicator--8e5ad424-8a9a-46c7-8e7d-c2dac60e4208", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352676b7-742d-4e25-9a2c-b8d07e9b522c", "sighting_of_ref": "indicator--5d2b1faa-4dc1-4f15-be10-ee1739702aa3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7f7954-af95-418b-ab2a-2bf819788436", "sighting_of_ref": "indicator--2a9ff7f2-a5c5-47bf-88d9-f938b4f540f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0df149b-84f3-4192-9ee4-27f1ce007260", "sighting_of_ref": "indicator--b81116ff-c4e9-4f01-8227-3db4ad6b1123", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdfe6a9-383e-4ad9-9302-d47ffa5a8f7f", "sighting_of_ref": "indicator--4af6b76b-f7e4-413b-95f2-bb7f67941c07", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34c93c9-6fa3-4496-bb09-3d2aa2d14d73", "sighting_of_ref": "indicator--d20aba40-4778-429d-a008-dba3e31b001b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aae38bb-8070-4d02-bb20-a17854c16b0a", "sighting_of_ref": "indicator--0ee2d5a9-03d3-482f-84a6-18b3d5310117", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbba58b-8352-4657-8aac-3c06f32c9456", "sighting_of_ref": "indicator--cb083c64-c3fb-48f8-8077-863199f6ffc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e775f3-9aa2-4784-bc91-ff5607d9becb", "sighting_of_ref": "indicator--ab560c64-72c6-4ae5-9b59-f81563199f86", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cd21ff-5913-4806-9033-0b51c752ff01", "sighting_of_ref": "indicator--ab560c64-72c6-4ae5-9b59-f81563199f86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d837b4c1-7e03-41ca-966e-a328faec0aa2", "sighting_of_ref": "indicator--e41b6b85-7fa9-4a75-9989-cf9a7b054849", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecc6fab-e0da-4977-8a83-ee9fcdff698b", "sighting_of_ref": "indicator--8e67df18-2c87-4401-a64d-c0b6706c3b70", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa436f3-8f6c-4a15-80f1-f6883b8ebeb3", "sighting_of_ref": "indicator--9fdc5ec2-e265-4fe1-a91a-a5c85494452c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4513ab79-ed85-43fb-88ed-1a3f48ab3e63", "sighting_of_ref": "indicator--a9b52d34-62eb-43dd-9d83-4621d76dc654", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879cf907-4e89-47ae-989f-4dd7f0d92991", "sighting_of_ref": "indicator--a9b52d34-62eb-43dd-9d83-4621d76dc654", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9464a0e-5f69-4392-829b-e148396e432c", "sighting_of_ref": "indicator--1da9dbd5-32e6-4edc-98ab-022822269e86", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ff84e0-8846-4081-965f-9e152ddad153", "sighting_of_ref": "indicator--1da9dbd5-32e6-4edc-98ab-022822269e86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552daeb5-329b-46d2-b1b7-52a006cc4a51", "sighting_of_ref": "indicator--f04b89ba-f7c3-4244-b03a-92ce02dcdff1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a3ba8f-ad2b-4537-9365-f7dc6b9884bc", "sighting_of_ref": "indicator--51ed9ed4-3d4b-431d-8c4e-9634271300ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee5b83-2005-433a-ad94-6643ab14d422", "sighting_of_ref": "indicator--10df5f1a-3523-41a8-97f5-118c21bba73d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58331d52-51cf-4c68-9b11-a3ece17b90cf", "sighting_of_ref": "indicator--69d93809-cba1-49e8-949d-046d840bace0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7724ac1-442a-4a7a-8400-5003663b116d", "sighting_of_ref": "indicator--36448e13-029f-408d-83da-ebce30038e3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f680de-3735-4bbd-91c4-ad1a1c163b9e", "sighting_of_ref": "indicator--a4ddfbb3-41b5-4414-a77d-e3595fabc231", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c995c21-b079-483a-a6e3-89c56728bac1", "sighting_of_ref": "indicator--7ef27221-d180-4268-9fe0-d99aa42707c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444c21a1-e461-4303-a130-c184578f6e02", "sighting_of_ref": "indicator--8fae0a0d-a540-4378-872b-ba2d2952301a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fa008b-bd1b-4a6d-bfbd-c4e0575a5e2a", "sighting_of_ref": "indicator--c8e551e6-b351-4879-908e-eea639aeb08d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d960171e-067f-49dc-aced-b33954b0c6bf", "sighting_of_ref": "indicator--c8e551e6-b351-4879-908e-eea639aeb08d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0490171-6937-4a7c-a570-58606415542b", "sighting_of_ref": "indicator--70d88114-3ba8-4a3c-9690-96cbacf319fd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ebadc5-5827-4a4f-8fba-efb7a643bf08", "sighting_of_ref": "indicator--2d727d34-3cd3-4af3-ab80-023717284559", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1c6e92-5bd0-42f2-9d49-c975c536682d", "sighting_of_ref": "indicator--1d6858cb-c741-4746-8f29-594027f6c51a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ca9079-9e38-47a5-911b-9a252c9a2870", "sighting_of_ref": "indicator--d5a30986-9aba-43bf-90ef-74494aa5515a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6172f63-7953-4a11-b92e-74c238369e0a", "sighting_of_ref": "indicator--239793cf-6c32-4028-ab5b-8270aa4fa2ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a79d5f-3389-4aba-a9c5-62463b674cb1", "sighting_of_ref": "indicator--3fc31e47-afad-4fd6-b120-39929fc22955", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fba31a7-9883-4786-860e-454053630868", "sighting_of_ref": "indicator--019a00d0-f5f8-46d8-8280-6517d5641eae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ebf602-5c44-4a29-b654-a3cd274307b5", "sighting_of_ref": "indicator--e213f9d9-dd04-4d82-b537-eb1f72ce9aec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ba5115-f5cc-42cb-b38c-1917b1923541", "sighting_of_ref": "indicator--ad5e956f-9fb1-4180-a812-b1e4420b1f22", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f06ba0c-a34c-4050-a498-5773cdb986ba", "sighting_of_ref": "indicator--14938509-77f2-4966-8371-7e4290dda802", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd603563-58e6-4171-a5fb-4352e4c0ff12", "sighting_of_ref": "indicator--3a096237-c5d4-4ee7-a4ff-4952127ffd38", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eff9b6-e00d-4c76-8404-c669910fed76", "sighting_of_ref": "indicator--bbced617-0030-47ce-be0c-20cc8329680b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15c6210-cad8-48fd-b607-f9decd4663ae", "sighting_of_ref": "indicator--226115d1-4f4e-44e1-be6a-411f29dcbc8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e1325b-c2bd-414e-bdbf-a4a8e8948c87", "sighting_of_ref": "indicator--6beb0dd3-9149-4616-b473-d3acac0638d5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ec6ad8-9e92-435a-aaa3-cc2d1879567d", "sighting_of_ref": "indicator--dde25ce6-2849-460c-8622-3241533183f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a61a1b-7cfa-4beb-9d0e-f1bc12f6b49f", "sighting_of_ref": "indicator--ae65a572-bcad-4c4e-8c2a-38aa5bd0ae16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef50946-ce82-492c-ad04-32366b199f89", "sighting_of_ref": "indicator--c7d68557-e35b-4eba-bef5-078d3b39d1c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5e4be9-807d-436f-b355-412465c8cdea", "sighting_of_ref": "indicator--c5c85a89-5e1a-429b-b137-5f5a80a4e6d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03debd57-d641-4b9f-946f-38b82f818639", "sighting_of_ref": "indicator--600698ab-731d-4875-873d-f8ad48ff10c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5196bfd1-2b0b-4473-950d-62baedcd8c56", "sighting_of_ref": "indicator--978c8623-b704-4fae-bced-6715ae2bdf06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042ca11d-e4a6-4449-b0db-1228604f8e79", "sighting_of_ref": "indicator--d09d390d-9d56-4bc3-8124-b29106e493e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadb81c7-d3cd-4174-94f1-6c7970c0cc8f", "sighting_of_ref": "indicator--bf672b60-b39c-4644-85ad-574c3001a5dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904b1449-412d-4120-aa07-a79bc846c5bd", "sighting_of_ref": "indicator--61357996-ac29-4f87-bbce-832e9d6c08b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ab64f9-41df-41aa-9645-763fc35dfc54", "sighting_of_ref": "indicator--61357996-ac29-4f87-bbce-832e9d6c08b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078faa0b-703d-416b-af0f-3ea79d08570f", "sighting_of_ref": "indicator--46f41d5c-0598-406c-b461-a83940fba88e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4894236c-a79d-4166-91c9-2021c30537ac", "sighting_of_ref": "indicator--3211f008-70a5-42b3-a6e7-39c100d4e8e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f3ecda-975e-44bd-8df5-0f08f4e39ae6", "sighting_of_ref": "indicator--24f109ee-73a2-4aa1-9d0b-537d566315ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffca59d-fbe9-4775-8e66-564a31e03d56", "sighting_of_ref": "indicator--f3bab4e4-fba7-4d93-81f3-63034df58011", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3203b7a6-79b7-4d7d-8299-75e622783f2e", "sighting_of_ref": "indicator--549ea6d3-8adb-4809-93a9-c1562064c2f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce2c143-6a29-4e8a-a1a0-b724b8bd913d", "sighting_of_ref": "indicator--5b61730e-7be8-4475-9547-710f0bb9ad30", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24eb4c62-3451-48b5-9be1-dc6ef623e0cd", "sighting_of_ref": "indicator--733845b4-a519-44c3-a77c-f13a24b9c0c1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d767d9bc-848b-4021-8073-7ef90f41d82f", "sighting_of_ref": "indicator--361ca626-f462-4d7b-a782-69cdd52a92b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3ec319-402b-4e98-919b-fe5b0c0d1dbe", "sighting_of_ref": "indicator--42def57c-7ad6-4f7c-b421-38bc4fb14935", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deadca6-b8db-4e1b-8d72-48ad33c13538", "sighting_of_ref": "indicator--a5fc7195-b6b2-47bf-a667-ce0204cbc920", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46d1d60-5232-496f-a8c7-a8b95bb624a8", "sighting_of_ref": "indicator--19fcabdd-0a21-42b0-bf0b-4ed2b2f7cb75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c05f30-d60f-425e-b193-d45174025a61", "sighting_of_ref": "indicator--05a47ecf-4d49-4c6f-b045-5bd056b0cc09", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f12ffa9-2ec8-4659-a284-e4b6d505e83d", "sighting_of_ref": "indicator--657f11e6-552d-430c-9597-b7162100a9c5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9deefdc-800a-4f09-8c72-b18a5c5c2032", "sighting_of_ref": "indicator--c9560b13-4a25-4a57-8a3a-c915f22566b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcebba1f-9ee3-4734-87c3-6df7b8787d3b", "sighting_of_ref": "indicator--9912361b-b4e7-4ece-b89f-08b72ee7f6d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407f95ce-e125-4108-a14b-ac968e9ea298", "sighting_of_ref": "indicator--3e6d1976-9e32-40bf-a556-2112fc0c351a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09061c70-88e4-4b7e-9531-1ba002e2a34d", "sighting_of_ref": "indicator--6fa3f0e8-8932-4de6-90b9-981f5b84d1b1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a57cb0-2ca9-448a-a5a0-152d7aef3a53", "sighting_of_ref": "indicator--f7dcba10-4f33-44ac-933d-f8d3ce5b17b4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f430e527-ab6c-47cd-b6b6-dd9af4582219", "sighting_of_ref": "indicator--9cb281c1-c46d-403f-b34d-e73f52b512bc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b94f5e1-d678-4934-a67e-a71abe9bf304", "sighting_of_ref": "indicator--f880773c-52ab-4d95-adae-867af808c7fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1dba0d-9639-453b-8bfa-1d466ef8befa", "sighting_of_ref": "indicator--429563e6-90b2-4452-b940-154f94c46273", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6773d0-8633-40c1-8374-c6c0806e6a2f", "sighting_of_ref": "indicator--ecd0c26e-c4e2-44f8-81ec-39e73e1719d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030e3245-ba79-464c-a043-107cc1144dd4", "sighting_of_ref": "indicator--b7d60ffb-758f-47d2-b77a-13caed6084c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca44f234-dbf7-4ac4-b113-bd454ab4c57f", "sighting_of_ref": "indicator--86848176-eb26-4472-aff5-d9ce97107638", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdf35a6-e22c-4ea5-a88a-1f78e5290370", "sighting_of_ref": "indicator--8be715ed-a30a-4cdc-beeb-917d30653857", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c20213-8441-4a7a-a61b-2d39820c6670", "sighting_of_ref": "indicator--7d784646-922d-42bb-b31c-a8c0ef65de67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43ba7e0-c379-4c66-a6fa-bd66a32edb97", "sighting_of_ref": "indicator--2bd2880c-2bc4-44b4-b6a1-f5a7646da868", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc1f633-42ec-4e2e-a0ce-1fc87d44aa2d", "sighting_of_ref": "indicator--c53da20f-1e54-4d62-a23e-33f4db90ac21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea0cbb0-a412-47d1-aa9f-d97af3a28dd2", "sighting_of_ref": "indicator--bdc6a366-f31d-42e2-bac2-a4fcea2b50dd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9d8403-8798-4f8d-8271-287360c13419", "sighting_of_ref": "indicator--29415993-64d2-47fb-a90d-ea3f5aedb4c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b486e75f-c218-4607-9f8d-37362bdf6200", "sighting_of_ref": "indicator--110b0748-7653-4155-b2a6-e0e1d8605e5e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bd0d4f-58c4-4718-b0be-5aad2ec43db4", "sighting_of_ref": "indicator--51908568-eba7-47a8-b3e1-4ecdb1c1cbec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--383ed69e-e0cd-424a-93eb-7637c311e818", "sighting_of_ref": "indicator--5b813e8d-7cee-4c86-b542-9d5c51e89451", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aed9740-f86a-440a-a85a-0e8325ee5a95", "sighting_of_ref": "indicator--867f5da5-4ef3-4abe-8f24-ec532f88ec95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86de6b7-1f49-4990-8d9f-bec720796d08", "sighting_of_ref": "indicator--8ea76d66-8bc4-4602-8e28-26df04e5db79", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a730e2ba-0b16-4587-bd34-bb7b6a753537", "sighting_of_ref": "indicator--23a44de3-befb-4379-b19f-66f8076e7052", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec93440-5e79-42d3-be3b-dd71b342ce7f", "sighting_of_ref": "indicator--facf6430-f909-4fa6-aa23-cc9e1f4fc2cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7a1192-e50a-4c68-bc17-35bd94d75ef6", "sighting_of_ref": "indicator--8b9c279f-a0ce-4945-8a2e-6189e77499f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b8fde5-3fad-43d2-9e19-6f50ae072c17", "sighting_of_ref": "indicator--9cb8a2ff-343a-4a70-8c3b-33830ee3b925", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a811e62-e59e-4306-b5e6-808b4f116547", "sighting_of_ref": "indicator--d6318269-b475-4504-83bd-46b8ec206e88", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832259c6-2557-474d-9f81-8b5b1ca2841e", "sighting_of_ref": "indicator--ceca5022-fd88-4244-a39a-4dac5404679a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d50f405-cb1c-403c-8f91-1f92e7b955db", "sighting_of_ref": "indicator--16d82ff8-abbb-4bf6-93c0-1407944ef3aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665ae059-cea7-473f-856b-36dcd8f7ba09", "sighting_of_ref": "indicator--98b2724e-6083-4edc-9e88-a14992ecac81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2d63bf-82b7-4ffb-87a7-1e0dc5f934fa", "sighting_of_ref": "indicator--39b71f50-354c-4012-8e1c-704a988776dc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec339075-c9a1-4415-bb66-49c25796c938", "sighting_of_ref": "indicator--c379595a-0cff-4559-a27a-17fd59ac73e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65e2d2d-cebd-4f6f-970b-6ad9de1f639d", "sighting_of_ref": "indicator--e20d714a-7d03-41b1-bec2-30914ae6ae6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228b9c1b-0dba-4f8d-88e1-cbfdf6e447f8", "sighting_of_ref": "indicator--9d716fd3-7a2c-458b-991d-68e3c3a2692c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b50824-440e-4a83-bb17-94dd166a51a1", "sighting_of_ref": "indicator--2e03c258-91d4-4615-bfdb-05633ea5a511", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338da667-86bc-4d70-9b67-a67f4c40f009", "sighting_of_ref": "indicator--09586819-6306-47c2-8649-8bd42570bde2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05681f76-6925-42e4-b1f1-3bec1dd5ac26", "sighting_of_ref": "indicator--61c8abc3-9dea-4987-b8d7-6e48c0c582c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c90a38-c731-4a43-baad-490907d97a0c", "sighting_of_ref": "indicator--64e50014-993c-486a-90b8-cea53a52fca3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf6f684-1bc8-4486-b38e-ca65c32b43b2", "sighting_of_ref": "indicator--64a1d8e4-9fd3-4eb7-b499-046ff89252c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f0dba0-e213-473d-b32f-766b3204fd8f", "sighting_of_ref": "indicator--16360c74-ed05-4529-9d3d-25ee88754069", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a41a3d2-45d3-4419-9817-96ca8dd3d9bc", "sighting_of_ref": "indicator--78966406-54c9-4835-8d53-a20ca3d4764f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7783a2a-65c9-431f-b143-a8aad2f817b7", "sighting_of_ref": "indicator--62bb6775-b736-4d43-b49c-8c1d734a3f12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becae296-52f2-4dfa-b9d9-d55053c90302", "sighting_of_ref": "indicator--04ce3dc7-c77c-43fa-981a-8a4a74df0e10", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfddd22-d6ca-45aa-a0ec-7b566e324325", "sighting_of_ref": "indicator--81c66c2f-0f2a-4b1a-872b-4c466e9bb802", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10155331-1cf5-4e25-a82a-d0ee90cd1532", "sighting_of_ref": "indicator--1d44986c-83da-48d8-9d07-8f2d789f12aa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62239522-ee1b-4e8e-b053-c066e9c0b9f4", "sighting_of_ref": "indicator--bdb8ed17-c0f1-4a57-808e-98e4b8f58711", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4ea9f4-af45-486a-b911-4855b11e5ca1", "sighting_of_ref": "indicator--221e796b-19ab-4e48-af10-448f536d2dc8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00df1890-0396-4d7a-965c-58d897fe56a1", "sighting_of_ref": "indicator--a023fb0b-38ca-45fc-8693-021195628825", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7484dab7-af1b-4e59-976a-f9e71a2c7d7f", "sighting_of_ref": "indicator--002646e9-3086-4a91-bb99-bd86f443096b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ad8bd5-1c92-4832-a515-f85a3a5aba41", "sighting_of_ref": "indicator--3304870d-6fbb-4ca4-a5c5-d1d31e9d1641", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59df6c53-429a-4890-bb37-342d4db6beea", "sighting_of_ref": "indicator--032dcb20-db45-4ecd-aa8b-b64b6961f44b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce30071-6a8e-48b1-a2df-862b3cb85e05", "sighting_of_ref": "indicator--6dc672ac-332c-4b9d-8024-2fa3257df1b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea337355-b262-41f9-9583-da8fd4767fae", "sighting_of_ref": "indicator--f2627941-3fce-4591-a94f-0ee97f8e081e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949d3a9b-f76c-4ad4-bff6-77d9ee9198c1", "sighting_of_ref": "indicator--3f133cce-9d9b-406f-b174-bc4c98bfed0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abef12e6-b08b-43a1-be29-a6fd4cb1b5c1", "sighting_of_ref": "indicator--22e6182b-b7a8-42a3-9aae-3398d4099c93", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a6c4ec-87d0-4898-b2d3-a5e6a79d99de", "sighting_of_ref": "indicator--89595ee4-7767-4328-ad0b-b8c2b9315a08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f934d8a2-59dd-4ae2-805f-4a6e5186ff2e", "sighting_of_ref": "indicator--aba89f56-faeb-452f-adfd-a7e41af1f562", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94667c4e-8f9c-48ac-bba3-13501d39905c", "sighting_of_ref": "indicator--4f0f799a-a17c-49ef-82bd-d26a89394ecc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ba3b4b-8ef3-4dac-8f48-647b29698d6b", "sighting_of_ref": "indicator--26f5cd43-7d2a-4326-be4b-c02872a4ea72", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ac16dd-1f2c-452b-9c17-56f901a7b5fa", "sighting_of_ref": "indicator--5a70667c-d93f-4232-9f45-cfa1d29987de", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ff3e2c-d91f-4920-b99e-16e70cd98195", "sighting_of_ref": "indicator--62c8392c-feb3-42b7-8fa1-1798dbdc7811", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7134fa-61fa-407c-ba3c-667263cd286c", "sighting_of_ref": "indicator--e453e454-0a6d-4e08-a43a-d23ebf765c1e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fdbfc1-7621-4817-848b-e9a47b7396cf", "sighting_of_ref": "indicator--6d2a96d2-9554-4133-b884-f07b03f6b27f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844c2386-d937-472b-942e-12649557a6c3", "sighting_of_ref": "indicator--215a42c3-70c7-4fbc-ab84-848b3c17cd7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb298df1-71f5-4d20-9605-97ebf824e7b5", "sighting_of_ref": "indicator--746b8db8-e4c1-442c-82ad-159769de24df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a738bc0-9aee-449c-8560-7427f8eaaf2e", "sighting_of_ref": "indicator--e07943fd-b530-4d73-9baa-91349840c760", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055fd96d-bee3-4363-b90a-9db523e6d0e2", "sighting_of_ref": "indicator--4054353f-16b6-46e0-b627-1c238bdfc873", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354062a2-8018-483b-9a66-464705564275", "sighting_of_ref": "indicator--8edb8d40-3128-4e20-8642-07d6ce5c8c17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d77bfc6-ce3e-45d3-a5ca-234b2c566c77", "sighting_of_ref": "indicator--9ee06fd0-a07f-448b-ad7e-7b641b6a621f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3148a4-4051-41b6-a775-655713057d8e", "sighting_of_ref": "indicator--3c629f81-34b7-4f27-97c2-485043ec7326", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d0e006-8ba8-4cb9-a6b2-14f59875af42", "sighting_of_ref": "indicator--6b5bc920-c222-4db2-8fac-8b72a59d8863", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb897f03-5537-45dd-b575-dd8a86278059", "sighting_of_ref": "indicator--9a10f472-a3d7-4db6-bb98-164e5eb7123a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7d4593-e036-4746-b20e-759005832da4", "sighting_of_ref": "indicator--e570956a-51c6-4563-b953-68db25ad6fcb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a108111f-bd54-4335-a85b-1ebd04dde2b1", "sighting_of_ref": "indicator--fe5daeae-e9c3-4b3b-a4fb-907872c436a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3931cc3-2cd9-41ae-9ead-2ac271d1271f", "sighting_of_ref": "indicator--610d938a-57ab-4a2e-b2a7-edde1ca0e376", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6393385-3c48-4456-a338-a9c002a16108", "sighting_of_ref": "indicator--74f6be4d-fabc-4046-8ea3-c9c121902474", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a31c5a1-91f7-42fc-bc45-45838201395c", "sighting_of_ref": "indicator--5d2a6525-57e0-4572-92f2-46caba1176b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b77a1d5-c290-426b-9b87-f8f1edb35345", "sighting_of_ref": "indicator--7a69bc6c-2de1-492b-aedf-1fb7126f0b27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3090bed5-07c3-420e-97df-f80e3c702cb5", "sighting_of_ref": "indicator--81f1da94-10e3-41a7-9e36-beed5e00edde", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7344f779-8563-4195-9ac4-aa15615a0e4d", "sighting_of_ref": "indicator--5b67ea83-6f2f-4ec9-bc66-6b297ccbb9b4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20582713-e74e-48c6-ad1d-2836476a7890", "sighting_of_ref": "indicator--fa2f6e77-2842-4f5f-b740-f2dae6097bd1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569dd0bd-d769-48e1-877d-751afda93f6a", "sighting_of_ref": "indicator--f9049180-84ee-43d7-a2aa-aeafc15143b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5e94de-a76c-43a1-aaeb-7b28b0acb54d", "sighting_of_ref": "indicator--9c4c08fd-0d4b-40fe-8bc2-8372c225206c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749a8713-eed5-44c8-801c-3e86adf98651", "sighting_of_ref": "indicator--65e1adbb-bfef-45cd-8358-c15981e2c3f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7a5fd3-ebc6-4985-ad40-a8f9cc8ce919", "sighting_of_ref": "indicator--02a4117b-cb7e-44a5-90a9-a88c916c0c8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ef5698-f6f9-43f2-bcb9-11b02288bca4", "sighting_of_ref": "indicator--ac995b51-a0a6-48e9-879a-530b2ab0810c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e891e79e-66ce-47af-9163-fab4d86014b9", "sighting_of_ref": "indicator--e8241a5f-b2ff-4d6f-b5a4-1bc4a3985aed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dc5ef3-6b8f-42c4-84b4-a3e9f0c11c77", "sighting_of_ref": "indicator--a0171172-369b-4c24-abb2-befb011c35a2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e490f667-daf5-4f22-becd-428d6a4b4c14", "sighting_of_ref": "indicator--d12e21d6-d3de-4b43-9a0b-0ac4d653b3f4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd18be0c-a055-41f9-9641-c0e7c1b2e8ac", "sighting_of_ref": "indicator--05f8269d-4a4c-4c03-a4f5-8bc02b93ad6f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab113f7-e0e2-4e4d-bc1a-30ba7b10f92a", "sighting_of_ref": "indicator--b33bf3ee-47f9-450f-8088-dccec16b2559", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b673d0b-a28a-40cc-89c7-8c3b6958d142", "sighting_of_ref": "indicator--7ea243df-8b8b-4945-97db-ff3199953339", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b6b89e-1924-4183-a934-8dc503077c05", "sighting_of_ref": "indicator--0974bbbf-5505-48f3-a28d-14ae097d07e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b14c690-ed7d-4a22-a3f8-73c2a1238ef0", "sighting_of_ref": "indicator--6cff5db9-83d4-431f-bda8-d1becf90c25d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d839a3a3-c1a3-4864-bb8e-3d7c3ba4789c", "sighting_of_ref": "indicator--0ae5cf27-9d74-411d-8809-ea9c9b4eeff2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0877cf9a-b11a-4041-92d2-afb53688c321", "sighting_of_ref": "indicator--c3692940-6ea3-459a-ae4c-2759f2abce5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11b3074-b5a1-4633-a75d-a644e00a4bc6", "sighting_of_ref": "indicator--7b744589-55bd-485c-b9d1-b06af8dc1acf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41fcd85-4f13-48a4-97a5-90cbdd24a90d", "sighting_of_ref": "indicator--ae226376-a448-44cd-ad54-40d09317c20d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6119a97-79a0-418c-8c8f-088b9b080ab9", "sighting_of_ref": "indicator--67946460-54dd-4626-9930-7a285f9d3c3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0273d24e-cc51-433b-ad67-0a1ae52c2577", "sighting_of_ref": "indicator--67946460-54dd-4626-9930-7a285f9d3c3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b760fa2-8d97-4f9b-b539-9c6ab21877e6", "sighting_of_ref": "indicator--85b7e038-d4b7-4017-bb97-e63382460c87", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f558a26-077d-481a-b720-0ec2a6fdde28", "sighting_of_ref": "indicator--36e0cce0-6439-4388-9d19-63f759211e30", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8268bc91-18d3-47ec-a177-1638256bc880", "sighting_of_ref": "indicator--faca355e-c505-41a7-844a-5c7d84f19b95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb4d3c2-12ce-41a8-85b3-ac5a9745cfc8", "sighting_of_ref": "indicator--b8ceed1a-2adc-4e98-b873-fe5a5db9c61f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e792554-a678-4e87-986c-ff54cb67e58e", "sighting_of_ref": "indicator--fb26f43f-3a25-4c4b-b415-538da1b9710d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af2e752-2f43-408e-9924-e3080677c430", "sighting_of_ref": "indicator--fb26f43f-3a25-4c4b-b415-538da1b9710d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c9e5e3-d014-46d1-b3f1-64cf3ea69870", "sighting_of_ref": "indicator--2c06466d-be52-47aa-9f93-ec3cd363800b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff40ca1f-e158-47d2-8dc5-d055ea1afdd3", "sighting_of_ref": "indicator--2c06466d-be52-47aa-9f93-ec3cd363800b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb1b447-e81f-458d-aab2-9d876fb8d123", "sighting_of_ref": "indicator--6085217f-32a4-469c-b21a-87b38ca9be9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb42cee4-9c9c-41d0-8537-9da28a8bbc18", "sighting_of_ref": "indicator--78318955-3f0c-421c-bc66-4ba6bbb14ca7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d23aa74-ac43-49b1-a5a8-bd0dc7b424df", "sighting_of_ref": "indicator--8fb686a0-4b3e-464a-8583-95765ec10cff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164a88a2-8986-4710-870b-970358a2d60b", "sighting_of_ref": "indicator--575cb229-5cb6-4adf-aff6-1953ca0512e9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e01253-33c1-4191-b030-4cbb96b73c2e", "sighting_of_ref": "indicator--f46b9df6-a3f4-494d-aca4-5b9538ec139a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730bfffb-cf67-4bba-9b2f-5ff9e692df75", "sighting_of_ref": "indicator--2fb3f78f-c67d-40b1-8fd3-0d3e12e674c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658294e8-c5df-46dc-9f1a-02a2f6abcf9c", "sighting_of_ref": "indicator--e210adef-3993-4c7e-a9a4-c0ea9e36b1a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a15760b-8203-458d-bafa-f84d3e02ac3f", "sighting_of_ref": "indicator--46a68d77-0b3a-4f0c-b639-cf98d646fbd2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53e7d98-3f4f-427c-b31b-a2a545835e5c", "sighting_of_ref": "indicator--bd52a9d3-4459-4d7a-b4e9-213aa14ce56b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fa70a0-2e47-4132-a0a6-2aa48b672171", "sighting_of_ref": "indicator--64b2343c-dd29-4edc-a6c5-ec9d17d70c50", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40827173-3933-4bc7-a98e-9280e429cf4e", "sighting_of_ref": "indicator--64b2343c-dd29-4edc-a6c5-ec9d17d70c50", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9362e36-039a-4043-9c74-1f1e232bffe5", "sighting_of_ref": "indicator--3dc31d8e-1b16-492b-a14c-d60ac66f4247", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19835de3-2996-478b-b3b3-cf29997d7714", "sighting_of_ref": "indicator--3dc31d8e-1b16-492b-a14c-d60ac66f4247", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04e2004-0f58-464e-8c12-fb5bdcbe4f3c", "sighting_of_ref": "indicator--ab400b66-c067-46a9-a259-93b80493a02c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4279a8-f2ad-4e88-b66b-379be552a475", "sighting_of_ref": "indicator--51a853ab-f937-47df-9c1e-05823c6db6d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c4892f-4267-4c7d-8406-31456f6477b2", "sighting_of_ref": "indicator--51a853ab-f937-47df-9c1e-05823c6db6d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f27644-2c3e-4a44-b8d7-21c4fb73bed9", "sighting_of_ref": "indicator--e3080e0c-2794-40a0-b383-e293ceaefd71", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b7bbac-c518-41c9-b872-db3a28f9f732", "sighting_of_ref": "indicator--3f4ad354-e86d-4023-a7aa-b437f2fd4640", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8585ff-13c9-47d3-8cc3-b18b6a8118bc", "sighting_of_ref": "indicator--4f9da53d-4cbd-414d-9e30-98bffb795413", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719039c2-5137-4f95-a7d5-1be1e081bfde", "sighting_of_ref": "indicator--848b2f93-91a4-4f2d-98bd-5559940a6b74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197bee05-7cf0-4565-9d41-a7bde7337b95", "sighting_of_ref": "indicator--4b896f99-8935-41c1-9489-3f7186c2ac4d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc6a0f4-b635-4b1e-8427-00f98da122b6", "sighting_of_ref": "indicator--4b896f99-8935-41c1-9489-3f7186c2ac4d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9fe4b6-b8c1-443c-a24f-7734e520cf6e", "sighting_of_ref": "indicator--a96cea2d-0c25-4534-b32f-19a25f73c576", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e8ff43-6caa-45a1-8ce4-1a31f58d8a68", "sighting_of_ref": "indicator--5cee772d-297c-40bf-84be-86716490c39f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8730a15-2ef8-424e-8e97-b1f402fa5f6c", "sighting_of_ref": "indicator--8f0ead01-effd-4d3f-acd2-a73c7c65926b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f28214c-8b6c-46e8-b3ea-5802518226a4", "sighting_of_ref": "indicator--00d9da8a-f2f8-49e8-bba2-b1f50645be41", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa4a81f-a2f1-47de-b88c-1aa55c50e8be", "sighting_of_ref": "indicator--42417978-5518-4505-afc1-ae19dbdd2b44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0c64bc-8803-48eb-9032-41721298f00e", "sighting_of_ref": "indicator--a7c6445e-90b8-4d79-a1cf-ce7c5f5e1cf3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea3ab95-843a-4766-ba6f-ecaabb41f315", "sighting_of_ref": "indicator--0d1ea067-2537-4b4a-907b-222d7c55d7d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437396a6-c1e2-4ca4-b2fc-4d444e0d072c", "sighting_of_ref": "indicator--1c36c38d-79b5-426d-9407-d09101d08ef5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5798e7-74bf-4fff-9675-7fb49e532b50", "sighting_of_ref": "indicator--63b6cec7-6843-427f-aff3-3ccdf940c30b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80728101-d2b4-4c45-9326-b3db398d0109", "sighting_of_ref": "indicator--00b6774c-8dfd-4aba-9695-12beacfdc5e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b56352-e149-42cb-9160-94d91bded4be", "sighting_of_ref": "indicator--95a1f93b-aa1c-489e-a74c-c15df48c6cba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b71421f-f7ec-46f6-8d61-07cee6592e62", "sighting_of_ref": "indicator--89bb6c5e-cdde-4f78-8fec-f1231f728d32", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0657acb9-0c52-4b5f-9d20-eb6200b44ab1", "sighting_of_ref": "indicator--34b902e4-5a3d-45c9-b179-c322887bdeb8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a8e2a0-9973-40ce-aab6-939dfe02ac86", "sighting_of_ref": "indicator--de71562a-d6ce-43da-91c6-8b464d789a5a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b78911-d9ca-4b78-883f-95a70d8e290b", "sighting_of_ref": "indicator--c7257055-93e7-46f1-821d-48f4b2a9a6fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87258921-8c3a-4065-9631-779972a96669", "sighting_of_ref": "indicator--975c377f-8670-4d57-b195-46fe3e83b524", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4deba8-5ae7-4eac-827a-43268c302f95", "sighting_of_ref": "indicator--f854ae8f-b07b-43db-a1f1-310714036f2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a86ac7-f4a4-4a32-95c6-1d4408ecebb3", "sighting_of_ref": "indicator--df01f9ff-ef44-4000-94ac-037c471df298", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04303a3-c3e4-47c3-a0f8-76079ba124d7", "sighting_of_ref": "indicator--de1c4f88-84ae-4b2d-895a-e874787ab8ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ae6883-3d7b-4010-8141-4b6c920dda3e", "sighting_of_ref": "indicator--df3b2654-7e2b-4540-935a-c4e0e0e528e6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c52c21-581b-4c0e-81e6-2de00384a500", "sighting_of_ref": "indicator--7a2b78f8-44b6-49c5-ab39-b8692b5b3727", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657afd3b-3e0a-4bbe-9bd6-3b4e97450a09", "sighting_of_ref": "indicator--7a2b78f8-44b6-49c5-ab39-b8692b5b3727", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37dc9cc6-25e0-4187-ba9e-3383774229b3", "sighting_of_ref": "indicator--54cbea2c-90ec-473f-9262-49b9c546be27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef5aa1a-ea00-4094-9041-5eb078f3c5ff", "sighting_of_ref": "indicator--1b2e0baf-d063-4320-8276-7dfd2855eced", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9d55de-ec57-4395-9b29-1e30d1a16d16", "sighting_of_ref": "indicator--6593913a-8ad6-456a-b7d5-0541d83de08d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c56bcb1-350a-4e88-afc2-fbd9371042d2", "sighting_of_ref": "indicator--da25700a-54a0-4697-ba96-c61e5944fe02", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801f0c3e-6f74-4418-88b0-9b23206655dd", "sighting_of_ref": "indicator--da25700a-54a0-4697-ba96-c61e5944fe02", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f92f25-5069-451b-afab-c71bc7ccf52e", "sighting_of_ref": "indicator--464e1cfd-be82-476d-b35b-f083dee46251", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e1e74e-129a-4ba6-9693-6d665a6a50a5", "sighting_of_ref": "indicator--46a581dc-07b4-446e-ba64-f2aa8ccfc3b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f9c98d-3ae5-455c-89f3-8993f1f628ad", "sighting_of_ref": "indicator--b4d4a351-ae0d-4766-8786-da04270118d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cbb57f-a2d8-4a8f-9828-a230ffeffcc4", "sighting_of_ref": "indicator--b628945b-bb46-4ad4-9219-7c03eba1570c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902b08a8-7651-456e-b444-780b505acb2e", "sighting_of_ref": "indicator--cb4ae77f-3210-48f1-b690-db868bd8b75c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dc08b5-9d60-41e7-a03f-e7d078245f63", "sighting_of_ref": "indicator--cb4ae77f-3210-48f1-b690-db868bd8b75c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a756baaf-5e4b-4ba1-91d7-74919a1063c6", "sighting_of_ref": "indicator--8bfda2a7-6eaf-4223-8edd-b5913f124848", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5434e8-05ca-4248-b12e-1fe31e19a57b", "sighting_of_ref": "indicator--40537cdf-13bd-40bb-b2a5-f3e9b9f60877", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2c2fc9-6c0c-4989-9958-6a121134ca97", "sighting_of_ref": "indicator--5ed388be-b657-4e37-a46f-d5910fd0103c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609c5a82-8a0d-4b34-a763-28e91ad425d8", "sighting_of_ref": "indicator--5ed388be-b657-4e37-a46f-d5910fd0103c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd5989c-3d4b-4c51-aff4-633d3aa2844c", "sighting_of_ref": "indicator--88b566b0-8dfb-4b80-97eb-220a38e32f35", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b745b5-f8f7-4d5c-8060-507c815a1fee", "sighting_of_ref": "indicator--8735a8cc-c339-4f70-8cdc-468bb0c1d7f9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3556d693-0bce-465a-b543-c82f7fa38c89", "sighting_of_ref": "indicator--f362c4de-ec15-42ec-8b6a-950767877a10", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267333ac-7ede-49be-9e32-adf021a02a56", "sighting_of_ref": "indicator--a35f351c-7f97-493a-8c72-54c90abcc76e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15bd9f6-3f4e-4f46-af7b-382d2109e9dc", "sighting_of_ref": "indicator--41c03a9e-1b97-4b06-8f0e-994f97a5f783", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587a84c1-7920-472b-94b5-b5983f918007", "sighting_of_ref": "indicator--5638fbb4-22df-4f7a-943f-f44ab26d086e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0291b60-2001-4c44-9f00-6ff6607c4819", "sighting_of_ref": "indicator--1f91ced3-0fe0-49d5-8526-a90965253ec9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cea1ad-aa3e-4832-a8eb-39dc368f4d66", "sighting_of_ref": "indicator--2fe4fef5-5290-47e0-afd7-faee949dd7ed", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7710739-e8c1-416f-b232-c6ef43e199c0", "sighting_of_ref": "indicator--820f601b-4b19-4336-8ade-5d7c4c2e2ed7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c830db22-1976-47bb-854e-b4664f06329e", "sighting_of_ref": "indicator--69fc1485-1641-4219-a4ad-168cc1adb2d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741cf66a-993e-4114-aad5-9ae9db089e0c", "sighting_of_ref": "indicator--dc0d1602-fdd4-43df-b9ff-e24880a6780d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2175d46-99ac-4ab6-b2d9-3a3de18fa5f1", "sighting_of_ref": "indicator--2140ad91-002e-4c8a-88ee-ebbdc4a35c5f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c2dcaf-9fd7-40cb-a0fd-91a4c8326e16", "sighting_of_ref": "indicator--2140ad91-002e-4c8a-88ee-ebbdc4a35c5f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8646222-55f4-44bc-8df5-98a259bffc16", "sighting_of_ref": "indicator--9c8ad279-5d41-49d2-af18-41b31367378e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee342dc-2a8e-4ce9-b4dd-e01490a60867", "sighting_of_ref": "indicator--e36c7f7a-446c-4677-a031-c090bdeaad9c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d05b62-2943-406c-81a9-c8a2790816b4", "sighting_of_ref": "indicator--3a803812-2aca-4e02-8d2a-0ae99601a5f9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28109e6-845e-47c1-9cc2-cab59f2b6231", "sighting_of_ref": "indicator--373d4b15-67c7-47c2-9db1-140ddcaced8c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b270ce6-54c2-4fbb-ae1e-1194d123124c", "sighting_of_ref": "indicator--55c8b861-5932-4928-9a5b-c61ae0e23acb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b2cb70-f204-40a7-87a9-73f04ff92adf", "sighting_of_ref": "indicator--55c8b861-5932-4928-9a5b-c61ae0e23acb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426a2ec2-8690-49da-bf8f-1e2441d43630", "sighting_of_ref": "indicator--c23f044f-0974-4b4b-8b4a-d214932f1e13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fa451c-0fc7-4d6a-abf2-21cf299ad1b5", "sighting_of_ref": "indicator--4a705de4-4dde-4d22-ad16-96b04918acea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc715ca1-b452-47b1-84e9-30dab8e8562d", "sighting_of_ref": "indicator--53d8f2d2-b7d6-4526-b2d0-af75f2137de2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532dee9d-16e5-4af6-b85f-64d5d1596d13", "sighting_of_ref": "indicator--13d1ae7e-8d34-43e3-9523-2e346ec35d16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf21015-b387-4460-99b0-679fbda9b649", "sighting_of_ref": "indicator--7a0d4090-e1b4-4168-b062-649822e56d47", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00023036-3392-429d-994c-23509a0071bd", "sighting_of_ref": "indicator--1e7c35af-1681-4d88-8008-6218c4bce164", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552a1bec-da59-4fe0-a5a9-0bcc2e69641f", "sighting_of_ref": "indicator--1e7c35af-1681-4d88-8008-6218c4bce164", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c944a5e-d159-4276-88e9-5498bfdbda92", "sighting_of_ref": "indicator--e0f5b3c0-4cd8-4ce0-ace0-fc41960f6a98", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47860e44-a1e2-4096-be68-38212c3c207a", "sighting_of_ref": "indicator--2f396cb7-1f6d-4360-82ab-27fcc89707f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c02fc3c-ee63-4e85-8301-e8e12266a48a", "sighting_of_ref": "indicator--7662fbcb-8591-4197-babf-8e98d4b91c54", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c419d6-6f80-45f9-9d3a-32baacbba3ce", "sighting_of_ref": "indicator--7662fbcb-8591-4197-babf-8e98d4b91c54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b54227e-6f6c-411c-84a6-faaaaea0537b", "sighting_of_ref": "indicator--b2edb081-9ced-4bfd-9c09-2e0e0d4163c1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8b183f-8f16-4196-b764-8ba50059a5b1", "sighting_of_ref": "indicator--abf95a7e-9ce2-4e56-8ae0-da2e08debbe6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35515b3d-2e33-4810-921d-c640ec1dab4e", "sighting_of_ref": "indicator--6fcdf479-6885-462f-837a-965dfcc1f81f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aca6326-579d-4b3e-ab00-c20c7dd25f6b", "sighting_of_ref": "indicator--c5c7e592-3f46-413a-a66d-7e727d5bc2e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9d6c3e-1176-460e-8ebb-e0b7727d9211", "sighting_of_ref": "indicator--b80f797d-6661-46ab-9a4c-5e874ffea118", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba7ef0e-f90e-4537-af7b-0f5e2a8fc524", "sighting_of_ref": "indicator--b80f797d-6661-46ab-9a4c-5e874ffea118", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93c5817-5cf0-46c8-907e-9050760a4a18", "sighting_of_ref": "indicator--63474451-0d5e-4a40-a99b-7d18fa791947", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3d7308-7631-4818-8623-48c879c44560", "sighting_of_ref": "indicator--60448e88-2afd-4b1c-b717-fe8dc66b5880", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822f7630-7f76-4a82-9105-bd0545425d73", "sighting_of_ref": "indicator--0635c1d4-66cc-4b81-a77f-d561e4efe2a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136fd903-6e23-4a97-9ce5-5a3c28e720be", "sighting_of_ref": "indicator--48a8469d-2632-43cc-b13e-df4e581c927c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd641658-ae34-4a60-8221-3bba786cf859", "sighting_of_ref": "indicator--64ab1fa5-85c6-4ef8-be40-ce03b3d0ce78", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b140bd5-c877-4dfd-ba08-a6951419d958", "sighting_of_ref": "indicator--ad5bb956-6ce1-41d9-ae69-c6dcbe08af94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bf3aab-5b9f-4479-b9f1-dd03918bdac2", "sighting_of_ref": "indicator--cbc5216f-6681-4331-905b-c73ade3d36a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc79e969-160a-4978-9384-6837a8d2641e", "sighting_of_ref": "indicator--d350b5d1-f14c-405e-94eb-fbae4eed078e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef3d89e-a7e9-4b3c-8122-1d03bc30a1a8", "sighting_of_ref": "indicator--d350b5d1-f14c-405e-94eb-fbae4eed078e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d140ee-2b38-4b9a-8016-a61348b0ccda", "sighting_of_ref": "indicator--df54bf42-a0d3-4c20-897b-b99836169665", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a64072-b705-4d03-aab3-0b961134ec2e", "sighting_of_ref": "indicator--7556fc4e-4c3c-4392-b67b-0f4d6e29841c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2d51cf-7a44-4d10-886a-17c79b810ce4", "sighting_of_ref": "indicator--9035d55a-6fd3-478b-9c38-c08d1e4541f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efddb3fd-4a73-45ba-be87-41696eb0a492", "sighting_of_ref": "indicator--77a64b93-619b-445a-92f4-6b1185f97bee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281c0685-5167-4133-82fe-7f8031318e15", "sighting_of_ref": "indicator--77a64b93-619b-445a-92f4-6b1185f97bee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692d7d5a-351a-4d63-ae50-75c40463b709", "sighting_of_ref": "indicator--0ba1e907-0f3c-485f-b69d-5c058f4e993a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6e3987-2c28-46be-b7c7-18b3a47da11c", "sighting_of_ref": "indicator--79a032b6-47f5-463e-b214-255c611093eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d78d53-805f-4c5c-aa21-fa88e505da12", "sighting_of_ref": "indicator--1f9f61fa-8107-4240-b030-5828725289f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8107b03a-a07c-4f09-a247-61bc555a9f81", "sighting_of_ref": "indicator--3d41d9f3-8f7a-49a3-b799-6d7021a65011", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54551c4d-94a4-496b-aaed-b4f073ccc4c3", "sighting_of_ref": "indicator--f038608a-12a6-4875-bfb3-12e1aabeb766", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90913792-9275-4039-a369-5031de799d91", "sighting_of_ref": "indicator--6914b0aa-4fb7-4bdd-ad9e-264cd4b72bb3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43383c3-80d8-4d02-8dc9-ec8630291852", "sighting_of_ref": "indicator--527ec976-ebca-4fe3-ac50-fe7989122309", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b3615c-2dea-404f-95f1-b5b01cb1c154", "sighting_of_ref": "indicator--277d3614-ae03-46d9-9370-108eebe27f90", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775c2b6e-d2e5-48d5-9555-44535d7c41b9", "sighting_of_ref": "indicator--012f3292-a45c-44b6-a58f-067958a05053", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c7a075-83e4-45c8-a5f0-fa12ae574d47", "sighting_of_ref": "indicator--012f3292-a45c-44b6-a58f-067958a05053", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab51271e-6d47-4484-bcec-8663050fc688", "sighting_of_ref": "indicator--012f3292-a45c-44b6-a58f-067958a05053", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc55938-b0af-48f9-af79-c52fb0b50aff", "sighting_of_ref": "indicator--c628b491-744c-493e-a7a3-250782d9bd93", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253d84f1-c9f8-4932-986d-0c7c7f897d85", "sighting_of_ref": "indicator--dd1a4ee7-e39a-4c9e-8a08-6cf5ba9ec738", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757b3f5e-5f43-413b-867c-556328af758e", "sighting_of_ref": "indicator--83c0f3f0-162a-4274-9e90-db9c2be80b1d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c82336-7dee-4f6a-85f2-d69c0cf7726d", "sighting_of_ref": "indicator--25499501-0364-40a3-8d98-cc5376b08e66", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fde3799-9776-4221-91ed-10a1a9df6f48", "sighting_of_ref": "indicator--5489073e-aad3-4102-a614-1d1c97a57e9f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e03f97-11dd-4475-8925-917723a3b8f2", "sighting_of_ref": "indicator--0441d928-e7bf-47ec-acbf-e127606f0171", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8390313-e851-4d4a-9eac-0358240f20ec", "sighting_of_ref": "indicator--f028f728-f9fd-4742-aada-bf25e2403ecb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16977acc-878e-4372-abd4-f67a759229d3", "sighting_of_ref": "indicator--b2016bf2-2d60-4200-87a8-cdafed8aaf2a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8c6eba-0e94-4921-a721-5b1c17137c82", "sighting_of_ref": "indicator--5cbe92cd-90a1-4dcc-9253-b677827ea988", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839f9c54-882d-49b0-9810-5737c9510cbb", "sighting_of_ref": "indicator--5cbe92cd-90a1-4dcc-9253-b677827ea988", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46907962-4671-4685-853d-a5e851328514", "sighting_of_ref": "indicator--4ba81278-6a66-40de-9314-4bb8d4a1b103", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41570cfb-463b-4daf-b76b-72f16124a919", "sighting_of_ref": "indicator--5529eef2-1736-44b5-b63b-40bd925b2497", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6836116e-bd77-47d3-9b15-0c038aa39598", "sighting_of_ref": "indicator--56cc8206-1523-4eec-af56-1bb6a30be17d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5bc357-f6ee-480c-956a-82251cd9fc88", "sighting_of_ref": "indicator--5b3c5a59-12ae-4c27-8492-258dbebab2b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3dda75-56e3-4856-b545-f61c23ca9cbd", "sighting_of_ref": "indicator--28c4d18a-1bfa-4774-a29b-30f749c1605e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d76825-c606-4ed7-9061-1d955d70aa99", "sighting_of_ref": "indicator--1ed7bec4-4da8-47b7-a83e-fe888cba6b19", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a06cbe-a764-4452-a02b-da3c32980ce3", "sighting_of_ref": "indicator--84b00d9f-564d-444a-b6dc-54a9302705f5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3e82bb-d7b2-4299-aab4-438ee401badb", "sighting_of_ref": "indicator--8c0ffa63-3c33-4461-8459-f1692cd94dd5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29798acb-6e33-42ac-9a51-f305e08a41f6", "sighting_of_ref": "indicator--189b667f-f862-44b2-bf3b-c88f5a3c027d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc65df5f-642a-49a5-a1a8-1cbcfcb81c62", "sighting_of_ref": "indicator--c53789f9-c87a-47e2-90cc-b79c49fd9b3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb5b676-096d-4ca9-9ca8-211afccf8ba9", "sighting_of_ref": "indicator--231e4188-e8af-4762-b5f3-9f1bbea983f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74e8a36-20db-4823-8c29-463a0b9a0ee0", "sighting_of_ref": "indicator--8a9a2d75-12c2-4fe5-af2c-6e6ac5d8c010", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1be44b-2efd-4d09-a92c-cae957319891", "sighting_of_ref": "indicator--f8edfefd-727c-4850-9515-1743af8e8c6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbd34fa-4005-4579-9184-159e4b20e8ff", "sighting_of_ref": "indicator--ef0f5934-0971-4173-b79e-de243bc0c0a2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066a8742-7e86-4938-b538-f671a3503f16", "sighting_of_ref": "indicator--ef0f5934-0971-4173-b79e-de243bc0c0a2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f2a091-151c-40db-b80b-825668dc73b6", "sighting_of_ref": "indicator--d4aa48e7-aa32-402b-9813-fee945e0a94c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56deea4c-6790-4c12-8285-7a9e4c52ea37", "sighting_of_ref": "indicator--292d20de-b551-4b85-b266-79babfc2f8b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be9c5d7-6e73-417e-acbc-d895db769995", "sighting_of_ref": "indicator--acc75c93-7159-422d-9cf4-4eb19fe4c7ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c33629-d6a5-4a01-a529-78f8e3732c02", "sighting_of_ref": "indicator--5f8bbe44-e18d-4c78-a2f0-ee7684715e4c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5087acf-8214-487f-8b6f-49fdf5e915dd", "sighting_of_ref": "indicator--943a56cd-7ce5-4dad-a5dd-66e0b4498f1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8fc691-cb0c-4c6c-affb-5d647ecf33ae", "sighting_of_ref": "indicator--9a18511f-07fa-4bb0-b0ef-49021a1cb98b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3623ac4e-14c7-4188-ab13-47e85524efb8", "sighting_of_ref": "indicator--0a373fbe-3123-4220-a817-1ec196fa8512", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2542019b-28d2-477f-a431-d2357c91ecfe", "sighting_of_ref": "indicator--c2113841-1e1d-4185-a17c-23fe8e6672c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b71ee3-eeef-4d3a-a1f0-736bba08bce1", "sighting_of_ref": "indicator--fb452977-3970-496c-b46a-7b29fec84809", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eeb43e-a1f0-4abe-8fc3-1882c9a963e1", "sighting_of_ref": "indicator--2fa09584-ae93-470a-a838-e44e081b608e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6df322e-51d4-48ad-8bbd-84c875165972", "sighting_of_ref": "indicator--412f6e87-452f-455d-a684-5f2ccf5aa2c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4151f3-b2b9-4a38-b9a0-8922d351dc29", "sighting_of_ref": "indicator--7cd11fcd-ca74-4f82-88da-bae59c06d902", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cd32bc-f699-4267-9582-6bc248391fb7", "sighting_of_ref": "indicator--b84380fc-84ab-4726-bf80-249531e0d4db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ad44f5-b632-4869-aa68-f07b4241b3d3", "sighting_of_ref": "indicator--2031d01c-c89b-4055-8101-f55505b150f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c499bb-4f52-4225-a1fd-576ffbc6edcc", "sighting_of_ref": "indicator--94df6b2c-4fe5-4b14-b38b-70471b771ef2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4adb700-bf62-4789-912d-7be14ef705a6", "sighting_of_ref": "indicator--de545a9b-35b9-4138-80b8-64be8ad9d71b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67736d61-4839-4f49-8466-d5bcdcd042c9", "sighting_of_ref": "indicator--d709ae2b-b604-403d-b1d7-6ffe302452ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b28e29c-e1a1-4220-ac37-78c66db93643", "sighting_of_ref": "indicator--cda71b25-8141-4614-a625-cff04f938038", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c16816-4498-4717-baea-861be07ad7cd", "sighting_of_ref": "indicator--8d5fd7ee-79d2-4375-a386-5b1029fbfe6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bee170-dd01-4d1e-a4b8-b75a5471a94c", "sighting_of_ref": "indicator--8d610473-a22d-4cdc-ba07-387d2b6bba86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566e0c29-cf74-4034-9198-7da2f71d4dc0", "sighting_of_ref": "indicator--00d97094-d82a-4fb3-9cec-9f7353acf95f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9177231-8b9c-4ffa-8e95-83f9df33c982", "sighting_of_ref": "indicator--492cae5c-ca3d-4b0a-88bb-f623012d227b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d82013b-00c1-45ee-ae66-ebb73123a15c", "sighting_of_ref": "indicator--14c7a77d-aef9-4a95-86d0-ba09e4e652c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e57e914-075e-498a-a416-c590bc74dced", "sighting_of_ref": "indicator--5d2e1d6e-2ea3-47a1-8997-d1ce0b6f4bf4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee75855a-d644-4a7d-a987-de34fe9041c4", "sighting_of_ref": "indicator--50099109-7e72-42bc-93b1-399e3a0857bc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2683ab69-5031-4400-baa9-9da23047cdb2", "sighting_of_ref": "indicator--655e9d3e-4566-4457-a6aa-ca501378ea32", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21eb5032-c783-4afb-8078-b543ef53e09c", "sighting_of_ref": "indicator--29b8dff8-c1e3-4135-b017-818a6308c101", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e02056-4a6c-490e-bd9a-23fd30aa25ac", "sighting_of_ref": "indicator--cf974c5b-9d89-4852-a133-b302cb5b5971", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5f3be1-718a-4d04-806d-b8548599e5e7", "sighting_of_ref": "indicator--e8bf0a00-c950-4d2a-8bbf-8e5486556cf8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd362097-d315-41ea-a67b-bb14c2672c22", "sighting_of_ref": "indicator--1266bd96-eefd-4a12-ad52-f42ba8515b77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55240d1-ecfb-41c4-81f6-54aad387465d", "sighting_of_ref": "indicator--35c69159-e4f6-4b53-869c-5b2b195220d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9887db-1963-4b2a-a9c3-675142af1d04", "sighting_of_ref": "indicator--ea224e76-d9d9-4701-8b24-f14f02b2d153", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072252e2-a95a-493a-a1d2-a1b3ec747db8", "sighting_of_ref": "indicator--ced8dcaf-1891-4076-925c-1da32ba464a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5061d4b-f6ef-4612-b42a-403db0315742", "sighting_of_ref": "indicator--0472af8d-1116-4a44-9893-736f2a957b39", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed4944a-af4f-4aba-988f-e864001eae21", "sighting_of_ref": "indicator--7d771794-bc3c-4f52-ac9f-a1db142c8fcf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a26f9c5-9f61-43d6-ab0e-bf78270aba59", "sighting_of_ref": "indicator--eae993d4-8c68-459b-b716-522347c7041f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408c9558-c4b4-4e3c-b03f-d9b9933bf77a", "sighting_of_ref": "indicator--3a970069-da0e-4acf-b62d-ff7a8d35b9f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198322d1-faeb-44a9-aa52-891a435b74e5", "sighting_of_ref": "indicator--77227cfa-935b-470d-8e93-1b4ba7b2ee87", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0253b9-70aa-4b5e-8482-8fad69826fea", "sighting_of_ref": "indicator--a9d57b49-cc43-4f5e-b8fa-398819d8be79", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b42f538-e1d4-486d-bb44-2daf47b26067", "sighting_of_ref": "indicator--7b39c2cb-9e51-4efe-bd4d-50f5ab83bd16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82eb467-364d-40ae-a725-1e1c48c7a6e5", "sighting_of_ref": "indicator--cc7bfe5e-3dab-421f-b628-4d7cb3b42f73", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2421c404-dc94-4432-b1dd-df13afa455e7", "sighting_of_ref": "indicator--6a54f408-b9de-4ec2-ab86-3945e4983e46", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc6be91-c844-4d30-a40c-a925407b6aa1", "sighting_of_ref": "indicator--6a54f408-b9de-4ec2-ab86-3945e4983e46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d0617e-bc0b-44e2-a081-953ce79cc04f", "sighting_of_ref": "indicator--d673071a-fc5f-463a-88cc-20a517271c2c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efc137f-96d4-4a33-a175-7195ba382aa6", "sighting_of_ref": "indicator--3f065fa3-a176-42e0-9ad7-50943dd7c618", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b71e48-5cfc-4b0f-b207-3dd35222f3af", "sighting_of_ref": "indicator--d0cc6f22-42de-4fbb-9f11-3fb9b82622e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fcf68c-a321-4157-a500-307d7883748a", "sighting_of_ref": "indicator--4a291881-c6b1-4094-9669-b4617f4f640a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6df5de-8086-4a74-ba70-3d1a42137f2a", "sighting_of_ref": "indicator--59b3466a-9142-468c-8d6a-c336bb763ea2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f3bbb1-ab0d-4f54-b0fe-54d4c1ae452b", "sighting_of_ref": "indicator--ded8040c-6407-4a91-b43c-904043c15a24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a4b6be-4ead-4583-8fb2-a0d118e48eb4", "sighting_of_ref": "indicator--0201c91a-841d-4b2b-96ef-582c98109658", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5100251f-6e23-4e26-8374-8364a730ff05", "sighting_of_ref": "indicator--5d2cef1b-94a1-4e4e-ba3a-19018fc2e787", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10afd82-a3bc-4feb-9b11-6b3a0415e65f", "sighting_of_ref": "indicator--90cebfc7-2500-4ed8-aea2-8e01d14169ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cefebd-3b1b-4808-9aa7-80fbe9c1ae91", "sighting_of_ref": "indicator--c2a4fccc-ee4e-47d3-9d22-ec87df222acd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cb2e6c-3e88-4dd3-8bbc-cf57477ccb3a", "sighting_of_ref": "indicator--ed3d7ef2-5e82-44e7-888a-61003c4ea198", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a01c149-8868-4b7b-8fa7-da3a463035d0", "sighting_of_ref": "indicator--abf75a9a-fc07-4dc6-b539-0c6f31cf097a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d48d9fc-13e2-42b9-ad95-51cf7d04b0fa", "sighting_of_ref": "indicator--172ee7bb-3e02-449c-9126-2e2c4e4696e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caea8d7c-ad70-46b3-b59e-f11242ff1764", "sighting_of_ref": "indicator--0d8d99e7-e1bc-4319-ad36-a48eb62f5c7d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81aab712-6b64-45f1-8ee8-55ab91e7702a", "sighting_of_ref": "indicator--0d8d99e7-e1bc-4319-ad36-a48eb62f5c7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e19ba50-a02c-430a-aa47-71383bd1ed91", "sighting_of_ref": "indicator--e261b028-0bc0-4d4d-b867-5cd24943f477", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b87bc6-205e-46fb-9c0b-2e2e89c9fa7a", "sighting_of_ref": "indicator--be4b1fc0-3f78-4165-9912-ae9f3bc313f8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88323778-881e-4ae8-9e3e-0b81065427db", "sighting_of_ref": "indicator--d2846caa-c769-4441-a873-0865a772abb1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ea2d57-7ceb-427c-bc83-4059eb945ebc", "sighting_of_ref": "indicator--2782cb74-3374-40a6-a871-e452d4aad907", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850cb549-38fa-4fc5-b6b9-278b3d9bf3ac", "sighting_of_ref": "indicator--acda6c2f-1042-4912-8958-d6042303aee1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ec43f6-6b1c-4904-9caa-3130723afe58", "sighting_of_ref": "indicator--10febdf6-bb88-449a-a494-9c2bcd179d08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387f14a7-5232-413f-b503-ef62a464c9bb", "sighting_of_ref": "indicator--0fe6f5da-9cb9-4191-aaff-173d41492e1e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631d5ef0-e10f-433b-8172-db32a1a5c578", "sighting_of_ref": "indicator--28a1eaca-4094-4c4e-bd8b-72e17c38465e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1667f854-a3a6-4ee5-b92e-65f25bad3f27", "sighting_of_ref": "indicator--06331203-b9d9-4fa8-876f-624f9f9c94f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a68548b-e5dd-45dd-bdca-49c1691263eb", "sighting_of_ref": "indicator--01b94bf5-a2c7-4368-a68e-aee4a1bbfa1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444897b4-d619-4718-9d46-c2a857661114", "sighting_of_ref": "indicator--a38ee569-bf4b-426d-8d57-f5af298f60e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83b7715-a57f-42dd-a80c-e672e2bca961", "sighting_of_ref": "indicator--68d70eb3-dc4d-49d4-bd4d-5f2f35118fd0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c5120a-16fe-46ec-a938-6baae61b27e9", "sighting_of_ref": "indicator--86ef8b5b-4cbf-4393-8c21-70da1510fbd9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fad8e5-86e0-40d2-b63d-9e5d7e7262c8", "sighting_of_ref": "indicator--cc209f58-4933-4d9a-809b-c35dcadcae79", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9421cda-f441-4d52-a5b4-dbd5f95b4cd9", "sighting_of_ref": "indicator--64f8063d-9860-41e7-b46b-e2d22a8c4e62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76637bf7-8eaa-446f-a56a-da707d9b6588", "sighting_of_ref": "indicator--6fb9cb90-b693-4ba4-a062-f00265ed12c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67722219-7c0f-4da2-8506-0155b70941e7", "sighting_of_ref": "indicator--57b2e59e-8690-49f8-a3df-6ad0c40abbeb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bbb13e-a0e3-4050-b346-0956b0990348", "sighting_of_ref": "indicator--4c379fa9-c0bb-44ee-8940-df6adcb57ded", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c147d950-b25b-499f-9909-e1de14b5122d", "sighting_of_ref": "indicator--165c528a-a954-4479-9fb2-cb18e0702309", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc30dd66-6d2c-4a0e-9449-83d7c20b3141", "sighting_of_ref": "indicator--b2450cf3-21e7-4adf-93c4-5f007cbbdb6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc18c262-601d-4276-bba3-c7d9bcf8e4bb", "sighting_of_ref": "indicator--20fc79e1-ed68-4379-819e-42de8de8ccef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3d455c-1e46-490e-b003-d21acc980909", "sighting_of_ref": "indicator--6e6f775c-c6e1-4397-9b9a-82f93eeb49b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d5d824-40e5-4c41-892d-0efac866b9a6", "sighting_of_ref": "indicator--c04e393e-5768-48f8-a1e6-05352fdd6179", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5680834-30c3-4a0b-9e8f-f3d7b26ab480", "sighting_of_ref": "indicator--21d1bc86-3499-4a25-a04a-2908a6c347ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2a5764-e9fa-4c59-af3e-0204f6c68d2e", "sighting_of_ref": "indicator--313a4921-fa89-4d32-980c-d6623b6e1f68", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2eaeb8-9881-4912-b122-c9607c6eb497", "sighting_of_ref": "indicator--592f9580-c1a8-42cb-9523-b0e7fb8f314b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da93872c-911b-4d13-8cac-bfe7c3225d7b", "sighting_of_ref": "indicator--d0643bc8-786c-4c3d-bcdb-aba0f2d5ab9b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3d940e-6d79-4673-97b5-954962c81703", "sighting_of_ref": "indicator--ad38dfd2-c0c0-4bcd-8e09-b7a6325d696d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511f8bcb-a977-413f-bc43-0b0552291a96", "sighting_of_ref": "indicator--0020d618-62b4-41a3-870b-b5f0e4aedc3c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ec2d65-e1be-4e31-a296-166f029cebee", "sighting_of_ref": "indicator--e4a9aeb5-53ec-4c42-843d-881385ba62f3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa80307-dbbb-4c25-917a-c6094bbb71e7", "sighting_of_ref": "indicator--a09e9029-a3e4-476f-9680-14c2300d97ce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0e32ca-6cec-4d9b-b8d7-62887594129f", "sighting_of_ref": "indicator--bbdc185c-4423-47af-879d-714645d0f67a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639f68a-12c4-4fb0-85a8-47499febf86e", "sighting_of_ref": "indicator--25a646b3-8f5d-4bec-93f4-744e9f8774cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aa5748-cf25-4312-a365-0f7c3ad852f5", "sighting_of_ref": "indicator--3b09babc-1852-4893-8a7a-36140f29f339", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9d08cc-2b54-4e27-a095-c1c8b7441622", "sighting_of_ref": "indicator--3b09babc-1852-4893-8a7a-36140f29f339", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2645a00-1037-4e6e-b4b5-6c80aed50e9b", "sighting_of_ref": "indicator--39356062-2102-417a-b489-6033912803fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f14509-c4a6-453d-99f4-e3e9c2728e80", "sighting_of_ref": "indicator--6295a544-2740-4c01-8e38-7c47fa2cb9bd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8fbe35-7d23-409c-a4f2-f4535dd42d88", "sighting_of_ref": "indicator--730a233f-fec5-46a3-a707-81c26c101f46", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2fffc0-daf3-4b24-b99c-4f5fb42d7f8b", "sighting_of_ref": "indicator--a9f708e9-1a39-4297-940d-6e9c8373b63a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a0c466-be13-4efc-841f-f34938d3f9d6", "sighting_of_ref": "indicator--3523775f-840e-48c8-ad70-04bc455f6209", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15353b0-3725-46aa-b6bc-e941f2608bdd", "sighting_of_ref": "indicator--e4542366-44d1-418e-a630-863c8d0f5e76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0ca75e-370b-4ab7-8a83-ebf316efed3d", "sighting_of_ref": "indicator--412903f2-34f1-4222-af9a-3372a336daeb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc2f27a-2072-44af-87f3-2b777822ff84", "sighting_of_ref": "indicator--48a3c6d9-e09e-4f13-bb73-b5b864565b9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b08486-f0d4-40e6-ae9c-6b50d2105512", "sighting_of_ref": "indicator--49d70eb2-1ebb-4919-b8a9-b27c89b67d51", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4077bee5-54c3-4d7e-9f4c-eb7ddc1da90c", "sighting_of_ref": "indicator--ff5db483-2ede-495d-826c-feb978bd56dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382e9f27-b62e-43e1-bc9c-dfc5575524e5", "sighting_of_ref": "indicator--ba5ef4d7-2939-41fe-b2c1-365051b6a0af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67e2b05-9b62-49f5-ad69-bcc76b33dd66", "sighting_of_ref": "indicator--bb33e135-95d5-4ccb-8e4d-da020b5e2b34", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79467c82-e216-4d8e-a744-616e885d1465", "sighting_of_ref": "indicator--ea74371a-8b8f-4f48-8007-564749d41fc4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0b82a4-3c60-4988-bd97-6b12ddeef97f", "sighting_of_ref": "indicator--a2705ed1-76b4-4226-9736-f695e036fc02", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e95c56-b8bf-466c-bb7f-91621e9b5c9c", "sighting_of_ref": "indicator--b9dbe572-64c6-4e8c-a371-6338265b9fe2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb80d79-0554-49c3-8507-672bd36043a0", "sighting_of_ref": "indicator--f374c37e-31f8-448f-84ec-a6be66c0e57c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051fc97f-119a-4148-a5ec-a1c08b3c6795", "sighting_of_ref": "indicator--1ba8aa0b-ab25-4fa7-96c3-070ce4d86dc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20642b52-d138-4969-9e22-a15c5773f937", "sighting_of_ref": "indicator--38176c56-4f19-4258-8cf9-3bec21f8f71e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0628a481-f24e-46ba-9def-84a53e6844f2", "sighting_of_ref": "indicator--13dafe3c-7c75-4a09-ad46-8a46b44b9ee6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e76cf27-f7ad-4b35-9d27-8e7b65407e99", "sighting_of_ref": "indicator--db9dc1c4-50df-4c20-9b7f-9c0970a316f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50721479-731a-4c02-82ff-1cf5a57683e1", "sighting_of_ref": "indicator--b294388f-083b-489f-b325-01287956cb4f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e461c4-e34b-408a-bc83-edf9d152d02e", "sighting_of_ref": "indicator--b294388f-083b-489f-b325-01287956cb4f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3999c8cb-69d5-4726-ac12-80044a1c1aac", "sighting_of_ref": "indicator--284c2631-2365-45c7-883e-550668c3566c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59df6a5a-5bd0-475d-8123-ca47f5b5f0c9", "sighting_of_ref": "indicator--284c2631-2365-45c7-883e-550668c3566c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae21aa4-5789-497f-b6a4-e5bf3a98146f", "sighting_of_ref": "indicator--9f259901-e24c-46e4-83d9-a293cabf254f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017b685d-e137-47be-9208-b78fc9d3bfc4", "sighting_of_ref": "indicator--06067af2-488a-4d04-b342-abe046d471b0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7db5a3-1863-461c-a1f3-c2ac010d5427", "sighting_of_ref": "indicator--0bd9dc2a-52ec-4c31-978b-1dd347da099b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56524f1d-305a-46e0-b1bd-072522a3850e", "sighting_of_ref": "indicator--74cd66b3-c461-4a24-9d55-6213a2635564", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975e2d59-db6a-4f98-b98e-4202101f97ff", "sighting_of_ref": "indicator--ddb81b0e-d492-4818-9ee2-055d02d9fdfb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4c5bb1-7469-4037-9f82-73499d1a8be2", "sighting_of_ref": "indicator--4f57d744-22b1-4be3-b6c1-abd8e6d450b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e417f3-304f-454d-a7f6-a47bea0aae19", "sighting_of_ref": "indicator--2974c7a0-0bd1-41b8-9362-a2db6c3cda58", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f4d8f5-8694-46c7-8d29-da187bbf29ae", "sighting_of_ref": "indicator--156593ee-4ecc-411f-93b6-fcdb233756c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c332c778-b6d6-4867-8cba-1ecce4340b02", "sighting_of_ref": "indicator--b54cab05-9e5d-451e-92aa-64b276aa3009", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e682159-b9ea-47c8-977d-4b59b54b5b20", "sighting_of_ref": "indicator--ce8001d0-239b-4a41-980c-146b1b7caf88", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637f59ee-2936-4d95-9df8-078581545e23", "sighting_of_ref": "indicator--5158bd3f-0de2-40f3-b6bf-5d525150bfda", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6557e79-d0ca-4f32-ad9d-93984cbebcd3", "sighting_of_ref": "indicator--49b63797-275e-461f-8c69-8d0946a5ccad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11ab565-b205-4270-b0d0-98e00a34dc4e", "sighting_of_ref": "indicator--0764b525-14b5-46b0-a561-19cf78c5bc95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84428e4a-4c14-4377-a43a-0821dc5aec84", "sighting_of_ref": "indicator--8eedbff6-3b0e-4e0f-bdb2-4b48d106ef31", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6164a788-9c51-4d01-b94e-57d54234bca8", "sighting_of_ref": "indicator--57d102dd-a414-416a-885c-569e9454b2f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0df1c8b-e05e-4e56-b7f9-0d0e8e46143f", "sighting_of_ref": "indicator--83797e68-4fe4-4ea9-a84a-b73a6c0a49fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fd6e24-939e-4067-b4f1-8703a24f1b97", "sighting_of_ref": "indicator--a105bd06-85ce-4f97-9f31-b86dcfbfd38b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228871e8-1a72-4ad4-aebc-760be8e65bf2", "sighting_of_ref": "indicator--8396533a-a2e8-4180-b0a0-ddc65cc8fb4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d387ffe3-b157-41da-8243-ef6e0d51e301", "sighting_of_ref": "indicator--d2145775-322b-489e-a312-2651185ca8d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37036f16-3778-4116-9c50-cf8bb28a6caa", "sighting_of_ref": "indicator--3eb6166b-cf19-467e-9881-8d9c5659de74", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d622ead2-c01f-469f-bc98-7e752945b5f5", "sighting_of_ref": "indicator--6440db90-e3b4-48f7-8857-81a278ffb694", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a2a1bf-34a2-4cb0-ad55-daf46c3bc22a", "sighting_of_ref": "indicator--aff35e86-bcb9-4f9a-ad0f-9311f8d96e80", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9650b564-3e95-47fe-b296-a4342e4b6e20", "sighting_of_ref": "indicator--16c895e1-c7bb-4395-9fa7-b7654180e12e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9e84ea-553a-4481-931f-5ca9398cf67b", "sighting_of_ref": "indicator--d1760e7d-37c0-4639-b6de-f3053af2fdd0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2269009-1fa8-409e-b773-725463506122", "sighting_of_ref": "indicator--9f3a0073-388d-42c3-8591-060985e4a313", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbb5981-525c-4d6b-9151-6082c13a28d2", "sighting_of_ref": "indicator--440fe4e3-d362-488f-9695-18bc7d002e16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8c0942-9248-411e-888b-c2cbf05738c5", "sighting_of_ref": "indicator--b75e904e-55ad-4625-b19f-86fa859c1ae0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a1b1e5-9f36-42f5-8eb0-f8f20985271d", "sighting_of_ref": "indicator--b75e904e-55ad-4625-b19f-86fa859c1ae0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff88a3de-7f19-421a-80a2-9ebe83ffd775", "sighting_of_ref": "indicator--29573aec-0724-4a92-8680-8c8c22254f74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996cd98b-671b-4532-93a4-26bf2be4759b", "sighting_of_ref": "indicator--75771f25-ec2c-428f-b52e-f69e7d3a71be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ecbb1e-046f-4d29-8e57-e056be154840", "sighting_of_ref": "indicator--3c8d0518-f91b-4092-a944-ef21aafab65c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d48288e-e38a-4652-a788-136cb01e8725", "sighting_of_ref": "indicator--e5fa0e53-faa5-4479-993b-f2f86dc94c8e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4941dd11-c953-442a-9770-38b5e1c87871", "sighting_of_ref": "indicator--cfcb0e86-8613-4975-86f7-5c6debe4913b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be29555d-e3b8-4f03-878c-1e35669bd520", "sighting_of_ref": "indicator--4075cbff-f543-4921-b36d-01d0a692b140", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b48036-2453-4720-800d-a9dda63befff", "sighting_of_ref": "indicator--4075cbff-f543-4921-b36d-01d0a692b140", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ff993d-b14f-4c87-bab9-e9042f5dc82c", "sighting_of_ref": "indicator--0323f637-4c8c-4db7-b251-e4ded73b31ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25183474-30dd-445a-8efb-3d5342500c7e", "sighting_of_ref": "indicator--472162d9-a20c-4c20-a596-7d94265c8b58", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6859b77c-99f2-4d45-b9a9-1e34a69991bc", "sighting_of_ref": "indicator--c3177fb4-20c3-4c02-9a58-60253e508c59", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239b031b-98d9-49b0-9853-bc29505decb2", "sighting_of_ref": "indicator--d6880fd4-463d-4dd8-bc5f-d1794a2f3548", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e631ee7-3c59-403b-950d-987f2c20af13", "sighting_of_ref": "indicator--16f2e4af-c19b-45f6-9b4b-f97ad9396473", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fbdc59-b08e-4ad6-8435-93ef44d84d56", "sighting_of_ref": "indicator--09df49f2-99ff-4140-ab67-27fe346acf43", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc84fbf-bb3c-4960-ab63-42e6bdd8b2a4", "sighting_of_ref": "indicator--919dd40a-0ba6-45c2-ad28-ba76e9141c46", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7b7593-a7a6-400e-90f3-5903ba3554f3", "sighting_of_ref": "indicator--e422a9b7-4e1e-4154-8baf-d1bbe49f2fbf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726f7a11-8320-4e05-a17f-da37492dcfe1", "sighting_of_ref": "indicator--fd6600d2-5985-4a6b-a016-755fde561486", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d06c82b-c558-4843-960b-2876164b4da9", "sighting_of_ref": "indicator--e03f3f87-4047-482a-9db3-899a30fd3600", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b32c435-eab6-4ed8-abc0-7342dccdedaa", "sighting_of_ref": "indicator--ee65acae-ec1e-462b-920a-985fb7c39e2c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9844725-29b0-42c6-bd3b-b9a9589ac015", "sighting_of_ref": "indicator--ee65acae-ec1e-462b-920a-985fb7c39e2c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e54478b-62ea-4c89-916e-66d2c1c02cb5", "sighting_of_ref": "indicator--c5e5c979-c768-43d4-bfde-d4a97080ef87", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e074e63-06bc-4ad5-a900-7cdd73f1513f", "sighting_of_ref": "indicator--c5e5c979-c768-43d4-bfde-d4a97080ef87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3b7d24-62a4-42c8-9da6-b3de65857779", "sighting_of_ref": "indicator--c1e5ce9c-04fe-4145-a3a4-e24db1da6f54", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c7dded-aa10-4dfa-b69b-cd7539617836", "sighting_of_ref": "indicator--cd8b6318-0390-4c72-a094-be261dad5885", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcfb763-9c08-4a93-8f80-83efa7fffc27", "sighting_of_ref": "indicator--5a09ffe3-cb22-4a7c-988f-ddb94ef5a859", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bc9085-4077-465b-839f-5f08309fa146", "sighting_of_ref": "indicator--4954b7bf-36dc-4de8-a2b7-3a0f840c4780", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710a193a-19d8-4067-8f79-6463ceea66e2", "sighting_of_ref": "indicator--0060d7be-ecd7-4fa0-8c5e-b541b28d174c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ef22a7-b3e3-4d62-a81f-6bc301ccb70d", "sighting_of_ref": "indicator--0060d7be-ecd7-4fa0-8c5e-b541b28d174c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be602d55-808c-424a-aa06-198ca67dff75", "sighting_of_ref": "indicator--6f751580-2e5d-4d4c-a77d-a8beaa007551", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6cc084-11c6-43c4-b380-ec68cf9dc06a", "sighting_of_ref": "indicator--6f751580-2e5d-4d4c-a77d-a8beaa007551", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cadb72a-f29b-4542-ad83-bcd5419db615", "sighting_of_ref": "indicator--4fc25ebb-54ab-49b6-b63f-4b9594371572", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef4fd51-7abf-459e-b3a2-e59e0dd74fd1", "sighting_of_ref": "indicator--6fba674e-f759-4113-8417-08e8198f74ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a7e8c9-514d-4d4d-9f50-8b5dda8df652", "sighting_of_ref": "indicator--1f17a44b-e56d-448f-9e08-3e62fab7020e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8133bc66-7913-488a-b016-8c638610c6ba", "sighting_of_ref": "indicator--29c58dce-2af6-402f-a3bc-9747ecaeb0ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cb1e4d-5801-462f-b9a1-6435fe4fd7da", "sighting_of_ref": "indicator--6d437773-be69-4877-abd5-4c78d95512f5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a399427-1389-485d-ba9f-e4fa7a66e963", "sighting_of_ref": "indicator--cc74574d-bca1-41b8-a1e4-fa7476355d2b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ca2af3-684c-4df6-a14f-f81121a6aee1", "sighting_of_ref": "indicator--6780ae53-5843-47e4-a7cb-4791c9f817bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0acc7b-78c4-4fb9-a0f9-fad38c96c9f9", "sighting_of_ref": "indicator--5d22c1ab-22b1-4da9-b00f-92328ff15588", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8c38f1-1010-4a8d-938c-d7fabaad9713", "sighting_of_ref": "indicator--b32b8c23-bfa8-4c77-96b4-a282bcc25386", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461a21b3-0763-486f-a30d-ad36c4fe9c9c", "sighting_of_ref": "indicator--20383105-1f15-4b39-9682-7b4630705853", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bfea3f-a196-4584-be43-7cf1e89e68b9", "sighting_of_ref": "indicator--20383105-1f15-4b39-9682-7b4630705853", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd126519-ddf6-484e-8e9e-2d76a1f5b57c", "sighting_of_ref": "indicator--20383105-1f15-4b39-9682-7b4630705853", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71299323-1733-44b0-8307-43ff4d760da8", "sighting_of_ref": "indicator--4b133d85-f086-41aa-bf48-504236e797dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f39b9d-ac96-4b4b-bc13-187d1cca43c9", "sighting_of_ref": "indicator--e0473cfc-317b-4dbf-be07-edd38edab6a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40757778-d460-4b34-b938-5e7cf8d6b9c5", "sighting_of_ref": "indicator--5e7cbe26-890a-4916-b6ce-a28dc0632f7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e739d988-8c70-429f-a5c5-20f4b67a3801", "sighting_of_ref": "indicator--38056865-3da9-46ca-a569-973f8f12af53", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ef4a10-52c5-4025-b42e-a2a719dbd13d", "sighting_of_ref": "indicator--07275767-73d0-4b17-9787-19a7260812ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bad387-8510-4543-bdc8-889b1fa85599", "sighting_of_ref": "indicator--2cc40a85-fdd7-4723-b92b-8e64396c8713", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9ecaca-4815-4464-ba39-1ac96b6582f5", "sighting_of_ref": "indicator--e11c4b14-b057-4c9a-ba67-2f610a54dc2c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2764c4-68ab-4a5a-b8f0-c7cf62b86a06", "sighting_of_ref": "indicator--b769c184-1300-4cd5-9718-e15e18ac9817", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece3640e-61ce-43be-9a64-f6a7c3fdce49", "sighting_of_ref": "indicator--b769c184-1300-4cd5-9718-e15e18ac9817", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42e549f-be5c-411c-9a0d-308114532ec4", "sighting_of_ref": "indicator--b769c184-1300-4cd5-9718-e15e18ac9817", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2d990c-54e9-444d-8896-5a4d87840517", "sighting_of_ref": "indicator--976f82d9-c827-4f93-a8e5-4c7b8954c83d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fe4a1f-e313-4276-91f9-581d5fe53b72", "sighting_of_ref": "indicator--976f82d9-c827-4f93-a8e5-4c7b8954c83d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d88fa25-714d-45f1-8cda-d7c6c2901d6e", "sighting_of_ref": "indicator--976f82d9-c827-4f93-a8e5-4c7b8954c83d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1c6ed2-add8-4a15-b6dd-a9f9cb5951fe", "sighting_of_ref": "indicator--f75434bd-a598-4acc-8894-6132be8fa392", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b3741e-52ed-421d-8b27-f760298cdb84", "sighting_of_ref": "indicator--f75434bd-a598-4acc-8894-6132be8fa392", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03ad343-bfeb-4c05-95a4-ebf375a1f1b2", "sighting_of_ref": "indicator--f75434bd-a598-4acc-8894-6132be8fa392", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2e2b64-343d-4c20-b9f5-cf14537bae4e", "sighting_of_ref": "indicator--d18b8e75-f961-4f7e-8ecf-5d73519e6bde", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5414ef6-870b-4dbf-92e6-1c73d169dad5", "sighting_of_ref": "indicator--d18b8e75-f961-4f7e-8ecf-5d73519e6bde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a9b634-7d21-4925-bbb1-01ba6d5b08ec", "sighting_of_ref": "indicator--8e7ef968-3362-4a07-b6dd-07fdf048e337", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f945b81-c56a-4418-b3cf-00d737c72b4b", "sighting_of_ref": "indicator--8e7ef968-3362-4a07-b6dd-07fdf048e337", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337a76c3-1d21-4973-9ff7-901fc735bc65", "sighting_of_ref": "indicator--8e7ef968-3362-4a07-b6dd-07fdf048e337", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f7b95f-7304-4eb6-a6e8-c71b3dfa0a3e", "sighting_of_ref": "indicator--3d81fb0a-fde4-4678-9041-e104d4929e32", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd3d5b8-ba0b-4e65-9b71-aa1bb5b45fce", "sighting_of_ref": "indicator--593cbf35-7f04-4835-852d-175a01f15809", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7d7885-22ca-49b8-99cf-0b1a1b17f081", "sighting_of_ref": "indicator--f4646191-e53d-436b-bb78-add35221cb5c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f137e8f9-7d5a-4b2b-b7de-0894783f1e62", "sighting_of_ref": "indicator--f4646191-e53d-436b-bb78-add35221cb5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4531c060-5a41-4bbe-936e-8847261d2580", "sighting_of_ref": "indicator--f4646191-e53d-436b-bb78-add35221cb5c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf27a851-0a0f-4197-b54f-78b4a6eabb25", "sighting_of_ref": "indicator--8437b969-3287-4abf-8262-57248b496045", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9b7eaf-9936-4555-90cf-170f45cb973f", "sighting_of_ref": "indicator--8437b969-3287-4abf-8262-57248b496045", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e630f5-873f-45de-8fbe-639b2ee6bf63", "sighting_of_ref": "indicator--8437b969-3287-4abf-8262-57248b496045", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df82255d-9d93-4b81-990a-0230e2beb681", "sighting_of_ref": "indicator--8b421588-aaa3-49a9-90f5-95aa644744f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ae6be7-27a7-4384-88d5-c0d3f9106ef4", "sighting_of_ref": "indicator--1aaed888-decf-4f42-be52-aaefdbb6d0dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23461b93-564e-47df-8d68-49b58c241ce0", "sighting_of_ref": "indicator--1aaed888-decf-4f42-be52-aaefdbb6d0dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c518d24-faa1-4d83-86d0-24d6658ddc75", "sighting_of_ref": "indicator--c1cb968e-e59b-4846-b366-96a34baa3bdb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f80720-992f-4cd5-a184-b0bb38627708", "sighting_of_ref": "indicator--c01cc31e-d754-470e-9fed-b6f8264516ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76eb6fed-b463-4ca7-9425-686f60a9c060", "sighting_of_ref": "indicator--4de69db5-6f97-47e1-b9b4-124c8cf37b20", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c451bc09-3429-4c4d-a9ed-4c3955a401ef", "sighting_of_ref": "indicator--22f7228d-aa8d-47e9-912f-127fefdba66a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4898df-1a52-4277-b2aa-5630201abd93", "sighting_of_ref": "indicator--61a2f607-6d7e-4668-913d-b6ebee79891c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3492b04-a743-4132-9d73-b1c84d4da109", "sighting_of_ref": "indicator--ec91476a-152b-48db-916a-ca93524ce712", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebeda14-92de-4f3a-9b2f-a03bf27c71d2", "sighting_of_ref": "indicator--ec91476a-152b-48db-916a-ca93524ce712", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb2270b-1476-4dd1-835f-f2df582de7e6", "sighting_of_ref": "indicator--a93c0bdd-04c1-4464-ab96-183cdba3a86d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10067180-902b-47c3-bb50-1831745b53ba", "sighting_of_ref": "indicator--a93c0bdd-04c1-4464-ab96-183cdba3a86d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158d87d9-ee39-42d3-b24f-4ebdf3f3711f", "sighting_of_ref": "indicator--6fd33130-f55a-48b4-bca4-10a56ac9ffa3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0f2c89-d3ab-4daf-b20a-a78797296ebf", "sighting_of_ref": "indicator--6fd33130-f55a-48b4-bca4-10a56ac9ffa3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6094f3f8-059a-4638-9089-34be9043299d", "sighting_of_ref": "indicator--8ec1bb31-ae41-41a5-9f2a-27c81fc89914", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825d4cf6-ce36-4dae-9f70-d781a6833464", "sighting_of_ref": "indicator--8ec1bb31-ae41-41a5-9f2a-27c81fc89914", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8bc95c4-7599-4fec-9de5-2f1361e042e2", "sighting_of_ref": "indicator--8d3a2882-66ca-4a6e-9946-d95ff41aa689", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c710b138-edba-4cab-a11a-73b7526f010d", "sighting_of_ref": "indicator--8d3a2882-66ca-4a6e-9946-d95ff41aa689", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b953360-e61d-4ca6-b340-3bb119581edc", "sighting_of_ref": "indicator--81141cae-56b1-4519-ad3c-c82b4ccee4e3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e743fcc-4064-4beb-9f58-53ca5e92728c", "sighting_of_ref": "indicator--81141cae-56b1-4519-ad3c-c82b4ccee4e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f37b81-c234-46b4-8473-98436322b6a6", "sighting_of_ref": "indicator--c09b544b-b2d1-4d9b-a499-cc58e985c8cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4265205e-b978-4575-aeba-e1681c476a30", "sighting_of_ref": "indicator--5d26816d-b880-4a91-858d-123f94fbf48c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff526d34-04bd-48fc-b2bf-471afe9a2fd1", "sighting_of_ref": "indicator--5d26816d-b880-4a91-858d-123f94fbf48c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa360789-20a2-480e-8595-ae5c3b91e6ed", "sighting_of_ref": "indicator--5d26816d-b880-4a91-858d-123f94fbf48c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d32517-e8d0-46ac-9911-16a01cfc7c98", "sighting_of_ref": "indicator--4b3668fe-2a9b-477a-9d72-354da25d3ea1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49912fdb-642d-4d4b-b4e1-e5f651dd18be", "sighting_of_ref": "indicator--4b3668fe-2a9b-477a-9d72-354da25d3ea1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f04d0cc-1162-4d19-823d-031d3dbf7a3f", "sighting_of_ref": "indicator--62d0bdc8-7c3a-4377-ba22-c2dacdbbc50e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6554a03-eb63-4a85-a839-56641eb62c93", "sighting_of_ref": "indicator--f396f798-727f-41f0-bd77-38a273c2d462", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37c46c7-e14e-4b07-b14d-31d906290171", "sighting_of_ref": "indicator--75b15abe-ad1f-4083-8fa3-42fb64e63567", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94b1b24-06dd-4613-aa69-47707227fa4d", "sighting_of_ref": "indicator--75b15abe-ad1f-4083-8fa3-42fb64e63567", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e17900-9932-486d-947a-3e8472cbf839", "sighting_of_ref": "indicator--75b15abe-ad1f-4083-8fa3-42fb64e63567", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e2bc80-d980-4cb2-ab06-868e55f446e1", "sighting_of_ref": "indicator--134192c9-8644-4507-9485-855c601557ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d36ade-b852-4a15-9c06-3357597caecb", "sighting_of_ref": "indicator--134192c9-8644-4507-9485-855c601557ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc8076b-6a3a-4848-bfe5-56e77797727b", "sighting_of_ref": "indicator--134192c9-8644-4507-9485-855c601557ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c3d549-6d51-4fec-8adf-c7eb6958a18f", "sighting_of_ref": "indicator--bc4d4e3a-5239-46a6-ac1c-b792dd486ac1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe5947a-2d16-4630-8690-bd8459308e5d", "sighting_of_ref": "indicator--5401401e-fa62-4bdd-bd73-9073d716d237", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a391121-d02a-420f-b3c5-b2a9db5c9748", "sighting_of_ref": "indicator--1139bd50-ca78-4ed7-9b38-9fc18b638893", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72ff9c3-75f4-49fc-b1df-399b26fdb2b0", "sighting_of_ref": "indicator--bd59a32d-53ea-4d0a-9c6f-4c38a1422ae6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3013bed-5c76-40f4-9154-8d4adae74956", "sighting_of_ref": "indicator--9786fe81-a676-4d83-a7d2-779075f7ba99", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6159bad-c96a-43ab-a3aa-e5d50c3d2403", "sighting_of_ref": "indicator--9786fe81-a676-4d83-a7d2-779075f7ba99", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec72e7d-c1f3-4467-bd7a-121657a26744", "sighting_of_ref": "indicator--3579ba71-03e4-495a-a61b-d698023eefbc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94ed193-b565-4b5f-ab14-17ccf6a062a0", "sighting_of_ref": "indicator--e78c1125-e4fc-4ca2-9412-8887fd13c9c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7294488f-7282-4604-a81f-2bc6f839f917", "sighting_of_ref": "indicator--e78c1125-e4fc-4ca2-9412-8887fd13c9c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56081b93-9618-47e4-9d2f-3369e22e00f5", "sighting_of_ref": "indicator--e78c1125-e4fc-4ca2-9412-8887fd13c9c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafa6a08-d5f9-46d6-81c5-282087a183c0", "sighting_of_ref": "indicator--1182e22b-b8e0-4940-a1c9-5f3dad8ae4a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97fbb82-444e-4b94-be51-15e0a8f6ae9e", "sighting_of_ref": "indicator--a546579b-3ca7-4468-b773-6b27b304f30d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407aa46f-164e-44e4-8a22-6a86a7091deb", "sighting_of_ref": "indicator--a546579b-3ca7-4468-b773-6b27b304f30d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627039c7-f55c-4bfa-8679-6c91aa3f7500", "sighting_of_ref": "indicator--99b7e8a9-b6d1-4571-a8eb-fc84d42b76c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d83c8cd-ff36-4100-8f37-0b5e20e43be4", "sighting_of_ref": "indicator--0e88c903-7353-4467-9c47-6f823a77946a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5faf6f3e-abd3-4855-ba2f-66cc5982ae1b", "sighting_of_ref": "indicator--3b630bfb-f7a7-405f-96ea-62d8c5439b18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43fba39-594f-457d-b13e-4659c60f9683", "sighting_of_ref": "indicator--0ca0a3e2-9582-456f-9bde-0350a488f630", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a546ab09-46b9-476b-9a1a-f3b21d606183", "sighting_of_ref": "indicator--0ca0a3e2-9582-456f-9bde-0350a488f630", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db2b2ec-3ed0-48de-994b-d10cbb4d1ced", "sighting_of_ref": "indicator--b3ed06cf-23c5-4705-b0d4-f04ec9ba762c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7690111f-3ef7-4dec-990f-fcaba512e0af", "sighting_of_ref": "indicator--0bd728f4-5765-48d8-82cc-e17bcdf578f0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d6ca12-c7cd-4cba-813b-fd2bd6d382cb", "sighting_of_ref": "indicator--0bd728f4-5765-48d8-82cc-e17bcdf578f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a479b604-8d03-45f3-9484-01e579e480d6", "sighting_of_ref": "indicator--dd60b079-f0fa-4f8d-8075-f17829393f8d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc379996-3e1a-42d9-bc2a-5153e6e4a074", "sighting_of_ref": "indicator--57c5c9a7-aa75-485b-8469-704cdec2975a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0db093c-8761-4a05-980a-04a419d570e2", "sighting_of_ref": "indicator--5cac42f5-3f3d-45d0-8909-90c73bb4cc29", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0c143f-9146-49e0-ad35-9cab933f2f0d", "sighting_of_ref": "indicator--5cac42f5-3f3d-45d0-8909-90c73bb4cc29", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b076f28-c9ac-4341-bb9d-58ae53ed9f9b", "sighting_of_ref": "indicator--481cf20a-89b1-42dc-a60e-cf2876cba1db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3dc7d8-3767-42d2-9766-d85d09bde8dc", "sighting_of_ref": "indicator--60689b45-0090-419a-abaf-6bef353fb7d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859b44b8-bb74-4fd3-8534-f4a93750fa88", "sighting_of_ref": "indicator--60689b45-0090-419a-abaf-6bef353fb7d5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c868653-1c92-4acd-a81b-cdbb2082fb75", "sighting_of_ref": "indicator--d630a74c-cbc2-493f-a5d7-4ce82b22f22c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606a800b-5b7a-4694-a59f-973440d797a1", "sighting_of_ref": "indicator--d630a74c-cbc2-493f-a5d7-4ce82b22f22c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cda25e9-7323-4955-a8a6-c840e9927352", "sighting_of_ref": "indicator--c50f2c26-e08e-4444-9836-f36dae5d586d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b4ada4-39ec-45d1-a036-a6b03820c52c", "sighting_of_ref": "indicator--45bc6993-d5bc-4be1-b581-bbcfae527db9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db489c8-e969-4df3-a543-51cf8525ae2d", "sighting_of_ref": "indicator--45bc6993-d5bc-4be1-b581-bbcfae527db9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda39e8d-fb20-4608-9262-109e090c4f82", "sighting_of_ref": "indicator--b4381bb0-c10a-442e-9ea2-91c5213bc1f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29223d20-9209-4b14-abc5-169363367f88", "sighting_of_ref": "indicator--b4381bb0-c10a-442e-9ea2-91c5213bc1f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5ff70f-c897-4aca-86c6-4c58bf0054e1", "sighting_of_ref": "indicator--87d78802-5419-415c-b10a-0fa6fa968b03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74872c7d-716d-4791-8a32-5e0eb1796dc5", "sighting_of_ref": "indicator--87d78802-5419-415c-b10a-0fa6fa968b03", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee06fdd-9bee-4cde-b16a-0290e6424d71", "sighting_of_ref": "indicator--0b91dd87-7d3e-49f3-998c-37fffbb1f640", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55da4ad3-8790-404b-bfd3-e2ed34bd6ec2", "sighting_of_ref": "indicator--f834cc88-47b2-4e5f-ae32-a395dea6d74a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e8007c-4c16-4e87-aac3-eaa14934042a", "sighting_of_ref": "indicator--17dc0c9d-1b54-43c5-8ab3-3fa39ea0e25c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199881fb-e5e3-4afd-bc21-228bc9c8decb", "sighting_of_ref": "indicator--217217a1-638c-40a3-bc3c-4456ee7d1112", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11a08e5-9309-448a-89bc-57e77ca4510e", "sighting_of_ref": "indicator--ad7bfb40-7330-40e5-b5bb-8d5a162f7d20", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf636c5-522c-4aba-a82b-6b683de02f5f", "sighting_of_ref": "indicator--ad7bfb40-7330-40e5-b5bb-8d5a162f7d20", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5356c96-8dc8-4563-86fc-4419adb35fa6", "sighting_of_ref": "indicator--8ded5004-1876-4bb9-9013-ef7891cb9218", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b214497-d8a8-4166-b025-cd97af9b72ed", "sighting_of_ref": "indicator--8ded5004-1876-4bb9-9013-ef7891cb9218", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825a5b4a-f24a-46e0-b26a-6dab5fca4d62", "sighting_of_ref": "indicator--1220f10c-16a2-4ba1-9401-8913677cf143", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d442b255-2ca8-477d-8e79-0de50d6e0a61", "sighting_of_ref": "indicator--22fe8793-459f-4c9d-a803-b996946a515e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3de700d-b728-47d0-b6ef-0cf5dd7005f1", "sighting_of_ref": "indicator--afee29d2-fa7b-4020-88b1-5aaba5b543e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec9cedd-44e6-4c0f-8e8d-9ae1bb6c6a88", "sighting_of_ref": "indicator--afee29d2-fa7b-4020-88b1-5aaba5b543e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e247f9db-1fa3-47d0-a3e0-aed5badc339d", "sighting_of_ref": "indicator--0071819b-8a9c-4d26-a0b5-5f84d4566aa5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552ba888-0711-4ccd-82ad-a110455d2e9c", "sighting_of_ref": "indicator--c1b189d8-ebed-45f3-9b81-f8f2956173ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bc8730-1813-4896-b642-d057cc418df9", "sighting_of_ref": "indicator--b8579ed9-7c78-45c2-9ed6-294da5deb7d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9609ef54-5975-44c7-ae1c-aea06e795ca5", "sighting_of_ref": "indicator--b8579ed9-7c78-45c2-9ed6-294da5deb7d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7953be8-a1e8-4bf2-9f88-71fee2805a03", "sighting_of_ref": "indicator--6b7242ec-96a6-484c-8be6-126f75c1012b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc3ac7b-d896-4251-9bad-294405c87f55", "sighting_of_ref": "indicator--6b7242ec-96a6-484c-8be6-126f75c1012b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc3717e-e094-40c0-bf49-5aab6d0d1c47", "sighting_of_ref": "indicator--a0b5eece-df35-401b-8d2b-1af7248c383f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71defbdd-de7a-403e-ae70-937a993e730a", "sighting_of_ref": "indicator--45f9e888-ea12-4fc1-a004-2ac161f084eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868f0329-40ee-4fec-8ebe-a687b7cc4837", "sighting_of_ref": "indicator--45f9e888-ea12-4fc1-a004-2ac161f084eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2a5813-6c32-4090-b705-a85fdf7bde50", "sighting_of_ref": "indicator--9f8e322f-3849-49d5-878d-d65735a76b6d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576dd936-1d65-479d-8dd2-8f7c718e3a82", "sighting_of_ref": "indicator--9f8e322f-3849-49d5-878d-d65735a76b6d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b4fc5e-de00-477d-9c95-ef19f0ce5161", "sighting_of_ref": "indicator--9f8e322f-3849-49d5-878d-d65735a76b6d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04d42f5-0ca1-4bb5-8d71-6c93db6ea8a2", "sighting_of_ref": "indicator--76580e64-4502-4bb7-85cb-75424766fd19", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e924a186-2c14-4c55-a650-16fead474cad", "sighting_of_ref": "indicator--76580e64-4502-4bb7-85cb-75424766fd19", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1630fa81-b7ce-4b0c-aeb6-3d32aa24557c", "sighting_of_ref": "indicator--76580e64-4502-4bb7-85cb-75424766fd19", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374a07a4-68d1-4511-af41-dc9cbd390fba", "sighting_of_ref": "indicator--7f0e4bf4-fc7d-4d94-b18a-66901a585c5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b68f85-059e-4614-b104-5af5b5da317d", "sighting_of_ref": "indicator--7f0e4bf4-fc7d-4d94-b18a-66901a585c5a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a845b415-bcc4-4f30-aa1f-873ac744e0e9", "sighting_of_ref": "indicator--7a51a0a7-4747-44b0-83f2-b832e6d7c820", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e45a598-a4b2-4898-aa48-33df695f2a49", "sighting_of_ref": "indicator--7a51a0a7-4747-44b0-83f2-b832e6d7c820", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6bffba-8464-4ac5-ac42-5c459618942e", "sighting_of_ref": "indicator--7a51a0a7-4747-44b0-83f2-b832e6d7c820", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a76bad-98cb-4049-9b7e-21332793ddcf", "sighting_of_ref": "indicator--045f5dfb-f565-4dd3-aab4-9e71a3d73efc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bb55cd-8152-43e6-b700-e0830cea83dc", "sighting_of_ref": "indicator--045f5dfb-f565-4dd3-aab4-9e71a3d73efc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9e7b9d-a862-45db-822b-e34447a6c34c", "sighting_of_ref": "indicator--045f5dfb-f565-4dd3-aab4-9e71a3d73efc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea398681-bebe-4053-941b-583e9b66c75b", "sighting_of_ref": "indicator--c3d4ee53-42ce-4843-b63a-3be271592cf2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb3728d-11b2-4046-aafd-5898768770a8", "sighting_of_ref": "indicator--c3d4ee53-42ce-4843-b63a-3be271592cf2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397f3f3c-12cc-441e-8731-abc45ac15512", "sighting_of_ref": "indicator--c3d4ee53-42ce-4843-b63a-3be271592cf2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29c7790-ab47-413d-9474-847228a1abc4", "sighting_of_ref": "indicator--9d16dbdf-96c1-4729-9974-cde792c3ccfc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6690e0b-534c-4e4f-ab0a-edfbf6b571cf", "sighting_of_ref": "indicator--9d16dbdf-96c1-4729-9974-cde792c3ccfc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2272851-049b-4828-9d47-c65072bca33a", "sighting_of_ref": "indicator--7ccd2eee-778a-4c02-b83a-91f8be46a5d9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f817260-a73a-4c20-b21b-184c7c8c8ffb", "sighting_of_ref": "indicator--7ccd2eee-778a-4c02-b83a-91f8be46a5d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d52830-8c84-4ea6-9542-396611acd3a2", "sighting_of_ref": "indicator--e595a223-18f3-4d05-83a8-32d6487a6120", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3d97f3-5df2-4226-9d64-c59737c27121", "sighting_of_ref": "indicator--31316596-b407-46e2-ad9b-e95b11fe6846", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab6bc7a-6f7c-4288-af04-b708ebc503eb", "sighting_of_ref": "indicator--31316596-b407-46e2-ad9b-e95b11fe6846", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9c0a8a-a74a-4951-a94a-a02c6be73169", "sighting_of_ref": "indicator--8abd778e-aaa7-4fdb-afee-39b18ae94ff7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4019727d-45b2-4043-9883-bd40bb81bd27", "sighting_of_ref": "indicator--4f417878-4b6d-4a61-a7ef-b9b7988159cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9ed158-fc29-42e2-b82e-5a14d3e26131", "sighting_of_ref": "indicator--9bc6f9e5-0207-4e60-819c-4c8ca238fea5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5794b9-6989-4b98-adf9-a5d425f1891a", "sighting_of_ref": "indicator--9bc6f9e5-0207-4e60-819c-4c8ca238fea5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306c590f-56b1-4fe9-b4d2-76485394cbce", "sighting_of_ref": "indicator--7ad17be8-622f-44c0-9dc9-45e7c3e64f39", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5402374f-320c-4d3b-9217-0cdfd2b9705a", "sighting_of_ref": "indicator--da9e4347-c3f8-450c-a549-6f9487353f12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed9a6a5-8335-4ba2-be0d-022ca316c859", "sighting_of_ref": "indicator--3515e6ab-54a4-46b4-b31b-36924dd100ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff24d95d-891b-4b48-9b1b-b1daf423ad9e", "sighting_of_ref": "indicator--fbd0f67c-6b48-487b-b279-e5c256cb0059", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6309cdc0-2ddb-442c-adcb-82c07f146c91", "sighting_of_ref": "indicator--fbd0f67c-6b48-487b-b279-e5c256cb0059", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc2a577-99f5-4c27-ba0b-902cb02ade31", "sighting_of_ref": "indicator--f5c82d62-3681-4df0-9426-bd768b3ff6b6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98668547-c595-4abf-b877-dee8f36d0323", "sighting_of_ref": "indicator--f5c82d62-3681-4df0-9426-bd768b3ff6b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a02aad-32c7-4155-a2f3-f701520ea33d", "sighting_of_ref": "indicator--f5c82d62-3681-4df0-9426-bd768b3ff6b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f990dfe6-06bd-4968-be32-c002ef79defa", "sighting_of_ref": "indicator--82e0927e-22e2-425e-87ef-29a52f6bd69c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d4ce07-4cce-4b42-ab85-0911d08d1aa2", "sighting_of_ref": "indicator--4d0f2b37-9cf0-4ad9-8819-57a51d4bbf7a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c451a671-f2f7-4a99-a927-9dd1128a49dd", "sighting_of_ref": "indicator--4d0f2b37-9cf0-4ad9-8819-57a51d4bbf7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0683645b-faa0-48c6-b188-12a353393337", "sighting_of_ref": "indicator--4d0f2b37-9cf0-4ad9-8819-57a51d4bbf7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca86caf-c2f4-43d7-b254-a5948fdb033b", "sighting_of_ref": "indicator--250d504e-794f-45fc-a0ff-2c98dd3f8736", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35828ce-c503-494e-83c2-bf833d7908d3", "sighting_of_ref": "indicator--57335471-701e-4f49-8877-b69a1020efdc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbc5d25-371e-4c9c-856d-58e7023b2bc1", "sighting_of_ref": "indicator--4710cd75-48bd-48fa-872b-0cdbf32b77d4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fa11b0-0102-4d93-812b-09798dc76390", "sighting_of_ref": "indicator--cc33f5ef-fec6-455e-ac8b-7afedf31560a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d09226-cd80-4072-a69b-7d52a8e829ef", "sighting_of_ref": "indicator--0e04d003-342c-4404-85e9-2cba893bef1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad6593c-b292-4cd7-a4e8-10f690384902", "sighting_of_ref": "indicator--e4091faf-465b-4481-a95a-fdc7c2ec62b5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620615a0-613d-42bc-94f7-9b4534242072", "sighting_of_ref": "indicator--2f4cb0f3-f7a5-46a5-a072-37b19246dab2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb34f6b-65e0-4450-b562-27a7e4ba7dd3", "sighting_of_ref": "indicator--f6d68bdb-48e3-443b-ae4b-8285fddc19a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ab8b12-3ec3-47c6-a2ec-90bab613781c", "sighting_of_ref": "indicator--407a096e-4589-40ec-a65e-fd722a183846", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3611d4d3-6efc-424b-bf9f-c40f3c4c8658", "sighting_of_ref": "indicator--c1e45ff0-28ed-467b-9145-e9775be28bc0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c7115e-ad42-46cb-9484-1c5455a7cbe9", "sighting_of_ref": "indicator--cb8b7aad-f639-4428-a2ba-eee6d9c19008", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f31f93-bab9-429f-bf31-5fbb771e17a9", "sighting_of_ref": "indicator--8a42ab58-ef5c-4d87-8390-5b61d520042e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d554dd8-b50c-44c7-9b93-3f27446f15c7", "sighting_of_ref": "indicator--74e7aa75-399d-4dcc-bd09-4eb1ab5de4ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d60720-4fc3-4e94-98b3-2e97a01c26c4", "sighting_of_ref": "indicator--402a7f2e-f05c-4785-aba8-36e347eb3a04", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ca992e-89b5-4371-8b50-7d70dea7623d", "sighting_of_ref": "indicator--e47e7969-0c62-4f25-960b-f9fab36229d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a359db98-760c-4d24-b198-18748bccab81", "sighting_of_ref": "indicator--d8570b56-830c-4354-8be0-b2ae4c8200ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fc542a-3bbf-4d8a-9fa9-5c786a326f98", "sighting_of_ref": "indicator--e2663fa9-f604-49f0-9c65-870fae6eaefd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d751228-ae0c-46c7-aed1-2011c5fbf322", "sighting_of_ref": "indicator--98104941-db6f-4b95-8314-75eb2bf92715", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a82b36-6639-4592-b600-5d0116fc2a5f", "sighting_of_ref": "indicator--51ce9754-3051-4779-97b6-74099baee67e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dd8331-090d-4bac-aa87-aa87f985de85", "sighting_of_ref": "indicator--be265e58-264f-467c-8f72-11a7227a2d5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf42dc3-071c-44cf-b885-62381c61b00b", "sighting_of_ref": "indicator--860b998b-0743-4282-ba9d-15286bbaca6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4125da-35e9-4e52-bf29-227ed6e32737", "sighting_of_ref": "indicator--8cbcc788-cd2c-443f-8844-2851ff55616b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2fe466-0841-4cfa-9f05-f40e634f51fa", "sighting_of_ref": "indicator--0578ce9a-6095-41c2-8984-0ce1a75ad54a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7415d6-40c5-41cb-a981-36668e54ec3f", "sighting_of_ref": "indicator--0d9b0fa6-cc36-4d71-bf71-fd18acac2619", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca843b4-8d90-48d0-8aa8-28bee5b49e91", "sighting_of_ref": "indicator--45a7acd2-c79f-46c4-9403-25a4436ce73b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5462804-75d9-4b14-a817-5fa63406d93a", "sighting_of_ref": "indicator--94d6f1a7-dbc5-48ec-a941-bd8733d5e69a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b39143-43af-4fa8-84e0-689db8e2ec61", "sighting_of_ref": "indicator--befa0abd-83a5-4989-952b-bf5d778684bf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c962de-b958-4c8d-a60b-c9b82fd8f9e2", "sighting_of_ref": "indicator--3a407d13-f46d-4910-8cb5-d6d82cc19e61", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a37f78-d686-4be8-ae5e-8c5e00f58fa1", "sighting_of_ref": "indicator--b269dab5-dac4-4e74-93a5-76f567d32d1b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26eec06-1d88-4efc-b09b-ddb794f399d3", "sighting_of_ref": "indicator--0a12499c-de2f-4184-a495-2a7f5ddbbb3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d47051-050e-4e47-b967-01e4fc1979e9", "sighting_of_ref": "indicator--1a3e0679-b8a0-4f35-aed1-c095be5da5b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21723cd3-93cc-4d73-bc66-9df1f7b84107", "sighting_of_ref": "indicator--1a3e0679-b8a0-4f35-aed1-c095be5da5b9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b518f6c-7258-493e-86da-3165c3dcc754", "sighting_of_ref": "indicator--1a3e0679-b8a0-4f35-aed1-c095be5da5b9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2df1bf-5a4b-4836-95a7-1810bfe9f012", "sighting_of_ref": "indicator--e76dfd58-b336-4556-8eb0-a233bc639a86", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf9d823-3dc5-4855-8327-e8f636336168", "sighting_of_ref": "indicator--198df5e9-b701-48a7-ae20-53ae1722c407", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa96b04a-84b1-4ec1-8295-3f74b1969d3e", "sighting_of_ref": "indicator--71e963c3-a8dd-4ff1-8623-d9972bcaabb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869bc460-edcd-4061-9c9e-33e80f00f8ba", "sighting_of_ref": "indicator--1ba49863-d153-4ab9-8960-dbcd2c33d237", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9add6d-1c9d-4c5f-af97-c000623b0a88", "sighting_of_ref": "indicator--1ba49863-d153-4ab9-8960-dbcd2c33d237", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422cd226-cac4-4520-9893-1b8cea55c209", "sighting_of_ref": "indicator--25a41be0-51c5-40c2-a446-dc3cbf38e0a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abc7ec7-f6a6-4781-971a-d05001af24ba", "sighting_of_ref": "indicator--09a54e6b-f1ea-4f8a-945c-010c7c6dfcca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642e6162-b796-4b02-919d-5e53d2aac172", "sighting_of_ref": "indicator--a662a070-43f6-44e4-ac67-8a1b6754a209", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53d898e-dcf5-4a48-8c75-4861159e07b3", "sighting_of_ref": "indicator--304b71ea-53be-4fef-af7c-5ac706fa9a0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34f8efa-929e-45b2-b960-d49950bae8fd", "sighting_of_ref": "indicator--1a984876-a8f0-48a8-8e9f-8cdbe189b33f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3176b313-b595-4407-8e06-0ac10cd1c833", "sighting_of_ref": "indicator--6a531663-8dc6-4446-ae4e-46626fc9b4bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2cc7e9-bcf9-4636-8aa8-863378e17e97", "sighting_of_ref": "indicator--117ebd97-3c9d-4d6b-a28a-c76a07a432ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612aa051-5355-4853-bf15-f394b05a73e6", "sighting_of_ref": "indicator--117ebd97-3c9d-4d6b-a28a-c76a07a432ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d38347a-fe24-419a-8d41-4ef47c13429a", "sighting_of_ref": "indicator--962c5087-3485-4818-b35b-6855ce834c94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75571a1b-d9d3-48e5-b42c-553aabe1bb3a", "sighting_of_ref": "indicator--0aebad13-4ff2-4dc3-81d3-85117d718e2c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b700007c-2680-4ad0-9e29-d1e5b49517f4", "sighting_of_ref": "indicator--6892705a-9ce9-44e5-8aa0-2e6a18cfb4af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be80602b-86c2-45e4-8805-bfd08de1b2e4", "sighting_of_ref": "indicator--2db14721-3faa-49b8-a790-52c0f3c41f4b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c74e645-f7d3-45a3-bc30-9d9c1bdfd656", "sighting_of_ref": "indicator--9ed0e3ed-efeb-42a8-ba08-c7fff5eb1985", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9d894e-c56e-4657-a669-39a4af09a422", "sighting_of_ref": "indicator--3199c9ea-f662-48a6-a67f-16ceee46a406", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b5da87-9067-4f8e-8cb0-66acfeb8be53", "sighting_of_ref": "indicator--cb2b6d93-c5ea-4bb4-bdb5-8791c3e87794", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc7f469-e7b1-4eec-8d53-3a4ec07f27c0", "sighting_of_ref": "indicator--c0b82774-92d6-420a-b8c4-5977c2bf60db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1dc0f4-cb16-4c7f-8b67-27339a02bae7", "sighting_of_ref": "indicator--712af0f0-f98e-4918-a474-80db1fc62a83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e238be-5a54-40de-b5a2-26201836ec65", "sighting_of_ref": "indicator--aef274c0-b0a5-4b7e-9479-13b1932d09c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51598a3b-1209-441c-9443-378f84a33af6", "sighting_of_ref": "indicator--6b4cba87-d1b8-425e-836c-132952fe3fbb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de92c26-ba26-4ad2-bd26-bffa0dd7d4d0", "sighting_of_ref": "indicator--7c96d75d-f218-4e4d-992c-59cead34a21c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a81a91-6766-47a7-9799-bbff9530533e", "sighting_of_ref": "indicator--71035d04-5fe8-4053-96ee-20650d5a8be1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b5c55f-befe-413e-9cd0-12d26cf291e2", "sighting_of_ref": "indicator--44e95b26-eb9b-4fe7-b70e-deb4de19500b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7be9bda-a303-40de-be9f-02a089c0c621", "sighting_of_ref": "indicator--2fce7afe-f59f-4d6f-8006-735d0160ce48", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9738741-b7d9-4938-bc1b-6cfa5179d5d7", "sighting_of_ref": "indicator--c5ac81a6-e721-48d8-83ef-1778e9175de4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d49cca-7c70-4550-b029-376aba784f1f", "sighting_of_ref": "indicator--b735c393-4a5e-41f6-a3ad-e221ebd32d6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b67bba9-6e9c-47ae-ac1d-8ff59ce21d32", "sighting_of_ref": "indicator--b6fb27ff-e56a-4d69-88c9-427728114120", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a552e4-14be-4cd1-9b29-c1bc56db56ae", "sighting_of_ref": "indicator--ba59a7d3-6f52-4fe7-9db7-697074457d1e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f19457-347e-408b-b70e-a16969f66ce2", "sighting_of_ref": "indicator--8dd229a0-6e44-4d52-905f-2a16e8ae6aa5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3798ff15-9dec-45e6-93d9-b2c97ff120a1", "sighting_of_ref": "indicator--6bdae3cf-2a54-4f49-b4b3-a2bdf07c9354", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83186ec-63fd-49de-9dc0-d2ea4f04d9e9", "sighting_of_ref": "indicator--9b4a2e0f-60e6-4ae2-bb3b-54145a2615cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cecffb-1d57-453c-ab55-863c1f3f1c9f", "sighting_of_ref": "indicator--9b4a2e0f-60e6-4ae2-bb3b-54145a2615cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b1e1e0-3037-490b-a82f-b0ba935c951e", "sighting_of_ref": "indicator--2d0a0359-a842-4214-ab51-2db9ab52b5bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6085cb15-5af3-494e-a4af-4f1cb3d839c8", "sighting_of_ref": "indicator--6f4b920e-37e4-4698-878c-29b943663c27", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7909aed8-2b93-4f86-b987-17fc559a260e", "sighting_of_ref": "indicator--68d7b07d-0fff-44ab-b19c-a84e53e9629b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12354cfa-582b-4a2e-a0e0-7d02159a7bc9", "sighting_of_ref": "indicator--1c4b2d12-f792-4eb5-b483-b21667dc6d3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab39cda-4995-4e2e-a683-3cd7f5ea2855", "sighting_of_ref": "indicator--1c4b2d12-f792-4eb5-b483-b21667dc6d3e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011e72d4-e5b9-479d-8bd0-2d15d7b1e278", "sighting_of_ref": "indicator--4a5cd25b-8920-4d40-b7f7-a9778a39dc76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6fc157-3dec-48ce-9dab-96a29f79a953", "sighting_of_ref": "indicator--ed9f50f2-684f-4f9b-83b7-9679c3415406", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e2fb6c-d2d2-4bf8-a326-4c70b11ae50b", "sighting_of_ref": "indicator--fb19e112-b041-4811-a612-ebd72ab6f1f7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6236dbfc-21d9-4411-b86d-4cd152dcf9c9", "sighting_of_ref": "indicator--249fd5d8-bcde-4797-b718-80879eb6c1e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8120332a-7906-4c71-8dd0-a0566a49ab62", "sighting_of_ref": "indicator--ea1cdf9c-4121-48d1-8b8e-b988dd6e86aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cc7566-cc1b-460c-aba7-8c26c203fd8b", "sighting_of_ref": "indicator--ea1cdf9c-4121-48d1-8b8e-b988dd6e86aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9b0280-c475-4dcd-b9df-8d717eec7de9", "sighting_of_ref": "indicator--92bb41b1-6b1b-4f4d-9795-87157aab7fd0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77719681-581d-4b29-a27f-31d463266950", "sighting_of_ref": "indicator--42289520-463e-47eb-99b3-7459e38f90d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4428c275-b66b-4cb0-9fa8-77c3e02e24e2", "sighting_of_ref": "indicator--3b58a208-d442-4c67-9e63-db5c7f9f6e0d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb855cd-afaa-4871-9f04-dcfd0f7ae00a", "sighting_of_ref": "indicator--f3401471-86b4-487d-9b96-9c1c6cda5a59", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91923ff1-0532-4c95-8bb8-a553a3db0384", "sighting_of_ref": "indicator--f3401471-86b4-487d-9b96-9c1c6cda5a59", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c64124-ab4e-4b98-8214-8675bab70b2e", "sighting_of_ref": "indicator--674d91dc-fde3-4cd3-bbf0-907b1cdb0f2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d3464c-ee2a-4346-944f-5d01b734c040", "sighting_of_ref": "indicator--bda43753-2522-4172-a83e-ac2f31cf1f18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47382b7-6faf-4bab-bfb4-4bfe240241f7", "sighting_of_ref": "indicator--37456864-28f4-47b6-a5a7-03256876e198", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38845ae9-f419-4235-b68c-adb5e59977d4", "sighting_of_ref": "indicator--1bbb5c8e-f726-49bf-92f7-7c815b75bb13", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da699af-7bfa-4d27-9786-5c70ed995505", "sighting_of_ref": "indicator--94de74ac-7ecd-4f8a-821c-abe62176c1e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4722a0bb-0887-4e77-ae83-11277b52b28a", "sighting_of_ref": "indicator--89de8fb3-60b6-4a0c-9db6-b3f5c3f3ed2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a795f1d-d5e7-435e-b70f-a8907b085fef", "sighting_of_ref": "indicator--1bccac4e-a1cb-47d5-9759-819bf742ec14", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cb220d-af94-48bc-ad58-3a70cc03c2aa", "sighting_of_ref": "indicator--860ce77a-835e-497b-a887-36f27b0c5d15", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2eccdd2-cb93-4119-a9dd-cfa2415f60be", "sighting_of_ref": "indicator--4b22927d-c3ac-4caf-9e6b-a059e6497f8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e1635f-2c86-4ebb-8dfe-53fa85095355", "sighting_of_ref": "indicator--97178dc3-6a5d-4973-bcb7-bf36490f7682", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490c3f7a-bd89-4723-9eae-426361751fe6", "sighting_of_ref": "indicator--bfd6dc5b-8322-471c-beeb-a7694e67cd43", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef846097-c198-4bac-8274-2345e45f7e80", "sighting_of_ref": "indicator--76f4647e-25dd-4bb2-8e4a-ea19c4f774dc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--089a0dcd-0452-41b7-902c-928521bd0b0c", "sighting_of_ref": "indicator--28274e73-6a7e-4a7a-b16f-d731f2ecab6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad0de6c-d22e-44c8-b536-9b9dee76abf8", "sighting_of_ref": "indicator--94f452d8-2a47-4883-8703-5b0ac865b9d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2fc9e9-ab2c-42fd-9c9a-e6dc76e57f84", "sighting_of_ref": "indicator--be1e0b8e-b341-4155-b0f3-f3adcc98c7c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af76068d-8e60-415d-93cd-6bf836ecf301", "sighting_of_ref": "indicator--57f61a67-8a83-40ef-9584-59512f1f4442", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff000f5-cf43-45cd-bdcb-0ce7d94a6844", "sighting_of_ref": "indicator--256b492a-ebbf-4e41-9c9c-13f3a093fc04", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4b6549-e603-4ac9-b425-ecb61b9cf2f6", "sighting_of_ref": "indicator--1dd7ad0e-f697-46e0-ac90-e4a3f0384f24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fe56d9-254c-4f96-b1b9-6054d9e1ef33", "sighting_of_ref": "indicator--1dd7ad0e-f697-46e0-ac90-e4a3f0384f24", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eae8eea-be1c-4f51-b6ba-83b9c7612df2", "sighting_of_ref": "indicator--1dd7ad0e-f697-46e0-ac90-e4a3f0384f24", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a71d9b-7d2f-4792-b0ff-26ac37df6864", "sighting_of_ref": "indicator--9dadcdc4-1285-4f70-aeb8-5b3f9ce243f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c63716f-4822-4ed0-8c9f-dba34def1906", "sighting_of_ref": "indicator--a20ca5da-c0ec-4075-8ed7-11ec80446df7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981e95f5-4a96-4d8b-b764-2c9d3543de4a", "sighting_of_ref": "indicator--c66eb9cb-a7a8-4884-a039-863d387ac5b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432a9fea-2f55-4bce-9f7e-c5dfa013f9db", "sighting_of_ref": "indicator--96d936d7-72fb-456c-94c0-d3afcece4128", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bd4226-db16-4a73-b8ad-0474a7c38374", "sighting_of_ref": "indicator--96d936d7-72fb-456c-94c0-d3afcece4128", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75ad128-0baa-4ae0-9acd-5349c96ab0bb", "sighting_of_ref": "indicator--96d936d7-72fb-456c-94c0-d3afcece4128", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3babe4-75e0-4605-801c-880dbabebc87", "sighting_of_ref": "indicator--7fe0cbf0-3cb5-4c55-b8dc-834d1c68fd3f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070e84d6-bf47-4662-96f6-7e454a84aec8", "sighting_of_ref": "indicator--fa2f29eb-b258-4fec-94fd-6dd16a263e05", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf55395-06c9-4139-a308-8c9425d76d06", "sighting_of_ref": "indicator--3e43be8d-89ec-4e31-a2e2-b94c2c0bd2b0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba1d189-0f13-4d04-9f55-5d2287a20329", "sighting_of_ref": "indicator--e74bc673-9997-427e-886d-caffa5e8b65a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957f2657-1e67-420a-8a51-54caf939f40c", "sighting_of_ref": "indicator--326f1599-37b0-488b-a0b2-99e8c290dec8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4d9c1d-8c67-4b50-87ea-e31bb2047d94", "sighting_of_ref": "indicator--326f1599-37b0-488b-a0b2-99e8c290dec8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cafdb7-dc42-4d94-9f67-389e53471c88", "sighting_of_ref": "indicator--38efe12c-3e03-40a4-9d24-a5a101914f54", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f321424b-792b-4a70-af26-2813f2d7fe8b", "sighting_of_ref": "indicator--38efe12c-3e03-40a4-9d24-a5a101914f54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c657df-3fb1-4d33-a52f-0320965b6649", "sighting_of_ref": "indicator--7c2c100b-74db-46b8-8c57-3c274caa3537", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abc0f27-f56f-4e23-935e-abd9453ffa5c", "sighting_of_ref": "indicator--7c2c100b-74db-46b8-8c57-3c274caa3537", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7858927a-45a7-4397-b575-a42c2c852d22", "sighting_of_ref": "indicator--7c2c100b-74db-46b8-8c57-3c274caa3537", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd94ced-089d-4044-92b8-0c813b81b275", "sighting_of_ref": "indicator--cfcd80e1-09ce-4abd-8607-bedccf8c9774", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbabcbd-eda1-4e80-9a48-54fd5d22a0c7", "sighting_of_ref": "indicator--cfcd80e1-09ce-4abd-8607-bedccf8c9774", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28115326-622d-49f7-9cc5-8916a6bbe3b7", "sighting_of_ref": "indicator--5d0e42d5-da71-42b6-a6ce-e29846812af1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb14678-64dc-4eba-87dc-06d7f733f857", "sighting_of_ref": "indicator--5d0e42d5-da71-42b6-a6ce-e29846812af1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bcc428-c370-4127-b645-577dd8a8d7ab", "sighting_of_ref": "indicator--f608a177-7fd5-46f0-bd51-d830ce000592", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2586e480-1e0e-4e9d-879a-10e436a8f3a4", "sighting_of_ref": "indicator--f608a177-7fd5-46f0-bd51-d830ce000592", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7ec299-30cf-430a-8743-eb516e70fb70", "sighting_of_ref": "indicator--80bcd577-40ee-4214-8a91-6d400e85bf56", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64293626-118e-4552-bf21-21ef7faa8d2d", "sighting_of_ref": "indicator--0da3f3b5-4a88-4c47-9ed8-a83f528fc789", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8824e3c-1775-4083-ae25-3b28e698e2a1", "sighting_of_ref": "indicator--0da3f3b5-4a88-4c47-9ed8-a83f528fc789", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9515cf9-7a9f-4c8a-815e-1abe6de877c1", "sighting_of_ref": "indicator--fa091dee-518c-4b6a-a41d-1b17f251e94c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9832b25d-9c86-44e6-beb9-be59189fe1a2", "sighting_of_ref": "indicator--fa091dee-518c-4b6a-a41d-1b17f251e94c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b2c6fc-dc48-44ee-a280-7ffb3188ce9c", "sighting_of_ref": "indicator--fa091dee-518c-4b6a-a41d-1b17f251e94c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18860934-d718-4ab9-8af4-0657990e1885", "sighting_of_ref": "indicator--78a209ce-8ed8-44eb-a58f-9f8889d0c96b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7e0c22-bd29-49f2-8939-f4e2f64bbd6e", "sighting_of_ref": "indicator--78a209ce-8ed8-44eb-a58f-9f8889d0c96b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e00148-5ccd-4923-a662-ec3015001c2e", "sighting_of_ref": "indicator--78a209ce-8ed8-44eb-a58f-9f8889d0c96b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a3bd96-d798-4da1-8a46-5f763b00567a", "sighting_of_ref": "indicator--ba7d76ad-ab33-4465-adcd-4f577c8439f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88153437-68d7-40fb-8a2f-947de7bd0822", "sighting_of_ref": "indicator--eaf13197-3bac-48db-b627-0f7760edeb58", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039fd049-402c-4191-82b4-3e104f50c5da", "sighting_of_ref": "indicator--0695fac8-5a96-453b-bfd0-79cfc7b543d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4607e2-484e-4e50-b315-128535d6b9ba", "sighting_of_ref": "indicator--0695fac8-5a96-453b-bfd0-79cfc7b543d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1831855d-ce3a-4511-bde7-abbce11fedad", "sighting_of_ref": "indicator--e89e8281-867a-4f08-a5ee-23c6f7bd1170", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4fbcf5-5828-482a-a5dc-68dc024b447f", "sighting_of_ref": "indicator--b3561f36-958d-492f-85c6-361c3b9d13e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c7634d-648a-4064-8c80-271e84d89a47", "sighting_of_ref": "indicator--a4c8e028-cae7-4e6d-88eb-2669df5ba8ec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e011521-2b83-4385-958c-aa4f21e8917c", "sighting_of_ref": "indicator--4c252b06-abf9-4eb7-b273-671ca3170e89", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35438c5b-71a9-4e67-a416-5fe526bc3a77", "sighting_of_ref": "indicator--2f96568d-90b3-4d98-8cc4-091c199a4201", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cb714f-457e-49e0-8a1f-83beb6b8ee4b", "sighting_of_ref": "indicator--6bc3cca8-d2b7-4f5d-af43-96695757c62d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655232fd-cbaa-4a3d-9479-f0a66d620a5d", "sighting_of_ref": "indicator--843881af-cdc0-45dd-bdec-eecd707730ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ce42eb-970e-4e9a-ad0e-c3257e88cbf5", "sighting_of_ref": "indicator--5b48cadd-934e-4e6b-8361-11616ad36eb8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8b411e-e05a-4c26-8fdf-1b3ec3ad8eb2", "sighting_of_ref": "indicator--9c83e095-8acf-4c71-98d7-eabcba56d958", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653dbeff-4c98-4207-9792-e459ead25674", "sighting_of_ref": "indicator--bf587bc5-b801-47fc-bb3f-ceb670de0e5e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905181ab-26dc-42bf-8649-07bf0caa95f4", "sighting_of_ref": "indicator--102e4ce6-98aa-4087-a797-3cb13875a064", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a20a46b-66d5-4adc-a2b7-6a7b31f09baf", "sighting_of_ref": "indicator--59936890-b73d-4d26-9cdd-c55fb25c2ecb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302ca432-1f19-470f-8a51-be3575d817b3", "sighting_of_ref": "indicator--bc02bf72-4679-4340-b614-cd5e4d1e73cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef38a28b-8b9b-439a-971f-af76665253ac", "sighting_of_ref": "indicator--9e44480b-7c4a-43be-a9e1-89fbb1355a50", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330feb38-2d1c-4367-aedd-1b7c1d7db0f6", "sighting_of_ref": "indicator--7e714e4c-bfe3-4754-ba76-f3de0b432834", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e50fca-42cb-4ba9-a3d9-af2c13fb549c", "sighting_of_ref": "indicator--147ec4c3-f428-4d3b-aaa5-43812a1b7225", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eebbfcc-5b50-4aad-be88-b6deda94eba0", "sighting_of_ref": "indicator--96fdf8f5-da4a-497d-a95f-d4da58e311cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc118ae8-ae80-48c0-a75d-ae732d30f74e", "sighting_of_ref": "indicator--7df483ef-c222-412b-a849-e7f8db99d18c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc06285c-6b81-468a-a1f8-9e51f0b17c31", "sighting_of_ref": "indicator--dbf1a8c1-7bce-4f69-bfdd-62615671ab27", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f282eec-a112-4c9a-babb-0adec9c58880", "sighting_of_ref": "indicator--134891ab-f13b-41fc-9157-8040b677273d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3c45c2-49ff-41c9-af3d-87dd34030218", "sighting_of_ref": "indicator--ba3eb0cd-da5d-46e4-b043-8ede2d4d9e8d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40dbd0e-b213-4d70-a7fe-b798caba9adc", "sighting_of_ref": "indicator--7228a06c-a195-48ea-be16-99f0cb602e21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c337cce9-27ad-43c8-b164-d110c01c1d3c", "sighting_of_ref": "indicator--7228a06c-a195-48ea-be16-99f0cb602e21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d59949d-d57e-4b10-9120-8f6a2a2d1e5c", "sighting_of_ref": "indicator--efa38153-5e24-4ea5-be3b-b96e0cdb8878", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccdc44b-c728-47ab-91c9-f2ae78f6e061", "sighting_of_ref": "indicator--29c38a53-413f-4ece-a9fc-5876da6111d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb0a3f8-40c0-4d04-a247-31ddb2cf7b4f", "sighting_of_ref": "indicator--71c9ece1-0748-4ecd-a9b0-cdeb268c69bf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684cb0ee-91a9-449c-b5d9-c4035240e2d7", "sighting_of_ref": "indicator--420ac3aa-25d3-4c3e-914f-0247e681c359", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066119fd-a589-4166-b3e2-94b7e7df0a9e", "sighting_of_ref": "indicator--c49c8259-2bb0-418e-b31d-68ccb17e77f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d09d8bd-4d1e-450b-b63a-3e264f71d986", "sighting_of_ref": "indicator--724d5d57-a6a2-404e-af56-4b46ee65f9af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5d9d3e-dfc8-4078-805a-c329cbe05191", "sighting_of_ref": "indicator--6af3997d-9b72-49f3-85c1-a6a5f975003d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c99ec81-775d-4867-a088-8c57245024b7", "sighting_of_ref": "indicator--6af3997d-9b72-49f3-85c1-a6a5f975003d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd49bfa-f925-411b-b603-937d0c46e305", "sighting_of_ref": "indicator--9e7380f4-8595-4437-b86e-45d2b8c85b35", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b9a236-48de-447d-a1c0-a2289852f328", "sighting_of_ref": "indicator--1ba11eb5-3010-400b-92bc-04795347434c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96d1954-9bfe-429b-ba7c-4c7450fcac0e", "sighting_of_ref": "indicator--69996a02-ed82-4693-baf7-46aa184c4221", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcab0e6-a383-4c37-bde2-eead7abbc888", "sighting_of_ref": "indicator--668cea79-c2b9-4c13-b43c-264bd5baa581", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cb4988-5901-4b90-b1e3-0c7e4feafc78", "sighting_of_ref": "indicator--cefd732c-a491-4cd6-9b7c-38f5fd268436", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561e5b11-91df-4b50-bb1e-6d4aa2a00907", "sighting_of_ref": "indicator--0f0069bd-82ab-40b1-b715-f33aadb5e17a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b502585-ca63-4038-a9df-319a8e6cad4d", "sighting_of_ref": "indicator--56ce371a-da29-4363-96f6-aa57e834e86b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e521ed9e-71e4-4683-ba2a-d6ba0d9f6993", "sighting_of_ref": "indicator--bd5d4666-1488-486f-ada4-07c717d6da23", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2019e962-ff74-4785-aa77-550b80df0260", "sighting_of_ref": "indicator--db2368cc-1c00-4534-9389-cbd07848a44f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15827028-4222-4139-94b9-44bf27db387e", "sighting_of_ref": "indicator--db2368cc-1c00-4534-9389-cbd07848a44f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b66306-13fe-4455-9562-9ac23c7815cb", "sighting_of_ref": "indicator--4a3310ca-66bf-4864-a01b-ec87e15e9c44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e0493f-a609-4d23-8663-af4b8b2208ea", "sighting_of_ref": "indicator--fb71dee8-5017-43a8-a8c3-bd1614035587", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70291c17-81bb-449a-9646-a5d5211b0594", "sighting_of_ref": "indicator--804c6d9b-a4b3-4f82-b176-8b376c304d74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab949d30-c961-4e97-ba38-74e4f52ac408", "sighting_of_ref": "indicator--c6e68c87-74dc-4203-bb25-764899bdf95d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0292f219-e6a6-4053-9442-05cad77928ff", "sighting_of_ref": "indicator--d44edeb9-36d3-4aa6-acb9-f2533e542f65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8fb902-e791-4e8e-883b-d8804925c800", "sighting_of_ref": "indicator--b701c13a-291a-4b71-87f3-d3ec87c802e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926de870-caa3-494d-918b-78715862b1d8", "sighting_of_ref": "indicator--b701c13a-291a-4b71-87f3-d3ec87c802e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c56ce9-fb5f-4bd9-a110-1102c7c861ae", "sighting_of_ref": "indicator--68f8ffc4-e681-4ae1-b318-a53bde7a59dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3ccfad-8d57-4488-bf7b-ff884a3da3d4", "sighting_of_ref": "indicator--b3397e30-4fbd-42e3-ac0a-7bae767728fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db822986-5c24-44e6-9e97-244270981b74", "sighting_of_ref": "indicator--a4f67d43-33f9-459e-a175-1cc4fffc8b30", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccf9180-8892-435d-a213-6969852abc75", "sighting_of_ref": "indicator--67e83e14-d467-4a3f-b26a-340c289b3f63", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd039e7-2cc6-4df3-9566-7d661d1aa24f", "sighting_of_ref": "indicator--a6caf8d5-158e-4072-8b2b-a2d2ab9338c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b09dba1-36f5-4078-ab38-87b1064d4804", "sighting_of_ref": "indicator--a6caf8d5-158e-4072-8b2b-a2d2ab9338c3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5156cbe-a692-40f6-a4c1-89730d0f5d76", "sighting_of_ref": "indicator--c3d6e68e-8135-44ba-acee-c1a7b8fe17e8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70548993-b427-4963-8f2b-d357880554f0", "sighting_of_ref": "indicator--c3d6e68e-8135-44ba-acee-c1a7b8fe17e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37eae0f-f442-4182-80ec-0254ab7a0f01", "sighting_of_ref": "indicator--a78d3435-8d88-4a06-838c-7f96d2d7cb15", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537b6e6e-7057-4118-a2ab-3ec147cdd552", "sighting_of_ref": "indicator--a78d3435-8d88-4a06-838c-7f96d2d7cb15", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb33e75-9042-4dff-b0d5-2daf67cf94b1", "sighting_of_ref": "indicator--2343ac26-f0d1-4375-bba6-c64aca4001db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cc6d42-ae39-4883-a771-d22fad7102c7", "sighting_of_ref": "indicator--7cfd55ad-9a7b-4f6a-a487-caef60c6d6f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3ed299-27be-429a-9792-a9176197a72c", "sighting_of_ref": "indicator--7cfd55ad-9a7b-4f6a-a487-caef60c6d6f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3658a7-e6c0-441d-979b-89745c7b7019", "sighting_of_ref": "indicator--7cfd55ad-9a7b-4f6a-a487-caef60c6d6f3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c57df75-2809-4542-9a79-1e02eaa69680", "sighting_of_ref": "indicator--1f9b2d00-7808-466e-82e2-9df11b2eeb77", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44891e35-9515-4545-bd42-fb88123c9006", "sighting_of_ref": "indicator--1f9b2d00-7808-466e-82e2-9df11b2eeb77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18058f9b-abe3-4d04-97d6-4a05ea36ac30", "sighting_of_ref": "indicator--70b32ad7-4ad1-4653-a49e-a55a2693448d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5373c1d-689b-419e-b68c-c9135c0e92be", "sighting_of_ref": "indicator--70b32ad7-4ad1-4653-a49e-a55a2693448d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67928a5-76bf-4cd3-8e16-de68b9bb2645", "sighting_of_ref": "indicator--6b9d9db6-7bba-4ee4-b747-c46bd014819b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5072d734-54cb-4e8b-b0e0-d0c3ea5f24e9", "sighting_of_ref": "indicator--6b9d9db6-7bba-4ee4-b747-c46bd014819b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f845b8a-efaf-4fa4-a7c8-864dc7bb9c71", "sighting_of_ref": "indicator--61478127-e7ea-41bc-8fdc-67b75f4a6d93", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aad8b84-fd11-4906-85ac-cf821b529683", "sighting_of_ref": "indicator--61478127-e7ea-41bc-8fdc-67b75f4a6d93", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd78c39-5c22-4be2-a990-f2ad182677b6", "sighting_of_ref": "indicator--41226d4e-08eb-4591-9229-7fb563bd1e4d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a618e4-8d2f-4ef6-845a-293c2ec43afb", "sighting_of_ref": "indicator--41226d4e-08eb-4591-9229-7fb563bd1e4d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef08f83b-a129-4761-85f0-84b4fc13daba", "sighting_of_ref": "indicator--41226d4e-08eb-4591-9229-7fb563bd1e4d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd41412-41af-4782-93e7-c818c77e7032", "sighting_of_ref": "indicator--480b574c-71ed-4952-b80a-468345d648dd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab9d5a6-3f22-4563-baee-c76a30a5c4b4", "sighting_of_ref": "indicator--480b574c-71ed-4952-b80a-468345d648dd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98873582-cfbd-481a-bf2b-dace9a5fb396", "sighting_of_ref": "indicator--52de6b25-b403-41bb-8501-3b7eaadfbec4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797b96dd-73f5-4ffe-848b-44d60e778b3c", "sighting_of_ref": "indicator--965bd3a5-77b4-4bf9-bb83-d22639c644a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5e647b-01cb-4a68-ae1e-e94be97979c8", "sighting_of_ref": "indicator--965bd3a5-77b4-4bf9-bb83-d22639c644a0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53b9c1c-5cd1-4194-ba50-8cb2e95fc315", "sighting_of_ref": "indicator--d29c2503-955e-4dca-8983-7f7e10ba27d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55864f07-2f49-4995-b9f7-08741e82d190", "sighting_of_ref": "indicator--148829a2-a750-4d67-ac14-e8551252e739", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f0a52a-67f1-40cd-b8ba-3b9d79190768", "sighting_of_ref": "indicator--50802bb2-e899-4b0e-b6dc-0017a0e1d1bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34421f7-e322-4ca8-8513-51a58610be91", "sighting_of_ref": "indicator--201ebf2c-db08-44dd-a5ca-860f5c1b5bbc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf33141-4b32-44eb-829a-913594039851", "sighting_of_ref": "indicator--201ebf2c-db08-44dd-a5ca-860f5c1b5bbc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51592450-e260-416a-9aaf-52ec7c6b81ed", "sighting_of_ref": "indicator--d76432d5-57ff-45e6-b7ad-e749b8f2ddfb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c617f76-b8f9-4184-aebf-c261d1884dc0", "sighting_of_ref": "indicator--b11ba3e4-dcc8-4f0a-82e0-0663188532fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7816d0-13f8-4ebc-b605-5ba51a30ea57", "sighting_of_ref": "indicator--b11ba3e4-dcc8-4f0a-82e0-0663188532fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dc4cd5-e2ed-4b08-9b4e-f6ca6faadb93", "sighting_of_ref": "indicator--7157de13-8c42-4600-8059-af1ad4de90e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7664aeeb-e694-4c08-bf05-9ebe878aa2fa", "sighting_of_ref": "indicator--17db0129-6ae4-430a-a92b-7800c92f1033", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc35e686-eef7-4cff-8b88-44c9f7b79299", "sighting_of_ref": "indicator--a248c5ae-2b6b-4420-996e-d6a2164a4850", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50db4bc-8b96-46b0-aec8-7e791fcbb27c", "sighting_of_ref": "indicator--f0db3784-cb9c-49c0-8832-8fb1eea6fd9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ec803b-2230-49f0-8a37-62985d23ce03", "sighting_of_ref": "indicator--f0db3784-cb9c-49c0-8832-8fb1eea6fd9f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175ee80a-0fca-4154-81c5-52278edf1e11", "sighting_of_ref": "indicator--7902221d-9a82-4476-a7dc-539f80a34d53", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bda15b7-3bd2-49fd-addd-c2a98ee3956f", "sighting_of_ref": "indicator--383a98a8-3bc4-404d-b8c3-3a905d8ae30c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a11ae0-1be2-4642-b0e4-27b6a0ee586b", "sighting_of_ref": "indicator--383a98a8-3bc4-404d-b8c3-3a905d8ae30c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21385dab-434e-460d-9494-e5ae7a344ef0", "sighting_of_ref": "indicator--42bd5603-5623-43a5-bbdb-9c6c3729c2b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad2b5d5-13ce-40b8-904a-0e152942aa04", "sighting_of_ref": "indicator--d499adf0-2718-4f33-b01d-e17a9ddc3c39", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94e7d27-6583-40b4-84ef-c12c8da091ef", "sighting_of_ref": "indicator--eacaa6bb-12ef-4df1-a5cc-4c55520eddf3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8fabee-8373-4e81-953d-a247b8782c8a", "sighting_of_ref": "indicator--eacaa6bb-12ef-4df1-a5cc-4c55520eddf3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6970402e-4862-4805-b2c3-e3318bdd571d", "sighting_of_ref": "indicator--b966f374-30e9-4b2a-af58-ed0e17228beb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab62083-9ef0-4d47-b304-5b8b3d21e08d", "sighting_of_ref": "indicator--e0407ac1-394d-48dd-8ed1-bca35c882dcc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ef979d-4d46-47ff-911f-0f0bf116a62a", "sighting_of_ref": "indicator--e0407ac1-394d-48dd-8ed1-bca35c882dcc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69575222-bffe-43b8-8da5-60ab5e05bce4", "sighting_of_ref": "indicator--9f73bbb0-78d2-43f2-b925-661f15c9351d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d9a242-9979-4141-b2c6-ce1664d53ccc", "sighting_of_ref": "indicator--c0341206-692c-4d77-9be2-3a73a153838a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68579d5a-7f92-4a78-88e2-950e14acd6e7", "sighting_of_ref": "indicator--46256cfe-2076-4ebb-9699-0cb5cef601a0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7325dc-a0dd-463c-8672-19213781f36e", "sighting_of_ref": "indicator--46256cfe-2076-4ebb-9699-0cb5cef601a0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b706b618-2f8c-4896-8705-918104652224", "sighting_of_ref": "indicator--9ec520ed-cf18-4208-be08-67d7ecabe8bd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ede8ef-d011-4064-8d4b-0bf360b2a7a3", "sighting_of_ref": "indicator--9ec520ed-cf18-4208-be08-67d7ecabe8bd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11eee6b8-4fb8-458e-8cc8-20fc627e469b", "sighting_of_ref": "indicator--314b9066-b592-48ac-8bbf-ea370bda1e15", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd050d1-8fe3-4ae9-89a0-f898be77f305", "sighting_of_ref": "indicator--6a36cda3-71df-426b-8d5b-3346e4965606", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36eb55c2-0534-44ac-8215-1ee9646dfd07", "sighting_of_ref": "indicator--6a36cda3-71df-426b-8d5b-3346e4965606", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df281f01-0834-4044-9ac0-8c770b8d447f", "sighting_of_ref": "indicator--a6dd8341-ea07-456c-9c17-6b8c9ee9eeba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872bcd7e-3c77-45e0-a3a7-04b51218d464", "sighting_of_ref": "indicator--244e1bc2-cca5-44d9-980a-a7194a310598", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de2332c-1169-43d7-b7e0-b871df1e2d84", "sighting_of_ref": "indicator--244e1bc2-cca5-44d9-980a-a7194a310598", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd832794-5de6-48ba-97c3-be2584ccc6a1", "sighting_of_ref": "indicator--eccb8e33-07a3-4740-87eb-332f21b9f1e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86a0a75-8e2d-4691-b46f-f2ef56e5e0bd", "sighting_of_ref": "indicator--eccb8e33-07a3-4740-87eb-332f21b9f1e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b62a97-7fe4-446d-bb2b-349d9e5be116", "sighting_of_ref": "indicator--f5b58ffc-57e4-44e0-b617-678a29961991", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7f1ab8-959d-403c-aa71-b13d747b2999", "sighting_of_ref": "indicator--f5b58ffc-57e4-44e0-b617-678a29961991", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ce15e6-e451-4656-bfac-626a68317793", "sighting_of_ref": "indicator--f5b58ffc-57e4-44e0-b617-678a29961991", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9967f5-0b7c-44c2-8d32-e9f85d7cba21", "sighting_of_ref": "indicator--11a66095-736f-4578-91db-83701d99d69c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba472d77-49a4-4619-875e-1ad1e5a4088f", "sighting_of_ref": "indicator--60759b84-3bba-4592-8690-4d10caf4e473", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6711bcc-35d6-499c-92a4-f6caddcfc93c", "sighting_of_ref": "indicator--f5c6d40a-68f1-4ea7-9846-2fa49ee58917", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed90f8e-b591-4586-acf0-aa500c109782", "sighting_of_ref": "indicator--9eeee9a5-0349-485f-89b9-7619c7beca81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffad343-c225-4cae-adc4-38daf05cb6e7", "sighting_of_ref": "indicator--a15d202e-12b3-4ea2-b21c-cd4bffa931cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a28549-8cc0-483e-88a9-df439c217945", "sighting_of_ref": "indicator--a15d202e-12b3-4ea2-b21c-cd4bffa931cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d910445-d02e-451d-8375-43729efa3e0e", "sighting_of_ref": "indicator--0eef6348-2398-4bea-89db-ce3810e5c078", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b385695c-bcbb-4427-aeb4-86715d1c791e", "sighting_of_ref": "indicator--6eaa1cac-c69b-432a-94cc-3e98989d84ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82906c66-e8b4-417d-95ae-c24d088c40eb", "sighting_of_ref": "indicator--5a030957-678a-448c-b638-ca163061e772", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59e7d8f-39f2-44a6-b442-00cc5d18bdb2", "sighting_of_ref": "indicator--5a030957-678a-448c-b638-ca163061e772", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ef1b82-c4da-4771-95e9-0b92347b37be", "sighting_of_ref": "indicator--184105fd-fa3c-40c4-950c-208b49912676", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9065ea6d-2a53-48c8-a567-6b71a74cf715", "sighting_of_ref": "indicator--6146d517-558a-4bf0-b422-43298ab75cf9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2e71bf-d8e8-4ad2-9b20-1d1bd6f31673", "sighting_of_ref": "indicator--6146d517-558a-4bf0-b422-43298ab75cf9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e669a25-621e-4a1a-b4c5-820bb336f3a2", "sighting_of_ref": "indicator--03d0ec86-3904-426a-aa05-eda7b5686997", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df294f18-295e-44ef-aa6c-dccda89f1936", "sighting_of_ref": "indicator--03d0ec86-3904-426a-aa05-eda7b5686997", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fcd2e6-ea6f-4cc9-8f7f-b58b88f43079", "sighting_of_ref": "indicator--03d0ec86-3904-426a-aa05-eda7b5686997", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd9cd6a-c449-48a6-bfef-a0fb24a7bea1", "sighting_of_ref": "indicator--d9ad15fa-99c7-4e19-95bc-fb5aecc3b91e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117bbc28-c0f7-4780-bae9-8ae9ad0216f5", "sighting_of_ref": "indicator--0a0f49c9-05d8-4147-a975-35bcfd3f473a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af66882-2d6d-4303-9047-77ae073ae374", "sighting_of_ref": "indicator--0a0f49c9-05d8-4147-a975-35bcfd3f473a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcf836b-0d64-49f6-8553-ae95714d4e43", "sighting_of_ref": "indicator--f7fe439a-4283-4dcf-8afb-095f72c81360", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90ac43e-07d7-4ac6-9643-bd75d438fb33", "sighting_of_ref": "indicator--9e51156f-e563-4046-b75d-15ad719590cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15838770-0eb5-4684-8ddf-4e66a1a4cb51", "sighting_of_ref": "indicator--9e51156f-e563-4046-b75d-15ad719590cc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b97375f-043d-4f3e-944a-5e703a44635f", "sighting_of_ref": "indicator--321045c4-39e3-4517-bc98-78dd3d3dd896", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69281fa2-ebac-4b7e-8337-d1f40626b88a", "sighting_of_ref": "indicator--66c9541b-6bf4-4f27-8179-540199161d11", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e6208e-ca8b-49bc-aea3-1ed2264fb4e7", "sighting_of_ref": "indicator--8e20abd3-3aed-460f-ac9e-fe6470869b8e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a48bff2-30ca-40ea-b3a5-4932f91522ea", "sighting_of_ref": "indicator--2fe3b470-bead-4060-af0c-2ed96143faf0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a338ee-4333-4be9-b379-0f827d188135", "sighting_of_ref": "indicator--f7575d98-9468-4ff6-88c1-eaeeaf9d1ff6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b1639a-ebf8-462a-b315-03fa9459704f", "sighting_of_ref": "indicator--66d22cb9-99fd-48ca-8607-bacb23f05e87", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafb4b2d-b14e-4a00-ae6e-77832b9955ca", "sighting_of_ref": "indicator--66d22cb9-99fd-48ca-8607-bacb23f05e87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc23f49-66d6-4a28-9d57-5c8215060a74", "sighting_of_ref": "indicator--ae13c43a-35c7-4996-82db-af95a3e308fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0de752b-ca50-42fb-b042-44e284b2b5e3", "sighting_of_ref": "indicator--ae13c43a-35c7-4996-82db-af95a3e308fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f84793-a09f-49b7-b0cd-b344b67cb7b7", "sighting_of_ref": "indicator--6b53dd37-87b2-4d00-ac7c-3d358ca3603f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f3555d-aa37-401f-91a1-7b3c8222c7b4", "sighting_of_ref": "indicator--347df87e-c725-492f-9b4c-69dda2c85f8f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8ab10e-5d64-4886-ba2a-f3c9237ce9b1", "sighting_of_ref": "indicator--347df87e-c725-492f-9b4c-69dda2c85f8f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64c5c1a-0987-4f5e-bcdb-f7f48ec72452", "sighting_of_ref": "indicator--347df87e-c725-492f-9b4c-69dda2c85f8f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7ae4eb-9f9a-41ee-91d5-9c473d562675", "sighting_of_ref": "indicator--9b1e3269-b6de-45b5-88dd-ad2dfa2adfa8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7240c736-767c-456f-a838-260e506714f0", "sighting_of_ref": "indicator--9b1e3269-b6de-45b5-88dd-ad2dfa2adfa8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495ce20a-bb31-4d9c-b28c-1c3e227e6230", "sighting_of_ref": "indicator--b070cd7a-6e0b-4489-93a4-13a82dac6ad7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f950d75e-75ee-4618-8b58-f8a0689588e7", "sighting_of_ref": "indicator--65176f3a-e3cf-4493-b378-e400c532ecb4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be214db7-1691-4386-8661-bb235b6e77d1", "sighting_of_ref": "indicator--cb3ccb50-f5fd-457d-9f23-e92e916506b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12056b8-e9eb-4783-9482-740441378a16", "sighting_of_ref": "indicator--af458063-3e1a-40a6-bfe4-aa083f03acbb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c369a9ef-4307-4bed-80ca-e22b10ba95f8", "sighting_of_ref": "indicator--302a533b-b331-4e82-9078-e29c20d5159a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f867801-0c72-424a-842b-fc6c80150146", "sighting_of_ref": "indicator--302a533b-b331-4e82-9078-e29c20d5159a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c5b644-2c00-474a-b71d-1d62507cc2da", "sighting_of_ref": "indicator--1dd57f02-b534-4aa9-a615-52f0ff0045b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260a12c2-bb6b-45cb-b0f5-f54476619eda", "sighting_of_ref": "indicator--13aae48a-3dac-4320-955e-8bf7c6f8a2af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92e4d19-9a5d-4e81-b089-49273d12a4a3", "sighting_of_ref": "indicator--8f8d07d9-88f3-49b9-a22a-7d108735db8b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d550c0fd-b0f9-441d-90b4-a17ce601c2a0", "sighting_of_ref": "indicator--71fdee86-2adf-46eb-ac11-3d1e0e202f5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530fd58a-eb50-4115-bf6c-77199bb36d07", "sighting_of_ref": "indicator--71fdee86-2adf-46eb-ac11-3d1e0e202f5d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cf3c4e-3dd9-42df-a968-18e57e640ae6", "sighting_of_ref": "indicator--9ff682b4-b83b-404f-b6b7-ed46da59947d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0c8b07-2bbd-46a4-b977-588c857bee79", "sighting_of_ref": "indicator--e9280446-d09a-40c2-bd4b-b7a8907939a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51144f8-5d46-412c-a02a-46b596f4f4be", "sighting_of_ref": "indicator--e9280446-d09a-40c2-bd4b-b7a8907939a5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ee7ef5-e834-401b-a39d-6ec1f50dc25f", "sighting_of_ref": "indicator--60355292-cb63-4f8e-a395-8c1a43cce2b8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0cecf9-8d4a-46de-b1e8-826cb340cf0e", "sighting_of_ref": "indicator--662670b9-ff05-4bf0-b044-6517ce4459ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae49bd8b-2dae-43c1-9b87-258a42562d32", "sighting_of_ref": "indicator--8a02b5fa-ac6c-44d3-a520-18d19e6cc205", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e16cc0-b1e0-497e-a51d-da01a79d9c79", "sighting_of_ref": "indicator--8a02b5fa-ac6c-44d3-a520-18d19e6cc205", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e78aa08-e16c-48c4-9a3a-5e94a19d086e", "sighting_of_ref": "indicator--d7ccc709-9ca3-4ed7-9862-a7afc988ff3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f51c2c-9272-4acb-b3f1-b24b11779606", "sighting_of_ref": "indicator--79bf6985-d0dd-4e12-8aa4-6a3e937b45cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4942e6f1-7298-4a83-91c4-72c5c436a854", "sighting_of_ref": "indicator--79bf6985-d0dd-4e12-8aa4-6a3e937b45cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3737032f-43a6-45ee-a249-d7f286101f2f", "sighting_of_ref": "indicator--c6bce7f7-b3b3-4dd5-b658-e8f7eb4bdead", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cdfaa5-c4ca-4923-851b-7bd0f7ba066e", "sighting_of_ref": "indicator--b04bbf52-e50d-4100-b232-d3fbfad7647c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab2315a-da4f-4ada-a1f6-d9775b9bc2de", "sighting_of_ref": "indicator--b04bbf52-e50d-4100-b232-d3fbfad7647c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58615af-86ea-45a3-b275-0bc78f5ac96b", "sighting_of_ref": "indicator--9cf39ec1-d78a-4328-8414-c93e2a2684e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0419dd47-f61c-4708-a597-7080ef0283bf", "sighting_of_ref": "indicator--232c58cf-acf7-4a70-8c3e-e9b37e2cb9ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5ba9df-4a11-4083-838f-01412f107d2f", "sighting_of_ref": "indicator--af8de687-59bb-4d22-b515-27e1212fee5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b0e8cf-5f36-4341-afe2-5fd7f8849623", "sighting_of_ref": "indicator--80299970-f38c-48ef-aa00-9a2a65ccba25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc30622-61b9-466c-81fd-b9b070eda283", "sighting_of_ref": "indicator--20b5122d-060d-47b0-b293-a70327a04c9e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c618c0a-e26a-4ebe-8018-680b6a7ff00d", "sighting_of_ref": "indicator--c070e39b-45fb-4fb0-927e-9615c9da3c8e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61a1015-2396-492e-aa5a-c9e6dfa846d9", "sighting_of_ref": "indicator--49db1159-171c-4409-be86-0555322e749a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1956c9-26f1-485f-8dad-be18ebd3ead1", "sighting_of_ref": "indicator--99d52665-2e80-4909-86f4-e7bb7b34455b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55ffc6c-aec2-46fa-a25b-f549462c787a", "sighting_of_ref": "indicator--99d52665-2e80-4909-86f4-e7bb7b34455b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a2ce15-ea6a-42cf-9623-2711769471a0", "sighting_of_ref": "indicator--99d52665-2e80-4909-86f4-e7bb7b34455b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454079b2-01a9-4f42-9446-e5fa6d784bd3", "sighting_of_ref": "indicator--f94633d2-e834-4f0a-94af-cabaef0ad373", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdae446b-8f0f-44e6-99e0-60b6ef4a6983", "sighting_of_ref": "indicator--bbddf2f4-9b7a-405f-9c8d-3a9a8a3c1484", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e377bd5b-4e75-4230-bbf0-4d60ddb1efd9", "sighting_of_ref": "indicator--163131ef-fce7-41fe-9d10-654e294108a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f87e9bb-b3ad-423d-bb22-0860dfd70ccd", "sighting_of_ref": "indicator--163131ef-fce7-41fe-9d10-654e294108a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5d4ec1-a2cc-41fe-bdb0-a5b956d5ba04", "sighting_of_ref": "indicator--eae59413-623a-40b3-b406-c6c03d19a83d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbc6c15-8dd9-4421-a3b9-a16a8ec5bd12", "sighting_of_ref": "indicator--000d8374-e80f-4711-8293-d16cc19f2494", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674cdc3f-b4de-476e-883d-cc960cc1533f", "sighting_of_ref": "indicator--000d8374-e80f-4711-8293-d16cc19f2494", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f999125b-6aaa-45e9-a21f-51168f277e08", "sighting_of_ref": "indicator--83cc7a65-c11b-4845-a70b-2eb04b655399", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e18fc0f-0e65-4280-8aca-f25f5d5413cf", "sighting_of_ref": "indicator--dca8dc5b-5289-4e54-be29-f7e7338bc5f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ff1686-a272-407c-a57b-669d57c0e977", "sighting_of_ref": "indicator--7db50457-2b9f-4270-958a-5b559ec5c7a4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a066ebb-5d05-4073-99f9-994deb18eaa6", "sighting_of_ref": "indicator--2c957c9f-3fcf-4f75-8a3c-6dd67e715bd7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39924f1-0be4-4b1c-a90f-fbb2cbc3f191", "sighting_of_ref": "indicator--d3803823-d9e2-4961-b5e0-f2d59b5c358f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29984596-44e9-417b-a491-fcc436fbea3d", "sighting_of_ref": "indicator--acd3752c-26ce-4914-aa61-af6ca6632c67", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f25d16-48b1-40c3-a6e5-2d8a8a1ea4e7", "sighting_of_ref": "indicator--acd3752c-26ce-4914-aa61-af6ca6632c67", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c446ae47-cb39-4e25-9e16-6963f89694fc", "sighting_of_ref": "indicator--bd550455-262b-4e19-8928-b8171af93616", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495b1c67-3443-4559-b074-c549cb591c7d", "sighting_of_ref": "indicator--bd550455-262b-4e19-8928-b8171af93616", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dcf23d-d299-4973-90c3-f5dc4d84e6a8", "sighting_of_ref": "indicator--ddfa6ddf-c321-4314-adb6-fb67c506ca7a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed880533-f407-446a-8230-57046039a038", "sighting_of_ref": "indicator--ddfa6ddf-c321-4314-adb6-fb67c506ca7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f72247f-8686-4669-8abe-2adabc9be996", "sighting_of_ref": "indicator--ddfa6ddf-c321-4314-adb6-fb67c506ca7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b4a97c-251d-43af-bf52-a91d39f00cb8", "sighting_of_ref": "indicator--d0e6066f-c550-4bff-ad95-ef3cd82ade65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8438c3-1347-422e-a270-92a015651b77", "sighting_of_ref": "indicator--d0e6066f-c550-4bff-ad95-ef3cd82ade65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee6b346-7d2a-4d76-8ddf-0c001d3cf9fb", "sighting_of_ref": "indicator--fbbfe448-bc19-4711-9792-ae0e99627fac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d066fd2b-b04e-4e6e-b758-6c63c0dee44d", "sighting_of_ref": "indicator--8b150086-d032-4f88-a1d0-35e831e9fbb6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a68d5c-15af-489f-a9ae-bd9618ffe491", "sighting_of_ref": "indicator--dc3d1118-391a-4438-9862-eb39816b4b63", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eb3067-4807-474c-ad0d-57edfb1752ce", "sighting_of_ref": "indicator--dc3d1118-391a-4438-9862-eb39816b4b63", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a881a227-6c0f-4507-a27a-1fa85ab0b774", "sighting_of_ref": "indicator--72e8969c-915c-425d-b802-57b9c04f216c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da21514a-dc31-4d68-ab67-a55a3e901444", "sighting_of_ref": "indicator--42fd4552-0753-4d52-82ca-15b2f8a13f8b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9184f8-dcd3-43c1-8b4b-7b662271ffdc", "sighting_of_ref": "indicator--42fd4552-0753-4d52-82ca-15b2f8a13f8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea788ef6-eda7-4e44-810f-fd9869a86af8", "sighting_of_ref": "indicator--42fd4552-0753-4d52-82ca-15b2f8a13f8b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad007e91-cbaa-4a52-89b7-a8aad254f6bc", "sighting_of_ref": "indicator--c6993f75-7965-4c11-b309-767802317797", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bc0fff-071a-4b82-ba66-0b25fab5ffce", "sighting_of_ref": "indicator--c6993f75-7965-4c11-b309-767802317797", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4bf02e-8135-4df1-9aa1-6e048882cc84", "sighting_of_ref": "indicator--a41c4cdc-6f31-4adc-8fd6-c156713ecda3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00170d7e-ac2c-4951-9a82-b2315e9b2e1f", "sighting_of_ref": "indicator--c3fbe10c-cf02-42c6-8019-32f086a88b8a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4fa239-78d8-4b53-b5e2-c6c7d2cd0f80", "sighting_of_ref": "indicator--3dac5ad3-6cba-4cd2-ac69-1c3d3d638411", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662aa0d4-c270-4c1f-b56e-ea08d66101f3", "sighting_of_ref": "indicator--69e533d0-f60e-40fe-9957-786da77a86b0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203a12af-0703-4cac-a8eb-5253fcf445a4", "sighting_of_ref": "indicator--cbfa2e69-fbe3-4987-bf91-00a498b46233", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15d0a4b-4668-49a1-a959-d45c4390ed93", "sighting_of_ref": "indicator--cbfa2e69-fbe3-4987-bf91-00a498b46233", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f5e185-f5ef-414b-995c-50d3ece8e93c", "sighting_of_ref": "indicator--27711077-30a9-42d2-a719-bd763ada3961", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ee7099-cc68-4483-8b75-a7d0917ab5ab", "sighting_of_ref": "indicator--27711077-30a9-42d2-a719-bd763ada3961", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4137fd11-97bb-48b4-8db1-2f1f44b632a0", "sighting_of_ref": "indicator--806d3bc7-8d2a-4527-a795-15ef9aa2bbdc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc736a1-e0f3-444f-9357-8535161f463d", "sighting_of_ref": "indicator--806d3bc7-8d2a-4527-a795-15ef9aa2bbdc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53fbb2a-e925-4249-99e9-970c1778163f", "sighting_of_ref": "indicator--ea6197c6-5521-42a2-9441-6cb602f4803f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8003925-57f7-4d2e-b94e-64db22a3f37a", "sighting_of_ref": "indicator--bd4a4fcc-57de-4bdd-b1e3-ea1b5b0b1654", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c1dc30-3e04-4504-8de1-0bc1f17263bb", "sighting_of_ref": "indicator--c8e97b7b-dd1e-48be-a91a-e79e044a6ca1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96472d5-7af6-4f8d-9bca-26c6d4d42722", "sighting_of_ref": "indicator--2b1d1369-7f95-4e8c-ad49-8147ef269b0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195a2dc3-36cb-4282-9f35-029558b1cfad", "sighting_of_ref": "indicator--2b1d1369-7f95-4e8c-ad49-8147ef269b0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bb1bfa-a5e8-47b3-9f78-15dd276f2ca5", "sighting_of_ref": "indicator--a93e98ae-f0c0-4a72-ab8d-b76901391393", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97228b4e-7ee4-4fe3-8d03-60a0883eaf89", "sighting_of_ref": "indicator--4c345ab6-2002-4515-b9bb-aaa72363cf3a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0a01ff-16ad-4abb-bfa5-b2c5aa5545d0", "sighting_of_ref": "indicator--3718dd0b-4d78-481d-ac88-f20eb06e4e21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86163c97-f42d-4520-9922-1018ff2c4589", "sighting_of_ref": "indicator--b1dda524-32dc-4de6-ae40-e5da3739321e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364e6349-d83d-47fc-aab4-0128ef9862cd", "sighting_of_ref": "indicator--d2608617-5b8c-4d15-899f-29a6a8ee56f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7cda13-198d-4a64-88b3-888ec3e8e88f", "sighting_of_ref": "indicator--7859efde-6eff-485a-bb5b-9166181dce1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d56e7de-531e-4d2c-8175-4ba845dd23b6", "sighting_of_ref": "indicator--3b2e1b7e-c77a-48eb-937a-89a1bc78bf56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f60de41-913e-4c7f-b501-139f4c5dcf74", "sighting_of_ref": "indicator--f29990b0-ba7f-4500-a07f-5d258f1cc8cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4d8a2c-69a2-4242-bffb-3d8e2ab9c448", "sighting_of_ref": "indicator--1b0b18eb-892f-4ae7-8579-454d72482fc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a869b855-1ef8-45af-9434-f6588f15749b", "sighting_of_ref": "indicator--5a1c6072-d057-4450-9aac-f317f68323ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d01c7c-37f1-4d7c-89a1-001949378985", "sighting_of_ref": "indicator--5a1c6072-d057-4450-9aac-f317f68323ef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791a4dd1-9cfc-4a6a-a3c7-ac4bc2015fbe", "sighting_of_ref": "indicator--07d4b893-1eb5-47b9-a81a-73b6288ec80d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79db2e1-1496-497d-83e7-c2bacc9d12a2", "sighting_of_ref": "indicator--07d4b893-1eb5-47b9-a81a-73b6288ec80d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e09d6ba-ff3f-45ca-9fac-c6910c164473", "sighting_of_ref": "indicator--33acd617-cb09-48d0-8d1b-8e8ab426ad44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7f0cc8-4807-44b4-ae2f-765ab653cc39", "sighting_of_ref": "indicator--33acd617-cb09-48d0-8d1b-8e8ab426ad44", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad8b01a-1b74-4252-ad75-ab96edb33499", "sighting_of_ref": "indicator--7548ed90-5688-46c9-93d2-d5b89c88c072", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fecabe1-f039-4182-b6de-8ebd97fba84e", "sighting_of_ref": "indicator--7548ed90-5688-46c9-93d2-d5b89c88c072", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9227e87-b095-464c-a492-042bc14137e3", "sighting_of_ref": "indicator--85dbea1a-13f9-4a94-9425-6759a903a484", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8168ca52-6276-43ee-aee4-6e2a57c127d9", "sighting_of_ref": "indicator--5c53875e-ea5c-4610-a867-ad818a77080f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863780f9-fa16-4e06-8b7a-c40b0ca41c45", "sighting_of_ref": "indicator--5c53875e-ea5c-4610-a867-ad818a77080f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9629b9c-f5ef-451a-8be7-2797314406ed", "sighting_of_ref": "indicator--13edecff-f0cf-445b-b907-d52b2658ca5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f551b894-c267-4f9f-a50d-d61631920c9f", "sighting_of_ref": "indicator--eae20088-aaa8-4505-98b8-a1072ef90cbe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4b8ff7-467f-4f74-9adc-a8ac074be8a1", "sighting_of_ref": "indicator--eae20088-aaa8-4505-98b8-a1072ef90cbe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9229e1c1-bad4-48b9-a91d-0d990c92ac33", "sighting_of_ref": "indicator--e7037fd6-7f44-43ed-823e-950c02beadcf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa28111b-acff-4e71-b46f-abbac1ff1921", "sighting_of_ref": "indicator--e7037fd6-7f44-43ed-823e-950c02beadcf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fcd72a-34ec-4c54-ae82-91d1b564add0", "sighting_of_ref": "indicator--98770f8c-4d3d-446b-8f6e-f718a07a4b62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f92afc-6846-40e9-bb9f-77d46c960426", "sighting_of_ref": "indicator--ca386b52-4939-4c79-bc11-3d23645b502c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae10a50-21a2-45d6-8357-1caa6bf0c1a1", "sighting_of_ref": "indicator--dc3bda22-4543-42b7-95a3-7cf6a9f5a58e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471c0bb9-1338-4641-bd52-1d4720753fa2", "sighting_of_ref": "indicator--497ecda9-ef59-4cb4-bf10-b6fa19ad1fbe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab56175-4067-4798-a4eb-19b8e61e5486", "sighting_of_ref": "indicator--d6bebb69-04ed-4c35-b448-08987f597236", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce554c7-8954-4a76-8bf8-e487b7049a19", "sighting_of_ref": "indicator--d6bebb69-04ed-4c35-b448-08987f597236", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8a0cee-c53a-4d2c-825e-79c6793045c1", "sighting_of_ref": "indicator--56d9edb4-266d-48d6-b205-3108eda313cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c807d3df-e8f9-4479-9993-eacd16eb8bc9", "sighting_of_ref": "indicator--6549302c-aeb6-4279-8fe3-2126584a29e5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba7c17f-21fb-48dc-8dcf-d9b7c51e13ff", "sighting_of_ref": "indicator--bd40b781-be4e-434b-af7d-332f63dfd58c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38d54c2-a5ee-4cd8-943b-3e10fe479f1d", "sighting_of_ref": "indicator--2d2652d1-b274-4335-9852-69b4eb1d604f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9034f36c-1624-4443-b88d-b3a45fc24cc9", "sighting_of_ref": "indicator--6967cfe1-f5b0-4d67-a380-f08ef38ac8cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f893d16-6286-4ba5-8f5b-5538f88a6fae", "sighting_of_ref": "indicator--f91aca9f-b713-465d-bd75-ef51ec29525f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37f564b-47a0-4c23-99f6-c0c7107fe996", "sighting_of_ref": "indicator--844ccb30-d8f8-4ef2-b76c-e429c21a0431", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4215cd8-3f4f-436a-bde9-8a3cdd9a6138", "sighting_of_ref": "indicator--69475020-370b-4d19-a7d5-51a1d56378c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a49898-67ec-4d1c-8bbd-002dbd386e44", "sighting_of_ref": "indicator--36e9d644-611b-4d0b-9809-0722678dfcd5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34196d1e-b80f-46ee-867c-266d7657335d", "sighting_of_ref": "indicator--d71ab231-1f65-4c7c-9eb3-dbc266f494e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed46e27-67bc-4319-9024-77736ec91f1a", "sighting_of_ref": "indicator--734c1bac-fd51-4052-ae41-3c9b7c521ca2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0c76cf-a976-4f40-bf8f-5a2dcd1f355a", "sighting_of_ref": "indicator--28f4a737-0fad-4afa-9e03-f655242e2dc6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ec375d-c2c7-4698-a697-86a6163c847c", "sighting_of_ref": "indicator--864095f2-ed7b-4cf3-9fd7-c8b7050df8c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace4d701-7803-47b7-8732-8fcf731fa2b0", "sighting_of_ref": "indicator--13634b80-9d35-485a-a621-c6790ecc2a94", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb032d6-1645-42c3-864e-5ef659f73bdc", "sighting_of_ref": "indicator--28dd469d-4b01-42a5-83a2-ee0e5189e3b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f2f4a1-45d0-41d0-98cc-f7c9a1411644", "sighting_of_ref": "indicator--e90d4f84-22c1-466f-9b3d-3c7ea3a72bc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b71eca9-b967-448e-b9d2-bd5fae0dd28d", "sighting_of_ref": "indicator--6677987f-f7ad-4d57-82e8-906af1ac62c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c16216-01c5-4198-b2d3-81720db51f99", "sighting_of_ref": "indicator--94e35fbe-3bac-483d-928e-7af543d58441", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7206f54-61ed-4e67-a92c-83defa112b86", "sighting_of_ref": "indicator--efa0e1ca-8a44-435f-b638-fcfdf4263b4b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d757154-0117-4e1e-ba2b-96916c865a91", "sighting_of_ref": "indicator--cdf50342-d54e-4ebe-bbd0-3baf40069760", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cb97f9-076b-4aeb-9282-13f45572c048", "sighting_of_ref": "indicator--923d9908-b636-4d5c-8e62-222cfb470faa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eca0ec-81ce-49d8-a5ae-7e9c6ecc5533", "sighting_of_ref": "indicator--bf27fa61-5efc-4e4e-83fc-065511bca137", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b59c77-d128-4ed7-858d-923102dbcf49", "sighting_of_ref": "indicator--7f6b4098-c767-4fdb-89ba-cbc029e321b9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d144c7-8d29-4ac5-b10b-3a28ab025dd7", "sighting_of_ref": "indicator--1eba7882-99f1-4a2b-88e4-9b7a657b632f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e9d10a-19a4-4b3f-8a3f-29af3b6ddc12", "sighting_of_ref": "indicator--1eba7882-99f1-4a2b-88e4-9b7a657b632f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cbbdcb-fed3-4719-9fb1-40715aa11bed", "sighting_of_ref": "indicator--1eba7882-99f1-4a2b-88e4-9b7a657b632f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66802e1-c416-4e74-8324-38e00ef0863a", "sighting_of_ref": "indicator--10948b9f-77a3-4379-b213-2da825625952", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3384867e-9d31-4478-b6a7-13c2d968d3c3", "sighting_of_ref": "indicator--34beb7ff-0eb4-4422-8cb6-abe9df9d7c12", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e44d4de-6cd0-40db-8c6e-71ff8a614f3d", "sighting_of_ref": "indicator--73506cec-c792-42ab-bb07-49cb83bad346", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421a4218-7573-4880-88ab-2fa891483927", "sighting_of_ref": "indicator--125b309a-2f33-4c41-9e05-6f94dd36edf8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddfcd14-c651-4a33-b481-2f0a87ff1aca", "sighting_of_ref": "indicator--1c961804-ed49-4a50-9d94-77eb467ed649", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f379e1-dd16-45ac-863d-a27e0aba471f", "sighting_of_ref": "indicator--1c961804-ed49-4a50-9d94-77eb467ed649", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfdf754-344f-43ae-a5ea-3ccd0754339a", "sighting_of_ref": "indicator--6add0680-131a-4cdd-af4c-36f5843883c3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09de411-ebb7-4670-8058-928881a7fd87", "sighting_of_ref": "indicator--06dc93d2-1c95-4b10-a15f-bbcbfdbb9e9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82669738-c762-4362-a786-ed81372de1e6", "sighting_of_ref": "indicator--d8b8b00d-ea06-4143-9e36-9a2fd084f267", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ded2f1-adb0-427f-a575-ffa7e9e6ea08", "sighting_of_ref": "indicator--8bbb5fe5-888b-4929-8a01-e3f009585228", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ae824e-0efb-4735-ad5d-385e51e10cbc", "sighting_of_ref": "indicator--6246edd6-5d75-44da-b086-1cc1bc704175", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d54371e-d495-45af-b56f-fae2751a0c1c", "sighting_of_ref": "indicator--6246edd6-5d75-44da-b086-1cc1bc704175", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a4a60d-70ff-4d06-b7f6-003a6fbf25ae", "sighting_of_ref": "indicator--58bf6590-6b7a-4bd9-907c-aefa07a051fe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17067bff-e6b1-4fd7-97a0-37e04e575269", "sighting_of_ref": "indicator--58bf6590-6b7a-4bd9-907c-aefa07a051fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37c5aa1-462e-46ed-b12b-aef347ad11b5", "sighting_of_ref": "indicator--b4d12e29-1e09-46f9-96d4-7c644fe87ed6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47945d5d-1f29-4a57-8cf6-8f7db3243bb1", "sighting_of_ref": "indicator--b29b2ce8-f3c6-4dd5-8fb4-5acc71054fc8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95056ffa-0fb0-4632-86cb-75ff66d327ea", "sighting_of_ref": "indicator--cbc32c90-cc56-4481-8c88-f91c54abedef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c233cc-d23b-443b-87d5-f72732dc1125", "sighting_of_ref": "indicator--cbc32c90-cc56-4481-8c88-f91c54abedef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ffd793-be35-4ce9-9f34-30bd1025d036", "sighting_of_ref": "indicator--45104e29-beb6-4c66-9fbf-8756f56bfbc0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e42a275-d9b4-410b-af58-4eb434d90c6c", "sighting_of_ref": "indicator--45104e29-beb6-4c66-9fbf-8756f56bfbc0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b68d158-fa17-4816-884e-16a488a7a916", "sighting_of_ref": "indicator--45104e29-beb6-4c66-9fbf-8756f56bfbc0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb9b8c8-f7fb-4a51-a4a0-6ac76477ca1e", "sighting_of_ref": "indicator--4ea2f77f-8037-43ce-b81b-8e9b7711445a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc033074-9f0b-4345-9d8d-974b12a3240f", "sighting_of_ref": "indicator--4ea2f77f-8037-43ce-b81b-8e9b7711445a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02af591-28e8-4f0c-b590-c9a43ac5e092", "sighting_of_ref": "indicator--e3345a1f-77f3-4f04-9e62-912ab6eadc26", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6f17b1-a59e-4829-9e63-69840a504e90", "sighting_of_ref": "indicator--22314cfb-7b92-46a2-83bf-f16fea471d9b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db85f71f-2090-4973-b9bd-ea4e5786b5a4", "sighting_of_ref": "indicator--874754ad-8a1e-4f16-a03d-71f0d7897fd8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160bba89-7205-4017-8932-b8ab64cc3b95", "sighting_of_ref": "indicator--3713cda4-c964-4af5-87ee-878dd525651e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d134880c-a4a2-45a3-8b25-f9e5bdfbffba", "sighting_of_ref": "indicator--3c88acff-1d5f-4c80-a601-56ee4e698a12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ba83a5-93ca-42a3-a5f3-1910513a1451", "sighting_of_ref": "indicator--3c88acff-1d5f-4c80-a601-56ee4e698a12", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a94977-a699-4808-81c6-3814924cb45c", "sighting_of_ref": "indicator--8c85e21b-58c7-4faf-be11-cb44f6ad9374", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08f3fbe-1efb-4ca4-a290-4c26482d1a9d", "sighting_of_ref": "indicator--f0dd42b6-c211-4e14-99f4-8f48e0e9259a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd151a8b-ec3b-4cec-b8d3-48b169556e99", "sighting_of_ref": "indicator--dfa7ec96-d005-400e-bb9d-7853247a7883", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f763c821-8fef-421b-bb37-e89a8127ce99", "sighting_of_ref": "indicator--4ac5f233-2ec6-4677-9148-5ab4739eed78", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaae553-5078-49b0-9c28-f3240d69da02", "sighting_of_ref": "indicator--d227a3c0-5053-474d-a204-0b82f043b9e6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab640d1-1f27-482c-90d6-9776b627ff29", "sighting_of_ref": "indicator--7c1e66b7-77c6-42d2-a83c-fd4223a79106", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c904efd-ae47-4150-9d05-6713ce780b1a", "sighting_of_ref": "indicator--16db7aa9-bbb1-4d51-aa5d-f8d439a38133", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22390ca-8e7b-44d0-9acc-fdfe48a5a0d5", "sighting_of_ref": "indicator--e804ced6-33e8-4824-a700-e7dad1288056", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3194887-69ec-4953-ab5e-caab5478e3cb", "sighting_of_ref": "indicator--e804ced6-33e8-4824-a700-e7dad1288056", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b377b35-de2d-4112-b49f-2449bd14803a", "sighting_of_ref": "indicator--cb419d3b-1235-4b9e-ba78-bef694f716bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8f416a-b043-42bd-bf1a-c181fc7b40ec", "sighting_of_ref": "indicator--ccbc4155-df4e-4d13-8d13-b3b7c4432652", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc93ad08-655f-45dc-9cf1-48ff2001cdf4", "sighting_of_ref": "indicator--ccbc4155-df4e-4d13-8d13-b3b7c4432652", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c2034f-8961-4fd2-854c-68be2837ac2d", "sighting_of_ref": "indicator--6ba5d752-c1a5-446e-99a7-651aecdbc083", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8359e6-5b66-4342-b709-88f447e1e8b2", "sighting_of_ref": "indicator--6ba5d752-c1a5-446e-99a7-651aecdbc083", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9855905-72ba-4f41-bce3-4960219d47cc", "sighting_of_ref": "indicator--35d4f770-aca0-421f-89fc-a65a7b74bb4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eef468a-4237-463d-8f93-759114800a67", "sighting_of_ref": "indicator--3b8635c7-b2e5-4452-ab3c-0652fd11b34a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9f95b2-8121-4b78-859d-d885e4afbe3b", "sighting_of_ref": "indicator--3b8635c7-b2e5-4452-ab3c-0652fd11b34a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0adf464-36a6-45bf-9773-6ea8689910ed", "sighting_of_ref": "indicator--2d2383d8-4c33-4f50-a0d7-1b4bbcede9ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f869139a-f3b5-44fa-bdba-1d235af46a29", "sighting_of_ref": "indicator--9fa3e099-460c-403f-a422-81c511eb26e8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7e189f-0f57-4d53-ac2c-a78e8670270b", "sighting_of_ref": "indicator--dfb986d0-cfc4-4597-bed0-8d2a178cd6f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa9fd22-8138-4979-aa9e-827073c0abc5", "sighting_of_ref": "indicator--dfb986d0-cfc4-4597-bed0-8d2a178cd6f2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e883940-3f30-4570-9be5-91086e1feb87", "sighting_of_ref": "indicator--5d81e6b6-baf1-41e8-ba20-71455098c9e8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d51bbf-0a4f-4018-899b-75513648d98e", "sighting_of_ref": "indicator--347aca86-b330-48cd-bbf2-101bef75b148", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0958b71-9060-41bf-912f-00d0c8837b55", "sighting_of_ref": "indicator--347aca86-b330-48cd-bbf2-101bef75b148", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbad5ea-d54e-46eb-8959-b2fa38542c47", "sighting_of_ref": "indicator--85f9b488-df3a-47ee-b716-bc98a18df6af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd57d02a-e59f-4aa4-9c56-d387af5df9bf", "sighting_of_ref": "indicator--65553e1e-750b-4f08-ac38-a0f873593a6c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcc417b-a331-46e2-9be4-88fcf0b2fa16", "sighting_of_ref": "indicator--e8dbc90b-a09b-4392-852d-112777fff220", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf610fa-6363-4463-bebe-a5463ee7bca9", "sighting_of_ref": "indicator--16dab15c-709f-47ea-80b8-8734657c6495", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29e3346-2c80-45ad-abaa-89af6f25e8db", "sighting_of_ref": "indicator--d4becc9f-a618-4ab8-9524-d0f61ccc0cd1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252bec36-d018-4283-9404-85a9b020fdca", "sighting_of_ref": "indicator--06c9f837-dfe7-41df-8a82-a33b6b58f1fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30123da1-41dc-42b2-8579-fae504627f0d", "sighting_of_ref": "indicator--06c9f837-dfe7-41df-8a82-a33b6b58f1fe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1584666-3cce-40e7-beed-cb417cca4d64", "sighting_of_ref": "indicator--887eb999-c004-4eb4-bf2c-86cec3ddc75c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b780a6f7-d33c-4980-9386-67be48eb8c45", "sighting_of_ref": "indicator--8075d196-7ece-4768-8351-53c66cef9626", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a30fcf-e19d-4617-980a-be89f741aa95", "sighting_of_ref": "indicator--4520663f-8e14-47f7-b315-e47d1ede12a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb5963a-bde5-47ef-8a62-7c01459acf64", "sighting_of_ref": "indicator--40e666b2-93d9-4447-bb59-134a6f3e2101", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bc2967-6b13-492d-9dad-564d95efb7c7", "sighting_of_ref": "indicator--70c4e6e4-bc52-478a-a4cd-695bc21a59d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0824f845-ff18-4780-9df2-90f1d5867ffd", "sighting_of_ref": "indicator--ad5542ac-7d49-4aaf-b423-9bdd102dc41f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a403626d-7126-4cd8-8fd4-f4fe3ca164f0", "sighting_of_ref": "indicator--ad5542ac-7d49-4aaf-b423-9bdd102dc41f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e045d140-5395-44cc-a81a-550fb9524a3c", "sighting_of_ref": "indicator--e0695d4a-e5ea-4989-be6d-8af8c076e5eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c508ca-3768-4e61-9fb2-5f3a6d759108", "sighting_of_ref": "indicator--e0695d4a-e5ea-4989-be6d-8af8c076e5eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0701933f-bea5-45b1-9305-6734c14f4b50", "sighting_of_ref": "indicator--4d226c26-c5ac-4bf6-af13-06f8d83b22b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f5d948-b809-4c89-b64b-1a3b44ed37d2", "sighting_of_ref": "indicator--43b18a78-47bc-4ffd-8807-8042c6edde2f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286c334c-e846-4522-a07e-950d41db5eb3", "sighting_of_ref": "indicator--43b18a78-47bc-4ffd-8807-8042c6edde2f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47f5554-fa3d-4dab-bc63-01637975fabb", "sighting_of_ref": "indicator--43b18a78-47bc-4ffd-8807-8042c6edde2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5c9cea-9e8e-46c6-b61e-afa22863505b", "sighting_of_ref": "indicator--b45e7ef1-0386-4805-911f-20675801ac03", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c77fb89-689c-4086-8bd2-272e9e51733c", "sighting_of_ref": "indicator--e5815d57-133c-4443-ae72-d14d25f73ae9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509f70e3-8e16-4ac2-a1b4-c41771b6f676", "sighting_of_ref": "indicator--5da5343c-9d5e-4dd6-9ecd-0cb1bb532571", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4278b053-5950-4cae-bd65-d0c0ee7d1b3c", "sighting_of_ref": "indicator--5da5343c-9d5e-4dd6-9ecd-0cb1bb532571", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae93a18e-a623-4b45-ae24-0e26449f4daa", "sighting_of_ref": "indicator--fcfea59f-8b32-43ed-9559-0cd18a1bcad2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de68680-c07c-4be0-ba62-52b1686f9ab6", "sighting_of_ref": "indicator--92b853b5-a491-4ffd-a139-4a6ebe4002c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbe14ce-0790-48c8-9f85-fcea6a188299", "sighting_of_ref": "indicator--0ab9badf-4b81-4dff-a461-a4cfeea7071f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14367dae-96fb-486a-a58f-e4bd7442c6c5", "sighting_of_ref": "indicator--1ca0d7e0-2b3a-4cf7-91ce-21f44a885c45", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e366ac8-ca43-4664-b4c4-bcf1c751d086", "sighting_of_ref": "indicator--e6975d38-3b46-40e9-be2c-bdf1e567d63f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71173115-8968-4186-b91d-5a00f2a5ab1a", "sighting_of_ref": "indicator--bae295cb-8536-45de-8ac5-5b379a5798ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd57742e-c0e8-4865-9768-868b8ac51e92", "sighting_of_ref": "indicator--c5e71234-0e9a-431e-b9cb-81746bfb55ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a6a743-0aef-4b2f-8673-05e23421b3be", "sighting_of_ref": "indicator--cc378b79-342b-4511-b066-6845d24851d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d82624c-cfaa-40be-a436-0b45723f9fb6", "sighting_of_ref": "indicator--cc378b79-342b-4511-b066-6845d24851d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3663453-39a3-4c8c-addc-62604bf8f89f", "sighting_of_ref": "indicator--e22ce76a-28f8-4d3e-b527-8d51130c8bb9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26b1afd-a025-4d8f-90df-0556448b5bef", "sighting_of_ref": "indicator--e22ce76a-28f8-4d3e-b527-8d51130c8bb9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4414505-0083-44e0-9603-80f8175edb37", "sighting_of_ref": "indicator--afaafb9e-bf3c-4acb-9692-11c9e248fdf3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbba03dd-e5a1-4b18-829a-60937db91e0b", "sighting_of_ref": "indicator--8dfc111f-48b1-4c7a-bd2e-f3b7ea7e9e0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b216355-7ef1-469f-a3b1-a8c7e8135738", "sighting_of_ref": "indicator--8dfc111f-48b1-4c7a-bd2e-f3b7ea7e9e0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc7a631-66c2-4a95-9b31-5a64c198eeca", "sighting_of_ref": "indicator--cef7a7f5-390a-4a25-acf5-a683257c18fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c11f7c-5f3b-4837-9271-945222cdd291", "sighting_of_ref": "indicator--946b80b9-d2f4-4bc2-985b-760cade5d23c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07dd67c-c487-4e99-b826-a78e3a6d5152", "sighting_of_ref": "indicator--7ee06321-e0f0-4ef1-ae29-4a22b04df0a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013c1e02-f4b2-4949-aae3-8f1ffcd5cdd3", "sighting_of_ref": "indicator--7ee06321-e0f0-4ef1-ae29-4a22b04df0a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74fc0c9-c147-47e2-ae35-b68c1d4eb4ff", "sighting_of_ref": "indicator--d026c8cc-ae1b-46b6-b972-17765255900c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6d50d7-608d-4d73-bda7-8d93057a9968", "sighting_of_ref": "indicator--c413eba7-77c6-43ec-b580-7e81304d936b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e20f84e-46bc-4f77-8887-3a19664ab60b", "sighting_of_ref": "indicator--c413eba7-77c6-43ec-b580-7e81304d936b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d2ca5f-235c-4366-891b-563db63233fd", "sighting_of_ref": "indicator--c413eba7-77c6-43ec-b580-7e81304d936b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0238d5-a32f-47a3-b206-d9c32723d7d0", "sighting_of_ref": "indicator--fe4f4b0f-04a6-47ea-b3d6-5c147766c994", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650e9b72-fdcd-4c81-8076-9c6d9cd8f051", "sighting_of_ref": "indicator--c16c71a8-15f4-4dfe-9e0e-fa7049ddebd4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0089105-7b7c-449c-b1df-7f1dc32783d1", "sighting_of_ref": "indicator--bc7be09d-3317-4c75-bc56-991331fdaea2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d171a8f-bced-4b5a-8e50-8b5212296801", "sighting_of_ref": "indicator--201b4ccc-ea08-418b-a27f-1879098ed721", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf32b556-c210-4aa2-93f9-abf5dd558ecc", "sighting_of_ref": "indicator--201b4ccc-ea08-418b-a27f-1879098ed721", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac339d79-bbf6-49b0-bda8-ac3dd2bce5b2", "sighting_of_ref": "indicator--ee6caee1-28c0-41d3-8b8f-158f2c022a81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a83b095-1493-4880-82be-9e66e54acb53", "sighting_of_ref": "indicator--ee6caee1-28c0-41d3-8b8f-158f2c022a81", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6290518-7cc8-42d6-ac10-be288c2b3660", "sighting_of_ref": "indicator--ee6caee1-28c0-41d3-8b8f-158f2c022a81", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0274901-2a25-4ee0-b2d6-62406e4b2213", "sighting_of_ref": "indicator--ad5f0035-840d-479f-8f5f-4d6b571c8d2e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28087a44-9b01-4db6-8d05-de0f13d3bf83", "sighting_of_ref": "indicator--58ed7d18-2979-44e8-a44a-594e3ac3ad6f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29178d47-0dc5-45fb-bded-3f072b1557e1", "sighting_of_ref": "indicator--542e86ca-26b3-4bd3-a811-4cdef09a78fc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9228d054-d0df-46a2-a340-e2e2b179be21", "sighting_of_ref": "indicator--aa6c6e40-e99e-45ae-ba64-883f22dd2fa3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df5eee0-bec5-4af3-8879-f6cdf0aec1e6", "sighting_of_ref": "indicator--aa6c6e40-e99e-45ae-ba64-883f22dd2fa3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1fba36-5fb2-4c9a-bbbf-95fc9d7d407e", "sighting_of_ref": "indicator--aa6c6e40-e99e-45ae-ba64-883f22dd2fa3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9e3cd9-d5bd-4d39-a452-4773a676e1b2", "sighting_of_ref": "indicator--fc8b11d2-be1f-41fe-a586-22064b4e7c19", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889abbba-6d49-4704-8a94-37e29c653a8b", "sighting_of_ref": "indicator--fc8b11d2-be1f-41fe-a586-22064b4e7c19", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d4c943-33ea-424e-b730-d344296e329a", "sighting_of_ref": "indicator--1fec362c-09a7-481a-bc0b-b2b72fafdf97", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc14cf0b-1dc1-4aff-93b1-477344edac68", "sighting_of_ref": "indicator--1fec362c-09a7-481a-bc0b-b2b72fafdf97", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906cf6d7-a2a7-4652-8abf-6957e0533b1f", "sighting_of_ref": "indicator--f2dd614e-4f00-4757-b97d-7c9e0961dbba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba4b2e7-dd74-411c-af6c-446adfedc515", "sighting_of_ref": "indicator--f2dd614e-4f00-4757-b97d-7c9e0961dbba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45b4af6-1bb0-44cb-9852-d3e03b968492", "sighting_of_ref": "indicator--8a771d4d-3e5d-4814-b345-a3736b538319", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddc578c-3941-40e2-ad9b-fc21ea7df6f2", "sighting_of_ref": "indicator--d39d257a-34b9-40c3-8958-92754b7f5983", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389131c2-4e16-470c-8d6c-183829ac338e", "sighting_of_ref": "indicator--940fb7f9-42f2-4cfd-93b5-f90e0a560efc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25faa01-40c6-42eb-bd47-7ac71d961dac", "sighting_of_ref": "indicator--48a2f809-b831-47e1-af36-80c5fc8f3e28", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636c8020-6a04-46db-aaa2-3129114d4be2", "sighting_of_ref": "indicator--48a2f809-b831-47e1-af36-80c5fc8f3e28", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e7aebd-de05-4f31-b868-806f174e1b77", "sighting_of_ref": "indicator--48a2f809-b831-47e1-af36-80c5fc8f3e28", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f878c0-9655-4198-9441-c576f54283df", "sighting_of_ref": "indicator--dcb579ce-46a6-4d47-bd0f-cda6986daed3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e1f8af-452b-421f-8a0f-7bea2f410a37", "sighting_of_ref": "indicator--dcb579ce-46a6-4d47-bd0f-cda6986daed3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e03f8fc-d469-405a-a859-612ac61bc08b", "sighting_of_ref": "indicator--8aeeaebc-cecc-4f63-a76c-26c4f4dba86c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac54015-647c-4cec-89ae-1f7c956045d5", "sighting_of_ref": "indicator--9dd389b6-6126-464a-9ca1-8eac109ed92d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eb5625-e307-4882-846f-779575f7dd8c", "sighting_of_ref": "indicator--9dd389b6-6126-464a-9ca1-8eac109ed92d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70f5139-dd2c-47d9-96e8-ca3290fe87d9", "sighting_of_ref": "indicator--f8c0036f-b5ee-422f-8e7b-8c30a71ecc6c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca25317-0f34-4307-9fd6-6c4521426e7e", "sighting_of_ref": "indicator--11b38de3-4629-49e8-99c8-6cfaac5e2cda", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdfa765-a0e7-4e3c-b257-a75710d2401e", "sighting_of_ref": "indicator--0d146b09-f24c-4d60-becb-1eb304aa8e29", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338a3050-9779-4a08-a669-866e6c20579c", "sighting_of_ref": "indicator--774d4bb5-f42f-46b0-84be-a695d04f1c01", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a9da3c-a571-425a-b08d-ad7f63300986", "sighting_of_ref": "indicator--61d1b756-31d1-49b8-b524-6844b967ee04", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8ecbae-dea1-42cc-a3ea-62b236f9ac26", "sighting_of_ref": "indicator--61d1b756-31d1-49b8-b524-6844b967ee04", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68125328-49b6-4d03-a206-366b39cc8fac", "sighting_of_ref": "indicator--c3b623eb-85b6-4017-9427-282d75233eec", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2d19d0-0677-496e-8263-ae762d019518", "sighting_of_ref": "indicator--c3b623eb-85b6-4017-9427-282d75233eec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2c3c67-7c1e-44ac-a628-6382bf8c6ddf", "sighting_of_ref": "indicator--c3b623eb-85b6-4017-9427-282d75233eec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d219e83-bdc4-4c2c-91cd-4ce86eb9217e", "sighting_of_ref": "indicator--c79317a5-dfac-4767-a203-c9cac18ef922", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35e2245-3c46-4aaf-8408-b8f5ae90ef6b", "sighting_of_ref": "indicator--7a3c03a9-b81f-4437-b5fb-8d362b6ce289", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2923b2-c3ef-47dd-97b5-6e83e6d6bf69", "sighting_of_ref": "indicator--caac1adf-2023-4dea-9d2e-effa576f4281", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0535553a-4609-4f09-b686-647283e70663", "sighting_of_ref": "indicator--802f28f8-5800-4f7f-ad34-19bdb654473b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5186e7-380a-4e07-85ca-a3af8c4843d7", "sighting_of_ref": "indicator--9c6499af-b85f-4708-9057-5d8e1f7219b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25bb9d0-59e7-424c-9916-8b65f30e438a", "sighting_of_ref": "indicator--ae8fdf7a-a310-4dd6-824c-3b2022cb4254", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f31717-6d95-4939-80ac-353b163a5494", "sighting_of_ref": "indicator--6b1512ba-005a-422a-a8cb-33c13bf58246", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddf2238-b424-4214-ab04-b551ec2dc0cd", "sighting_of_ref": "indicator--6b1512ba-005a-422a-a8cb-33c13bf58246", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3d276c-43eb-4e29-a7e4-084c999a8aa1", "sighting_of_ref": "indicator--711e3b14-8f92-4148-afb9-d6e53561bb2e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41412969-89a6-4467-ae82-a9cb5b1e01d5", "sighting_of_ref": "indicator--711e3b14-8f92-4148-afb9-d6e53561bb2e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c443721-063b-4a18-adf2-33fd30869676", "sighting_of_ref": "indicator--00012cbf-0986-4085-ab37-0c36ec4a322d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fb59da-7019-43f5-9d98-7c8199628846", "sighting_of_ref": "indicator--a74ab554-4f8f-446c-82e9-849b40e8b520", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa07374-7f1b-4a93-ad03-956eb08ddca4", "sighting_of_ref": "indicator--e3d5d60a-8156-40db-9be4-21bd15f94df1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cb901f-ad12-4707-9c38-fb91e57b726f", "sighting_of_ref": "indicator--e3d5d60a-8156-40db-9be4-21bd15f94df1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2f0733-98c5-40dc-b9df-deb178e6b3d6", "sighting_of_ref": "indicator--ec87db43-a369-4c3f-9b67-b28bbc4083a1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567cb509-33b4-43e9-8ff4-61620e8e73ae", "sighting_of_ref": "indicator--d164e610-cd39-428d-bfd6-cf5740060a3a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96964c59-3036-49d2-b579-2593068cffa1", "sighting_of_ref": "indicator--d164e610-cd39-428d-bfd6-cf5740060a3a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63ce0d6-32cf-45be-be1f-626a0f9d0ad9", "sighting_of_ref": "indicator--d164e610-cd39-428d-bfd6-cf5740060a3a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87b6aef-5ffd-4ceb-bba7-7aa11cec7998", "sighting_of_ref": "indicator--78820b83-460c-4e72-9c06-f245271076a1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a659c01-f820-4259-a57a-a35958a7cbc9", "sighting_of_ref": "indicator--78820b83-460c-4e72-9c06-f245271076a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcf063c-28a4-4a7e-8367-b5ac65e53219", "sighting_of_ref": "indicator--5396de01-2c95-4955-ba4d-2d87da44a5e7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fb6b36-95f8-4a7a-974c-8e08d8539491", "sighting_of_ref": "indicator--f2ff263e-d79a-40af-9845-69f03af50200", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a550b8-8dd6-40dd-988b-3ff676281003", "sighting_of_ref": "indicator--769df929-8179-405e-9aac-454938600339", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a15844b-653c-4e0d-966a-e71e62700884", "sighting_of_ref": "indicator--769df929-8179-405e-9aac-454938600339", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75c375e-90fe-495f-b181-907b4b0b2338", "sighting_of_ref": "indicator--3c452674-9809-4f36-bb9c-3fe3abd859a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcc71af-95ae-4aa3-8c90-f6f293faf4d8", "sighting_of_ref": "indicator--3c452674-9809-4f36-bb9c-3fe3abd859a4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1fd3ba-cf15-4087-8c51-4f87e7b5be1b", "sighting_of_ref": "indicator--3c452674-9809-4f36-bb9c-3fe3abd859a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eaaa87-82e4-4831-b1ff-314211af7b46", "sighting_of_ref": "indicator--88469701-d1c1-4e4d-b090-3a7c439b9a82", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6827c311-5bfb-4e36-859e-70750b2011a2", "sighting_of_ref": "indicator--88469701-d1c1-4e4d-b090-3a7c439b9a82", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b892b21-1ecc-4aa6-9f67-02565fcb2d3d", "sighting_of_ref": "indicator--19faf620-76bf-4a31-8c6b-5282b77da8fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ae0c4e-fc11-48bf-8f4c-f4e219a27774", "sighting_of_ref": "indicator--34c1d440-ae53-42d0-b3bb-9c40fbc5971b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d3b19b-2060-4b1e-9266-877cae497d01", "sighting_of_ref": "indicator--99844e2a-594e-480f-bbfd-0caec92d22f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adf2003-93e9-4117-893b-15b916071651", "sighting_of_ref": "indicator--99844e2a-594e-480f-bbfd-0caec92d22f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c552b880-ede3-4cd0-b69c-d329b1aecda1", "sighting_of_ref": "indicator--beaa4079-9d6c-422b-bc61-50b997d9e6f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4862cbd7-7e58-458c-a9fb-7c40acf896ab", "sighting_of_ref": "indicator--beaa4079-9d6c-422b-bc61-50b997d9e6f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3070db-1a1a-45dc-a4be-1f8d29614210", "sighting_of_ref": "indicator--beaa4079-9d6c-422b-bc61-50b997d9e6f1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007e98f3-c7ba-4a19-a413-92b38f2cf6ab", "sighting_of_ref": "indicator--f53ca7e0-d128-46ae-8ce0-1ba112ab7e0e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e6ae22-7568-474f-b1d8-59af7cb12bc1", "sighting_of_ref": "indicator--e58ef249-38a9-4596-b872-02a6e89e5c7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a621f73d-f4df-4669-a5a4-18d56947502b", "sighting_of_ref": "indicator--a7246e74-1a3a-47a6-8c62-447dd45881d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca8bcda-9e03-4e19-8dc4-3b684f6b13ed", "sighting_of_ref": "indicator--7f970bad-7da6-4f06-a9bf-1f2e55163a1b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd2d2bf-8133-4310-86e4-63c06db4c716", "sighting_of_ref": "indicator--7f970bad-7da6-4f06-a9bf-1f2e55163a1b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485aa48b-e63a-49d0-87b0-569c9c39184c", "sighting_of_ref": "indicator--d89fdbf2-3706-45de-a082-de51320d8dcc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e24c34-dfef-4623-a17e-830b729bfa5c", "sighting_of_ref": "indicator--d89fdbf2-3706-45de-a082-de51320d8dcc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe04f3a-4a18-41d8-a06b-fb58bb28e1a8", "sighting_of_ref": "indicator--8f0278d7-f05d-44a7-b00a-971b54a3735e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5c9678-3b59-4c9d-94f8-e70e188836e6", "sighting_of_ref": "indicator--7f4b6bc7-abcd-4a69-94f6-04e0052eeec9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da1f40e-9828-40bc-a0ce-84de1697cbe3", "sighting_of_ref": "indicator--7f4b6bc7-abcd-4a69-94f6-04e0052eeec9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90b93d3-9459-47af-936a-164739895e28", "sighting_of_ref": "indicator--00f05758-508c-44cd-b8fd-f3bbc985fa9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da11f339-1b29-4231-80a4-b56fdfdcf32b", "sighting_of_ref": "indicator--128e9748-c79e-42a7-8eaa-58cabca39127", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e276fa3f-90d1-4389-933c-e9833b6893a6", "sighting_of_ref": "indicator--eb382467-60b4-415e-b7df-8523ae39a219", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa6f43a-90e6-412e-b661-cb5bcb679dfd", "sighting_of_ref": "indicator--cb3c8916-fb48-481e-b73f-eb2b700340b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794f43ba-f87a-4605-87e9-f9283064100b", "sighting_of_ref": "indicator--cb3c8916-fb48-481e-b73f-eb2b700340b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febead56-a8b6-4d24-bae0-dd9ea62ff349", "sighting_of_ref": "indicator--5245234e-1616-4c6b-90ed-59829513d46b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1c2fac-7c3f-4218-9e0f-c9102a2f76e4", "sighting_of_ref": "indicator--77586170-579c-4c07-87cc-7c4d3f264664", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d72dfcb-7981-4d81-8320-842b14b24d30", "sighting_of_ref": "indicator--77586170-579c-4c07-87cc-7c4d3f264664", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b180ab4-c0da-4471-828b-9892ae1339db", "sighting_of_ref": "indicator--77586170-579c-4c07-87cc-7c4d3f264664", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cfa48c-b4e3-47e8-9bb7-652bf1a46cad", "sighting_of_ref": "indicator--46ae3d49-c18b-494a-8560-09694770fb74", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f334719-5c90-4356-9a04-5b185c4414f5", "sighting_of_ref": "indicator--5685171a-8956-4aef-b340-334c61cd246e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43b5348-b3d1-4c76-b3d7-0b8b9dcf83cf", "sighting_of_ref": "indicator--5685171a-8956-4aef-b340-334c61cd246e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970262b6-eab1-4d83-b3cf-6bcbfddde54d", "sighting_of_ref": "indicator--047581c7-6509-4bd4-aecb-a76f3ac788f8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee265860-cdae-4fba-b690-7de7e6daef2a", "sighting_of_ref": "indicator--047581c7-6509-4bd4-aecb-a76f3ac788f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2aba5c-d7ba-409c-8746-62299abc58c1", "sighting_of_ref": "indicator--9fd2d0bb-de18-49eb-be21-cccec7ced4da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4347a7-1208-435f-b2d8-e9921cea52e9", "sighting_of_ref": "indicator--9fd2d0bb-de18-49eb-be21-cccec7ced4da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f302381-1752-4efa-b301-9fac36fe76fc", "sighting_of_ref": "indicator--c8665a21-49e5-44c4-8e72-ee0b22b889c8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0c19f1-fb59-4098-9c71-f4a30fbe2227", "sighting_of_ref": "indicator--c8665a21-49e5-44c4-8e72-ee0b22b889c8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b881752-e7e2-4f89-be68-f89ee8315c8b", "sighting_of_ref": "indicator--4e6561dd-a0e6-45ad-a0bf-a812e9ff6a90", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa810f2-08f6-4ca8-bda3-14d4910b6247", "sighting_of_ref": "indicator--e8348154-0ec1-459c-be7f-c5fb4dcc2100", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a21c8d-bc70-4eff-955f-9bdd52fb1ea4", "sighting_of_ref": "indicator--e32dbbcd-9d8e-45fc-ad32-9eca622b9380", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da404cc5-d529-4ed6-8b7d-967137148a37", "sighting_of_ref": "indicator--247b9c47-ea1f-4ba4-b248-7367d2e51a20", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cb60be-e4df-4272-a8ea-c179f6384eb4", "sighting_of_ref": "indicator--50ec6588-e7ee-4f14-bdc7-6bf86a264501", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640fe06e-c1dc-4208-b687-f523b5769374", "sighting_of_ref": "indicator--0e3add42-c622-4c09-9c0f-848f4502445f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d87d1df-3bf6-4f76-85ce-ffc13236a956", "sighting_of_ref": "indicator--02832c34-5f07-428f-a306-3a3394fb5bb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37636d1f-e338-4c40-b53c-83fe04f37448", "sighting_of_ref": "indicator--2f04913e-a0ad-4fcf-bd97-d2c0f226bf0d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d09e564-0afa-46c1-a95f-5c0e64aa9537", "sighting_of_ref": "indicator--2f04913e-a0ad-4fcf-bd97-d2c0f226bf0d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba3ca85-d8f6-413b-9f70-07f01bcffc75", "sighting_of_ref": "indicator--d3461fa7-382c-419d-b078-554df894fe42", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e992c2b-ee31-4b9d-8798-cc88741dfa06", "sighting_of_ref": "indicator--193448cc-b0ab-4e27-8ecc-962119a013a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9154a3-2cd3-49a8-8b73-86aea4a77255", "sighting_of_ref": "indicator--193448cc-b0ab-4e27-8ecc-962119a013a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091f1fae-8f6a-487d-940d-2e785cd470b1", "sighting_of_ref": "indicator--8012d3a7-b9a5-4398-bcbd-fcb5321bd496", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c31e19-782f-4438-ba43-887aad43d504", "sighting_of_ref": "indicator--8012d3a7-b9a5-4398-bcbd-fcb5321bd496", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac433fe-28e8-42dd-933b-caccef20ce61", "sighting_of_ref": "indicator--df86f0d9-09c5-4a5a-9a32-35d27b645b57", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c17c683-0958-4f5b-936d-b700229caf6f", "sighting_of_ref": "indicator--df86f0d9-09c5-4a5a-9a32-35d27b645b57", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60891eb3-c52a-41f4-96d2-9977e5e6b4eb", "sighting_of_ref": "indicator--f2c00cca-421c-43de-8ddd-31723b97503f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f024af9-9c2b-4e24-b3a8-318a1f847868", "sighting_of_ref": "indicator--183f4f73-b592-467a-aa94-bc6358938536", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44f4642-f4ef-40c1-8d0d-b5ec2b7d6075", "sighting_of_ref": "indicator--81568978-9d97-4f8a-9ab4-f32ec4627e8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a9e4d9-e421-4d05-998e-a9c96698bd48", "sighting_of_ref": "indicator--81568978-9d97-4f8a-9ab4-f32ec4627e8a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d67b174-1ae8-449d-9d64-57c7011f95e0", "sighting_of_ref": "indicator--cdc8f6f9-2f05-48d6-a4b3-af5405d3f846", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557513b3-b07a-445c-8586-bebb4e5587fb", "sighting_of_ref": "indicator--74f942f6-0425-46b7-8bf8-a384e7c038d8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cbe286-fbd5-48bc-a4d9-81464da090aa", "sighting_of_ref": "indicator--74f942f6-0425-46b7-8bf8-a384e7c038d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d38b11-4663-49b5-85d0-7653dc5f0ac4", "sighting_of_ref": "indicator--c6c2fd89-766b-4865-86b1-03454265c8ee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cab0e6-0efa-4b53-9982-c372c8b92333", "sighting_of_ref": "indicator--c8b9ebf8-03f6-41d7-90cf-67e44b4cbc81", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390728ba-4bc2-4686-91d9-59763676d26a", "sighting_of_ref": "indicator--c8b9ebf8-03f6-41d7-90cf-67e44b4cbc81", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fff3be0-5bee-4159-80b3-dc2c74b1ab95", "sighting_of_ref": "indicator--c8b9ebf8-03f6-41d7-90cf-67e44b4cbc81", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f424e90-a0d4-40b7-9533-48d0e291aa0b", "sighting_of_ref": "indicator--2b6fd4e4-868b-4e72-9154-cf46ddd0fd40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59cb076-f707-488e-a0bb-e414a713468e", "sighting_of_ref": "indicator--a9b13f98-d7bb-42ac-90b0-37fc8407d5a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cff6b1-3945-4785-8347-7325e5f44613", "sighting_of_ref": "indicator--3ffe388c-70f7-4222-8f2b-52fefec26f9a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fde4de-f72b-4035-a2ae-30189a67cf11", "sighting_of_ref": "indicator--3ffe388c-70f7-4222-8f2b-52fefec26f9a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeffdc4-0a45-40ba-9d76-7ac4950ceed8", "sighting_of_ref": "indicator--27ed8360-3fa2-4149-8d49-f465858f2044", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b5447b-0daa-499f-add3-5ad05e10ad34", "sighting_of_ref": "indicator--27ed8360-3fa2-4149-8d49-f465858f2044", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5d2031-486c-4e9a-9079-845bb428f82b", "sighting_of_ref": "indicator--ecfc23c5-dfc7-4b28-9c4d-2a3f2b421182", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13539daa-6d51-4756-83af-01b3b910a461", "sighting_of_ref": "indicator--ecfc23c5-dfc7-4b28-9c4d-2a3f2b421182", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45744485-1b89-467d-bbac-23746b46c21b", "sighting_of_ref": "indicator--41b40fa6-3946-4ee0-a7bb-302f51c38c7c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea20db5b-86cf-4b0c-bf3d-3ac8ee7e274d", "sighting_of_ref": "indicator--41b40fa6-3946-4ee0-a7bb-302f51c38c7c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31cab39-d44d-4860-9b77-9e00bcb817cc", "sighting_of_ref": "indicator--bc09a1ee-f625-406a-80fa-445049b34022", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dca8827-9297-4f15-a820-9b2543d5c527", "sighting_of_ref": "indicator--fdd00bde-1040-4f2f-ba08-5d21a888021a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0231c2-f3dc-4526-8de8-01141fbb2112", "sighting_of_ref": "indicator--de467288-fdf9-40be-82d9-b33e9a1ec8d9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64151881-f6f2-46f4-ac72-1cfceabb1f95", "sighting_of_ref": "indicator--de467288-fdf9-40be-82d9-b33e9a1ec8d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08351bd3-2a58-4392-b352-c83db0666b88", "sighting_of_ref": "indicator--7de5377f-bad3-4ef9-99a8-7fd96a3f2fe4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfd92e6-5b0b-421c-99cc-541603d1c05b", "sighting_of_ref": "indicator--7de5377f-bad3-4ef9-99a8-7fd96a3f2fe4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe7edd2-8576-4b1e-a31d-05e4b827d7cc", "sighting_of_ref": "indicator--7de5377f-bad3-4ef9-99a8-7fd96a3f2fe4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140f8c6f-2593-43d5-8177-436cafcedfb3", "sighting_of_ref": "indicator--ac5578d3-3f0c-4ddd-a70f-3834e8e45373", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21226d31-d414-4063-aa3c-60a6ce084a1f", "sighting_of_ref": "indicator--ac5578d3-3f0c-4ddd-a70f-3834e8e45373", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b9212a-495d-45ca-9606-3c9c38c2375b", "sighting_of_ref": "indicator--ac5578d3-3f0c-4ddd-a70f-3834e8e45373", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0df5860-38cf-415c-acfc-7c2acbea899d", "sighting_of_ref": "indicator--052c59b8-7e6f-4975-9c09-7d8285115a54", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318405db-5454-43f7-879b-277119268da6", "sighting_of_ref": "indicator--052c59b8-7e6f-4975-9c09-7d8285115a54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5471c2a2-c548-4238-baed-755f2ff31e4d", "sighting_of_ref": "indicator--54e3c89a-d175-4d48-bf6b-f20216aa101e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1925c67-e3dc-4196-9f3a-f70c59b47bc3", "sighting_of_ref": "indicator--5ef7994d-5ab1-419e-9b74-d064d5d0d6af", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a885a8-9848-4a45-9a26-ac99dc2a773f", "sighting_of_ref": "indicator--5ef7994d-5ab1-419e-9b74-d064d5d0d6af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337901cf-bd04-4013-bc9d-0640b330dc41", "sighting_of_ref": "indicator--22bd42a5-c71f-42cf-a81c-1b1929090e1e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9086fe18-ff63-4ac9-bcac-3b8c938558ad", "sighting_of_ref": "indicator--22bd42a5-c71f-42cf-a81c-1b1929090e1e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b79aa22-b1cb-4631-a2c3-7ae264c4aa0d", "sighting_of_ref": "indicator--e51aa10c-7d30-4718-84e4-d16fa9d99df3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7a88ba-11ee-4023-a6bf-0e3b21d4ff78", "sighting_of_ref": "indicator--0d37aae2-0e6f-483f-b088-c4d238c77fce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9711f2c9-1a10-4928-a6e3-5948469b2a21", "sighting_of_ref": "indicator--075df7d1-133a-4771-b072-911b2d5b7b9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a0f712-b3bd-47fa-816d-9e75ffa0e509", "sighting_of_ref": "indicator--8e91c87b-8519-41b6-a59f-9e8b5cda5745", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9ecd7e-9912-4301-819a-6ad07146392d", "sighting_of_ref": "indicator--8e91c87b-8519-41b6-a59f-9e8b5cda5745", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1029f5f6-9b18-4c15-8b7a-31fec513302d", "sighting_of_ref": "indicator--ecb37e86-b26f-42f7-88a5-5253ca4ee7f5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b89fbdb-48ca-4a27-914a-45664885289c", "sighting_of_ref": "indicator--ecb37e86-b26f-42f7-88a5-5253ca4ee7f5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218e769a-91f4-4bb9-80ab-572ff8d643e4", "sighting_of_ref": "indicator--bcc142c1-e634-4b1d-ac75-d9ac261870d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c727fbd-8f8e-4f12-96ec-c8a67ccdada2", "sighting_of_ref": "indicator--060d130d-0707-4d03-ac67-345db36b1a52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408e5f0b-3b6b-46f4-9b75-ba09971a39c7", "sighting_of_ref": "indicator--c75ba7b2-8655-4d3d-9aa3-cad476b9f184", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e04ff25-5a9e-4043-90fb-9fe2b21554f6", "sighting_of_ref": "indicator--c75ba7b2-8655-4d3d-9aa3-cad476b9f184", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b8ef58-ea41-47c1-b16b-ff1b5cf52891", "sighting_of_ref": "indicator--15f5d148-7399-4273-8cf8-3f2e200e6e4d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f612dc71-b831-44a8-8bf4-bd3cf9ff19e9", "sighting_of_ref": "indicator--15f5d148-7399-4273-8cf8-3f2e200e6e4d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e0e79c-0fc0-4d53-9153-2a2f755abf3a", "sighting_of_ref": "indicator--15f5d148-7399-4273-8cf8-3f2e200e6e4d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dbadec-ebf7-4ee8-a1ec-f08e616fc22c", "sighting_of_ref": "indicator--d9c4a342-38ce-4ba2-8337-488d06dfdae1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf8878e-7191-4233-b5bb-53d22cf24c12", "sighting_of_ref": "indicator--3397ede6-431e-40c7-b704-35745dbd60c5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0691b033-66b8-4a62-9cb1-99ef0c6766c4", "sighting_of_ref": "indicator--f2afb092-f3ec-4449-a8d9-c80492232e47", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddafce84-6c25-4506-967f-aebf6402de80", "sighting_of_ref": "indicator--db98b5f9-942a-4af0-8c92-193d7ceb7d1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187083c0-3fdd-4450-935b-71022561465d", "sighting_of_ref": "indicator--db98b5f9-942a-4af0-8c92-193d7ceb7d1c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f27cb4-c67a-462c-b1f8-2c959a11e3b1", "sighting_of_ref": "indicator--db98b5f9-942a-4af0-8c92-193d7ceb7d1c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763764ad-4e80-4f9e-8696-ceb96fb1dec7", "sighting_of_ref": "indicator--9f87b170-6008-4643-9b62-fa7159884518", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dc4f2f-2337-4d3f-af7a-dadcef4bbe64", "sighting_of_ref": "indicator--7c704a1d-bbc5-4acb-b9e7-34d9f94475ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6ef91d-8ff4-47fd-8b79-5f2a71f2142b", "sighting_of_ref": "indicator--d328ef81-ca0b-4cb4-87f4-53843503daa1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3f10a3-2ad2-4210-8e62-ccdcb4c8ca59", "sighting_of_ref": "indicator--b0d9f640-ad2a-4f95-afee-908cfef96e4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4eb1e55-8ebf-40c8-a153-b7969509fed3", "sighting_of_ref": "indicator--b5a18949-e2fc-412b-a140-279e5dd02b04", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147b2697-18b6-4a51-8ba9-2ef2be4a2e93", "sighting_of_ref": "indicator--9f385f71-5bd2-43c9-8d61-cef1ea0dff02", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fe74cc-c9f0-4c27-8339-118187cbf365", "sighting_of_ref": "indicator--43f09500-fc46-4eed-8bf6-91522daeb439", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1cf945-9d44-4913-9329-f246122085af", "sighting_of_ref": "indicator--43f09500-fc46-4eed-8bf6-91522daeb439", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e47889-918e-48ff-9e5b-ac5fc52fe8b4", "sighting_of_ref": "indicator--72d3289a-9f7f-47f0-a282-87de18d3574a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a461b3-3e38-4626-a316-7b06b570bf61", "sighting_of_ref": "indicator--7d7ef62a-8985-49a4-ae49-07120eb94224", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a7d7a6-6bf1-4ab3-aa3f-1bdd1f4cf251", "sighting_of_ref": "indicator--d46ea97a-cd81-4952-ab18-005a1a7aee25", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d939862-4524-4bd3-8220-0678f35ca6c7", "sighting_of_ref": "indicator--2303fe72-6674-41b4-a735-40d27d31d690", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fb2127-9aec-4f69-8f0f-1e87d4004c68", "sighting_of_ref": "indicator--97bce736-47d8-4471-9864-9affdd8f1a33", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c755750c-c6f6-472f-8e4b-5453c7d7e476", "sighting_of_ref": "indicator--68a0036a-77e8-4256-897b-a486302d8a03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a629e3f2-5bf3-4945-967b-540e67e192ff", "sighting_of_ref": "indicator--92822cb0-676c-49ed-a105-29ebc54426c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05c8a7f-4849-41d3-a5a7-e5a5aa02eb3c", "sighting_of_ref": "indicator--a509f3a9-add7-40d2-9f2f-4163bbd99368", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993e6dc1-5397-4060-8d2d-7850e525ae6d", "sighting_of_ref": "indicator--739a8d63-f70a-4c89-aaa2-2f49cda4d3a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47e7c32-3ecc-4a82-9ab8-dea3f247e17f", "sighting_of_ref": "indicator--739a8d63-f70a-4c89-aaa2-2f49cda4d3a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b762f4df-8262-4157-889a-7cabd843a3fb", "sighting_of_ref": "indicator--ca072292-0aed-439f-ae04-46f1137f02ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a670f21-631f-4428-a23b-3966c2778857", "sighting_of_ref": "indicator--ca072292-0aed-439f-ae04-46f1137f02ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d032540b-6a2f-4b3a-93e6-589ea2a9bed9", "sighting_of_ref": "indicator--d806f73c-e317-4c5b-947b-15b3a0e70cce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1466b5-1a37-489a-9fa4-14d6b0da5d70", "sighting_of_ref": "indicator--b944ff7e-1579-4948-807b-a624d924a78f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591c4929-eba3-494d-b743-e8121c3c553d", "sighting_of_ref": "indicator--b944ff7e-1579-4948-807b-a624d924a78f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cff7199-e27a-46be-95ec-6a65b54697a1", "sighting_of_ref": "indicator--9efdf759-9241-4826-8b54-b3d6dd0d6acb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c610f91f-79a7-4b97-962e-853b17ffa463", "sighting_of_ref": "indicator--d7852f08-48b1-467c-b4e2-4d293f610364", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef7d462-ed4b-49e3-abdd-ff36933d8b9a", "sighting_of_ref": "indicator--6a4de585-6fbe-49a5-93f7-4d1febede050", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab19635b-2293-4683-a1ba-093873ba33e7", "sighting_of_ref": "indicator--6a4de585-6fbe-49a5-93f7-4d1febede050", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d861bc-1168-49c5-83cf-17ed3a1b94f2", "sighting_of_ref": "indicator--6a4de585-6fbe-49a5-93f7-4d1febede050", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1f5289-f800-472b-9ef9-c8b3385fb584", "sighting_of_ref": "indicator--d40ce824-9b9c-4073-8112-d5fd780129c5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f50b783-a7ba-4a64-ace2-4e4745127ea7", "sighting_of_ref": "indicator--5b44d286-fc51-4cd0-9ef4-3fafa791ad96", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e8fa60-3342-44d4-a802-317460c09fcc", "sighting_of_ref": "indicator--8ff8f0b0-e228-4bf0-875c-4c6f62b21934", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab7253b-99d0-4388-849c-3ca2aefb7aa5", "sighting_of_ref": "indicator--96d8b002-a492-4930-ba82-c5405b328b58", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9055d946-70be-4ff1-bd3f-f873ccaf03f3", "sighting_of_ref": "indicator--8c78f805-c1f6-4bc0-a84a-08353b7b5ee1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067b8441-8f9d-46ff-b27c-d220559e6029", "sighting_of_ref": "indicator--0b01e0ec-309f-4ea4-9601-258cbb7f5b7b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fec695-20f9-4e01-8ec4-139b1b241cd0", "sighting_of_ref": "indicator--a6f34467-885f-481e-9106-392441b9dff2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305e837d-1262-427b-a7cb-a287a7599589", "sighting_of_ref": "indicator--f288c0fe-cd79-4eb5-8600-6b6bf87d710c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f44ad0-f3cb-4010-b588-1657845eaf76", "sighting_of_ref": "indicator--ed5dcf7a-c518-47b7-941f-4c630cb76d21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed372c1-26dc-4dcd-84c8-3c0f505cb02f", "sighting_of_ref": "indicator--ed5dcf7a-c518-47b7-941f-4c630cb76d21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa80526e-8c8a-4565-a9cc-cff5c1e342f5", "sighting_of_ref": "indicator--b534badf-2015-4a14-a4d6-b5d8bda4e7b7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3e7eba-42fe-4761-86dc-0103c19b477c", "sighting_of_ref": "indicator--b534badf-2015-4a14-a4d6-b5d8bda4e7b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54f7a58-c609-43c4-b40a-1bdd15c068d4", "sighting_of_ref": "indicator--b534badf-2015-4a14-a4d6-b5d8bda4e7b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ff3cd4-b6f7-463b-982d-7f5d9b18a7a7", "sighting_of_ref": "indicator--630297cd-9745-4bac-8c46-2a964ca797c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97579dba-6ebd-42b9-964b-401a751e4631", "sighting_of_ref": "indicator--9cea0d45-0199-4ae6-8edd-109c0ef2cb71", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa68f76e-8176-47d4-a4a8-25669ed0964a", "sighting_of_ref": "indicator--d6136f7d-6e13-4e8d-a647-6a3ee2113cf5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb0e895-88f4-40ea-8e6d-dbc990e6e3de", "sighting_of_ref": "indicator--d6136f7d-6e13-4e8d-a647-6a3ee2113cf5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1854283e-b95d-472d-a54a-e4e0fe16742f", "sighting_of_ref": "indicator--232cbc5a-c28e-43b9-9043-53bddf46b225", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbd4037-4af7-4b15-96cd-8f6c8156bead", "sighting_of_ref": "indicator--b24ebe13-2af9-4a4c-b7e5-4649b93e0482", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398cede9-73c5-4fd0-9377-0adc7e8dcfcc", "sighting_of_ref": "indicator--b24ebe13-2af9-4a4c-b7e5-4649b93e0482", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafc192f-09b7-4b6c-b337-669745f79079", "sighting_of_ref": "indicator--8872b66c-b9fe-49f9-a081-76d125f0fee2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b9a3fb-91ae-4691-b01a-7462f5c891eb", "sighting_of_ref": "indicator--660ed8b3-9623-499e-b881-d9c5d39f4d83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0e80be-5ae9-4305-a5ae-48fbab96af45", "sighting_of_ref": "indicator--803c46b4-f47c-486a-b944-8d3b75cccf08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5800306-224c-43f8-b4ce-c92f7e57bfe5", "sighting_of_ref": "indicator--0a7c356b-d072-40cf-aa38-bb11c0cc7305", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066d8399-97bb-4be1-918d-98abb8347ef9", "sighting_of_ref": "indicator--431bb271-3eee-4d42-820a-37c0f3af7e07", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1220190-0198-4c2b-8c6c-287986e00cde", "sighting_of_ref": "indicator--d2d4029a-be58-4698-91ad-7dfa32c88be1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec6c768-a3de-4e21-a078-59f0eabcf4fe", "sighting_of_ref": "indicator--ed48bfc3-832d-46f1-9460-a32b7058a435", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5583438d-a41c-46cf-b771-cdf8ae21e95c", "sighting_of_ref": "indicator--1a5aa621-d5b6-4989-82c2-fa4af891434e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3ec611-8b20-4bb0-acbb-95db186fb351", "sighting_of_ref": "indicator--168a714e-f40b-442a-a3b3-db35fa21bc2f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d64c81e-8f84-4796-9060-8f870814dada", "sighting_of_ref": "indicator--168a714e-f40b-442a-a3b3-db35fa21bc2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08b713b-f287-4afc-87df-b99f00dfa544", "sighting_of_ref": "indicator--d2564477-3fef-4b7e-b7fe-f333dae0bf4b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f91b6d6-4964-462c-8b64-46b558f0f522", "sighting_of_ref": "indicator--4f9c6c80-afa5-44aa-ad8b-df1206c1b057", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb5dc5b-2326-48db-b1c3-0f3d72eb3ec9", "sighting_of_ref": "indicator--9749d1bc-ebc0-4091-ade8-4756e27e3976", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb73f692-4fc5-4eec-9f27-9b5ad6571caa", "sighting_of_ref": "indicator--be245122-9a93-4719-803e-ea2c78535793", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd673ea-5cc6-4e35-9a61-7eacf66a08d6", "sighting_of_ref": "indicator--874a73e8-0856-49ef-a424-cc26ffff660f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c31091d-c73e-4892-a880-214c5098e07e", "sighting_of_ref": "indicator--874a73e8-0856-49ef-a424-cc26ffff660f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2634f86-9969-4dce-9cad-f920cf5c9d53", "sighting_of_ref": "indicator--b11a771f-4cfb-41ff-87c4-d61a6dd14e24", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644373ff-b1ee-44cd-a0ad-dd4d0b042af8", "sighting_of_ref": "indicator--19490169-e07b-4049-b10c-01d6cbc6fb03", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac89307-c8d6-43f1-8317-32b393518a30", "sighting_of_ref": "indicator--aedfa76a-f287-4405-ba42-65ae2a683956", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c51c715-355c-4646-a2b6-a0066cea730e", "sighting_of_ref": "indicator--ed119c2c-e066-45f3-a4a0-8f4705f94e8b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190989c0-53c1-4ded-9b8c-92481b903586", "sighting_of_ref": "indicator--37ffda61-3066-441a-8ffa-ce7f5e48c9ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12cbac5-9c42-46f0-95e0-b63cc82478ef", "sighting_of_ref": "indicator--a7137657-a65d-4a3b-b87e-578bb1f96297", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc03911c-cdd1-473c-aeab-d5fe0ed781d6", "sighting_of_ref": "indicator--46bd7751-053d-495b-b5ba-ba7682b2a9d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25150e70-f886-4d62-aa42-255b56389683", "sighting_of_ref": "indicator--7873ed9f-0ad6-4e75-a6df-78ae10ce87cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b63be0f-78c3-451b-950c-dddd946acea3", "sighting_of_ref": "indicator--f15b3632-76d1-4feb-a55e-26165abec4fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269df8a8-49b4-4048-95fe-e093ea5bc73d", "sighting_of_ref": "indicator--84ed5455-3c05-4998-a1b9-98a1233474ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7876b69a-7451-40e3-b687-980a7d0417fd", "sighting_of_ref": "indicator--e7b51145-2add-4d6d-9103-d53f7b945c92", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77dff05-2ece-465e-8da8-289a88c5dbab", "sighting_of_ref": "indicator--e7b51145-2add-4d6d-9103-d53f7b945c92", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b40d6b5-d0ef-4a01-9cf7-620fa5794cad", "sighting_of_ref": "indicator--d835987c-acaa-46cb-9db0-476162b605e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272cefd4-9496-4449-bcd5-29b9fe397ced", "sighting_of_ref": "indicator--222ee45b-bb35-4e59-aa0c-46f2d4673cb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31150c4-09bf-4f31-90f4-11d384f4445a", "sighting_of_ref": "indicator--709e1a19-f01e-4910-937e-78dab763fdd2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cb5afc-54b4-4051-a4c3-41b3938666b7", "sighting_of_ref": "indicator--28bac81a-f4d1-426a-9660-39284360bfee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cb5d33-9a82-4270-9240-b6771d085276", "sighting_of_ref": "indicator--28bac81a-f4d1-426a-9660-39284360bfee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e5e1be-8cf2-4b3b-a875-3ed8980c8559", "sighting_of_ref": "indicator--57f31cac-95cc-4651-8bce-86f0b85221d8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4dff54-8e11-42de-8a12-3bf59712d751", "sighting_of_ref": "indicator--fd84631b-1ad3-4a67-82c9-ec1dbaa284e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365ddfa1-e8df-4aca-9804-a3c1e45bb8bf", "sighting_of_ref": "indicator--fd84631b-1ad3-4a67-82c9-ec1dbaa284e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d1e4fb-c3a7-4231-bd0e-87d84cb4cf4d", "sighting_of_ref": "indicator--fd84631b-1ad3-4a67-82c9-ec1dbaa284e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c969f7-6cbe-4dfe-892d-db4877bcdeb6", "sighting_of_ref": "indicator--3d602621-d8e4-4ba6-bbfb-67d7790a4d83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04700ec2-1734-40a6-a62c-ce9a8e6526a8", "sighting_of_ref": "indicator--3d602621-d8e4-4ba6-bbfb-67d7790a4d83", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f903144-6a27-4ce0-8193-89506702d6ac", "sighting_of_ref": "indicator--b29e7ef2-8930-45dd-ae6a-9b03103bba03", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2023323-ee0f-41c2-b5d9-6c45c3ba6835", "sighting_of_ref": "indicator--8b91c4c4-2a90-48ce-b11d-8f2c60484a26", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e871e435-2f37-4e2f-ad89-7854daa47c45", "sighting_of_ref": "indicator--c5254d08-4147-4d77-b239-01efd2d8c1a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651c23b9-ddf6-48b2-8378-8095c26006d6", "sighting_of_ref": "indicator--d84e91e8-6053-41f7-9885-4f54f12086ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da3d647-960f-4c12-9e69-e543efe533d6", "sighting_of_ref": "indicator--cd9f116b-196b-4f1e-ac4d-7c8faa3e2956", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61104fc9-eace-451a-a652-a52e53d0c6de", "sighting_of_ref": "indicator--c0fbdf7b-ab10-4e7f-bef3-4e4dc2338da0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0904c2-5995-4968-b4cd-34fd38356b34", "sighting_of_ref": "indicator--5123c822-5d12-4571-b9eb-3216d59cdbf2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b8492f-ddc4-4eda-bb7b-9d240ba019bc", "sighting_of_ref": "indicator--92b7ec6d-0937-4eb5-a320-05c9affb0733", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe05975-b6f8-4165-9a8c-51a6153bfce1", "sighting_of_ref": "indicator--92b7ec6d-0937-4eb5-a320-05c9affb0733", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b579cbbc-7e31-44e7-bc4e-91a2492b9b1f", "sighting_of_ref": "indicator--4278eef1-9998-4bea-a6c8-a75e8bd0767c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d96c62-b105-4ce4-94ba-4e135ea55240", "sighting_of_ref": "indicator--be292349-083e-401b-a53d-dfef3dba72a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99820e93-6217-440f-85a7-ba003a176ba0", "sighting_of_ref": "indicator--909ea020-6ba0-4984-9089-7a26be795f06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e2068d-e673-40eb-a970-aa8c5562b925", "sighting_of_ref": "indicator--f944d740-3a3b-46d3-be83-6fd0b7c8ebbc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020904a6-d00a-438a-8fe0-0265b7b2c5de", "sighting_of_ref": "indicator--f944d740-3a3b-46d3-be83-6fd0b7c8ebbc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dee419-824e-47d2-b5fd-7ac3ff25d58d", "sighting_of_ref": "indicator--f944d740-3a3b-46d3-be83-6fd0b7c8ebbc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963a04c0-8a6d-4a4b-b98e-a728f89a8e73", "sighting_of_ref": "indicator--f22976af-343c-4765-bd52-6805ea60f3fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe0b3bf-04a5-4f13-a8db-c61ceda77644", "sighting_of_ref": "indicator--47fdb142-47dd-4ed3-b50d-2bc78eb7bc23", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579c279d-0586-4c12-b5ca-6f87034c84fd", "sighting_of_ref": "indicator--47fdb142-47dd-4ed3-b50d-2bc78eb7bc23", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe53168-57e4-40c3-8b3e-ac27e878bcc0", "sighting_of_ref": "indicator--034a6bda-f239-4cc1-beb5-e4952c741eac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78790e4-6171-4e4a-b512-ce37b6a3190f", "sighting_of_ref": "indicator--788274f4-0f71-47f1-8ffa-b31447954b83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ff4125-254d-496e-86ce-2d588289cd42", "sighting_of_ref": "indicator--bac3d797-6477-418b-9de8-8287947f8e9c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f19c1a4-0d0c-4857-9d17-7b9231840009", "sighting_of_ref": "indicator--7161d04e-d2f1-4a86-b7a8-89955d9c155b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346e4646-f544-4f42-9aa1-f3e631e92258", "sighting_of_ref": "indicator--0321ef4e-0b38-4a86-ad96-f60c5cfa9356", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a790cf9-2f16-42f4-bcf8-93a246ce4ce2", "sighting_of_ref": "indicator--38a7c553-da8e-4bfb-a8c6-7128a8642619", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7613f2a7-ac53-4213-a58c-427556891f39", "sighting_of_ref": "indicator--0e6c2046-5456-4323-bc98-3a20b3d3bd79", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b09357-6689-4c10-b2fa-3e1de31eea5d", "sighting_of_ref": "indicator--0e6c2046-5456-4323-bc98-3a20b3d3bd79", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d91597-5974-41fd-997b-bd65152b330b", "sighting_of_ref": "indicator--0e6c2046-5456-4323-bc98-3a20b3d3bd79", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870d64cd-cfb6-45cc-9655-24ae402da548", "sighting_of_ref": "indicator--a2510a18-5939-4792-82d9-a10154044be0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0032a1e3-d750-4b99-b14b-33acc572657f", "sighting_of_ref": "indicator--a2510a18-5939-4792-82d9-a10154044be0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8de8e5d-93b2-475a-a848-981d416950b6", "sighting_of_ref": "indicator--a1356ae7-5533-4471-bdd3-8305c4cecd0f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39598f3d-39b6-427e-b152-f906ee80df8d", "sighting_of_ref": "indicator--59580e3d-52c0-4a4d-8d4e-324579daac5b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55bbe5b6-ee5c-4590-90d0-adbef87fd29f", "sighting_of_ref": "indicator--59580e3d-52c0-4a4d-8d4e-324579daac5b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a5b401-1a4a-43f4-bb3e-6203a72a59a8", "sighting_of_ref": "indicator--351d7dd5-4016-46c1-9cae-0ed52b99fdf9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29cef98-2294-4157-8a95-b65e3db31e16", "sighting_of_ref": "indicator--b3017ae1-a052-400d-9e9e-5f5e53af8728", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f907bdd1-60c3-45e0-8101-5c84e1eb1f26", "sighting_of_ref": "indicator--b3017ae1-a052-400d-9e9e-5f5e53af8728", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863c8174-c77d-4879-8148-896ca709302f", "sighting_of_ref": "indicator--b3017ae1-a052-400d-9e9e-5f5e53af8728", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac76e4d-eb9b-46f3-8725-136c87e47399", "sighting_of_ref": "indicator--6e504e46-c1de-4e30-88a8-b6cad969ed3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f00863f-cd18-46c9-8ab8-f0d86e5a7138", "sighting_of_ref": "indicator--3ea08aa6-e966-4aa0-aae6-5415b45eaddf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff8b5a9-8ad4-4350-9153-6501da7ace0c", "sighting_of_ref": "indicator--1a66b5ed-7e25-451b-971e-e7d273f6cc62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96fc046-b6bc-40f3-8815-d54f0c9fe6e0", "sighting_of_ref": "indicator--1a66b5ed-7e25-451b-971e-e7d273f6cc62", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d800b946-b5ef-4d80-ade5-30b7819b4a1a", "sighting_of_ref": "indicator--cfa56aa6-48b1-4507-8fb4-3887325bed4c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24d5697-7506-415b-be0b-88b344428d73", "sighting_of_ref": "indicator--2d0040f7-bd29-463b-9a64-dd153234fa1e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4796f53-70ca-4fe5-9db8-05db055838d2", "sighting_of_ref": "indicator--2d0040f7-bd29-463b-9a64-dd153234fa1e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9966215a-3c0a-47e2-bc69-c5ae4a78b1b4", "sighting_of_ref": "indicator--7676c8f8-59e8-47ba-abc9-b69767ce915d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7434df4-62ef-42e0-a00c-cc2a65f23506", "sighting_of_ref": "indicator--7676c8f8-59e8-47ba-abc9-b69767ce915d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cd978f-99ad-4215-abf0-90ba4cf975ab", "sighting_of_ref": "indicator--7676c8f8-59e8-47ba-abc9-b69767ce915d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e06e663-75f7-4081-9b32-d44341aa114b", "sighting_of_ref": "indicator--0db3e781-e893-4b02-8948-bdcaf160135c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cf199f-c4e0-4ec0-be5c-f98bda844fbe", "sighting_of_ref": "indicator--0db3e781-e893-4b02-8948-bdcaf160135c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe709170-cb31-4503-99f8-dc64bccc64cf", "sighting_of_ref": "indicator--3570c815-cefb-42f1-a56e-17f566aa6164", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341f9422-60b7-44e5-bf1d-8dd463fdbcfb", "sighting_of_ref": "indicator--3570c815-cefb-42f1-a56e-17f566aa6164", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e2edef-c200-49a7-b8c8-9da1c4d61c64", "sighting_of_ref": "indicator--3570c815-cefb-42f1-a56e-17f566aa6164", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2720d3-c28f-4d59-b868-e3cd4e661e6d", "sighting_of_ref": "indicator--385f7b6a-470b-426b-b392-93f52c0ac922", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577260a1-0b5f-4dfb-b47f-159abd060555", "sighting_of_ref": "indicator--385f7b6a-470b-426b-b392-93f52c0ac922", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a87326-b804-4a7e-abca-59ab1e2a9337", "sighting_of_ref": "indicator--0821bfaf-ec22-4196-bb1c-26483b42c806", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f1f705-eb45-476e-8252-7d05a2bf5aca", "sighting_of_ref": "indicator--0821bfaf-ec22-4196-bb1c-26483b42c806", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c34ab29-0d80-4676-9910-d49ac1276b95", "sighting_of_ref": "indicator--8ff24769-cb9b-4274-89f3-35781b349ac8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846f1186-c81a-42c7-834e-dc767196a3a3", "sighting_of_ref": "indicator--8ff24769-cb9b-4274-89f3-35781b349ac8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a868c7a-86a6-45d6-aa7e-5ab1561968cc", "sighting_of_ref": "indicator--737434b0-5d41-41bb-b48f-6a4afad8b137", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee009e5-571a-44be-b0f8-a323b88a4284", "sighting_of_ref": "indicator--737434b0-5d41-41bb-b48f-6a4afad8b137", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1c3770-1a46-4b59-a356-0b12c63e9b95", "sighting_of_ref": "indicator--737434b0-5d41-41bb-b48f-6a4afad8b137", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8c3df5-d8b2-47cd-8b04-3a9cd6689404", "sighting_of_ref": "indicator--c92575bb-d500-4ca1-985c-c43376c80ad3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a112376-b1a5-4604-b6e2-5023d69c0143", "sighting_of_ref": "indicator--c92575bb-d500-4ca1-985c-c43376c80ad3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6669835e-f516-495d-8744-0954e61a3b9b", "sighting_of_ref": "indicator--f74a2bf8-4c67-4575-b77a-05e2302a862c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d04b83-0504-4348-bcbc-ee5737a9656b", "sighting_of_ref": "indicator--f74a2bf8-4c67-4575-b77a-05e2302a862c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849b6833-a7c4-4b23-951a-08b2e34596b2", "sighting_of_ref": "indicator--fae1d9c0-77bd-4db7-9fb4-3b29f83d7c6e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901a5d2f-5b9d-4dbb-8586-6cc3499a5c3d", "sighting_of_ref": "indicator--fae1d9c0-77bd-4db7-9fb4-3b29f83d7c6e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5677410e-3203-476d-afe9-572b9d41c95b", "sighting_of_ref": "indicator--976389c2-8c0a-4d19-9241-5ad8c6dddbbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fe50cd-3875-40a5-8228-fdee92694d11", "sighting_of_ref": "indicator--976389c2-8c0a-4d19-9241-5ad8c6dddbbb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704dcba3-2897-4338-8616-7979a3b35139", "sighting_of_ref": "indicator--976389c2-8c0a-4d19-9241-5ad8c6dddbbb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1681fdbf-2bd2-45a2-bd85-7ec5ea15835e", "sighting_of_ref": "indicator--e7788a69-48c1-4625-9fb1-75db10dd9fbe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459606e4-20f6-414a-acb9-9f56308d2e61", "sighting_of_ref": "indicator--e7788a69-48c1-4625-9fb1-75db10dd9fbe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d482b14a-21b8-40c4-ab50-7174364ad7e6", "sighting_of_ref": "indicator--e62f38ee-4d16-4baa-8e5f-25d78e64f2c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231c43ac-d896-479d-a1e8-ffb982a1c62c", "sighting_of_ref": "indicator--e62f38ee-4d16-4baa-8e5f-25d78e64f2c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d876c5-1be8-4b15-bcab-0eb6d01baa1b", "sighting_of_ref": "indicator--e62f38ee-4d16-4baa-8e5f-25d78e64f2c9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fd11aa-0c61-4956-bfa4-167aeb2c1f51", "sighting_of_ref": "indicator--b75c5390-e5e9-42da-b630-8cf483a5954e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df5253c-27b7-4d8f-bed1-ee06ae2cf51d", "sighting_of_ref": "indicator--b75c5390-e5e9-42da-b630-8cf483a5954e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb9909e-7571-4b8d-b058-75b76e15f664", "sighting_of_ref": "indicator--b75c5390-e5e9-42da-b630-8cf483a5954e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d571b278-6d21-4169-b5c1-fb9e9d825964", "sighting_of_ref": "indicator--b3c75234-f09d-4a88-8ff5-53ff56c99981", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e01a25a-bc53-4b10-a438-d45c6cafd82e", "sighting_of_ref": "indicator--b3c75234-f09d-4a88-8ff5-53ff56c99981", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff7af02-6457-48ea-b1ff-2b05a1c98fc9", "sighting_of_ref": "indicator--b3c75234-f09d-4a88-8ff5-53ff56c99981", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4985f61f-dca9-4b24-a131-1e151173e855", "sighting_of_ref": "indicator--9ae98d56-2415-4f56-b8de-69eedb890a4c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d3ea36-4216-46b2-a043-d7492e0383cf", "sighting_of_ref": "indicator--9ae98d56-2415-4f56-b8de-69eedb890a4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2ee19e-aab1-4e7d-8fb9-6325226a175c", "sighting_of_ref": "indicator--9ae98d56-2415-4f56-b8de-69eedb890a4c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1143306b-5710-49a4-9e8c-cb58f054b4e1", "sighting_of_ref": "indicator--6c093c0d-2ba3-4fce-9ba7-3f61f03d08da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469051ff-1069-4253-b863-517af9285864", "sighting_of_ref": "indicator--6fcbd8d6-3cd9-4331-af50-968ae2299b85", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b75e101-1e9c-43e9-abd9-01d1cf221e2f", "sighting_of_ref": "indicator--24c75b34-3d3f-4ed1-8309-5dd28210da3d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5eb2bfb-bbac-4acc-8495-63863aea1f83", "sighting_of_ref": "indicator--c73f5046-02fb-48fa-8d7a-03dc8f82b51e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62a5210-037d-4c54-ab44-31d80e6e677f", "sighting_of_ref": "indicator--fb6bb421-04f2-491c-b89c-dea3707bbb4d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4505e693-1ace-463e-adea-ff57a2a09147", "sighting_of_ref": "indicator--24c359c9-d7bd-4f07-89bf-0bfc2e8a6312", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381a1f3f-38c6-4ef6-be0c-4b0e09a4860c", "sighting_of_ref": "indicator--46806535-45fa-4c79-81a7-5cb84ef4ac4e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe0c512-a01e-4ca8-bb1a-f3332e5729e4", "sighting_of_ref": "indicator--9f2acbe7-615d-407e-9947-ae8fc55aa385", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c427d340-4344-4db1-8e16-28a57cf0c290", "sighting_of_ref": "indicator--9f2acbe7-615d-407e-9947-ae8fc55aa385", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c348a81-7bb3-4118-9fc5-686affa16512", "sighting_of_ref": "indicator--9f2acbe7-615d-407e-9947-ae8fc55aa385", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db122cc-55e3-4b74-9b73-b225d6db3d6d", "sighting_of_ref": "indicator--5a061774-e2a9-445e-b66d-aede92cfe75d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740f6826-6fcb-4115-bec7-2e705803f797", "sighting_of_ref": "indicator--c63fd095-3581-4ac1-8498-e2c3d98c676e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab921a9e-a9d7-419d-8b7d-b6cf6870eeee", "sighting_of_ref": "indicator--c63fd095-3581-4ac1-8498-e2c3d98c676e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b260682e-b067-4f37-99e2-d8a3a90e6b56", "sighting_of_ref": "indicator--05130358-02e9-4cb3-a07f-330f2369e324", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f4b5fe-64a0-4f44-89c2-fb4f490b465e", "sighting_of_ref": "indicator--6b8b1430-ff93-4ef0-8904-4c38dd5360ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6b496c-3b3c-4ada-bcac-698dd83f70d0", "sighting_of_ref": "indicator--6b8b1430-ff93-4ef0-8904-4c38dd5360ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a547e01-27e0-46ed-9d97-fca7fcbe42d6", "sighting_of_ref": "indicator--70c86bb4-594a-43c6-a37b-6e67993046d5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc90a4bf-806b-4ac1-bd5f-9793ae7505e8", "sighting_of_ref": "indicator--70c86bb4-594a-43c6-a37b-6e67993046d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ce0d7b-ff77-43bb-9894-3f0f62f34507", "sighting_of_ref": "indicator--5ce99a01-89fa-458a-b482-8dc9907926d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1460900-4ed9-4155-b2a4-11c6af603dbf", "sighting_of_ref": "indicator--5ce99a01-89fa-458a-b482-8dc9907926d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86bf4fe-ba64-4276-8749-74fe248c3e82", "sighting_of_ref": "indicator--dd60621c-50cc-4a97-8c03-fc108e025eca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd44a41d-a80d-41ab-bdc3-59ec41b5de0f", "sighting_of_ref": "indicator--dd60621c-50cc-4a97-8c03-fc108e025eca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845a46dd-15ca-40cd-8f0f-3e3030c9a12f", "sighting_of_ref": "indicator--dd60621c-50cc-4a97-8c03-fc108e025eca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d3a8d5-1e77-4cd5-89ac-d1f5937a10ba", "sighting_of_ref": "indicator--aebfa889-1c78-42d9-ab9c-eef2779dbd98", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fddba4-8ecf-4d74-9e35-8258f42d0ca4", "sighting_of_ref": "indicator--aebfa889-1c78-42d9-ab9c-eef2779dbd98", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd45863-5bcb-4f8a-95a9-9ab7cf66ff29", "sighting_of_ref": "indicator--aebfa889-1c78-42d9-ab9c-eef2779dbd98", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1636ea9e-c9a1-4ea4-b46c-a0faa3d90edc", "sighting_of_ref": "indicator--cf267b40-c391-4f1f-9642-bd2287fc64fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc71e1d4-30e7-479c-858d-690880dc0d3b", "sighting_of_ref": "indicator--cf267b40-c391-4f1f-9642-bd2287fc64fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b483d74b-2a07-4d43-b13a-14a8f92eb8c3", "sighting_of_ref": "indicator--e9ec0541-5fd3-43b5-9827-1ddd1b4e6e57", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0251706-f985-4b2b-818f-67b7fc39724c", "sighting_of_ref": "indicator--e9ec0541-5fd3-43b5-9827-1ddd1b4e6e57", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76d32f2-ff41-42a6-b95e-98ef4a87a147", "sighting_of_ref": "indicator--e9ec0541-5fd3-43b5-9827-1ddd1b4e6e57", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e67f04-8064-4629-9913-7704b4b64cac", "sighting_of_ref": "indicator--344dfad3-f9e9-4ffe-98c4-f7bbf0d741c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bf4461-d580-4fb5-931d-8a293ef42155", "sighting_of_ref": "indicator--344dfad3-f9e9-4ffe-98c4-f7bbf0d741c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31719e08-f426-4db9-911b-0cc9f1f78f45", "sighting_of_ref": "indicator--8a733c56-79b2-4cf6-a38f-33df199bcb6d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801d9dfe-c4cc-4210-8156-850afcb0b8be", "sighting_of_ref": "indicator--361f1fc3-09dc-4bf4-a917-6c93d5d9781a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c6b81d-f584-430f-add5-c529ad734790", "sighting_of_ref": "indicator--361f1fc3-09dc-4bf4-a917-6c93d5d9781a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d66f8c2-0c5a-47ee-aa2a-4ae3cd3d11d8", "sighting_of_ref": "indicator--361f1fc3-09dc-4bf4-a917-6c93d5d9781a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e75107-d3e1-4ddd-b661-9321c3fdddc4", "sighting_of_ref": "indicator--1ea7d2c1-3f6c-4c77-92da-ee42cd68fb0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69942743-c01a-4989-a1c7-0641aa1000be", "sighting_of_ref": "indicator--1ea7d2c1-3f6c-4c77-92da-ee42cd68fb0c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393026ea-665e-48e3-a71a-1353c9eb1345", "sighting_of_ref": "indicator--1ea7d2c1-3f6c-4c77-92da-ee42cd68fb0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d609ed17-28ed-4c04-bbc2-63085b652574", "sighting_of_ref": "indicator--d2c5f96a-feee-4f8b-a78d-8734ab8c9107", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14a5eae-85de-4df4-8cb1-f537b232afdc", "sighting_of_ref": "indicator--d2c5f96a-feee-4f8b-a78d-8734ab8c9107", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb98e19b-1d00-4ae4-afec-9f9797e6aee6", "sighting_of_ref": "indicator--d2c5f96a-feee-4f8b-a78d-8734ab8c9107", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d982f89-9c57-4a52-9eea-ff917044d5e3", "sighting_of_ref": "indicator--b9b4a992-80aa-4209-b38e-8396794334d4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33a5506-65b1-4f95-ab4c-b60e110b2814", "sighting_of_ref": "indicator--d9526a12-6697-4dc1-9a67-1a045face65a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93224f9-d812-490b-9a34-43fe1bb2e32c", "sighting_of_ref": "indicator--925581bb-f2b5-402a-b5e0-ff5cb63ab1c4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791ae85f-6cfe-40cd-858e-1f5ec00c34b5", "sighting_of_ref": "indicator--925581bb-f2b5-402a-b5e0-ff5cb63ab1c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2c938c-1be5-4c61-a5e9-085b138a149f", "sighting_of_ref": "indicator--13be1a11-0877-4ca7-a437-d2d203c4e60e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab31b9b4-aa35-4c56-a4a8-49d0d5cf4fb3", "sighting_of_ref": "indicator--4bcfbc1f-a733-4da0-aa85-70b0820a6731", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b10952-cfa6-4259-8fc9-b0d9f75983ec", "sighting_of_ref": "indicator--4bcfbc1f-a733-4da0-aa85-70b0820a6731", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce56b4d0-4de7-4ef3-ab64-8f377fd72a4e", "sighting_of_ref": "indicator--8afb0b90-72d9-4194-89c9-98c08b740b95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aca5d60-07aa-40cd-af6d-1f0704a8d4e7", "sighting_of_ref": "indicator--1f98deb5-95d0-4235-84c2-778e3a2605d5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b8d204-473f-488f-ba8a-efcb216960de", "sighting_of_ref": "indicator--aa50faea-d1dd-4f0d-8cf3-e3ca055b7c85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c21503f-6838-4930-8623-17e0576cd8fc", "sighting_of_ref": "indicator--3fbae97b-e126-43ed-9797-f6e88637ebc9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b47cac-f703-4044-b6cb-d33cebac2dea", "sighting_of_ref": "indicator--7446ea71-67dc-4e40-b2f3-ea831bc6e49e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfbbafb-8560-4f43-a74e-f239fbfc5748", "sighting_of_ref": "indicator--97e1cd80-c73c-44df-9b5b-4d4c1494d0d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd3e04f-0d63-4911-b78c-6e91fe09b91e", "sighting_of_ref": "indicator--7a45ed14-89fb-4c3f-8525-9ea2d49c425c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecfbc6d-167e-42df-83f9-df0f72d88eaf", "sighting_of_ref": "indicator--bc70540e-8c51-4bb8-bd4e-d5bd1baa920d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ef536c-9433-4c16-b9ab-5a6686cc4c7c", "sighting_of_ref": "indicator--a2070eed-5608-48be-9349-9b3cc2acc56e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deeb8cea-afed-4285-bed2-41f5d4d27a5e", "sighting_of_ref": "indicator--1173821f-5952-40f6-8640-bc5af857a232", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f6ba64-09f2-4a54-9bea-ddf12324f2ea", "sighting_of_ref": "indicator--862f14ce-1155-4ad4-acd5-0f98c0969fc7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f09695-0d8b-4d3b-b0c9-97fa4eeaf161", "sighting_of_ref": "indicator--862f14ce-1155-4ad4-acd5-0f98c0969fc7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd53409-03d4-4a9d-b246-0a221004fce4", "sighting_of_ref": "indicator--93e5c1ef-8fd3-4ae3-8987-601a190c1596", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b8f87b-a534-4f02-82fd-035117a2f6d1", "sighting_of_ref": "indicator--93e5c1ef-8fd3-4ae3-8987-601a190c1596", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9101c0-1de0-494f-9a54-eb9f0e1947af", "sighting_of_ref": "indicator--ad6dcc96-257c-49c7-b111-4735ce6e9f8c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8646ff7e-827a-42e5-bc6e-42b64047fa85", "sighting_of_ref": "indicator--ad6dcc96-257c-49c7-b111-4735ce6e9f8c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13db6e49-9056-4f48-aa54-190f26691f44", "sighting_of_ref": "indicator--ad6dcc96-257c-49c7-b111-4735ce6e9f8c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d025985f-3027-4ee8-b782-867733316435", "sighting_of_ref": "indicator--4a48a765-7b74-4633-8957-1df418a22e80", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8b6ed5-f16e-431c-a1f5-6722b5661734", "sighting_of_ref": "indicator--4a48a765-7b74-4633-8957-1df418a22e80", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94a9ace-ae70-4d66-bbfd-46bbbcbf64f0", "sighting_of_ref": "indicator--4a48a765-7b74-4633-8957-1df418a22e80", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83ac670-d101-4728-b960-99bcafef9d05", "sighting_of_ref": "indicator--0de95070-89d7-4030-8c82-d0a80abbcfc7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90882c33-a997-46af-96c7-de49520723b4", "sighting_of_ref": "indicator--0de95070-89d7-4030-8c82-d0a80abbcfc7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675552da-ee16-489a-9ce5-a687a4510f8d", "sighting_of_ref": "indicator--0de95070-89d7-4030-8c82-d0a80abbcfc7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb155f84-6f66-4902-bc9c-64a38f8d7e38", "sighting_of_ref": "indicator--03926db8-3b23-451e-8593-16a6f9673a16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b506ead1-eb19-4897-8781-bd1f65b896ef", "sighting_of_ref": "indicator--03926db8-3b23-451e-8593-16a6f9673a16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdd1c5e-be81-4ab4-a928-3e0f0edc2908", "sighting_of_ref": "indicator--f4addd53-4c1e-4067-9040-2daf5bdcdb1f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f1b454-cf7b-4a4e-8175-4f2183335ea0", "sighting_of_ref": "indicator--f4addd53-4c1e-4067-9040-2daf5bdcdb1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0fee12-aade-4769-90c1-e6a80d91f3e5", "sighting_of_ref": "indicator--74b79153-46e8-4d45-a016-0431fee48d9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476960f3-8a49-41a3-b1f4-e2baa3338978", "sighting_of_ref": "indicator--74b79153-46e8-4d45-a016-0431fee48d9d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bd3b5e-408d-414b-bcf6-06999c542bb9", "sighting_of_ref": "indicator--74b79153-46e8-4d45-a016-0431fee48d9d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe08ea16-009c-4b67-a210-d7b8d20728fe", "sighting_of_ref": "indicator--ca529c02-729a-461f-b7db-273b53daa5e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef65b6bc-9083-4b25-bb14-e849cead31ed", "sighting_of_ref": "indicator--ca529c02-729a-461f-b7db-273b53daa5e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f90372-6da3-4c4e-8348-c8d7b1a3ce53", "sighting_of_ref": "indicator--ca529c02-729a-461f-b7db-273b53daa5e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04215a71-5892-41a0-bf64-5b27568f275d", "sighting_of_ref": "indicator--93d7d0ab-5e23-41de-8dac-9632b8f215e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806e55e0-3b61-4962-bd8a-4415bddbb495", "sighting_of_ref": "indicator--93d7d0ab-5e23-41de-8dac-9632b8f215e8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1a9962-6f2c-42f4-8fe8-42f7338caae8", "sighting_of_ref": "indicator--a53c6658-27d9-4406-a44c-79d2e2257e1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29234cd8-ffb4-456e-bc51-4946a2545754", "sighting_of_ref": "indicator--a53c6658-27d9-4406-a44c-79d2e2257e1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b83b569-8c8e-4572-8415-bacb525323b4", "sighting_of_ref": "indicator--a53c6658-27d9-4406-a44c-79d2e2257e1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ad2fda-4bd9-4401-8cf3-04e730ff4438", "sighting_of_ref": "indicator--5fcb339a-aa66-4a80-80b3-c5cfa9019687", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200b06e8-d936-4cca-824b-bbe5a000a2ba", "sighting_of_ref": "indicator--5fcb339a-aa66-4a80-80b3-c5cfa9019687", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944eccc3-fc81-46a1-81cd-d4e5e10361c9", "sighting_of_ref": "indicator--33cfa3f3-0d80-435a-a874-9ccbc7b85e46", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782f813a-cc33-4158-b8a6-a5902309ae66", "sighting_of_ref": "indicator--33cfa3f3-0d80-435a-a874-9ccbc7b85e46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6a9478-88dc-4b61-ad62-8b453f284abb", "sighting_of_ref": "indicator--9a4099f9-9cda-43cb-b723-43c3076ff65e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe86f645-737e-4da4-a81c-a20dabee892e", "sighting_of_ref": "indicator--9a4099f9-9cda-43cb-b723-43c3076ff65e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddca337f-d425-4440-8714-4a84f34bba2e", "sighting_of_ref": "indicator--9a4099f9-9cda-43cb-b723-43c3076ff65e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe63504-7652-4e7c-aa15-fd06e034ab6e", "sighting_of_ref": "indicator--c01d85c8-b1f0-413c-bc4c-26faba745c91", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e2d60e-1a27-432c-9250-2ae17dfb451f", "sighting_of_ref": "indicator--c01d85c8-b1f0-413c-bc4c-26faba745c91", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710b1215-df61-4bea-af3f-13ae30b6f859", "sighting_of_ref": "indicator--c01d85c8-b1f0-413c-bc4c-26faba745c91", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1691ba94-11ce-44f0-8b81-16e5a8a29e69", "sighting_of_ref": "indicator--03195f76-3f82-4f2a-8e60-83b0bf0c0165", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9b1287-a54e-48df-88f7-cdfaba22a906", "sighting_of_ref": "indicator--03195f76-3f82-4f2a-8e60-83b0bf0c0165", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bda8d4a-6ee8-479f-ac22-802dcc1bf110", "sighting_of_ref": "indicator--03195f76-3f82-4f2a-8e60-83b0bf0c0165", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b9fa0b-2e92-4bc5-a655-f2eb9bcb3b9f", "sighting_of_ref": "indicator--989e8e3d-c1de-460c-912b-8b3ad953d365", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea81f92-b704-409f-abed-4541ad2f43df", "sighting_of_ref": "indicator--093ce066-9f11-4692-ba77-f4abbffe77fe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5a133c-0809-4f1b-818c-1f44cb0e1021", "sighting_of_ref": "indicator--67f21339-82f0-4b44-971d-816141c08562", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036c0f0d-da08-4234-ac0a-569d85bcaa7e", "sighting_of_ref": "indicator--31035b41-22ce-4bd2-8dd0-08e72347c892", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce00d47-da71-4d0c-92ee-7f72e9885cc9", "sighting_of_ref": "indicator--ced7297c-3513-4d0c-950a-9fc688a941bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e80d44-ee32-44a0-90da-adea3aa85b46", "sighting_of_ref": "indicator--4ee35689-935b-4f77-8dee-dd5d95c425eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea0a789-556a-44cd-a440-e39d5f7a4471", "sighting_of_ref": "indicator--60103ea2-69d1-4770-b3bd-0886876b8990", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4320a450-9b12-4a2f-9a72-71ff0b67c9c6", "sighting_of_ref": "indicator--60103ea2-69d1-4770-b3bd-0886876b8990", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298c4d49-c037-4b6c-855f-eba1fe2754c5", "sighting_of_ref": "indicator--11ee2d66-396f-425b-b855-a3525cc8191b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f393dbc2-25e2-4e45-a70f-fffc6db20ae8", "sighting_of_ref": "indicator--abaf936f-4709-4de9-8f24-2e8417e17c1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc3cbcc-387a-482a-94b1-286bdbc60541", "sighting_of_ref": "indicator--a9792647-da2b-4bff-a2ed-26d26a6add55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265cde82-c40e-4df6-8eac-9cbc99f370c3", "sighting_of_ref": "indicator--6a9311df-f632-4f2b-acd3-229d8d99f4ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29d66cd-a62c-47d8-bd71-ceda892268e2", "sighting_of_ref": "indicator--6a9311df-f632-4f2b-acd3-229d8d99f4ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46a4827-c4ea-4ad5-92e9-17b281ad432f", "sighting_of_ref": "indicator--6a9311df-f632-4f2b-acd3-229d8d99f4ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265e1c69-bb94-4366-a467-1f9558c2ad65", "sighting_of_ref": "indicator--3eb98463-1d96-465f-9e73-aaa68ad31380", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8fda5c-08dc-4151-8c4f-d7f1f2530db4", "sighting_of_ref": "indicator--3eb98463-1d96-465f-9e73-aaa68ad31380", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911bc003-2765-456d-9c51-9cbed5cd2385", "sighting_of_ref": "indicator--3eb98463-1d96-465f-9e73-aaa68ad31380", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa5be62-1fb4-42f6-b711-20b7fd6e0ed3", "sighting_of_ref": "indicator--cab63dee-894f-4799-92f1-e7d877de5e8d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d94d0e-3211-43e2-9eaf-f62a2cc1e151", "sighting_of_ref": "indicator--cab63dee-894f-4799-92f1-e7d877de5e8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05cec19-8e59-4979-8a94-7d399fb9cfa4", "sighting_of_ref": "indicator--1b8f98d7-1097-454b-9269-24165de3de3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc27188-f30b-4aac-b891-41878e9a5ceb", "sighting_of_ref": "indicator--5dd05846-0a43-47a5-a2d7-5dd704528034", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de06fede-b47e-49b8-b228-889edcbe47cc", "sighting_of_ref": "indicator--5dd05846-0a43-47a5-a2d7-5dd704528034", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d495c0a9-c64f-4276-a310-c5d4bf98b1a9", "sighting_of_ref": "indicator--5dd05846-0a43-47a5-a2d7-5dd704528034", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3401f20-113b-4948-8e53-a35c19309b44", "sighting_of_ref": "indicator--9be6f60d-c1ef-4dab-8a9d-f7b19cfc01d0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18150a0-8263-45f1-a3c9-9781a7c89752", "sighting_of_ref": "indicator--9be6f60d-c1ef-4dab-8a9d-f7b19cfc01d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec992e74-155d-4926-935f-4a19a04c119d", "sighting_of_ref": "indicator--9be6f60d-c1ef-4dab-8a9d-f7b19cfc01d0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdf3936-bda0-4ca5-910b-b5c9a4de4a85", "sighting_of_ref": "indicator--c2764e40-024d-42f5-a110-0feb215a00b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2471f25-d17b-4625-9d20-3b84a24cfcd8", "sighting_of_ref": "indicator--c2764e40-024d-42f5-a110-0feb215a00b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0adf31-a58f-4018-a86b-d2d94d50d320", "sighting_of_ref": "indicator--4b1169a3-e57c-4219-99ff-b1a7b5c80a4a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4edf51-35c0-4b65-a546-9ac3536eba85", "sighting_of_ref": "indicator--4b1169a3-e57c-4219-99ff-b1a7b5c80a4a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e138ec3-a1b6-4102-801b-001c2f2aec99", "sighting_of_ref": "indicator--4b1169a3-e57c-4219-99ff-b1a7b5c80a4a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ca8ae1-d5ca-48a5-9fac-ad584feb4c49", "sighting_of_ref": "indicator--5a52a00b-9b64-4b60-ae61-95ce4a1c7a73", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae3705a-77a7-4165-bba2-9caa03102dcd", "sighting_of_ref": "indicator--5a52a00b-9b64-4b60-ae61-95ce4a1c7a73", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1334c670-f63f-4217-9dd3-ed6f5ac943fc", "sighting_of_ref": "indicator--5a52a00b-9b64-4b60-ae61-95ce4a1c7a73", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f6bfab-6c84-47cb-bb64-c0d86f3571b4", "sighting_of_ref": "indicator--f261c61d-3ad1-43b3-9a51-0489ec614d8c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aff7daa-5e5d-475e-b09d-c30bfd9c495a", "sighting_of_ref": "indicator--f261c61d-3ad1-43b3-9a51-0489ec614d8c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0878fb-333e-44a3-bd43-462e4a68a58a", "sighting_of_ref": "indicator--7024c95d-e4c0-4843-be03-50dc53c84046", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a9edb8-9e43-4c07-84d3-87c98c6a8b16", "sighting_of_ref": "indicator--01e7b36c-d133-48e0-85e9-d805175da869", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f4356f-8696-4159-b466-a61f6f107afb", "sighting_of_ref": "indicator--01e7b36c-d133-48e0-85e9-d805175da869", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18494fb0-ea9c-48e9-8a69-8ff4b71908b7", "sighting_of_ref": "indicator--01e7b36c-d133-48e0-85e9-d805175da869", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d3111e-fc86-44f7-beb6-6397b484a191", "sighting_of_ref": "indicator--8ee920ab-7da8-497c-aba0-839805290708", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88813448-99ec-47a3-9ad1-d29a3076a42c", "sighting_of_ref": "indicator--8ee920ab-7da8-497c-aba0-839805290708", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926a7b10-6ac6-4551-a413-78dea1c041d6", "sighting_of_ref": "indicator--8ee920ab-7da8-497c-aba0-839805290708", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a49ecd-e7db-4015-a298-1342c527ab9a", "sighting_of_ref": "indicator--d13894de-6e23-448b-9969-942c12b3f0e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255895e6-4362-464b-b4c3-bf0727a83eb8", "sighting_of_ref": "indicator--d13894de-6e23-448b-9969-942c12b3f0e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5c81e9-eb1c-42ff-a159-66150d5f0818", "sighting_of_ref": "indicator--d13894de-6e23-448b-9969-942c12b3f0e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdfa407-52e2-4229-9da9-83a42d655fde", "sighting_of_ref": "indicator--bf0c4a83-b656-4391-91a6-0bdbad364439", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d1c836-91b2-4f3b-9b20-88205b3a763b", "sighting_of_ref": "indicator--bf0c4a83-b656-4391-91a6-0bdbad364439", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a13fa75-7b66-498c-a3e3-2c776c2a7a20", "sighting_of_ref": "indicator--bf0c4a83-b656-4391-91a6-0bdbad364439", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff82d4a6-a802-42a1-b68b-5abca9f51365", "sighting_of_ref": "indicator--f7f5757c-dded-41da-a757-e410e735b9d0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78ccf9e-bf08-4ca3-91bf-d6aad0922620", "sighting_of_ref": "indicator--054bb6da-6e5d-4488-b22c-9828e89a3970", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b43b973-e2e3-400d-b883-9e7a58f73a9c", "sighting_of_ref": "indicator--5c4294c2-09ec-451f-b891-a47c55029194", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32db0eb-9e50-4c85-9d5c-d7443b819e67", "sighting_of_ref": "indicator--fbb1d10f-ae02-48e2-a543-cdef042b22f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1eb121-b202-42bc-acd5-177da770ff4d", "sighting_of_ref": "indicator--a626b210-2973-4b8e-870b-3acba703f801", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d39783-9e8a-400e-8c86-bf01853e901a", "sighting_of_ref": "indicator--a626b210-2973-4b8e-870b-3acba703f801", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa32775-6400-4887-904a-688bf9a17d19", "sighting_of_ref": "indicator--25ed670c-03a3-43a1-acd8-801892c1ef34", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6719ddf9-de32-4fd3-97cf-fa5f35e20fb5", "sighting_of_ref": "indicator--e0c7e0dc-fda3-4774-9501-c93e930c400f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cebe052-830f-4f53-8145-a731a6573a1d", "sighting_of_ref": "indicator--f39c38d1-f658-459d-b4ea-88b8353febcf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bb6f2d-fe8e-48f7-8da3-923daa182a08", "sighting_of_ref": "indicator--1a4d3d38-e93c-4121-94b3-ed314136dc1f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca571751-228e-4825-8c85-d824220fca00", "sighting_of_ref": "indicator--3f7a920c-8954-4256-98bf-fa61c52aff5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe68ec6-af98-4f4a-9588-3b0d3943f9f3", "sighting_of_ref": "indicator--3f7a920c-8954-4256-98bf-fa61c52aff5b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96ae30a-99f3-425c-a6da-0d8655f14fcf", "sighting_of_ref": "indicator--3ccec0be-ece1-429b-ac73-9e66c2bd311b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c341c45c-7420-4f97-8fbd-bbe43b9d91c9", "sighting_of_ref": "indicator--4b1ce4af-8a87-4d32-b2e0-1e65bae84a24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48db1ba4-bd20-4157-bb31-e320843f5aed", "sighting_of_ref": "indicator--c8d18ef4-61b7-4e30-a311-ccd2b6af7fc8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21093771-97fb-43c9-bb5f-ca0bf7292db8", "sighting_of_ref": "indicator--782c730b-5906-45d3-82b0-151b01ff7ad3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6008bca-d315-48fd-91d7-056d62156414", "sighting_of_ref": "indicator--782c730b-5906-45d3-82b0-151b01ff7ad3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0603c0d9-d5f5-46a1-85d1-1c338b39df52", "sighting_of_ref": "indicator--2098d3b6-c93a-4d07-8cb7-58bc65d9f19a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bedb9be-f937-4e8e-986f-a9e868c17541", "sighting_of_ref": "indicator--74c8c172-c3b5-4507-94d0-7b69f6aa51c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52aa97ce-6c1a-459b-bfaa-ac4339783766", "sighting_of_ref": "indicator--8ff6ec7e-5102-4b7c-b0e3-d0391324b338", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f14916b-775b-4394-ae7b-94e4433ecf24", "sighting_of_ref": "indicator--ed3a0f0f-7f4e-42df-806e-22f368d4d264", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f39889-e924-4a02-8719-1f43498b9e80", "sighting_of_ref": "indicator--ed3a0f0f-7f4e-42df-806e-22f368d4d264", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3ae946-298a-4c27-ad94-5c947d5f06f4", "sighting_of_ref": "indicator--8e4e85be-01ef-44e5-8f4b-debcde55a000", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b60d63-c984-495a-b259-455a8f308d01", "sighting_of_ref": "indicator--8e4e85be-01ef-44e5-8f4b-debcde55a000", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019cdbcc-778d-4c23-82f1-215805f7a7c0", "sighting_of_ref": "indicator--8e4e85be-01ef-44e5-8f4b-debcde55a000", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f420f850-31a8-4ace-828d-4971587e7eed", "sighting_of_ref": "indicator--3d7bb3d6-30c1-4511-9be0-093d0efb0cdc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0d4b94-f682-4f62-9185-a5c867174a92", "sighting_of_ref": "indicator--ca97d38d-112b-46f0-9a49-d7fc1fd7f1d3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3b8c9c-5775-4aa5-bc02-bae9b1770663", "sighting_of_ref": "indicator--ca97d38d-112b-46f0-9a49-d7fc1fd7f1d3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf4226b-68ce-452e-8c8b-bade071fdc00", "sighting_of_ref": "indicator--ca97d38d-112b-46f0-9a49-d7fc1fd7f1d3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4261dc2-f793-4a78-82cc-5075e1049a0a", "sighting_of_ref": "indicator--2cc82b42-5d1a-4dfa-8378-f255185d8ddb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579a819f-838b-41ad-95ab-84dc2f495a3f", "sighting_of_ref": "indicator--6d225007-22b5-40a7-97f6-9e8fdc15d1fa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7884e65-bc09-49b4-a572-177772baf902", "sighting_of_ref": "indicator--6d225007-22b5-40a7-97f6-9e8fdc15d1fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376fdea3-167a-476f-b4e2-3a6cdef5d172", "sighting_of_ref": "indicator--6d225007-22b5-40a7-97f6-9e8fdc15d1fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356e47e5-7ae0-4edf-b4d8-a5df5584f741", "sighting_of_ref": "indicator--694b8f86-dbd3-4db5-a51b-6aa8e2d2c021", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf50032-a487-4979-8e5d-6a3e6cc51179", "sighting_of_ref": "indicator--694b8f86-dbd3-4db5-a51b-6aa8e2d2c021", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be86c2d1-3aba-4fdd-8755-1232f022373f", "sighting_of_ref": "indicator--fec7f09b-1afa-40ed-a650-102def38e5d8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6085f048-f4e9-4a6b-9542-a2b50e43e851", "sighting_of_ref": "indicator--0a4f4f81-e0a2-4eee-81c0-65801a34f5d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0062f30c-4776-4e14-8b61-7770e647160d", "sighting_of_ref": "indicator--e0c77c2f-2668-40bb-9fb0-02def89fb582", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8732c02-35ec-4c7b-a5dc-0105e887b9a6", "sighting_of_ref": "indicator--e0c77c2f-2668-40bb-9fb0-02def89fb582", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad8e93f-c82c-48a1-bad1-023c8b574e2f", "sighting_of_ref": "indicator--e0c77c2f-2668-40bb-9fb0-02def89fb582", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcd7e20-34b5-4c30-8c63-ddbe7b0d8eb5", "sighting_of_ref": "indicator--86fbd778-68b4-4dd2-aa12-346b86c6e6a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39080b17-59f7-4046-8535-02cf2e59e9b1", "sighting_of_ref": "indicator--86fbd778-68b4-4dd2-aa12-346b86c6e6a2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0cb35a-7f5d-40f4-a688-69075318422d", "sighting_of_ref": "indicator--2d240832-c709-482a-96de-b70a09cd6684", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b06a38b-4040-4a5a-90e6-16140e79030d", "sighting_of_ref": "indicator--2d240832-c709-482a-96de-b70a09cd6684", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a371ee9b-dbd3-4823-9ca2-b99256679acb", "sighting_of_ref": "indicator--2d240832-c709-482a-96de-b70a09cd6684", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8f94bf-911d-44fe-ab95-c518df008247", "sighting_of_ref": "indicator--eede34e0-043b-4048-a878-32efc1bd8386", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cb016c-c070-4ec4-8db6-4eb94cea10da", "sighting_of_ref": "indicator--eede34e0-043b-4048-a878-32efc1bd8386", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dd9659-c6a2-4a6f-93c0-c9baf6d5fe2b", "sighting_of_ref": "indicator--2b7a0fb9-e0e6-43c2-80b4-5eb6a2469e3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82099f2-e7b2-4ba6-8743-bf2f932bae3c", "sighting_of_ref": "indicator--9411e8a6-c8b1-4e5e-8bf3-ca17c63cba77", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17400321-cfe8-4990-a02d-7bf23a5ba70b", "sighting_of_ref": "indicator--9411e8a6-c8b1-4e5e-8bf3-ca17c63cba77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7721ef-541f-47e3-9a89-90a628018388", "sighting_of_ref": "indicator--9411e8a6-c8b1-4e5e-8bf3-ca17c63cba77", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc64c392-3cd7-414c-9c27-f773e3ec84f4", "sighting_of_ref": "indicator--794a1427-9c7b-45df-a9c6-40598c7892e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a56c04-159b-442d-b575-fd6631ead68f", "sighting_of_ref": "indicator--d8560e74-38be-43b9-8ccf-ca61216ef908", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccbacb2-1fef-4891-9365-ca8495dd9128", "sighting_of_ref": "indicator--d8560e74-38be-43b9-8ccf-ca61216ef908", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc844883-6b41-4316-9c3b-7c9ab20b05ff", "sighting_of_ref": "indicator--d7d95adb-6012-4ac6-a215-d9cd35d2caa8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0e2d3b-b4ab-4f60-a7b0-bed9bea84708", "sighting_of_ref": "indicator--d7d95adb-6012-4ac6-a215-d9cd35d2caa8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8047c343-57ae-461a-9a27-664cf6353c55", "sighting_of_ref": "indicator--d7d95adb-6012-4ac6-a215-d9cd35d2caa8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866f9431-7926-48da-99b3-0f97392ee737", "sighting_of_ref": "indicator--43da9db4-03f1-4d29-9a8d-455465158e97", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c0ef69-5595-4439-b801-46001a149529", "sighting_of_ref": "indicator--43da9db4-03f1-4d29-9a8d-455465158e97", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9a61e9-cfea-480b-96f8-f02f3b94bd53", "sighting_of_ref": "indicator--5d17a70d-7a90-4bd8-ad9e-d1a8db6582f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8a1466-8e0d-4df3-bba0-13eab3a249cb", "sighting_of_ref": "indicator--5d17a70d-7a90-4bd8-ad9e-d1a8db6582f7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8b9c34-31ba-4f33-ab80-2902083d802e", "sighting_of_ref": "indicator--a971f9c7-2683-49a3-82c5-3dffd043c090", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f94806-cbfb-4a7c-b88c-d3eadde64118", "sighting_of_ref": "indicator--a971f9c7-2683-49a3-82c5-3dffd043c090", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbec1271-2834-4482-a405-21dbd65ea4e2", "sighting_of_ref": "indicator--678bc1f2-65d5-44b6-88bb-28b259328cbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8162a001-fc36-4b07-bad4-b74d036207b8", "sighting_of_ref": "indicator--a7e73265-3774-4eb5-889f-9b2a831e4b18", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a5a44b-2752-473a-9b9e-dfd4c3198b84", "sighting_of_ref": "indicator--a7e73265-3774-4eb5-889f-9b2a831e4b18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab99c52d-2160-49dd-ba07-4aaef184cea4", "sighting_of_ref": "indicator--41be42f2-7443-406f-80d8-08d232c2540a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443e655c-7424-4eb6-8953-bebd61c90123", "sighting_of_ref": "indicator--41be42f2-7443-406f-80d8-08d232c2540a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd372ffd-355c-4cb6-af3b-25d6307939f8", "sighting_of_ref": "indicator--3100e98d-6ec6-4528-a571-42682c71c470", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d23437-af65-4b57-8956-9ed1ac6b0edf", "sighting_of_ref": "indicator--3100e98d-6ec6-4528-a571-42682c71c470", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7968a676-0458-4e33-8710-0d9d898d8b42", "sighting_of_ref": "indicator--ff544d2b-693a-4524-804a-b100e864b9d2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1feedb7e-6760-4540-91cc-46bcf7af48f6", "sighting_of_ref": "indicator--ff544d2b-693a-4524-804a-b100e864b9d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81daca4-426e-4199-8d64-99e4a8685bb8", "sighting_of_ref": "indicator--b276d210-91e5-4710-9500-45ae3056bdcf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31a0049-3b7f-461b-ab6d-5cd67a41b126", "sighting_of_ref": "indicator--b276d210-91e5-4710-9500-45ae3056bdcf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3479bf-3a0f-4219-be5e-53b0b2b4c9c4", "sighting_of_ref": "indicator--b276d210-91e5-4710-9500-45ae3056bdcf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd30c04-f633-4bfd-8c31-0b56ac213a29", "sighting_of_ref": "indicator--167c57e5-faed-4602-9b3e-1b0a2588b035", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77cd6d6-dd54-4852-b0fb-048bbc4b31db", "sighting_of_ref": "indicator--167c57e5-faed-4602-9b3e-1b0a2588b035", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc4393e-852a-4606-8031-cf7c350181eb", "sighting_of_ref": "indicator--167c57e5-faed-4602-9b3e-1b0a2588b035", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eacb0db-b784-4845-a3e8-6d9d28a6c2f2", "sighting_of_ref": "indicator--3f90edb0-c144-456e-8bc8-49231fce64cf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7fc9be-b5cf-4408-a76e-f4cba61b4dc3", "sighting_of_ref": "indicator--3f90edb0-c144-456e-8bc8-49231fce64cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b18ea93-2d0c-4f34-bf99-dbb2cf1e0b58", "sighting_of_ref": "indicator--3f90edb0-c144-456e-8bc8-49231fce64cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c14d24-9d76-4ea2-8f82-c89769dd8c1c", "sighting_of_ref": "indicator--4a5ec251-d085-43c5-aacb-446024d718df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3b637e-c10b-4137-87e5-dc7f57e1ae8a", "sighting_of_ref": "indicator--4a5ec251-d085-43c5-aacb-446024d718df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96623e9-4a02-43d4-83fa-f0587bdfa50a", "sighting_of_ref": "indicator--e3db1c8b-bab9-496f-8ecd-6f78ca2dfc32", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fba7ffe-176e-4a78-97b7-bb271c17dc78", "sighting_of_ref": "indicator--5608bd16-403f-4bd1-8bdd-75063f0cb967", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f590bdd-fc5f-41e5-a7aa-86dec425046e", "sighting_of_ref": "indicator--ac1fd082-ee54-4210-9b12-095f6bad9cd2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f803de00-463c-4bde-ac8e-ec069b1a6a1f", "sighting_of_ref": "indicator--ac1fd082-ee54-4210-9b12-095f6bad9cd2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bfcbd0-dc14-4b7d-b4b7-1671b1a48545", "sighting_of_ref": "indicator--ac1fd082-ee54-4210-9b12-095f6bad9cd2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf61a91d-1069-45a6-a21a-1a523c240b8f", "sighting_of_ref": "indicator--3348643d-c3b1-4179-b897-b3a3071b9435", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4503a3d3-ebd6-45a0-9a8b-1b07c44703d3", "sighting_of_ref": "indicator--3348643d-c3b1-4179-b897-b3a3071b9435", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3860f08d-6330-4d92-a095-38e246087b44", "sighting_of_ref": "indicator--3348643d-c3b1-4179-b897-b3a3071b9435", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c632305-988a-4f19-8a63-3ef010fa3f04", "sighting_of_ref": "indicator--e6f28c9b-c99e-4f46-9056-d01e6ced3536", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c45150-af61-4ebc-b42b-e9c42a591428", "sighting_of_ref": "indicator--e6f28c9b-c99e-4f46-9056-d01e6ced3536", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac8c842-1ee5-4dba-80d0-e308ea5658e9", "sighting_of_ref": "indicator--e6f28c9b-c99e-4f46-9056-d01e6ced3536", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c38848-9816-4560-8c68-0e06a8bfa780", "sighting_of_ref": "indicator--d75ce334-2699-4d4d-9283-307c27726eb2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569b15c6-c2a1-4bf8-8737-78b7d9e7f62f", "sighting_of_ref": "indicator--d75ce334-2699-4d4d-9283-307c27726eb2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7f9149-3691-41db-82d9-5e2f8b70a139", "sighting_of_ref": "indicator--d75ce334-2699-4d4d-9283-307c27726eb2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cd7ad9-4caf-457c-98c5-5d5b8bf4d67e", "sighting_of_ref": "indicator--4a5ee95f-087a-4d73-bd13-48b48f54d718", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdc340a-25fa-4634-8261-a12470a041e7", "sighting_of_ref": "indicator--4a5ee95f-087a-4d73-bd13-48b48f54d718", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa88ff2f-1a05-45d9-bafe-47f90d7fa097", "sighting_of_ref": "indicator--4a5ee95f-087a-4d73-bd13-48b48f54d718", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1237ce-a98b-48fa-bd0b-523fe7f02844", "sighting_of_ref": "indicator--04c498d6-98e6-4af2-8247-8595d58da30b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01cdcaf-0e30-466b-b12a-ef26c6742c42", "sighting_of_ref": "indicator--04c498d6-98e6-4af2-8247-8595d58da30b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efa6c12-2bd6-482b-9c50-e5ebaf5bb7be", "sighting_of_ref": "indicator--04c498d6-98e6-4af2-8247-8595d58da30b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7992181b-9822-47ac-85ea-dec8bacd2baf", "sighting_of_ref": "indicator--4cab3626-828c-4b8c-844b-81b4fb8a7658", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87356afd-5ccc-43eb-b028-70507d34558e", "sighting_of_ref": "indicator--4cab3626-828c-4b8c-844b-81b4fb8a7658", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ec7496-ff60-4bb4-949d-0e6890168f75", "sighting_of_ref": "indicator--6dfd6303-4860-41be-96a9-b07a3ec0ee9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4847287b-ae4a-42ff-b733-9001fd264905", "sighting_of_ref": "indicator--6dfd6303-4860-41be-96a9-b07a3ec0ee9f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0de6df6-08a1-4d69-b607-01cccec345aa", "sighting_of_ref": "indicator--2d8818cd-f79f-4c5d-b370-ac66ed5a2530", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c648f0c8-9839-4ee4-bfab-373eddecdef0", "sighting_of_ref": "indicator--2d8818cd-f79f-4c5d-b370-ac66ed5a2530", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e48b99-b24e-4b89-a3ef-e6f01570ade3", "sighting_of_ref": "indicator--2d8818cd-f79f-4c5d-b370-ac66ed5a2530", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e5352b-4b77-4096-b53c-5aae70a54e43", "sighting_of_ref": "indicator--4a64345d-eaa2-444d-a26d-192ec6890a62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77f3200-70ed-46f2-bfb1-ceb0e01bed56", "sighting_of_ref": "indicator--4a64345d-eaa2-444d-a26d-192ec6890a62", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6213ab-017b-48af-997b-633e17e4d945", "sighting_of_ref": "indicator--6fa1d94a-1200-4ed0-8f81-a0d1a7a0d9aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e8dbec-fe43-42ed-9e70-f96c03b941e3", "sighting_of_ref": "indicator--6fa1d94a-1200-4ed0-8f81-a0d1a7a0d9aa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99974842-db7a-43b1-9a02-4ca70b3a93aa", "sighting_of_ref": "indicator--6fa1d94a-1200-4ed0-8f81-a0d1a7a0d9aa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3365a3-f12e-4127-a592-c92f661c2ef7", "sighting_of_ref": "indicator--4b7d3525-a495-44f1-9870-d2d43b684712", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b7737c-d9c8-4833-87ea-da3f99d3719c", "sighting_of_ref": "indicator--3c7010be-5464-4b47-a3fa-9b540d0adb78", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5dabcd-78ca-48ea-b1a2-de7eb0ec95bd", "sighting_of_ref": "indicator--3c7010be-5464-4b47-a3fa-9b540d0adb78", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e4a57e-8ec6-42ef-9300-0773831449f7", "sighting_of_ref": "indicator--3c7010be-5464-4b47-a3fa-9b540d0adb78", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122521b8-0b35-43db-b87d-d2f0592bfb77", "sighting_of_ref": "indicator--325b9ad2-38c7-4745-b045-d4e36bcbdde6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7f2e47-05a5-4d74-8dea-2d43abfb4ca9", "sighting_of_ref": "indicator--325b9ad2-38c7-4745-b045-d4e36bcbdde6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9755fe-0d4e-489c-8b4e-e7882373d794", "sighting_of_ref": "indicator--acf90aef-e6f5-49aa-a289-c944c8991598", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391def05-99a9-44e1-b211-922ea44fb792", "sighting_of_ref": "indicator--acf90aef-e6f5-49aa-a289-c944c8991598", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b399e66-9ea3-4676-90ea-2eafb19e788d", "sighting_of_ref": "indicator--83b68710-be51-48b1-a0e2-3b3e13cac11f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbbd11b-c4c8-4be0-8bd9-fea0431a5c32", "sighting_of_ref": "indicator--83b68710-be51-48b1-a0e2-3b3e13cac11f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9ca31e-afca-4a48-98ac-4d5681bb1ce6", "sighting_of_ref": "indicator--8e0b8055-1a8e-4652-953b-0f72cd52608c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31573e32-cd85-4f49-bab9-f1c9e7c2215c", "sighting_of_ref": "indicator--c7ebc08d-0d16-4e0c-a700-649300ebe251", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bfa4c8a-ff93-40ea-8094-ca63b6f523e0", "sighting_of_ref": "indicator--71e2ded5-d812-4778-a2f3-c3317bcc916e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408b5cda-61ff-409f-804f-0da5787db401", "sighting_of_ref": "indicator--220764c8-59bf-4260-b067-d32cf90000ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccf5192-fe16-411a-9904-d6e6ac462b6a", "sighting_of_ref": "indicator--2424d478-830c-42c5-a5ea-ba8852cb8037", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aced6256-6aa4-41bd-9ef1-6b9b60322171", "sighting_of_ref": "indicator--1f30d9df-709c-4274-938d-a3e7ea38acb2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30714d11-fe4d-4ebc-b2ac-36e07dd76a78", "sighting_of_ref": "indicator--bd86c059-12e4-44f7-8ab2-9262f2db48ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f42334-8000-4a03-bd93-187390b1b2cb", "sighting_of_ref": "indicator--039f734b-78f5-4c02-8d83-cddeb92abf1b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a072fc67-37a2-415d-bfaa-0d480eadadec", "sighting_of_ref": "indicator--e9b2b2ce-a5df-4456-818a-71cf3b543139", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0166442e-6ca4-407b-8458-21b56aee86da", "sighting_of_ref": "indicator--3022c5b4-90f0-4db0-9b17-713df704d94e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432bff4d-e6a3-4ada-aa3d-3641c0e6fc01", "sighting_of_ref": "indicator--6c47efc3-73b1-40e0-90a3-2cf9b97c9dbb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565a7f12-ebcd-4783-a918-e903addef9ae", "sighting_of_ref": "indicator--6c47efc3-73b1-40e0-90a3-2cf9b97c9dbb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752cfbcc-dc3b-4cf0-b215-517e51a020e3", "sighting_of_ref": "indicator--c6754333-cf73-4fdb-b14c-0df16e7f74de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac448451-a951-4a5e-8b87-54178217fd51", "sighting_of_ref": "indicator--452a9b8d-74ba-4fad-aa10-1b30cd042880", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5e8418-c92c-4c8f-9257-79215addf136", "sighting_of_ref": "indicator--fc5523ca-73a4-4543-bca0-56117c2bcb5d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640e0a69-361a-40e9-8bfc-9e42fd16cb26", "sighting_of_ref": "indicator--fc5523ca-73a4-4543-bca0-56117c2bcb5d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4509248e-103a-4b3c-a01f-09274524814d", "sighting_of_ref": "indicator--fc5523ca-73a4-4543-bca0-56117c2bcb5d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc4f0e-66ba-49ed-a8b3-ea08141d2d00", "sighting_of_ref": "indicator--66f922c3-0a83-436a-bfb4-3f59d4e537ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e8884c-75e0-4ecc-b445-78014aa4ff06", "sighting_of_ref": "indicator--66f922c3-0a83-436a-bfb4-3f59d4e537ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e759b8ea-d52c-436d-ba5b-516676b87528", "sighting_of_ref": "indicator--ef26b417-0207-4d9b-8c80-c28e54efb5e8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d08ce3c-cf00-46b2-86b6-7485daf304fc", "sighting_of_ref": "indicator--ef26b417-0207-4d9b-8c80-c28e54efb5e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94a271a-1c35-4a50-b692-fa5edde8d1b9", "sighting_of_ref": "indicator--391435cb-9ec8-4652-be91-41cfda1271a6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00bdfc42-ff97-45a4-9462-f6e7ecaf514a", "sighting_of_ref": "indicator--391435cb-9ec8-4652-be91-41cfda1271a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47f9825-a5be-499e-9a41-6be5a70ea3ce", "sighting_of_ref": "indicator--e0bb3a3a-a16a-4270-b240-129cbfdf5522", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d30ae3-93b6-46b2-b430-7c14745156de", "sighting_of_ref": "indicator--e0bb3a3a-a16a-4270-b240-129cbfdf5522", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d368d6-2d1f-4cee-a04c-a1c84bca29d0", "sighting_of_ref": "indicator--e0bb3a3a-a16a-4270-b240-129cbfdf5522", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88152e88-d88d-4c94-9190-35afcfd0e0a6", "sighting_of_ref": "indicator--9bd2f812-68ea-4726-9582-40393a7f516e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ee585b-96f6-424d-aee0-06ddfb19eea7", "sighting_of_ref": "indicator--9bd2f812-68ea-4726-9582-40393a7f516e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75be2335-3b3c-49f5-90d1-16fef8cae727", "sighting_of_ref": "indicator--bfafd024-2692-4faa-8c74-33fc0e69bb5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1861fc1-7eff-47a8-a975-2f6b78fa3d2e", "sighting_of_ref": "indicator--bfafd024-2692-4faa-8c74-33fc0e69bb5a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8925411b-1b4c-4fc2-9c8f-938f4ec83d42", "sighting_of_ref": "indicator--bfafd024-2692-4faa-8c74-33fc0e69bb5a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dd934d-46d0-45fc-af5f-7f36787e63af", "sighting_of_ref": "indicator--bd0a58e7-d6ac-4b81-a78f-26b927a9c946", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87cc3478-e1e9-4971-86ca-8e15b6c2375d", "sighting_of_ref": "indicator--bd0a58e7-d6ac-4b81-a78f-26b927a9c946", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e26f655-c373-43e0-98a3-7f3a7ae20c60", "sighting_of_ref": "indicator--bd0a58e7-d6ac-4b81-a78f-26b927a9c946", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fced5346-955a-4a28-a55c-9079083e0aff", "sighting_of_ref": "indicator--cc401575-7dd7-4a66-a594-defffd5c1534", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd258cd-aba4-474f-819e-11439d76f06e", "sighting_of_ref": "indicator--cc401575-7dd7-4a66-a594-defffd5c1534", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c2cc32-7527-41bf-854d-bac244af3611", "sighting_of_ref": "indicator--cc401575-7dd7-4a66-a594-defffd5c1534", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52eae2f6-65ff-472c-9628-bdfe2ab2d8a3", "sighting_of_ref": "indicator--ccaea33e-9fbf-49f9-aa5c-9d08bd8a80ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb6778c-a7ea-41a3-823a-5eb1a067cb4f", "sighting_of_ref": "indicator--ccaea33e-9fbf-49f9-aa5c-9d08bd8a80ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ca843b-f4a2-49ae-a2d3-963c8ee44441", "sighting_of_ref": "indicator--ccaea33e-9fbf-49f9-aa5c-9d08bd8a80ea", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc440cb-38fd-4a3e-ba97-832b168c040d", "sighting_of_ref": "indicator--6a2a5658-a392-40b0-8705-6e395224d67c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e82f45-121e-4e2e-86ab-b9eba0aa4b78", "sighting_of_ref": "indicator--6a2a5658-a392-40b0-8705-6e395224d67c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64372eb-dba6-48a6-8928-556fb7bc3061", "sighting_of_ref": "indicator--424e6cd6-aa10-4d1a-85f3-dea753b715d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81510beb-7b4b-4645-9b74-23db37e81722", "sighting_of_ref": "indicator--424e6cd6-aa10-4d1a-85f3-dea753b715d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942d10f3-40a0-4f1b-8f37-2cef737c1d29", "sighting_of_ref": "indicator--4e186233-f854-4798-b0f3-06194e2ca012", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb8d518-969a-45c5-ad01-ffac3462ee25", "sighting_of_ref": "indicator--4e186233-f854-4798-b0f3-06194e2ca012", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043b788c-a75b-4365-93b9-4e936fa0dd35", "sighting_of_ref": "indicator--4e186233-f854-4798-b0f3-06194e2ca012", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc696775-f31d-44a5-9c96-d7cbbf00c7c4", "sighting_of_ref": "indicator--6e498849-4dcd-4118-9f55-7babd8661d22", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fafaffb-8b8f-4308-b3a9-1dd7ba26e9bc", "sighting_of_ref": "indicator--6e498849-4dcd-4118-9f55-7babd8661d22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa560e6a-9684-48bc-90dc-10e7b7b9d181", "sighting_of_ref": "indicator--6e498849-4dcd-4118-9f55-7babd8661d22", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dd0f33-d35c-4fae-944a-974f2f50dec7", "sighting_of_ref": "indicator--c72f0b21-80d7-44ae-a0d8-d0ea368c41b2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec7dbcc-2f05-45b9-bf15-0b8faa82f805", "sighting_of_ref": "indicator--5edecc0f-ad9f-48c7-baae-90d1bc4d844b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35992522-7a63-46cc-b624-db979947e349", "sighting_of_ref": "indicator--e5495875-8c2a-4ede-9333-3bb1619adf3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1669413d-8f53-4723-b133-eef140908566", "sighting_of_ref": "indicator--cb618b1f-0e9c-41b3-b618-481a824207f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e575ab-9bcd-4583-87e3-a2caf116cfeb", "sighting_of_ref": "indicator--0d43ddb8-bce6-48bb-9715-b982eb7786ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6805a214-2a10-4846-aecf-d5c659c4f1b9", "sighting_of_ref": "indicator--a64479f8-db19-4375-993d-2204e5788285", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757d4178-4975-4650-9cd2-0bb9657781d7", "sighting_of_ref": "indicator--47c33731-a6fb-4e8b-a436-49de7fed055b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e1151b-cdce-408a-aeed-fb7f20a69a81", "sighting_of_ref": "indicator--cb7da18f-974e-44f7-a04a-ed2e3d8b110b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520dabde-c0c2-472e-ac29-ae35419c432d", "sighting_of_ref": "indicator--e3a242c2-466b-4cf6-9ae6-554686af1ed8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd42a7df-0b45-4e29-a7e8-6d84104dc30e", "sighting_of_ref": "indicator--7f8e4089-3340-4b85-93db-3f0a41ee88ee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991206ba-3d46-4e7f-88c3-eb06d87c63e4", "sighting_of_ref": "indicator--173e8977-149e-4ff2-ad9f-18f92042a266", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d27c79-78de-4204-bf99-6f249fcc74c4", "sighting_of_ref": "indicator--173e8977-149e-4ff2-ad9f-18f92042a266", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93c59db-76b3-4266-8f5b-fbf98b9b807e", "sighting_of_ref": "indicator--aea45c5a-5058-418e-af9f-fd7f7a982739", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54a24fa-f4f5-450d-be1b-fa83244fab19", "sighting_of_ref": "indicator--7e89713e-10e9-4a70-8336-9a3122a160da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092a5020-66c8-429f-b99d-7e5947f59fab", "sighting_of_ref": "indicator--6338cdf8-375f-495d-866c-e1eed67909c2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a339e88-e639-477d-baef-fe4812d19f73", "sighting_of_ref": "indicator--6338cdf8-375f-495d-866c-e1eed67909c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e95cff-b47f-48d5-867c-1c3c521f8e8b", "sighting_of_ref": "indicator--3c8f7d8d-46ea-4d1d-9f77-ba1a561ee978", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036d56a4-7e2e-4e68-8251-fb4ae9bf59ac", "sighting_of_ref": "indicator--a5361d6f-3c9d-49f1-93c5-23b5da1e8fa5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76a98f8-743a-4920-b9d4-5a33663bccdb", "sighting_of_ref": "indicator--4761ab71-1f72-43ef-acfc-de2c5fd35176", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7004848c-9ccf-423d-90ae-b75d6da61f6d", "sighting_of_ref": "indicator--3717e1a0-1d97-40aa-b8fc-922187bfba2e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2784c40-cf08-48cd-9ffd-b600f51bec32", "sighting_of_ref": "indicator--6f4667a0-2cdf-4e76-9fd0-f697bbe1eea1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0996a19e-62f8-492a-b3ec-d02035143e92", "sighting_of_ref": "indicator--4ca4af6d-9c26-4320-ab5d-6e0319d07475", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede5b6c5-f628-4801-8f12-e3acf01d5ef0", "sighting_of_ref": "indicator--723b4d3f-ddbb-4ced-bae8-2a3305e52d85", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fc382d-6beb-4d75-a64b-568486db2376", "sighting_of_ref": "indicator--9b5a6bed-81c1-4539-bace-3495b1c3da36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6c3a95-3f57-459b-b192-b5a8f9886eea", "sighting_of_ref": "indicator--9b5a6bed-81c1-4539-bace-3495b1c3da36", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3038d21-e143-438f-90c5-70884cd97a21", "sighting_of_ref": "indicator--65bc0d1d-6b0e-41d5-a824-a21379f55276", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c815f9e-e3bd-45e2-ae64-7109d603f669", "sighting_of_ref": "indicator--25243e6b-e21d-44dc-9c7d-783caf2a29f9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d0bbb8-74db-4b93-935b-826f8d980ffe", "sighting_of_ref": "indicator--25243e6b-e21d-44dc-9c7d-783caf2a29f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f0d20d-686d-4c91-9004-d48ddd5aa911", "sighting_of_ref": "indicator--1c58e337-20a7-4129-b3de-517cd6354b9b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1163c78d-0723-4b05-a3f0-a8a3dcf1294c", "sighting_of_ref": "indicator--1c58e337-20a7-4129-b3de-517cd6354b9b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0a939e-94fb-4b82-a7ce-3bae0d523a58", "sighting_of_ref": "indicator--c26a7001-9930-470d-b03f-d913f29b78ef", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b0ffec-a3ce-4cda-8a20-e323ad91fdcd", "sighting_of_ref": "indicator--c26a7001-9930-470d-b03f-d913f29b78ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d719d5-7ee5-4eba-b177-d170be137768", "sighting_of_ref": "indicator--c26a7001-9930-470d-b03f-d913f29b78ef", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbc9fa0-ad42-48c8-9c96-de1bc3fd78fb", "sighting_of_ref": "indicator--2276c995-c560-4f39-a5b3-932db65ff755", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5049a037-54ea-42f2-aa9e-25719689dc86", "sighting_of_ref": "indicator--2276c995-c560-4f39-a5b3-932db65ff755", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d759ace-128a-40b3-afa4-b99904c46f0f", "sighting_of_ref": "indicator--2067aeb0-e096-4662-9279-82a110324d16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11d7f7c-2222-4c07-87fa-68b6352a51c5", "sighting_of_ref": "indicator--2067aeb0-e096-4662-9279-82a110324d16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fa855d-b852-449a-8a67-102931511587", "sighting_of_ref": "indicator--2067aeb0-e096-4662-9279-82a110324d16", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3619e0b-230d-4284-a984-b94b6f717815", "sighting_of_ref": "indicator--7e5676a5-87b2-42dd-a1de-dbb505da9384", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecba7ead-dfbd-46be-9275-a0aa8a004b27", "sighting_of_ref": "indicator--7e5676a5-87b2-42dd-a1de-dbb505da9384", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdaaca2-7ea8-4129-920f-55a92177b831", "sighting_of_ref": "indicator--7e5676a5-87b2-42dd-a1de-dbb505da9384", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827eaba6-1a5a-461a-ab78-9d5c699386dd", "sighting_of_ref": "indicator--6a276406-90d6-4513-9809-c7e7379b1583", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d30403-148d-4612-b28f-3d438493fe87", "sighting_of_ref": "indicator--6a276406-90d6-4513-9809-c7e7379b1583", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6344906b-a6ca-4471-b3ff-e7eed823765c", "sighting_of_ref": "indicator--5ed9d563-ebd5-4a13-982f-e465417e115e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce69f1e6-98aa-491d-8b88-645dced7fc2d", "sighting_of_ref": "indicator--5ed9d563-ebd5-4a13-982f-e465417e115e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f5910e-6cab-4b8b-af87-a9287d855a3d", "sighting_of_ref": "indicator--f3b9c2ca-8ec2-402d-a766-da93fe4f4ccf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fc0789-9e97-4fbf-ae37-33241f6d1d14", "sighting_of_ref": "indicator--f3b9c2ca-8ec2-402d-a766-da93fe4f4ccf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d76f098-8d99-4ce7-a26d-d35985160b40", "sighting_of_ref": "indicator--f3b9c2ca-8ec2-402d-a766-da93fe4f4ccf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0335f5e2-b4d0-4c57-ab50-3f6b4f4c74bd", "sighting_of_ref": "indicator--9f8fa26d-c309-453a-a459-acd0b42c0f0d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284d5529-ac49-452c-bdb4-4419066c7b69", "sighting_of_ref": "indicator--92e64c21-86ad-43bb-9813-48e84beee1e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de97a2f1-7ad3-4c09-bea7-bd7f14c417d8", "sighting_of_ref": "indicator--92e64c21-86ad-43bb-9813-48e84beee1e6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ce3800-c67e-490a-9ee4-2cadc7de7340", "sighting_of_ref": "indicator--19c2de36-59d3-4007-812a-b8eee0f7a2d7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844bd160-751a-4b7e-923f-322a818745a2", "sighting_of_ref": "indicator--19c2de36-59d3-4007-812a-b8eee0f7a2d7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cfbebe-5350-469c-b23a-8a2be18eb8bf", "sighting_of_ref": "indicator--19c2de36-59d3-4007-812a-b8eee0f7a2d7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa295048-c775-43b4-8d1a-c1e8d6da3c79", "sighting_of_ref": "indicator--6aa99bd7-cb00-40d0-8a23-2e4aacb0ae7a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2be577d-7a8b-45e7-893c-262eecc5c3a1", "sighting_of_ref": "indicator--6aa99bd7-cb00-40d0-8a23-2e4aacb0ae7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ab908a-9a31-44dc-a9d4-c5410545fe07", "sighting_of_ref": "indicator--6aa99bd7-cb00-40d0-8a23-2e4aacb0ae7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b49a7f6-1d10-4e68-bdf3-b45f284214ec", "sighting_of_ref": "indicator--99f87246-b5da-4c14-8725-4470220c5785", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c777315-c5ad-436b-9f11-352f352fca76", "sighting_of_ref": "indicator--99f87246-b5da-4c14-8725-4470220c5785", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30eec022-7d6c-4073-8b10-11d5536ac28e", "sighting_of_ref": "indicator--c7ee9a1a-f589-4fe0-8c9e-6163718da105", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2b813a-e5b2-4e07-8ced-87283b491782", "sighting_of_ref": "indicator--c7ee9a1a-f589-4fe0-8c9e-6163718da105", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a805bbf2-9377-4c78-8b08-32c9bbb24bd7", "sighting_of_ref": "indicator--b6b6ef4f-55b2-40da-b5ef-2fc4dcf065a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73533084-16ea-4bae-a568-a1c454d45b6b", "sighting_of_ref": "indicator--b6b6ef4f-55b2-40da-b5ef-2fc4dcf065a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273869ac-6c09-4361-9e3e-b6d919a92e28", "sighting_of_ref": "indicator--b6b6ef4f-55b2-40da-b5ef-2fc4dcf065a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d908a7e0-604f-4498-88b0-47f351ebd3b3", "sighting_of_ref": "indicator--faa02b0b-bb64-4484-aee4-90f167046e1d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0ef883-6aaf-4f03-a443-bab64c30f84c", "sighting_of_ref": "indicator--00c1fdfa-0f37-4d62-a45a-944d1014d11e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f466b6-8a25-4f48-be74-e6276724df29", "sighting_of_ref": "indicator--4211ef1d-249b-4233-b72b-284e22e77651", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e729dd-537e-40bb-a01f-b90fe66d8e20", "sighting_of_ref": "indicator--bcef2286-56c5-482a-9f3d-a8212e793de3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896020ec-ac6e-42f9-b92d-a2d096ba05e4", "sighting_of_ref": "indicator--bcef2286-56c5-482a-9f3d-a8212e793de3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde1eaca-9dfa-4da4-b26d-14457d039a38", "sighting_of_ref": "indicator--a3c70015-b493-4854-b8a7-e646a8a49b80", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eade037c-69bd-4a37-a538-d1f97ace5380", "sighting_of_ref": "indicator--912fa2f7-f59b-40fb-995e-4a1f4241962b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395c510f-a0b8-46f2-b0ae-64121bdf0eeb", "sighting_of_ref": "indicator--f7c1ce4a-f1f0-484a-9af2-16b6f0e85900", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8243b796-df9b-4922-93b8-ffd9ff7c9bc9", "sighting_of_ref": "indicator--4ed7dabf-1e03-4534-a42e-656c3bdeec56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30301e72-6334-4dea-89dd-f59e7adcfd5b", "sighting_of_ref": "indicator--75ff7d5f-a5d1-41d6-b51f-ecd9441c1c9d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b66376f-128f-41e2-9b30-3957d185cf1e", "sighting_of_ref": "indicator--3f6a455b-2d8b-4891-8c74-e6e7c01fce66", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900356bf-6a34-4ff7-a2de-9ff64a9ca491", "sighting_of_ref": "indicator--3f6a455b-2d8b-4891-8c74-e6e7c01fce66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d03eead-0b99-4839-992c-ecf21c49ce42", "sighting_of_ref": "indicator--0d54d406-f7c1-4080-b593-58892ce602d1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfccd919-6eaa-451e-906a-17793c17610b", "sighting_of_ref": "indicator--2018474f-a3e6-4d3e-8375-54485dd4833f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee89f0e-def3-4bb4-bc19-6fd438c8aab2", "sighting_of_ref": "indicator--2018474f-a3e6-4d3e-8375-54485dd4833f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05d7c87-8d98-480f-8681-4a1f8ffcdeff", "sighting_of_ref": "indicator--27bfbc03-2fb3-4aac-be3a-fb4c086754f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a28b90-484e-4812-ae0a-82f657e9b060", "sighting_of_ref": "indicator--bd5fbc02-649e-448f-97ac-c05e26ffab84", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ced4cdc-2537-4612-a9f7-93b76ee4cac9", "sighting_of_ref": "indicator--c04a5c75-5972-403a-8d43-0233b1c30124", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d50be5a-58f2-418d-954b-2a1bba775d28", "sighting_of_ref": "indicator--c04a5c75-5972-403a-8d43-0233b1c30124", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de89c18-dd97-47bb-97f3-10e6ab63456b", "sighting_of_ref": "indicator--57592c30-ffbe-46bf-89b0-8a4d471ac8fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d533874-e503-40b5-b7f7-cda44e02a785", "sighting_of_ref": "indicator--57592c30-ffbe-46bf-89b0-8a4d471ac8fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108169f8-ae54-41a5-a1cb-a6255fbedde6", "sighting_of_ref": "indicator--57592c30-ffbe-46bf-89b0-8a4d471ac8fb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265b72d7-34dc-44c0-8aba-4ae8a0fea950", "sighting_of_ref": "indicator--210642bf-98b1-4cd2-9a49-e30008b7295b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f002a677-0557-4263-9646-ce1b09bc445f", "sighting_of_ref": "indicator--210642bf-98b1-4cd2-9a49-e30008b7295b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24de29ac-0fc2-4b02-840f-7cddc117a5a2", "sighting_of_ref": "indicator--ad97841b-3968-4d62-905a-0b9fb8e8a7a1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9bb89b-73a2-4462-b36a-37fcb2278e44", "sighting_of_ref": "indicator--6176a8aa-3680-444c-9ebc-46a6e1213bb8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c3df27-509d-454f-a576-e1c78a7031ff", "sighting_of_ref": "indicator--663829f0-be9f-4155-96ba-1619b3509c55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46124eae-d7b7-41bb-9939-0a2d1a02b076", "sighting_of_ref": "indicator--77808a05-aaf9-4e10-a3ab-37d51bf4e046", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d19e303-58ab-4dbb-9bb7-109636fe8554", "sighting_of_ref": "indicator--75a0e840-553e-4bca-b9fb-f9c40e4f7f24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944b6017-3433-4e48-aaba-3a81d5c12194", "sighting_of_ref": "indicator--5aaa13d9-3b98-400e-8dff-38b4395a74c5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d29082-ea58-41bd-8ac2-caa3e66166fe", "sighting_of_ref": "indicator--4b386129-1dd7-4cd5-a471-37bcbda4e330", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7afc71-8d89-4195-942c-b48f653b0b88", "sighting_of_ref": "indicator--17e4fb85-80da-41a3-ac5a-3533c3789d8d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaa1cc3-083b-4894-a878-9fe6bf4c65fc", "sighting_of_ref": "indicator--8460e227-7d61-4d37-857f-cc338eaf3da4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d00a249-7bfa-4f81-9270-824d4a145edb", "sighting_of_ref": "indicator--d3d8689d-a435-4c6e-a685-ccc69d29e923", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3491e7a3-cf9c-40e7-aa98-9e1ba69bd352", "sighting_of_ref": "indicator--d3d8689d-a435-4c6e-a685-ccc69d29e923", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b1acbf-6c83-4379-96ec-00790709bf57", "sighting_of_ref": "indicator--7e395b35-f20c-491d-928c-940075c83478", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c4dc75-30fc-42d6-8e63-0a3545f69b17", "sighting_of_ref": "indicator--aee0358e-07fb-4800-a03c-b2ae211dc213", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcf6037-4f94-448d-93b8-8a04e50fa87b", "sighting_of_ref": "indicator--aee0358e-07fb-4800-a03c-b2ae211dc213", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a0bb11-bcc5-4f8e-a226-4696714e51fd", "sighting_of_ref": "indicator--b6cf8efc-c23d-43ce-b28f-d114e6709774", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6374ad33-0030-423b-b2b9-fcc93ab038f6", "sighting_of_ref": "indicator--c8628efc-b6c5-4339-81ed-634e768ea700", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c633faa-7a40-4cc8-bd6f-a3c3f2e8be4f", "sighting_of_ref": "indicator--c8628efc-b6c5-4339-81ed-634e768ea700", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964fcf21-4c37-410f-9870-3d5c803aa4bb", "sighting_of_ref": "indicator--ea6f71e7-25fa-4d57-853b-93da1f204707", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6b7c2e-d91c-493c-b2d3-2a499a17196a", "sighting_of_ref": "indicator--ea6f71e7-25fa-4d57-853b-93da1f204707", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba38c59f-0e74-4b09-8f08-c5507d1d0dd9", "sighting_of_ref": "indicator--ea6f71e7-25fa-4d57-853b-93da1f204707", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da7d897-2313-4e56-9ba4-c17c55c5c277", "sighting_of_ref": "indicator--322b60b2-2e63-4483-a50b-95ad144479e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f469b44e-ac63-4945-bf63-f0d0adb42052", "sighting_of_ref": "indicator--322b60b2-2e63-4483-a50b-95ad144479e6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebf4546-9ffd-465b-a493-ea6f19dfeede", "sighting_of_ref": "indicator--dbf9eaa3-5014-4b77-9d5d-7c600f6a8d79", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cc7790-6fba-42ce-9a08-109320b63684", "sighting_of_ref": "indicator--dbf9eaa3-5014-4b77-9d5d-7c600f6a8d79", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16570923-89a5-4826-8cf8-fbc2b30ae623", "sighting_of_ref": "indicator--e2583ef4-c111-4a7b-87c9-08f8b47ca07b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6220efcb-1dfa-42d5-ad75-bbf8f86ac045", "sighting_of_ref": "indicator--3cefc794-ebd8-4873-a823-9e23058a8ddd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7392bc2-2332-4723-897c-f47fe492692f", "sighting_of_ref": "indicator--d9def3cf-8101-4067-aad3-2547e2b5d75b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2366eb99-dea6-4852-9254-dca7fae7b414", "sighting_of_ref": "indicator--5d686249-7098-46f2-9e54-98e84566527f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5188901-ebc3-4991-941e-68c80d8adf20", "sighting_of_ref": "indicator--a3ae26fe-ec0d-47a7-abde-9a63914cd3ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d743bd89-712e-4c38-9c88-89af78b7bc94", "sighting_of_ref": "indicator--20a62e99-ba34-4d4b-b95e-1dca9f533646", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4aa256-b687-40a0-8c8d-aa315184feec", "sighting_of_ref": "indicator--a537f75a-d9db-4f4a-af89-a4ee58b2511c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa4cd38-ac65-4a59-8c5e-61c2901eedc3", "sighting_of_ref": "indicator--c430a3d6-c6e3-4323-b833-41f803631f85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4788b1d1-8d1a-4cd2-b3a1-c31abf4e7abc", "sighting_of_ref": "indicator--31cc3f6e-6bc2-407f-a97c-233dc4c71f13", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63aede7-4597-4ab7-a10f-412706a49cd3", "sighting_of_ref": "indicator--afbc46f1-65e7-4233-9e21-6eca6ef3c6e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24302dc-efd2-4419-bd19-a2cb527bf203", "sighting_of_ref": "indicator--fff84924-701e-4a5d-af50-97a03fc24350", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0e1f02-1e58-4e48-805d-2ce3e8f8b98d", "sighting_of_ref": "indicator--c68941c2-884e-4d3b-8df4-233e7eb93d51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c66e9b4-bc1d-4c88-ac45-7d12198372b6", "sighting_of_ref": "indicator--89d9694b-dd66-4443-b6c6-43cf67874317", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16369e9e-88bc-499d-9f3e-03072ac6635e", "sighting_of_ref": "indicator--05ef8fda-009f-48a5-8a80-b7a131cd10b2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f644bc28-e3a2-415b-9d69-0c27330cc149", "sighting_of_ref": "indicator--122e8db2-911d-43ef-853c-be0ff02c440f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d623a2-9452-413f-9751-aa6ddc000c77", "sighting_of_ref": "indicator--122e8db2-911d-43ef-853c-be0ff02c440f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5454c9b6-6bc7-4c4b-bd00-cef6b49df3d2", "sighting_of_ref": "indicator--122e8db2-911d-43ef-853c-be0ff02c440f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10767d8-d768-4114-9c54-6ecf0baf863a", "sighting_of_ref": "indicator--b477898b-530b-46c3-a4d3-932e5df64ef0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d063c05e-62ec-46a3-8a6c-24f725ba4606", "sighting_of_ref": "indicator--e2e78ab5-d2d9-426a-b554-22a59a7ac9fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b8da91-3294-4d5a-bd2b-e7ddacdac035", "sighting_of_ref": "indicator--5be16562-02df-42c4-8213-b0dab72067b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb94be32-f198-4a99-97bd-56ee0f768451", "sighting_of_ref": "indicator--7fbcda4f-c657-4c81-997c-c6eb70e769a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dd79d0-7db6-4535-9496-a0703b75236e", "sighting_of_ref": "indicator--f8e286aa-5322-4650-b3b8-c94e82ee8cde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af040426-85a7-46c2-b2aa-2bf389b4be9b", "sighting_of_ref": "indicator--65e72295-a3e7-42ff-95ee-54c906305ae7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5947a2f-79c3-44f1-8df7-9351c30d9dcb", "sighting_of_ref": "indicator--ad242376-f2a4-435c-94f4-fd6c1ab047df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb0939e-205f-4317-b786-a62c422ebd6d", "sighting_of_ref": "indicator--d14f40a9-cd55-472c-a1b6-7f189fe101e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48120d5b-d134-4ad9-8588-a32e056a5f52", "sighting_of_ref": "indicator--fec1d90d-4a11-46e6-b189-03883917f65e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c09672-fe38-4714-8def-3f58a9944e22", "sighting_of_ref": "indicator--971242e2-213c-4e7d-aead-ac0a0620035c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ab5bda-fb4c-42ef-942c-aa83a74f5118", "sighting_of_ref": "indicator--bb7a97f8-a805-4396-b7f6-91dd20686d88", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8a22c3-f6c1-4d73-9a52-64f84b263083", "sighting_of_ref": "indicator--4d2b0479-de58-4ff3-a5c3-0ac5925e7091", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33ae175-b8a1-4483-9057-b1bd4902aa32", "sighting_of_ref": "indicator--e3045ad1-76e4-41f3-9f7c-f25965c42127", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e69278-02c0-4bc2-9223-c88bd1a6a668", "sighting_of_ref": "indicator--1d068c6a-d130-4223-b9be-de56d3063778", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a94ac74-d2b5-4418-ae34-e8fa075a7d93", "sighting_of_ref": "indicator--75e8b846-e125-4089-af0d-b6fa417dc072", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd18629-0695-433a-96d5-367a532f0b57", "sighting_of_ref": "indicator--761d2f8d-1353-4494-b0da-b8cb13f53223", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101758b8-6425-4898-824e-88048e520b14", "sighting_of_ref": "indicator--c268c85d-9d58-41d1-a256-31ef162691d3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353b3832-6a15-46f6-b814-85bffe2d3fb1", "sighting_of_ref": "indicator--391aed11-7ad2-41ac-8fde-0fb14a04bb1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f636067-8ff6-4059-ba07-7e6005e23b15", "sighting_of_ref": "indicator--310ba7f5-0577-4b70-a833-1bfe138e65e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693bf9df-09e0-4806-97ed-4b084c997ad3", "sighting_of_ref": "indicator--a19a3dc3-0cde-4391-b97e-8b5b6016d1bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17528d79-8d6c-419c-8cac-03e021fd13a1", "sighting_of_ref": "indicator--93bdf526-4ff7-452a-87b6-32e581a47bdb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557ac417-f1ef-43f4-85e9-038d38908e87", "sighting_of_ref": "indicator--eba596d5-3fbb-42e5-9f15-891d1c70aeea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3645fe6b-b9a7-47fe-a3bf-bf0b17b22be9", "sighting_of_ref": "indicator--eba596d5-3fbb-42e5-9f15-891d1c70aeea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f69f182-3b9f-49ee-94f4-ff0bb6a74b30", "sighting_of_ref": "indicator--80bb874f-c08a-4a49-8d1b-945892f310f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8690f21c-aa7b-4527-be07-5f1e77a6a7dd", "sighting_of_ref": "indicator--fad259a3-9bf4-46ec-ad00-40241e881827", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89507b9b-8514-4e1d-a3ce-9c66ca8cdee6", "sighting_of_ref": "indicator--5b1236e1-40d4-41cd-a344-7dc16ddb3a22", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eb3740-529c-4ba7-b823-6ac05fed68d3", "sighting_of_ref": "indicator--c4bf0798-68c1-4969-92c0-36c001773c75", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4b9950-5581-4831-b96b-c9e6e64f03cc", "sighting_of_ref": "indicator--c4bf0798-68c1-4969-92c0-36c001773c75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615adc07-fc27-4110-8a04-8508457320d1", "sighting_of_ref": "indicator--c4bf0798-68c1-4969-92c0-36c001773c75", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c51e49-79bb-4cbf-90d0-2cec641187b3", "sighting_of_ref": "indicator--3b6ad72b-99aa-4e91-90b8-d63d6f661889", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03e50ed-615d-46e0-8ad7-c0dfc696a763", "sighting_of_ref": "indicator--365a3f58-994e-4d80-bf6e-f5a29875c134", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbca1546-762c-47ad-bddc-b8a1f9479b47", "sighting_of_ref": "indicator--365a3f58-994e-4d80-bf6e-f5a29875c134", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6777e218-e985-4e3a-8b3f-f38ef9946e16", "sighting_of_ref": "indicator--3bc5b974-a91e-4e88-8779-2baa5e1324e9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ecc2de-912e-4277-ade9-d6d3c5d13984", "sighting_of_ref": "indicator--501b31d1-df8f-4a1d-8eb9-b82c954304a6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d429412-14f9-40c2-a492-da115e7768bf", "sighting_of_ref": "indicator--0f0ac73d-83db-4916-a053-c895160b1192", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03a555b-1b97-49b2-8b7a-5b110d02136d", "sighting_of_ref": "indicator--b4cc36b0-12c8-4cf8-8f03-8da553040392", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6346f2b4-3520-48ce-ae01-189f355eb2c9", "sighting_of_ref": "indicator--a472995a-5431-48df-ba1f-2db276a58755", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ad5fc8-dd30-4893-b9d0-6deaab8168ae", "sighting_of_ref": "indicator--36877ef2-be1f-43f7-8604-16325561b52c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a7c109-cf2c-4a91-998a-68e95ac5bfc6", "sighting_of_ref": "indicator--36877ef2-be1f-43f7-8604-16325561b52c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf7e297-70c5-479e-b9cb-7134c7ef5890", "sighting_of_ref": "indicator--3ae949b5-2f2b-4be6-9947-c1f315d84b85", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d02fa9a-45aa-4855-8420-14b02119f6ee", "sighting_of_ref": "indicator--70e145d7-2eeb-4020-91f6-572ff36e06bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6b1347-bcf1-4af0-b146-c0e13fd21a39", "sighting_of_ref": "indicator--c5bf7604-8a7a-4a9d-9beb-e08725606d38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2b17cd-39b5-4335-9831-3f43fc5c09c4", "sighting_of_ref": "indicator--c5bf7604-8a7a-4a9d-9beb-e08725606d38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62378383-7385-4139-8699-b7def4a5a83b", "sighting_of_ref": "indicator--8940a1cf-5906-4793-a02c-d4b9c242f9cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e44b19-0d70-40a4-a505-ca315aadd842", "sighting_of_ref": "indicator--720b1fc9-101b-47fd-a372-b69ebe60939f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e147a6-1d66-4fa9-99ac-9e9ba9794850", "sighting_of_ref": "indicator--a23d38cb-5e00-4e86-8b07-dbdee18e0708", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f98fc7-026c-42bc-86e0-27728942d0b4", "sighting_of_ref": "indicator--a23d38cb-5e00-4e86-8b07-dbdee18e0708", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc8efd4-f9a3-4ea9-9e9b-1f1537c1af66", "sighting_of_ref": "indicator--6f65abec-0644-4a2a-a470-92067b395570", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fa09d6-be19-4514-93f7-4afd4b63a802", "sighting_of_ref": "indicator--12104884-ebe7-4d70-a77a-23037a3c780d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbc8779-91d1-4436-aa4f-8e1f3f86d005", "sighting_of_ref": "indicator--35aac3cb-a1df-4119-8898-d7e02e5fd56a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b852972a-3ea9-4f91-a80f-91f9e52126cf", "sighting_of_ref": "indicator--38f82d12-f716-4f73-a690-7647670a6dd2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0ba813-b772-427e-8095-d785f68b5e09", "sighting_of_ref": "indicator--38f82d12-f716-4f73-a690-7647670a6dd2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad48391-4787-4205-9e2c-0736bda1c4ad", "sighting_of_ref": "indicator--02930d4b-62b7-4570-acc9-1c291a5a4ff6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21be75ad-c749-4ecf-9c06-7287879d8ff9", "sighting_of_ref": "indicator--02930d4b-62b7-4570-acc9-1c291a5a4ff6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce195a97-822c-43eb-a0d6-2723240526ae", "sighting_of_ref": "indicator--bb9660a1-5d11-4d93-b25c-af2070b30737", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668cd537-8731-454d-8c39-8f466a4e2db7", "sighting_of_ref": "indicator--bb9660a1-5d11-4d93-b25c-af2070b30737", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634ecb44-cec9-444a-8105-8cf14ba4fa09", "sighting_of_ref": "indicator--bb9660a1-5d11-4d93-b25c-af2070b30737", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabcd22e-1320-4ae0-b518-27ce12156441", "sighting_of_ref": "indicator--74c4fea5-3f65-4e18-ba14-ba16d9662f05", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468823bf-1d35-4df9-8e32-22dbb594fe3f", "sighting_of_ref": "indicator--74c4fea5-3f65-4e18-ba14-ba16d9662f05", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e6c10d-0367-4dbd-bc22-87aa343c3dba", "sighting_of_ref": "indicator--74c4fea5-3f65-4e18-ba14-ba16d9662f05", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1b09ce-80fb-4467-9df4-edd356d0b62c", "sighting_of_ref": "indicator--aa863e97-74e0-4d01-98e1-035407d1e621", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16ac023-c6aa-4c06-9aed-4b03da7b88da", "sighting_of_ref": "indicator--aa863e97-74e0-4d01-98e1-035407d1e621", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004f86ce-3559-4fe1-8b1f-10b761250b9a", "sighting_of_ref": "indicator--aa863e97-74e0-4d01-98e1-035407d1e621", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6643a229-5b02-4d0c-b589-7839376261ce", "sighting_of_ref": "indicator--66a5161b-7fa4-4d72-8686-45794c22b5b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1820cd31-77c3-47c5-bade-1174db2e37c1", "sighting_of_ref": "indicator--66a5161b-7fa4-4d72-8686-45794c22b5b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e8719a-6c7b-40fb-a951-683bca341736", "sighting_of_ref": "indicator--8c680e89-75a5-41df-b61a-461729c6d358", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e600eb-05dc-4e72-85b3-a21660ad2b64", "sighting_of_ref": "indicator--8c680e89-75a5-41df-b61a-461729c6d358", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd5e720-6ac9-46e3-9edd-7fb87daba5eb", "sighting_of_ref": "indicator--d75a1e8a-e726-484f-aaa8-a1335116e3ad", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99937abe-4187-4df2-a47b-b004c9ffd640", "sighting_of_ref": "indicator--d75a1e8a-e726-484f-aaa8-a1335116e3ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68a5768-ae9a-42b3-b7cd-c2b9706984dc", "sighting_of_ref": "indicator--d75a1e8a-e726-484f-aaa8-a1335116e3ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40f87c4-c298-450e-a908-a210f0c9e2e1", "sighting_of_ref": "indicator--897364f8-5ae6-4582-86e9-3625a676ee22", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d187d681-d742-4761-a9e1-a5a65f5ae945", "sighting_of_ref": "indicator--6f6eb2d4-cd50-4dbc-8980-28e4ee28cc5b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e242496f-925e-4ef2-a149-48881c51a100", "sighting_of_ref": "indicator--6f6eb2d4-cd50-4dbc-8980-28e4ee28cc5b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2b1a6e-2d80-4a76-8823-d3c545653b70", "sighting_of_ref": "indicator--6f6eb2d4-cd50-4dbc-8980-28e4ee28cc5b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17a0636-2600-4679-93cf-3a37b6b7d15a", "sighting_of_ref": "indicator--291c1adf-9c63-4e73-88e6-d156113f9893", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3cc637-d33f-449d-8604-5863b94f16e7", "sighting_of_ref": "indicator--291c1adf-9c63-4e73-88e6-d156113f9893", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ad80cc-7e97-4dba-ae1a-7433011159c7", "sighting_of_ref": "indicator--291c1adf-9c63-4e73-88e6-d156113f9893", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930e91ff-2547-44cc-b0e5-efb92e07cd83", "sighting_of_ref": "indicator--9559adb4-c94c-4e37-ad46-b3294dec1892", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18aeeb94-1abf-4d99-ba09-13ff14c3e007", "sighting_of_ref": "indicator--95fbb236-aeac-44ea-8484-fff5c77ac56e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2691ca6d-15d4-4e0e-babd-9467b741950c", "sighting_of_ref": "indicator--95fbb236-aeac-44ea-8484-fff5c77ac56e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff995cda-d261-459b-a232-fc6c8b6160ff", "sighting_of_ref": "indicator--95fbb236-aeac-44ea-8484-fff5c77ac56e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c8230f-8f90-447e-acc5-fbe97342526a", "sighting_of_ref": "indicator--a8a132c4-6162-4818-adba-35afc83e1c98", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0d93fa-1e7e-4081-9eeb-07482a8b33db", "sighting_of_ref": "indicator--a8a132c4-6162-4818-adba-35afc83e1c98", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10aea8b-44e6-4c62-b435-c257bb44aa16", "sighting_of_ref": "indicator--a8a132c4-6162-4818-adba-35afc83e1c98", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c571bc10-ba7a-4868-be73-e9832058cadc", "sighting_of_ref": "indicator--dccf193b-a327-41a3-8326-d67ba23707f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de51278a-8f02-4906-a395-db1d122d59bc", "sighting_of_ref": "indicator--714f37f7-a71f-49fd-bc82-397c8a7bee61", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9720c9-6ac7-4d34-9d84-3dfd15ee44a6", "sighting_of_ref": "indicator--714f37f7-a71f-49fd-bc82-397c8a7bee61", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc0ef79-0016-4489-a2d3-80975dd8f8ec", "sighting_of_ref": "indicator--999c1fdb-9f99-4609-8f35-9358e0910c37", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f14d3dd-4322-411f-8886-ab87f257608b", "sighting_of_ref": "indicator--d3aa9465-d0ad-4655-81b4-3bb9c97733d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf08b75-07f0-41b0-8825-e74a0df21603", "sighting_of_ref": "indicator--3d8c59da-b0b0-4b7a-b046-7329d4fe47da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c08e5e-d531-44da-84f5-f5f829246fd0", "sighting_of_ref": "indicator--ea602983-2b64-46fc-9210-2ee1bb259ac1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6774d15c-7d67-4c44-adcc-a6628c72256f", "sighting_of_ref": "indicator--639c05f9-09ea-4ddf-8362-072437a2dad0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fd7001-dbdd-44e2-b8b4-75a2e15e7b7f", "sighting_of_ref": "indicator--21a442c1-7f3b-4d44-b30f-eab28321f32c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565914a8-6483-47aa-962d-2a1b6e78e4ff", "sighting_of_ref": "indicator--21a442c1-7f3b-4d44-b30f-eab28321f32c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ee8852-c533-4a99-992d-ee10f38be540", "sighting_of_ref": "indicator--b6a4f819-1482-44a2-8d34-8ee568d6318f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b9f7e8-e915-41be-895d-ea8d34724135", "sighting_of_ref": "indicator--2197e79c-815c-455d-bcec-cbdf1da06e34", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a2368a-2619-42bb-af0e-2a0ad4ca8774", "sighting_of_ref": "indicator--3b3ab445-d474-450e-8198-68edfb067055", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a082e67a-7773-4ba6-986c-86d84c23ac9f", "sighting_of_ref": "indicator--fbd2d874-775a-4c05-9cd0-ea921f41cba5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf59167d-d353-4670-873e-1dc0ac5cc9de", "sighting_of_ref": "indicator--8231948b-b9b1-453d-8af6-19d33898ef49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2607906b-59aa-4666-b1c9-39bfbc1b0b4f", "sighting_of_ref": "indicator--13867796-29da-4896-9718-012f1613a562", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a707af-a9cf-4c46-a14a-5e130319871e", "sighting_of_ref": "indicator--7018144a-631b-46c3-a211-35f754ef7337", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c9f06c-99cf-4140-ac9c-6bf5c8150c63", "sighting_of_ref": "indicator--5bb1baeb-d71e-4589-95f4-c758ff38d0e3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65de131d-2578-472c-97c8-37fd02dd5038", "sighting_of_ref": "indicator--5bb1baeb-d71e-4589-95f4-c758ff38d0e3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e39a0a-1d06-4d40-a73e-a297994b0d59", "sighting_of_ref": "indicator--44317980-363d-4951-b276-8ee6dd95edde", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31970eee-14fb-46cf-9526-9fcb159d653a", "sighting_of_ref": "indicator--f8a58c38-0b79-45dd-b751-ec73896832e4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d03c703-4d43-4a55-bb9a-39f4e847c3dc", "sighting_of_ref": "indicator--f6fe0f59-33ef-4220-a692-a27186dd62dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a670c8-0c98-455a-931c-5d0122507db9", "sighting_of_ref": "indicator--751e322a-e574-4776-80a9-606d385262a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81c8194-dd43-4c79-8ca5-7f2a1af9629b", "sighting_of_ref": "indicator--75d74014-21cd-4d8d-9fcc-5a6afbf897a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabe011c-3c5e-4608-b729-d677f5e8b377", "sighting_of_ref": "indicator--3e777b8c-82e3-4c24-a09f-33b19642e560", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9fe264-58f9-49e5-afc0-60ae8deae130", "sighting_of_ref": "indicator--00faa95e-774e-49e9-8820-f225f07dc7e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1c31a8-bddd-4439-bb1c-ce4df2469156", "sighting_of_ref": "indicator--26a37b91-386a-4165-b7d1-2daee9627194", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7441fd57-4583-4bd6-91af-5834dc97d714", "sighting_of_ref": "indicator--6bf0d9ed-2521-458d-a9f2-3f02efa503e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c182cc-2d34-4d70-b58f-ce4cfcf07548", "sighting_of_ref": "indicator--58b86c61-67f9-4a2b-940a-8f96d1947da5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e705ec2b-803f-43bd-834e-6e273c0c97ac", "sighting_of_ref": "indicator--0c1636b4-1e76-4401-a902-bbc8bd25c88a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31700050-2f33-4364-b189-780563be0fc1", "sighting_of_ref": "indicator--ddf755d1-72fc-4590-b709-0a1a49a6cb38", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd97060-deec-42d2-95f3-eb58b44c9255", "sighting_of_ref": "indicator--32c4749e-dcb0-4c90-9ddd-d8cdfd6cad2b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf6d53d-1d89-442d-ba6c-1e980b6143e8", "sighting_of_ref": "indicator--32c4749e-dcb0-4c90-9ddd-d8cdfd6cad2b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9ca277-4de2-406c-9a20-41d9ab0460aa", "sighting_of_ref": "indicator--32c4749e-dcb0-4c90-9ddd-d8cdfd6cad2b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7be009-ae5f-4b81-93e4-c731ace9accd", "sighting_of_ref": "indicator--2a8c5762-2847-4e7b-9634-6fa43aedc062", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a071c563-9e5e-4c6b-9795-f243db173382", "sighting_of_ref": "indicator--3fd84b8f-acad-4d3f-9029-f6de6459a1c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f008299a-2dd7-4dc8-b7a3-800a7b52e584", "sighting_of_ref": "indicator--4ff04ddf-a2b2-4c50-9b9c-7d8fdda64027", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06526a9f-d2e6-4d78-81dc-3d3cc9fb4273", "sighting_of_ref": "indicator--db04f747-356a-4124-bb31-9b6042b13a2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd57d0d-0dea-44b4-aa82-4a419e3196a0", "sighting_of_ref": "indicator--db04f747-356a-4124-bb31-9b6042b13a2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e0cf79-fcac-484c-8c7b-ae3a6abbd1fd", "sighting_of_ref": "indicator--628dccf5-5ddc-449a-af1b-ae2b000215f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5157de4e-cd90-415b-9eaf-1ec97a6773b1", "sighting_of_ref": "indicator--628dccf5-5ddc-449a-af1b-ae2b000215f1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5752d22c-7e8e-4f49-8bcb-169dcc50d904", "sighting_of_ref": "indicator--1e883fe2-225a-4218-9ec1-164e2f0d012b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853271d8-f319-4881-9e02-9a913b577fe9", "sighting_of_ref": "indicator--408934aa-c652-4383-bd16-3ec92d3d4ebd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dffaf3e-c503-489d-b6e5-af426a622cc6", "sighting_of_ref": "indicator--732ade29-5fc6-412c-89e0-c399147fa27d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96567b93-8a3d-456d-9a5b-df9d51ad0740", "sighting_of_ref": "indicator--5b3a0821-a5c0-4cec-a0b4-30aeb5e4b529", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f75fdb-dad6-44f4-8da8-a96c69ff4626", "sighting_of_ref": "indicator--65d2a62f-49b8-4c1a-8f87-d38990095547", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e029ded1-90ea-408e-b872-3e1b5583b8be", "sighting_of_ref": "indicator--d5a0379b-b770-4021-ac2c-35b358be46ca", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22327c5-557e-4ac8-b7fd-6a9186d3a3ca", "sighting_of_ref": "indicator--6b08d989-1742-45d2-bcb8-7c5b26634ef0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37bb8573-f868-412b-a108-130ff6864d0f", "sighting_of_ref": "indicator--7741a16a-ee41-45c6-9429-02c61a397795", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200035f6-c51d-4817-9841-213a32a4120f", "sighting_of_ref": "indicator--05baa697-8e3d-4832-901f-4224f109f6ef", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdab508-e2ef-430c-beba-29712c46aa27", "sighting_of_ref": "indicator--d5bf0656-88bc-4057-8c7a-d58f9c5739ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b378c4b1-ac2a-49dc-9601-c4a85f033d5e", "sighting_of_ref": "indicator--5af97cc4-5e58-4720-b38d-a11dfbfaa286", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be77629-b53e-4f5b-a5b5-9d2e76c8aba9", "sighting_of_ref": "indicator--5af97cc4-5e58-4720-b38d-a11dfbfaa286", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e94add-22a4-42bc-b6ce-c4cd5d0c8370", "sighting_of_ref": "indicator--cb9c47d7-f129-4589-ace2-34d93ab3fed9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59d1bad-30c0-4f92-a781-5e1158d55279", "sighting_of_ref": "indicator--6994753f-c07b-43a2-97de-60fe60cd3b80", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83dee8c-f9bb-46da-945b-a3fd1e8186de", "sighting_of_ref": "indicator--83f07d62-fd4d-4c76-957f-f0b7c499f5f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8131f49e-7f1f-4949-83d5-439a59f1f310", "sighting_of_ref": "indicator--98f5dc2a-8a4c-40ce-95e9-8c350b465cbf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867be497-90f9-4a8b-af35-a127b2ed53f6", "sighting_of_ref": "indicator--069c833c-ef75-4deb-8ddf-2fcdc7311e4e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea4214a-e5b9-4bed-b9be-54fcda2cbc0b", "sighting_of_ref": "indicator--d1b3f4b6-cb51-4a4d-817e-28bfc36c7f47", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba2e449-7135-4935-8557-763ffa8bb4dc", "sighting_of_ref": "indicator--c7d38dff-0fea-4791-9c83-7e2395c41026", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a86ffd-3454-4bab-be58-8a25fda86fda", "sighting_of_ref": "indicator--6eafaa2c-1007-4696-9554-1e95e25e4026", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea592f4-9b49-46ee-b814-d50b6e3c8b9d", "sighting_of_ref": "indicator--f9be859e-bf1e-4bc3-b5e9-f7198168703d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f524b98c-0579-4ca7-b729-8ce187947cc6", "sighting_of_ref": "indicator--e58a4ef7-0714-4a9a-bf02-4ad12b657751", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdda427-9334-44c7-957e-f13d957144a8", "sighting_of_ref": "indicator--e58a4ef7-0714-4a9a-bf02-4ad12b657751", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068d6ba7-7a8c-4221-836b-278a33f52b19", "sighting_of_ref": "indicator--e58a4ef7-0714-4a9a-bf02-4ad12b657751", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31750e88-3a22-4189-8dca-e27122d648dd", "sighting_of_ref": "indicator--0bc57514-f8f5-40bb-9747-deebe57e515d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f374cc9b-5e59-468c-b216-a40ef1b9245d", "sighting_of_ref": "indicator--8f8d2167-d416-40ba-a035-54c98d7053ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b838c672-f8e8-4e0a-9d2d-39a683ab0e5f", "sighting_of_ref": "indicator--8f8d2167-d416-40ba-a035-54c98d7053ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d120597d-cba5-4e25-80e1-2fbe0f87bbbf", "sighting_of_ref": "indicator--cbc25de5-d5c4-4f9c-bc42-5c5f40b60cb1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67a35dc-c943-4f8a-b0d2-8b27f141597d", "sighting_of_ref": "indicator--cbc25de5-d5c4-4f9c-bc42-5c5f40b60cb1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d26fd38-d17e-4fdb-b610-146488081d90", "sighting_of_ref": "indicator--15bb4eda-92c8-4e72-8647-724592b0ee5c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e95bf1-faa7-4947-acbb-df1f63d2a86b", "sighting_of_ref": "indicator--f0c08e27-95c5-431e-b7e0-a7a5f89d8b77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bee2c4-81cf-4597-8f15-33b5eab0fd9c", "sighting_of_ref": "indicator--c00d27fa-2ed5-44a2-b9d7-2b6773be1a7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb84960-fcee-47c1-a342-56724561934b", "sighting_of_ref": "indicator--15ccdb62-2ddf-489a-995d-7cfd98deda34", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037a602f-35c2-4427-aea1-bbdff988d890", "sighting_of_ref": "indicator--59ecb475-f782-4558-9d61-a317650f6cec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b423789d-de94-4997-9418-af838ff1d2db", "sighting_of_ref": "indicator--5820575e-4b3f-4eac-af24-f6d8763c9cda", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98a8255-38ed-4b5f-8b71-3aa487e3644b", "sighting_of_ref": "indicator--02e1ea66-5b29-4432-bd54-a995a2013644", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cfe388-512a-44ed-88ef-bda12144aba6", "sighting_of_ref": "indicator--2b39a595-97db-4b0f-a94a-43e370abac7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e992c283-3d52-409c-b873-b4550f0de20f", "sighting_of_ref": "indicator--53ea029d-8d44-4fee-ae6c-7ebe2717adf5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4d0ebe-d848-4c17-b5f0-e636b3c984c5", "sighting_of_ref": "indicator--5da19466-5b2c-4f8b-a671-f5d22b78b96e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf3bd29-795c-47a6-ad76-b622caca346f", "sighting_of_ref": "indicator--7bf68999-3965-44e3-8760-7e2e9b2d98b5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1e70c4-5140-4c72-8ff0-6784736cfe1d", "sighting_of_ref": "indicator--2bbbce89-c36f-4608-be52-1b3d124e3c2d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e956281-dfbe-422b-96c1-c928bd03bca7", "sighting_of_ref": "indicator--2bbbce89-c36f-4608-be52-1b3d124e3c2d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a53a49-7842-4b84-aed0-cc24f45b4689", "sighting_of_ref": "indicator--2bbbce89-c36f-4608-be52-1b3d124e3c2d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f615660-7996-4403-bd5f-d6191c3ce821", "sighting_of_ref": "indicator--98ef5022-1327-46d1-bd89-bd0d683a760c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6387c4-0da7-48ea-b105-044c08a744f9", "sighting_of_ref": "indicator--f8bb0ee7-f3f9-48fa-a9f2-5c55dd28c07c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70304263-9837-45a1-8944-fc7babd3d334", "sighting_of_ref": "indicator--bdac1903-1921-434c-b93f-c94d252fdb94", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58604ac0-835e-4b65-b2f7-0e67743cc67c", "sighting_of_ref": "indicator--aa00eb47-4d2a-4a4e-b8a5-c56c5ee58c17", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cd2f04-3990-432d-95c3-b527834185a2", "sighting_of_ref": "indicator--76bee846-44c1-431e-9a75-8c3ee832b0ff", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b41d0d-c7c7-4d32-8df1-00c3df654a4c", "sighting_of_ref": "indicator--d87a98f5-dec8-483a-8d03-42f3af7b3a64", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e51bf9-c087-4916-a96c-647a583ce3d8", "sighting_of_ref": "indicator--c1af35e8-4eb6-4620-8a95-036c377d6ad4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec1f26d-8fe4-44cc-b4d1-9332b4cc5270", "sighting_of_ref": "indicator--9e33143a-6f32-4af1-b454-43a7884500ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad2c9c9-ce62-4b21-bddd-22f3df05731d", "sighting_of_ref": "indicator--9919eef0-e414-4de9-94a5-3f9d4e32515b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69183627-a16f-4f6d-9ea0-1d7a113d5a7a", "sighting_of_ref": "indicator--570e39a5-400b-40cf-907f-daa3b2042e9e", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3196d6-348e-46be-aab7-f1eae54016fb", "sighting_of_ref": "indicator--a4025122-f462-4a00-8b89-0137ed13362d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f205788e-32b3-4ca4-ba29-3a1df4ea94e7", "sighting_of_ref": "indicator--293e3344-7a63-431e-a093-9ed803eedf88", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae3cc07-4c96-472f-8049-34d5827f8f02", "sighting_of_ref": "indicator--fcdb8154-3fa2-48e0-b522-f4aad88837f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddc1b19-2568-440a-b562-b71e0398a8ed", "sighting_of_ref": "indicator--fcdb8154-3fa2-48e0-b522-f4aad88837f2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c59dc23-984c-46a9-b8da-dd8cbc54d99d", "sighting_of_ref": "indicator--da266fd6-1be2-420d-a49c-c0b78984f944", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0a2231-eff3-4819-8b9d-7f21892d2a50", "sighting_of_ref": "indicator--1ebb2b51-e838-4bbd-a3d1-c5b747b579cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c36caf-bbe2-4320-bcdf-4b16a2791f0a", "sighting_of_ref": "indicator--909f6c5a-7efb-4eaf-b02e-430c966e8202", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08ff406-c6fa-4512-9a46-11bcc82e54d5", "sighting_of_ref": "indicator--909f6c5a-7efb-4eaf-b02e-430c966e8202", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efc1c1a-ec3c-4c27-986d-a9dbed4d0628", "sighting_of_ref": "indicator--909f6c5a-7efb-4eaf-b02e-430c966e8202", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73bade8-6a5b-49fa-8bf5-e8b7bf9833a6", "sighting_of_ref": "indicator--57524375-016e-45ba-bd89-83f37bdad52b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2481b655-8976-46b7-b7a6-b1893be19d71", "sighting_of_ref": "indicator--57524375-016e-45ba-bd89-83f37bdad52b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187f71d6-9a00-489b-8b9a-f9ae53c955bd", "sighting_of_ref": "indicator--70cc2f9b-fe80-4901-bff1-6ec45454ab3c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30c09c9-5391-4705-b361-b2cced86dd9f", "sighting_of_ref": "indicator--70cc2f9b-fe80-4901-bff1-6ec45454ab3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28a73d7-4418-4122-9f83-71f18f90391e", "sighting_of_ref": "indicator--70cc2f9b-fe80-4901-bff1-6ec45454ab3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b67655-d5f5-4cbb-89fd-5ebe3605a732", "sighting_of_ref": "indicator--0885cfe0-f989-4044-9a3e-70af5ec42da4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d82517-6c3c-4778-bf45-6452da851641", "sighting_of_ref": "indicator--92705e1a-07b7-42b3-89ff-f2d53aba4744", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ed1f9b-6642-4135-8d98-0152d7bc0f4c", "sighting_of_ref": "indicator--92705e1a-07b7-42b3-89ff-f2d53aba4744", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d381aaa-ad4c-4c13-ac2e-910b077c1564", "sighting_of_ref": "indicator--92705e1a-07b7-42b3-89ff-f2d53aba4744", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dead7c1d-981d-4b9e-81fe-6e6205f34bfe", "sighting_of_ref": "indicator--7562733a-12ff-4e79-a25d-bb5a6e3467a8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bbb296-85d8-4315-8038-6c66be3fd754", "sighting_of_ref": "indicator--7562733a-12ff-4e79-a25d-bb5a6e3467a8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21354ee3-8325-4d24-8780-868e89aa44c3", "sighting_of_ref": "indicator--7562733a-12ff-4e79-a25d-bb5a6e3467a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf5242a-886e-429e-a18e-a1e0a1ff4073", "sighting_of_ref": "indicator--1c8608dc-518b-41e3-b82b-98d7eea6026b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc328af-eb8f-4d6a-ab2e-853c5c757874", "sighting_of_ref": "indicator--1c8608dc-518b-41e3-b82b-98d7eea6026b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786cad42-9557-4465-8000-31d91dc96827", "sighting_of_ref": "indicator--1c8608dc-518b-41e3-b82b-98d7eea6026b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee45489f-2ca7-4a36-9941-25d2e5e251d4", "sighting_of_ref": "indicator--a02826c6-7cf2-4d7a-b832-60debe924de8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc5025d-523b-4629-aec1-a235e9a74ac3", "sighting_of_ref": "indicator--a02826c6-7cf2-4d7a-b832-60debe924de8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61576b0-8a55-4427-9ed7-3be2c9bc5f88", "sighting_of_ref": "indicator--a02826c6-7cf2-4d7a-b832-60debe924de8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a06492-0046-4074-b003-deb361058c89", "sighting_of_ref": "indicator--58a65098-9123-4f0a-ae21-afb0bf62e738", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b123477f-d020-4437-bb5a-1f5086a61936", "sighting_of_ref": "indicator--555a3f49-7db7-4433-8212-ab5757a1c3cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8a3025-b477-45ef-89ad-a7d694dd9938", "sighting_of_ref": "indicator--555a3f49-7db7-4433-8212-ab5757a1c3cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24981de9-4fee-4982-b33f-8a203f18238a", "sighting_of_ref": "indicator--555a3f49-7db7-4433-8212-ab5757a1c3cc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4389ee5a-6f5b-43f1-8ceb-39f3cb1b9645", "sighting_of_ref": "indicator--1e19117b-7255-4ddb-8097-9fdc7bc01e09", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8b36cd-7f6d-4919-9867-8c6318d5a64c", "sighting_of_ref": "indicator--1e19117b-7255-4ddb-8097-9fdc7bc01e09", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc7dbdc-85fd-4ebd-8849-e702e83f9c66", "sighting_of_ref": "indicator--1e19117b-7255-4ddb-8097-9fdc7bc01e09", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89c8368-da2b-4867-b3e7-1f1dd6125bdc", "sighting_of_ref": "indicator--6018b1ed-2c91-448f-abd5-15127c9d3757", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae96cecf-8d2d-49f7-8f6d-bfe06e7d64be", "sighting_of_ref": "indicator--6018b1ed-2c91-448f-abd5-15127c9d3757", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f84b93f-3bbb-4527-b9de-627b22362648", "sighting_of_ref": "indicator--6018b1ed-2c91-448f-abd5-15127c9d3757", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807076fc-7b69-450f-8ee3-5363a88a7d4e", "sighting_of_ref": "indicator--4f37f036-48ee-4544-a86e-5eeb13c6e414", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b9b6d0-e3cb-45c4-99d0-953c2c9e3eea", "sighting_of_ref": "indicator--4f37f036-48ee-4544-a86e-5eeb13c6e414", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f70f36-82b0-41b4-94dd-0430d04b5ad2", "sighting_of_ref": "indicator--c0cea1ec-5b75-4cfb-9ea2-bec5864235fa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246a64a5-b008-49ce-a03c-855b9f56de2b", "sighting_of_ref": "indicator--3ba6b6ef-f390-42d9-a376-168ab5143935", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8e46d8-1a28-4390-9ff9-e50812ea5f0b", "sighting_of_ref": "indicator--3ba6b6ef-f390-42d9-a376-168ab5143935", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6354297-c63e-4503-a783-524f33ce044f", "sighting_of_ref": "indicator--3ba6b6ef-f390-42d9-a376-168ab5143935", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f561f6c6-947a-40d3-8ef4-52dd585578a1", "sighting_of_ref": "indicator--682daa30-ee4e-4aa2-b295-9203f410ba4b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f132a8-3ed1-4bce-ac2a-6c084c7423c5", "sighting_of_ref": "indicator--682daa30-ee4e-4aa2-b295-9203f410ba4b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4213a98-021d-45e6-9c6d-b4d74e7dfab0", "sighting_of_ref": "indicator--b2650343-da41-4009-a79a-bcd06394fe76", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d57df6-b4b7-4996-b477-fae44c15d246", "sighting_of_ref": "indicator--b07395b1-f67a-4f93-9c3b-8eadddf65483", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d552c2-7b31-4192-9ab3-a9a5ef771ff0", "sighting_of_ref": "indicator--b07395b1-f67a-4f93-9c3b-8eadddf65483", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b5cc6c-4cd4-4013-a332-90e706cad209", "sighting_of_ref": "indicator--b07395b1-f67a-4f93-9c3b-8eadddf65483", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6567249b-9c52-43f8-8b47-87cd8e36dd82", "sighting_of_ref": "indicator--dd64e9dd-a429-44dc-a066-3ca1c2176d7e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82db98e3-ff98-4d3d-9e68-3beda76520cc", "sighting_of_ref": "indicator--dd64e9dd-a429-44dc-a066-3ca1c2176d7e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dde8510-5103-4182-939f-3d3b546c6baa", "sighting_of_ref": "indicator--dd64e9dd-a429-44dc-a066-3ca1c2176d7e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5c9e19-79b3-4b9a-b80a-c3b7442e539b", "sighting_of_ref": "indicator--0bd124ff-d7c0-4ba3-8421-7be2a7270af3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad25c8d-b2a6-413b-8683-536c07710573", "sighting_of_ref": "indicator--0bd124ff-d7c0-4ba3-8421-7be2a7270af3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1337674c-18ce-40d5-b4eb-54358660c38a", "sighting_of_ref": "indicator--0bd124ff-d7c0-4ba3-8421-7be2a7270af3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ce1988-aca3-4358-a491-b5deba1b6a5c", "sighting_of_ref": "indicator--e1e505c5-a05a-4060-964b-7de428723f49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6cc85c-a7b5-464c-bac3-4cce242982f8", "sighting_of_ref": "indicator--e1e505c5-a05a-4060-964b-7de428723f49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4169d414-a9d6-42a5-81ca-9ee923807294", "sighting_of_ref": "indicator--e1e505c5-a05a-4060-964b-7de428723f49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a25cf6e-db35-4544-8185-216aa551fded", "sighting_of_ref": "indicator--96e80af3-aac9-4a76-9981-b4791163a539", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9142bc-0ec5-4f3d-a719-ee7bd13749da", "sighting_of_ref": "indicator--96e80af3-aac9-4a76-9981-b4791163a539", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ed25bf-852b-4717-b390-bd588f18c2a6", "sighting_of_ref": "indicator--96e80af3-aac9-4a76-9981-b4791163a539", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54719a71-9dab-4819-9ea3-961bc111c01f", "sighting_of_ref": "indicator--19a8a654-d06e-4a07-bcb3-4c1565675615", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9c2912-26ec-4162-abe7-48b37eab6413", "sighting_of_ref": "indicator--19a8a654-d06e-4a07-bcb3-4c1565675615", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8db29c7-1f8d-41f1-9ef0-2ed9e6a53f30", "sighting_of_ref": "indicator--19a8a654-d06e-4a07-bcb3-4c1565675615", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4cd0dd-87e2-462d-b011-d1b93aa5d592", "sighting_of_ref": "indicator--65e440d8-5606-4d44-9a12-d93d0487d128", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba44694-4c6a-45b4-bac3-2a25cf8c76d8", "sighting_of_ref": "indicator--65e440d8-5606-4d44-9a12-d93d0487d128", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73857e01-665a-4d94-bb77-aa9a684eeaa3", "sighting_of_ref": "indicator--65e440d8-5606-4d44-9a12-d93d0487d128", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74b97d3-adda-481f-a8ce-6abeee053dae", "sighting_of_ref": "indicator--c40ddaad-9df6-4461-a09b-47ed72cfc8da", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1629ff50-a4a5-4673-a84e-aa3bcfdacbd2", "sighting_of_ref": "indicator--c40ddaad-9df6-4461-a09b-47ed72cfc8da", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921a6db9-4cc7-4b5b-bf0f-2e5090e49c49", "sighting_of_ref": "indicator--c40ddaad-9df6-4461-a09b-47ed72cfc8da", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b617d3-01da-473c-8153-58359ca32088", "sighting_of_ref": "indicator--e42957c7-25b8-449b-9a7b-f695b1eb988a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7776b828-f3f8-4dde-95e3-1f664230ba70", "sighting_of_ref": "indicator--e42957c7-25b8-449b-9a7b-f695b1eb988a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9cde6a-78e5-453e-abc0-1e52016b02e5", "sighting_of_ref": "indicator--e42957c7-25b8-449b-9a7b-f695b1eb988a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbd3fc2-2a07-43a8-b310-1d1b723be512", "sighting_of_ref": "indicator--9672cd15-dbb1-46c6-afdd-5a9c0b2f2c8d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438dabe7-5040-477c-90f8-ecc920db1927", "sighting_of_ref": "indicator--9a465e19-5c80-494c-ba34-fd79690519eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decdcc1a-df37-464f-a356-f35d30243573", "sighting_of_ref": "indicator--9a465e19-5c80-494c-ba34-fd79690519eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2149cf3b-2e4d-46b0-9420-9bcd8e7b865c", "sighting_of_ref": "indicator--9a465e19-5c80-494c-ba34-fd79690519eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db9f43a-10da-46c4-8a34-055505003a8b", "sighting_of_ref": "indicator--128f24cf-6fba-424d-a5e2-55cf4d4dcd0a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb70b60-2c5b-4191-9e68-e8843b1cf6b0", "sighting_of_ref": "indicator--128f24cf-6fba-424d-a5e2-55cf4d4dcd0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31482d5-b226-46f2-9c02-fcaae0a722ef", "sighting_of_ref": "indicator--128f24cf-6fba-424d-a5e2-55cf4d4dcd0a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50b2822-4934-4beb-b0ff-d4826e26bf41", "sighting_of_ref": "indicator--f1d48646-0c1a-46f3-a65d-9a3b51a7e173", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dee71f7-880f-4f37-a5ae-220356554dda", "sighting_of_ref": "indicator--f1d48646-0c1a-46f3-a65d-9a3b51a7e173", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdda98da-0708-42bc-8cb1-7587a5952a61", "sighting_of_ref": "indicator--f1d48646-0c1a-46f3-a65d-9a3b51a7e173", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5365edd-7500-4d43-b08c-e0aedb08421c", "sighting_of_ref": "indicator--c1c497b2-0ef3-4929-9730-52ecfe4e74eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d5ee6a-880a-4308-aad3-5c91eba0cbbc", "sighting_of_ref": "indicator--c1c497b2-0ef3-4929-9730-52ecfe4e74eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4675b2-a2cf-4b47-8a72-67a5254483da", "sighting_of_ref": "indicator--c1c497b2-0ef3-4929-9730-52ecfe4e74eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeef2d4a-e16b-461e-a521-78f896456d7b", "sighting_of_ref": "indicator--914d99e4-a176-40bf-bf38-46f02107f533", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ce6cc6-bdb2-4aba-af1a-f650a06d5b66", "sighting_of_ref": "indicator--6dd50fd1-64a9-4247-a717-638dd61d629c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29522f85-d2e3-44ca-9e27-8ac0c8f53d1d", "sighting_of_ref": "indicator--2363949a-67cf-47c7-80b2-cbba6871b04c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574ea26a-28af-4f8f-a46b-ab4c09cd0174", "sighting_of_ref": "indicator--2363949a-67cf-47c7-80b2-cbba6871b04c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab69fdec-90d7-4ca0-88dd-57ac20721830", "sighting_of_ref": "indicator--40136a0c-785c-4fba-b928-1ce50644ef2b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b109dfc-04f2-40b5-9486-4fb03e18f8e4", "sighting_of_ref": "indicator--69f1df55-8352-4003-9905-246ba9e5c4ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d4aad8-889d-4e6b-955c-15460f9c00f6", "sighting_of_ref": "indicator--69f1df55-8352-4003-9905-246ba9e5c4ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7109847-59b2-405f-8aa3-8e92ee7669b3", "sighting_of_ref": "indicator--857c10ea-dca3-480d-8045-18d9cd196616", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2df1cf-cc28-42ca-b08e-4a14c20d1e45", "sighting_of_ref": "indicator--b6484e9c-7ca9-4781-aaa6-0b82f7f26508", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ab73c3-135b-4fa6-b15f-b0d48a6bc15b", "sighting_of_ref": "indicator--c6ab5e1a-4055-4b73-bf7b-18da6904cbcb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d222a37-d1c9-4aba-a356-7d44a0177305", "sighting_of_ref": "indicator--c6ab5e1a-4055-4b73-bf7b-18da6904cbcb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3346e5a6-ca1d-4987-8483-40b4d854cc26", "sighting_of_ref": "indicator--c6ab5e1a-4055-4b73-bf7b-18da6904cbcb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e1b490-ae3c-4067-a947-9b08a1aeb542", "sighting_of_ref": "indicator--3eb9b258-403e-4844-a80a-1e69622d69ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96e81ec-28d7-473e-82d8-8296a31aa2b7", "sighting_of_ref": "indicator--71000b39-86a7-49e6-9f5d-1525241cd652", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1a97b8-0ee3-4f7b-a4a4-ce49f9b54fce", "sighting_of_ref": "indicator--71000b39-86a7-49e6-9f5d-1525241cd652", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bb6199-ed19-43af-a019-a5fa48e17a9b", "sighting_of_ref": "indicator--71000b39-86a7-49e6-9f5d-1525241cd652", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686a20a8-59df-407c-a85f-66449460baea", "sighting_of_ref": "indicator--153f3dcf-8cc9-43cd-bb85-a080d5677ce1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0dd6cc-1282-4dd5-a54a-afc362fba624", "sighting_of_ref": "indicator--045b0a0b-25b6-4f27-a5d7-fedf2432dd1a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d64c0e-9169-4de6-82e0-cd5e03627cd8", "sighting_of_ref": "indicator--045b0a0b-25b6-4f27-a5d7-fedf2432dd1a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470c8c6e-dd8c-4ce8-893c-9e95657999d5", "sighting_of_ref": "indicator--045b0a0b-25b6-4f27-a5d7-fedf2432dd1a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00026a1-fca6-49ba-9877-c109194ad89d", "sighting_of_ref": "indicator--5c971c08-bb2b-4475-bc0d-a8d34de0a07c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2248a88-380c-4a66-9e8c-c05e2e7ebb31", "sighting_of_ref": "indicator--cda187c6-e318-458c-9b69-4d045f262b77", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8417cfb1-ad3f-4254-9749-119bf87353c3", "sighting_of_ref": "indicator--cda187c6-e318-458c-9b69-4d045f262b77", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee0df58-3606-4779-815b-4910f2b3a2bf", "sighting_of_ref": "indicator--cda187c6-e318-458c-9b69-4d045f262b77", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e098a302-2b28-4a6f-a359-92b5df9ca921", "sighting_of_ref": "indicator--8aab4a48-69b6-4dc8-b5a9-26ebe9119672", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf32255-c649-464f-bf24-d684408a76d8", "sighting_of_ref": "indicator--8aab4a48-69b6-4dc8-b5a9-26ebe9119672", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe787b8-d9d1-4e8f-b956-b327fbdcdcca", "sighting_of_ref": "indicator--8aab4a48-69b6-4dc8-b5a9-26ebe9119672", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781dc2c2-f2b2-4b95-84f9-7e2dc8968bdf", "sighting_of_ref": "indicator--45c8a203-12ba-4f0c-ba11-468fcbfc0dd6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c639a67-e5e1-421d-a347-afd71747588a", "sighting_of_ref": "indicator--45c8a203-12ba-4f0c-ba11-468fcbfc0dd6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05e5aa8-9fc8-4d16-a385-120306717597", "sighting_of_ref": "indicator--45c8a203-12ba-4f0c-ba11-468fcbfc0dd6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c379d4-f033-4f9c-b398-38941da80520", "sighting_of_ref": "indicator--bfd95fc8-116e-4e27-8ef1-df76f144baa0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc603edf-2bdc-4155-af01-e1c1bd222b98", "sighting_of_ref": "indicator--4e6cb087-381b-42dc-88e0-5ee93e1536d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47faf29d-83f5-4898-886b-eea4372c04f7", "sighting_of_ref": "indicator--39c1f8fb-b898-48dc-9378-5454f427dca4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdcf514-39e3-411a-a9a6-cb989648d0a5", "sighting_of_ref": "indicator--39c1f8fb-b898-48dc-9378-5454f427dca4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a97ab1c-0d77-4896-a8a6-99f0210695fc", "sighting_of_ref": "indicator--39c1f8fb-b898-48dc-9378-5454f427dca4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0086c990-c482-4749-a3b8-de8fcf235a28", "sighting_of_ref": "indicator--02949572-81cc-48d7-b682-84eaa6422e75", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7892dd-5dbc-4301-bc9a-4e13634066c9", "sighting_of_ref": "indicator--02949572-81cc-48d7-b682-84eaa6422e75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13706482-cad7-47c0-bb09-2c94fd6f4df5", "sighting_of_ref": "indicator--02949572-81cc-48d7-b682-84eaa6422e75", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635f7fef-6369-4b15-baf6-c57735b2c701", "sighting_of_ref": "indicator--f3603e82-0888-4936-8ab0-34463fc513ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49055f24-3a40-4538-94cf-68fd1857e4ac", "sighting_of_ref": "indicator--da8af431-5d1e-4a30-94e2-98adaf27b7c9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab6a490-f18f-4810-84c6-ed6f3b928a78", "sighting_of_ref": "indicator--da8af431-5d1e-4a30-94e2-98adaf27b7c9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07decba3-6034-422c-82b8-025cca32e517", "sighting_of_ref": "indicator--85d1211b-1d72-4112-aecb-2a82d8fed8bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57963a0e-801c-4598-9e68-0f48432d31a0", "sighting_of_ref": "indicator--f2e46d84-ccc4-4f5f-898a-2d143495659e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2880ee-ec80-46de-bad7-d52aaccdb60e", "sighting_of_ref": "indicator--45a136a7-2445-4ec6-a57d-15f6a6e899c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e03e8a-8849-4df7-a931-fef08bf9d65d", "sighting_of_ref": "indicator--45a136a7-2445-4ec6-a57d-15f6a6e899c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b884a1c1-938d-411d-9050-37a72e84db7f", "sighting_of_ref": "indicator--45a136a7-2445-4ec6-a57d-15f6a6e899c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33df6f5-ca5b-4644-a9e3-1f7a12218a84", "sighting_of_ref": "indicator--f53e22c6-22b2-4280-854c-7572e10b1a8e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100b3691-8873-4e3f-9481-a97e14a27918", "sighting_of_ref": "indicator--9bbf6789-7054-4d91-8596-157d59159776", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbe67cc-880e-4b60-9e3b-9052fbe90bf1", "sighting_of_ref": "indicator--8e163176-542b-4195-863a-d187bd905d38", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4211e1-f53a-4821-b2ba-2433763feb79", "sighting_of_ref": "indicator--399807ec-49bc-4d9f-a70b-4ec9bf9a1b9b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4056c06-d4b2-430e-a4a0-7df6b5392feb", "sighting_of_ref": "indicator--38b96e8f-5ae2-498c-86a5-7752d868402a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cfc82b-7fa1-4acd-a90e-463f0889e22f", "sighting_of_ref": "indicator--9f4be87c-c0fd-4fdd-b394-8094472268a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92637d3-a1ef-4e19-a173-6b60d21581d2", "sighting_of_ref": "indicator--fbb3127f-9017-404e-9940-3451a6ba0d66", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed58f6bc-c8d4-410d-971b-818cd29361a4", "sighting_of_ref": "indicator--34666f62-a33c-49b9-8fa5-186f7a7c2453", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b747ea71-ad2b-42c2-bd23-89f05f013b18", "sighting_of_ref": "indicator--eee3d4a0-3513-4165-9fb2-0f2e24d28017", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd4df50-cdab-4218-85b8-b2706c00c017", "sighting_of_ref": "indicator--eee3d4a0-3513-4165-9fb2-0f2e24d28017", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747d873c-553a-48ec-b9bf-3403abcbb19a", "sighting_of_ref": "indicator--eee3d4a0-3513-4165-9fb2-0f2e24d28017", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f57f8f-f6a4-476b-a68d-d83379b9e56c", "sighting_of_ref": "indicator--2b14bdc9-1dd2-4318-9336-9a35158cb9b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff939d92-ca39-4966-ae5a-3dfa4acd681a", "sighting_of_ref": "indicator--2b14bdc9-1dd2-4318-9336-9a35158cb9b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4811e7-0b99-4c9f-8802-0df1b3e30a43", "sighting_of_ref": "indicator--2b14bdc9-1dd2-4318-9336-9a35158cb9b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1563c2-e23a-4e42-ad01-e0e04d6c85a8", "sighting_of_ref": "indicator--24e2ea15-faf9-41b6-9d1b-564b338761b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae173ee-1b4d-4f79-ba0d-b68be73d73a2", "sighting_of_ref": "indicator--3db88b1c-a24e-44e5-8626-2f9ee974382f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8c21a2-ebd4-4a50-ae9c-b8da8b0e5dbf", "sighting_of_ref": "indicator--3db88b1c-a24e-44e5-8626-2f9ee974382f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07b0ac7-bb61-4b80-8175-04d05cbea608", "sighting_of_ref": "indicator--3db88b1c-a24e-44e5-8626-2f9ee974382f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e193dc-978a-4b4a-9db2-29c2c1a0bab0", "sighting_of_ref": "indicator--16da9fcf-7d2e-4558-834e-b06182a8829c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd00b067-6eb3-4848-8525-4646b56f8f28", "sighting_of_ref": "indicator--16da9fcf-7d2e-4558-834e-b06182a8829c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcb8a08-0845-474b-a858-f2036f3a66a8", "sighting_of_ref": "indicator--16da9fcf-7d2e-4558-834e-b06182a8829c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783942d2-e7e3-4ce9-ac35-8462535d5e74", "sighting_of_ref": "indicator--2d56e82c-58ee-4bdc-a77f-2e7c4d08d410", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291c5ba0-4c61-4590-98f4-8bf9a94074b3", "sighting_of_ref": "indicator--2d56e82c-58ee-4bdc-a77f-2e7c4d08d410", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b81bc84-65ed-47bd-a541-ddd150791b73", "sighting_of_ref": "indicator--4c1d6be9-f1d6-4c6a-8f87-fc114fe3f1e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b09c14-e5f8-4f09-afbb-3686363e555b", "sighting_of_ref": "indicator--4c1d6be9-f1d6-4c6a-8f87-fc114fe3f1e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1d9779-9be3-4ccc-83a6-f1ee2627e196", "sighting_of_ref": "indicator--90fb95d3-08e6-4c4e-89b7-e3f8eeb662a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1fda6f-aadb-4d03-9792-f15fa03ea2f6", "sighting_of_ref": "indicator--90fb95d3-08e6-4c4e-89b7-e3f8eeb662a4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bcdbeb-475b-44b3-b228-5acf7c387af6", "sighting_of_ref": "indicator--90fb95d3-08e6-4c4e-89b7-e3f8eeb662a4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4931bb-0de7-4331-b79c-fee8428ef997", "sighting_of_ref": "indicator--09f6c0d1-5269-463a-8c1d-5da5c0bcf187", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2615a6-877b-412d-b7bc-4b827ecf49e8", "sighting_of_ref": "indicator--09f6c0d1-5269-463a-8c1d-5da5c0bcf187", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376e553b-bcf1-4171-aad1-2f4467025ca3", "sighting_of_ref": "indicator--f5516ea3-1356-4766-9548-eaa08bf94901", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8e4397-8dbf-4c02-9467-967084571a3b", "sighting_of_ref": "indicator--89f71191-8733-487f-b30c-72fd6ef247f1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7622fc40-1fcd-4b2e-b7a7-a0af5dc46d19", "sighting_of_ref": "indicator--42e9dc9e-f1db-41fe-9c03-28646723afd0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197ebcca-f2ea-487a-a258-30fe7cc1d825", "sighting_of_ref": "indicator--d2d9986a-2b1c-44a0-8477-7454c1147147", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f59fa5b-017e-4f1f-bd1e-57bab4c4ad9a", "sighting_of_ref": "indicator--169fe8ee-b1cb-4030-98d7-4c6a0dc49e3f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e2410d-d05d-4e0d-be77-d3123de55abf", "sighting_of_ref": "indicator--9ff0b81f-e313-4051-b9da-05bfbe513240", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6633e052-66b7-4ca5-8bf2-326bbbc63109", "sighting_of_ref": "indicator--85c9492e-8692-480b-b20d-c04711ca04b1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fbfdca-6aa3-4d6a-b5c2-db4a566c1bfd", "sighting_of_ref": "indicator--dbcc7be4-6cf4-4d4f-8d74-3a8e10520c44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2d1f0f-aeee-48bb-aad9-671834592ce9", "sighting_of_ref": "indicator--00602eff-ab92-4370-a093-1aa5c2e4eaa2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b5724c-932a-44fa-8a25-d31d22b95eb9", "sighting_of_ref": "indicator--ea910bc0-b793-46dd-a493-ebf4ea019b8c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b99f945-aba5-4360-9603-7e2dfb35595b", "sighting_of_ref": "indicator--6cacc1a1-db0e-4832-b58b-9cfeef5f7cc1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691c57ac-976a-4412-a70c-fe5ebcb9bfb7", "sighting_of_ref": "indicator--14983ff0-d275-424f-b329-e77632d00872", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913ef3d2-3ea3-43e0-bbcb-8e0938b26d03", "sighting_of_ref": "indicator--80c78f40-c570-47ba-b975-9b1771f00710", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac74cce-a887-49d1-a39f-f40e42a8d05a", "sighting_of_ref": "indicator--f3e7ec00-6ae7-42b3-8890-2ec9642ff3ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3744bec-d4b8-4020-abc3-3e704d5aa837", "sighting_of_ref": "indicator--30440023-b0a0-4e20-9f5b-469d0ad0159b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c2c969-e87a-4a76-90fc-0d058766d9dc", "sighting_of_ref": "indicator--9f8cd332-156e-4666-998d-92e2fced4dce", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15205c9-4ae3-4baa-a029-a6ba01f82641", "sighting_of_ref": "indicator--3fdce7cb-73e1-4c9c-8f67-ac4b98c0bff9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d5e418-dcd2-492a-abc2-9239688b7f5b", "sighting_of_ref": "indicator--a2416400-b7da-48c6-b9e5-9a06a89024a4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc92e2e9-0fa7-4299-b57f-2da7adc4d0d4", "sighting_of_ref": "indicator--c2ab91bf-b960-4b54-af34-142a34433889", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eda7943-5f7d-45e2-aa92-e4b122e5c26c", "sighting_of_ref": "indicator--c2ab91bf-b960-4b54-af34-142a34433889", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6e8fae-4f33-4952-98ec-0f9ed803e9a0", "sighting_of_ref": "indicator--21225f0d-4bd4-4ab9-ab98-1fcac602c15f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e052f6-3aa4-42ed-a870-1aa259fc9c5e", "sighting_of_ref": "indicator--77186032-d26a-4521-869d-283c31477ba9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf02edc-66e7-4b7c-9698-2980eb0b8136", "sighting_of_ref": "indicator--9d50a7ed-4316-419f-bac2-c723603b9f0b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda72baa-f864-4471-aef0-675f70dd6c17", "sighting_of_ref": "indicator--a116894d-1e6c-4614-91ed-9c112b6d210c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb67b63-8dc8-4472-b78f-156d81a42b37", "sighting_of_ref": "indicator--43595b88-b6c4-421d-b627-5c0b66fe40a6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ee780a-1f4f-425c-8380-01d4109d108a", "sighting_of_ref": "indicator--f94d8e76-996c-419d-aab8-7939e24cc90a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2155558-352e-4938-b9b0-10668eefc472", "sighting_of_ref": "indicator--3b890fdd-3eb4-4f21-8c15-655c252ec4bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe9de77-a2a0-4ff1-b7f6-6aab60ea9b78", "sighting_of_ref": "indicator--43918817-621f-465e-acc7-0dbf627b9ede", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09148380-32eb-4d71-9151-25786d26bcf3", "sighting_of_ref": "indicator--6a440f50-23e4-4cdb-8d42-1328e96cbb28", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2829643f-0b4b-4443-a3a2-17b35cf568ee", "sighting_of_ref": "indicator--a2c62597-1202-4d6f-9c43-cd1784ddd9ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3bc29d-29f1-4bb4-81f6-22c8db62f805", "sighting_of_ref": "indicator--0d47d85d-eb06-4e95-8683-87ec85520860", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b45ec89-a95d-46a2-b0ae-cc7f1b9d225f", "sighting_of_ref": "indicator--f6656985-d195-4fe1-bc30-3fdef033c25c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e035cb6-6f17-4db9-8fee-f693bb72dcc7", "sighting_of_ref": "indicator--d78eb093-a528-4af4-8bba-c3e8df60005b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d8cad3-f096-455d-82ba-ecc39bf3f861", "sighting_of_ref": "indicator--d7456c7a-38da-4eef-ac4a-7cda551d9e7b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efced808-1c33-42d1-b6e6-26f35cafee69", "sighting_of_ref": "indicator--c1f9bf39-547b-475d-b2d2-3d15dad63a49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf592a0-358a-4357-83d0-1df41ec24ed2", "sighting_of_ref": "indicator--c1f9bf39-547b-475d-b2d2-3d15dad63a49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa0d535-597e-4e1f-a45d-5fcf19228b77", "sighting_of_ref": "indicator--c1f9bf39-547b-475d-b2d2-3d15dad63a49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fce5bda-5eb6-4870-8b6b-000f678acb40", "sighting_of_ref": "indicator--f7251031-4fda-4485-997c-ccca5c8da9b6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dd14fe-4193-420f-a4cc-eb2720d1d88d", "sighting_of_ref": "indicator--9c071aad-ab97-478a-a93c-43c233239a08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d14a12b-b66e-4ed7-af3a-ff7d496cbecb", "sighting_of_ref": "indicator--9c071aad-ab97-478a-a93c-43c233239a08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df677e2d-2104-46a0-89ce-ba37a25efce5", "sighting_of_ref": "indicator--741c9322-e91f-45ec-90e5-ea42769de248", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60df232-f09b-4b69-b4a5-de04772c81ff", "sighting_of_ref": "indicator--53c1204c-001e-4e76-a368-86fd4b3de1ed", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59270ddf-6283-4225-8a0c-ebec99cdc1c7", "sighting_of_ref": "indicator--889124ee-9d29-4c20-8b41-34fcb623169d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1256d08f-4eac-4b3f-9d1e-28bc9ee37c05", "sighting_of_ref": "indicator--8b10b5f9-83fa-42f1-a3d7-47e161111ed7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10981b25-51d9-4557-9e22-7c0413227d5d", "sighting_of_ref": "indicator--e9b46ed6-f950-4c03-babc-07e23ca4a018", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7658585d-fc19-43f6-987d-a84ac8d3ab72", "sighting_of_ref": "indicator--8bac8026-34f8-4c92-a06d-911e350004c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d460ef9-1fd0-4eec-9631-e1b98051dfee", "sighting_of_ref": "indicator--edcd6491-0fb5-4bf8-b86d-a9567549a67b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300d258a-21e7-4547-959a-1182717cd0dc", "sighting_of_ref": "indicator--ecea24a2-b14c-4efc-b787-c626f49c2b55", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe6ccb6-6fb4-464c-85ad-b2043aea8326", "sighting_of_ref": "indicator--2d4f9762-aefe-4546-a26d-6ff9b68bd96e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68efbe26-da87-4785-aa89-ccdcf414b769", "sighting_of_ref": "indicator--9291affe-4641-4add-ab05-956203bce0bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5b7619-2901-4fb6-aec1-fd2a17474f00", "sighting_of_ref": "indicator--c84769c8-5c64-4470-ade4-2ca4e67b92eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35e8857-2a51-425b-9a0c-63ef18b823e5", "sighting_of_ref": "indicator--7ca0557a-ac32-44ab-afb6-f69ed92bb970", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8f50b9-e6b7-4001-8537-2d8d61c7ae44", "sighting_of_ref": "indicator--9d67f857-9347-46bf-b1d4-fecfc5b879cc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623f39b5-8752-4667-827b-5b58c839d5df", "sighting_of_ref": "indicator--637f8c26-3da0-4b68-a5b9-d5a727971bb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ebd36a-1b5c-4726-9550-40088794f454", "sighting_of_ref": "indicator--637f8c26-3da0-4b68-a5b9-d5a727971bb0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5c6fde-81ea-4303-a31b-ccf5e6f9392b", "sighting_of_ref": "indicator--d327ea2a-020c-49b8-9c08-07a42efba754", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc96117-09ed-4fde-bc24-2c208fbd9768", "sighting_of_ref": "indicator--d327ea2a-020c-49b8-9c08-07a42efba754", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f932dfd6-19f2-4e25-b2ef-ca6422f34e67", "sighting_of_ref": "indicator--6cb87c8d-7441-4c65-a67e-95fe99f110dd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eb0bb8-bd37-43a8-ac04-96a7ce6448b3", "sighting_of_ref": "indicator--705b451a-e950-42c6-ab35-30cf5c5f1346", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce528a6-0210-4170-af07-2158dd2ccd43", "sighting_of_ref": "indicator--d5ffa57e-2058-4513-83ed-45b42f92fd8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f05afa2-1319-4d3e-953c-a9e085e8440c", "sighting_of_ref": "indicator--a2a2d76e-fc21-4754-90af-876158f48e8b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9ea274-8ea4-4f6b-acbd-d6a0ec830277", "sighting_of_ref": "indicator--a792a605-2e7c-40e0-89b2-027b4277fcda", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57453586-f737-4c7d-8349-e41e4bd8d8f0", "sighting_of_ref": "indicator--01afd22b-2090-4cd5-8e2e-d874380b8980", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693d8e78-1e32-49e3-99ec-a570a1495060", "sighting_of_ref": "indicator--ed81f6fd-a1a9-4dae-9190-07f3796e7b32", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ee9b57-2794-4899-b38f-9ded43837b74", "sighting_of_ref": "indicator--f15d6dfe-b5e1-4c74-80c9-a27cd8c21380", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59f12a0-8a91-4eac-971f-b249e9820d61", "sighting_of_ref": "indicator--24647e32-ec43-41a0-86e4-0a946f4d07c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325ba7f5-42b1-4de4-8feb-4f62e70593ca", "sighting_of_ref": "indicator--db71a1c9-56a1-43d8-8f46-827a122ee116", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950bf73a-c7e8-42ae-ada4-9c6a44dc73de", "sighting_of_ref": "indicator--3c759276-663a-43e0-bebc-7548317c75b6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5352c61-c54e-462a-9765-6e908d7d7650", "sighting_of_ref": "indicator--f2550a1b-7083-4e13-9379-a700afa8a8af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62c1d9f-2bf4-4dcb-bb40-11559cdf585e", "sighting_of_ref": "indicator--52aaebd7-2e20-4e73-af73-d099d7ef8c50", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92d1038-e71d-4c0a-ac52-95d73a7ab066", "sighting_of_ref": "indicator--cd13bc2f-52d3-4823-a5bf-7b2689759d4d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cca8c62-20c0-450d-9000-51bc1c4a1ea7", "sighting_of_ref": "indicator--7ec6428e-2831-488a-8224-7dcf0840e4f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa408783-fa55-4433-a06e-49eb3657eac5", "sighting_of_ref": "indicator--14c3fb19-85b0-446f-a7e6-38e3d661907e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5d48c0-e4cf-4025-87a4-8b921585c416", "sighting_of_ref": "indicator--8ec937e4-4fca-45b0-83d8-7729a6a32217", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44a6e90-70b4-4f4e-9ad0-03ea1c407908", "sighting_of_ref": "indicator--0356cb8d-f201-4fbb-a4aa-4e84b4222675", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783855c3-6147-45e0-b81c-d949b5312baa", "sighting_of_ref": "indicator--b4808e24-2b65-499b-8651-2479b7d4ae17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2436654-c50c-49d6-9120-e8b07bd5e92a", "sighting_of_ref": "indicator--d93bca55-9f1d-4d9b-b060-cdcc3627bd65", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b38efc-fc76-4985-ae7d-b6739f54c1b6", "sighting_of_ref": "indicator--8ab454d8-1cff-4137-9ea8-10f6b2023b68", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37803c0-8698-43e9-9e8d-9c9842b885b5", "sighting_of_ref": "indicator--29e8879e-a350-44f6-9150-8204cf0d1886", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a8c478-3936-405f-9849-49dedf14d3dc", "sighting_of_ref": "indicator--057a8cb3-577d-4a85-9e34-934d8e392f3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7c9c69-9359-4298-90ff-c4f33878aa8e", "sighting_of_ref": "indicator--c5b55d57-ce35-4ced-81aa-fa8c5eb21aee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce52a80e-a68f-4837-bafa-8fda4b7e1e2a", "sighting_of_ref": "indicator--c5b55d57-ce35-4ced-81aa-fa8c5eb21aee", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48319560-03b3-4111-b386-005714847aa8", "sighting_of_ref": "indicator--da70b507-3ffa-4222-bc1c-a7b1a2276202", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255a8938-f917-462f-835d-0a979ec1efcc", "sighting_of_ref": "indicator--807de7ab-c0a2-4ec9-86ec-a1f10ee10608", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075c1067-4311-4cd2-acc8-2e55df8bedbb", "sighting_of_ref": "indicator--71948032-f0e8-443c-8373-26cfd9d3f1f7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46794e7b-878b-4fd2-9cf3-d1128fce5a05", "sighting_of_ref": "indicator--5a9b7f12-b31a-4555-8daa-14f5f9398215", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0f7db0-4fc0-4eb9-857f-4143bd991a26", "sighting_of_ref": "indicator--51684c39-d0d4-4e8b-bb19-85dd3e34be36", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c63ed4-7eec-4040-a462-0519274e9226", "sighting_of_ref": "indicator--017ebfac-890e-496c-9763-b26c29b6c735", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59246139-6313-4194-b8c8-5fea777d7af7", "sighting_of_ref": "indicator--bc540795-bad5-4907-a805-835bd6099443", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b55d7c5-0c3d-41f6-8a4d-86cab8ea6b59", "sighting_of_ref": "indicator--5ac991c8-4958-4e55-a26e-f3349fb231d5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e442f63e-7d50-47b1-b905-888493fe8a7e", "sighting_of_ref": "indicator--96db2be4-cf19-4064-9603-8d67a29be6a5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f97e5cb-e6e6-494c-8aa5-f4183ddf15ce", "sighting_of_ref": "indicator--7e47a12b-08c4-48f3-9fac-d11a88c8cc40", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb35d94-98b1-422b-b896-8dd190b6e9d7", "sighting_of_ref": "indicator--910a1281-cb18-4ed5-8e2f-2c6e38976457", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60744028-332f-4e50-9638-6b1a7ca740ac", "sighting_of_ref": "indicator--c90a0dbb-9b91-46ad-9b24-6c18ed84d2ec", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7249f762-d677-4f02-805b-0673aaa320b2", "sighting_of_ref": "indicator--2c02d7ef-b21f-427b-8aec-3d1d461a1853", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3173d0-78bb-49a0-a574-df346f7d69ae", "sighting_of_ref": "indicator--84838469-1945-4fe0-b340-c9e1f85defc7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70891fae-7aaa-43ad-bf24-253b5ecb88d4", "sighting_of_ref": "indicator--0e71c09f-96dd-4677-8f93-ceea0353d2bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680a034f-a2f5-4e48-ab3b-bee58a303d06", "sighting_of_ref": "indicator--57627646-8e15-48dc-813a-983a9a109fa8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05fb17b-4c70-45b0-bab9-9a6e2388f561", "sighting_of_ref": "indicator--309fb3e7-775a-4206-8e21-705c63c63a57", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38e890f-fa13-4f98-a932-efd4e51c536b", "sighting_of_ref": "indicator--aceb9631-8736-4a5d-851c-86469c51a8ad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccdce337-e3ef-401d-8409-0a68efdc5023", "sighting_of_ref": "indicator--fe684e3e-4efa-418a-9077-4f656cfd5e06", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a26e80-3903-4053-b22f-abff302e99bd", "sighting_of_ref": "indicator--0bb7072e-0d32-4ebd-8b98-59756b4d0550", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf831ec-4401-449b-8b55-a4d761a1a039", "sighting_of_ref": "indicator--e5704e84-f31e-4588-85cd-450a1d473d9f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660ef931-4710-4fa5-af69-946bde0ede50", "sighting_of_ref": "indicator--ebf94869-7def-44c7-af86-631883558dcc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a0126d-63e6-47f2-942c-14ceeeb88947", "sighting_of_ref": "indicator--012c7f2a-9373-4658-b57f-8f760c61e34a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c98566-edc2-4daf-8b59-f9768360fb4f", "sighting_of_ref": "indicator--6d755c99-ae7b-4464-ba9c-864a0ea53a12", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75f3937-35e9-4f6b-a707-ee72a79aaf10", "sighting_of_ref": "indicator--8eb9f27f-a4a3-4775-9912-1127a41b9812", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624c2015-cae1-4855-a7c4-a99faa9d793c", "sighting_of_ref": "indicator--f0f62150-cf4e-43c4-beca-3cbee2085fb0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c8e293-d5f7-4df0-91af-6b7f36ecd6e5", "sighting_of_ref": "indicator--0e257db2-948f-42ed-9107-b01034f10485", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27ab65d-9835-4a30-a11f-3c29455c6206", "sighting_of_ref": "indicator--104396e5-cc84-40df-bd50-789be084b979", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0420a5-aad5-4dd2-8e47-9399d8f3762b", "sighting_of_ref": "indicator--7fe77211-6811-4951-9c83-2e14820a4d46", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891ee36d-0e78-458e-82d7-1f8702833864", "sighting_of_ref": "indicator--7fe77211-6811-4951-9c83-2e14820a4d46", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9f5d39-b28a-4822-a1d6-10162e4b5a0f", "sighting_of_ref": "indicator--93dad46b-7ac8-4b7b-9847-3bd28b7cfa3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd50553b-aaf6-4a7f-9cbf-2a6aab684b85", "sighting_of_ref": "indicator--fc67f495-6748-4f3e-be16-7a2f83ecc427", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e52c16-7646-4736-a1eb-41a4590a30ed", "sighting_of_ref": "indicator--e6afa500-0aaa-4879-be21-07b9ac33bb81", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437f3bf3-9c69-42e8-bfca-1adaf8860dba", "sighting_of_ref": "indicator--4312cd93-6c11-4ca1-b8d5-084fdade1f7b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c32d01-7575-448b-a50d-89e57442ee4a", "sighting_of_ref": "indicator--604fc9cf-24ce-4e29-9283-5d4cce7019a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbaa4164-b272-47dd-b2b7-d7cfb7af37f7", "sighting_of_ref": "indicator--604fc9cf-24ce-4e29-9283-5d4cce7019a3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d643fa6c-42b3-4c22-a439-61aa7feea637", "sighting_of_ref": "indicator--055d23a5-126d-47ab-8398-994f7d35f668", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ec2c8d-a318-4e1c-910d-7c408dcff880", "sighting_of_ref": "indicator--57076582-6996-480c-b149-6c180323423a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b63aff5-30f0-4d4f-a098-7283ef6c85b0", "sighting_of_ref": "indicator--eaa4df64-18a9-4329-8d7b-32a35587d37a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c530105-a567-497a-94e6-2b6480b63c9a", "sighting_of_ref": "indicator--3cb7d78d-2d7d-4f9a-827c-d34ffc4e8e13", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6dd55d-0e8a-4964-a674-700701e23f2c", "sighting_of_ref": "indicator--66230edd-2aa5-486d-b9bb-9a30c6cb4b87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b119f4a9-789b-4ec1-94ff-3db2243fbd43", "sighting_of_ref": "indicator--681f32fa-d263-4355-82da-4205b2e8a69a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150a61a5-742e-4e08-9ae6-6d99c376f689", "sighting_of_ref": "indicator--681f32fa-d263-4355-82da-4205b2e8a69a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37046da9-8928-4b70-bae1-587649f0b89c", "sighting_of_ref": "indicator--aa3c8e06-c364-4735-9996-3cd1b449c37e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3749a407-1a81-41f4-9d36-793e92fd3de1", "sighting_of_ref": "indicator--aa3c8e06-c364-4735-9996-3cd1b449c37e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b02bba-9095-49c3-a5fe-8a5eb1fa72dd", "sighting_of_ref": "indicator--7a975797-2679-4a84-9cf4-8ff6e6bd9f22", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567d151e-6e25-468e-8e69-6362122ac40a", "sighting_of_ref": "indicator--dd975deb-d900-4e5f-9f0b-4574651f5805", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9124c7ac-4c34-4fce-9eaa-0e4c8714648d", "sighting_of_ref": "indicator--a78240a8-e27c-4983-ac27-a1dab8f9fe56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335eef3a-7329-41cc-bfb2-06058f9ed447", "sighting_of_ref": "indicator--64dc8d2c-2cb6-44bd-a71e-f42d9645b9b1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56b9d21-8002-4946-b064-d04108b7d72b", "sighting_of_ref": "indicator--4ecf2ffd-762f-40bf-847a-bb5c9a42c19a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18679f08-a02e-4814-9acd-8297fb16e0f0", "sighting_of_ref": "indicator--4ecf2ffd-762f-40bf-847a-bb5c9a42c19a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e90def-0d26-4fdd-a837-a23be0ef7c4f", "sighting_of_ref": "indicator--0d87d077-43a6-4c40-b339-4570391ebb8b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893cc79f-3504-488e-97e2-f7b5d0fcf3e5", "sighting_of_ref": "indicator--aef89bf7-f703-4e2f-9422-48eff0ac073b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0311c67-7e4a-42ba-a104-83bb900f9312", "sighting_of_ref": "indicator--8741cf1a-56a8-4971-a14d-6d28dd6a084d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f09d02-d3f5-4d72-b576-272f49843411", "sighting_of_ref": "indicator--99c460a8-6287-4bf6-a8e4-2e85fe6502e7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8585398-3a31-4107-9400-99e6a25e13d8", "sighting_of_ref": "indicator--78422c6b-54da-4786-a377-ed9d44662b9c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6111222-7ff4-4264-9450-8a680f3ae0ab", "sighting_of_ref": "indicator--52956e6e-b700-40dd-98df-7c7889200e19", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8027f6d4-802c-4b94-8bf6-547c95d3ea36", "sighting_of_ref": "indicator--ae89c838-390b-45b9-9a29-85ec7d251702", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e8b4c1-0755-4c4b-abc7-2e9433effb67", "sighting_of_ref": "indicator--c56edc87-47c6-47dd-97b5-fb85d9e90038", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7a7663-4522-4a83-b41a-7ad0c754fe18", "sighting_of_ref": "indicator--223750ea-6c9f-4c95-a686-8ee9ec29b729", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab568d5d-6b1f-4a18-9077-dcb3b008bdd0", "sighting_of_ref": "indicator--7ca386b2-02a7-41ea-acbf-e4342169c576", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e6161c-4f7e-4f6f-b65f-bb07f6d6e671", "sighting_of_ref": "indicator--d8c30175-fb8c-4cc7-9b3f-3b20e1d5ac38", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769a88be-f21b-439b-bf69-d2934efd3e8a", "sighting_of_ref": "indicator--d8c30175-fb8c-4cc7-9b3f-3b20e1d5ac38", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0569b780-9491-4ef9-b1cb-0904db89e242", "sighting_of_ref": "indicator--bbdd83a1-d2de-431b-bc7d-96787aa965e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a584c72f-905d-41b2-a0fa-ca7570d9e238", "sighting_of_ref": "indicator--9884d511-8815-4616-8cca-1b0f8d115c52", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f9cbfa-0b5f-4bb2-b63d-938e555647cd", "sighting_of_ref": "indicator--26754467-79bc-4afe-933e-62c3bd8c42fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f832d7a-eb0c-4613-94e9-f40a45d955df", "sighting_of_ref": "indicator--f6fb09eb-430f-4300-9222-35d12df356cb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78e70b7-e437-4b71-9873-4e34d449c14b", "sighting_of_ref": "indicator--51b0ac84-2057-4762-be2c-9f1f2e0d59c5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4fa2db-063e-454b-911f-0cbad55fc26f", "sighting_of_ref": "indicator--5aee2ca1-ce5f-4fb6-9770-bef2112d67d9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96915d3b-0b90-4d03-9883-878821fdef7a", "sighting_of_ref": "indicator--31768e48-fd64-4229-9130-82c85716b874", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba26d9f-c507-4a68-9236-4ed73918821b", "sighting_of_ref": "indicator--31768e48-fd64-4229-9130-82c85716b874", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c185ec99-7b6e-46a0-9d15-7f580e253357", "sighting_of_ref": "indicator--32f0c58a-d253-4a49-97cb-9c538a9d9b7e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403abf2a-06fd-4bf2-8cd6-29acbba7b010", "sighting_of_ref": "indicator--9060016b-807f-459b-8faa-6bf9f617d90c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6fbdbc-9fd4-4849-9465-b952424a1b2c", "sighting_of_ref": "indicator--d02fb5cb-1f11-499e-8f0b-6bb9c983cfbb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a14b433-77b6-4caf-a105-a9cf95c639a6", "sighting_of_ref": "indicator--039b2899-24e1-4b14-b26d-78380f2f6a3f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8376397-64e1-4dc3-ad59-681c873b2974", "sighting_of_ref": "indicator--dcfb06e6-62df-4cf8-b19b-d54552546557", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a801cf-8e48-4f85-b173-ce2afca5d5a1", "sighting_of_ref": "indicator--92897c88-7c76-42da-99f7-2ba0ba03d20c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6518d3b-c26d-4f43-ae47-03659b6f6f01", "sighting_of_ref": "indicator--f6f9b350-b207-4dd2-8887-ee9d9a86cfd3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76774bf0-4f02-460b-967e-f896f90b5f15", "sighting_of_ref": "indicator--c8bb0e5a-73cb-4c47-9067-44467fa43f91", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d98c27-972a-4929-a1c9-a27f0580bfba", "sighting_of_ref": "indicator--db5f43c3-36f0-4f9a-8d94-54efe05770be", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498fc8d5-b18e-4529-9a97-15cb1a92890c", "sighting_of_ref": "indicator--fc31ac5b-c858-479f-b02d-c7144ffed3db", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6eec62-bb7e-4911-9b9b-e39edd5a85fe", "sighting_of_ref": "indicator--fa673996-e9b8-43f6-99ef-51ff113238cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f3ea52-bf0c-4e9b-9093-c68738a8e695", "sighting_of_ref": "indicator--65e82099-1c81-45a2-90fa-7b71998cdf75", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d875a768-19a6-4cf7-b86e-af868675ade8", "sighting_of_ref": "indicator--b024640d-a959-485d-a546-5a779569fb20", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37bdd71-d461-42c9-b2f4-761e8069ba01", "sighting_of_ref": "indicator--89a7dc42-d8bb-446a-93c3-5fd0186d3c6f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020002ad-fa57-4f23-be81-8ba985fc942b", "sighting_of_ref": "indicator--f07c84a6-5bff-40d3-8846-c9eb42d01242", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898ca950-b42a-41e3-94d3-97b9eaa195fc", "sighting_of_ref": "indicator--add86bd5-4684-4acb-9271-d77b0eae247a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3341499-6f34-4ef7-844f-8033f944029e", "sighting_of_ref": "indicator--e55f9bb0-961e-45d3-823c-01768c8e4304", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db11f084-5f21-4be0-b625-3a20c3026eef", "sighting_of_ref": "indicator--78c9790f-3770-4a91-87d2-34b5124a69ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741b9459-4aea-468e-a8cb-4d3cc7bfade6", "sighting_of_ref": "indicator--38eb0cec-faf8-4172-8bcb-f727906669a8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b25e02b-081f-4454-a19d-f2281cd3bfc2", "sighting_of_ref": "indicator--7e1a1d4b-ada2-4deb-b1bc-99a867b2c1fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d644438-ca3d-4553-9445-5358f6b8214b", "sighting_of_ref": "indicator--5c848622-0ad4-4911-a9d3-cbe73e06c160", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bb930d-b6bc-4f5f-8177-101dafd16d9a", "sighting_of_ref": "indicator--5c848622-0ad4-4911-a9d3-cbe73e06c160", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372df2f2-aa90-4f54-a0c9-926f69e3ab62", "sighting_of_ref": "indicator--5c848622-0ad4-4911-a9d3-cbe73e06c160", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08058971-d238-443b-9ef7-e738d5a5a264", "sighting_of_ref": "indicator--1ea090eb-ff97-474b-8c60-3ee9d472430a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a61cca-a5ae-4055-9951-782e8c9953f1", "sighting_of_ref": "indicator--1ea090eb-ff97-474b-8c60-3ee9d472430a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f2a755-cc63-409b-8459-674484c929cc", "sighting_of_ref": "indicator--1ea090eb-ff97-474b-8c60-3ee9d472430a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21a2497-b0f3-4bc3-9e74-05256ba86a77", "sighting_of_ref": "indicator--117fa373-a50a-4074-a86c-4bd58571ae52", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7c744b-c452-4671-abb5-a59ce9cba3e0", "sighting_of_ref": "indicator--117fa373-a50a-4074-a86c-4bd58571ae52", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64840226-6c75-40ae-abd3-d9ab982fa34d", "sighting_of_ref": "indicator--4f214816-6d9a-4924-8988-cbdd43adf054", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b602b44-b798-4f87-b6df-b833be8b60ae", "sighting_of_ref": "indicator--3136e483-41c4-47bf-b926-6b98a06616bf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dae65f-5172-41e2-bbe5-2f0f1459fe45", "sighting_of_ref": "indicator--382d09c7-2dfa-4de0-a789-9f57e774acb5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c94c5f7-284e-48c6-a9ce-299548486a5f", "sighting_of_ref": "indicator--382d09c7-2dfa-4de0-a789-9f57e774acb5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5aee5-2050-4f3f-af23-1a52dcf9f3cb", "sighting_of_ref": "indicator--382d09c7-2dfa-4de0-a789-9f57e774acb5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2009a219-0bf2-460b-b368-09cd762a219d", "sighting_of_ref": "indicator--7a638d6f-1402-44c6-8561-54c5106ee6d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab41634-5f44-4aea-8911-4ad2e68583a0", "sighting_of_ref": "indicator--7a638d6f-1402-44c6-8561-54c5106ee6d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf597738-b6c3-4d4e-8180-8c1260a57af6", "sighting_of_ref": "indicator--7a638d6f-1402-44c6-8561-54c5106ee6d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1d7936-5bb0-4c7b-90f6-28e8320642b9", "sighting_of_ref": "indicator--ce889122-cd6d-4e33-8046-93d5680617a3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f2d2d4-fcdf-484a-9cf5-7f18393122ef", "sighting_of_ref": "indicator--ce889122-cd6d-4e33-8046-93d5680617a3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27f839d-c907-4ef7-94ac-77d1b399654a", "sighting_of_ref": "indicator--2660880d-1384-4c8d-9e12-224a7dedc036", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41044667-6161-486b-8d29-ff031cd1faae", "sighting_of_ref": "indicator--2660880d-1384-4c8d-9e12-224a7dedc036", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513b2a1c-18b8-4bac-baa4-758811dd7f37", "sighting_of_ref": "indicator--4b8a5623-4cd9-4ebe-96ff-2f9040ba3f8d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4dbd54-5713-481f-ac59-50e0c74d0c7d", "sighting_of_ref": "indicator--cb03ec21-5ecc-426e-bbb9-4fbb580f3946", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8736e41-a76f-458f-a097-3255f96fe57d", "sighting_of_ref": "indicator--2e61ddc0-edf9-4e2e-b19f-dc9924e12e21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877e8d6d-5cb6-4819-8072-373a8ae11a09", "sighting_of_ref": "indicator--2e61ddc0-edf9-4e2e-b19f-dc9924e12e21", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce2a684-6c30-43fe-a673-a9871bee5576", "sighting_of_ref": "indicator--2c053ec7-d774-40dc-afe1-e0ffc47166c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ed1988-9563-43fc-8919-e6c5af4645ad", "sighting_of_ref": "indicator--2c053ec7-d774-40dc-afe1-e0ffc47166c0", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b942d9-ad2f-47c1-bc70-89ca1b247815", "sighting_of_ref": "indicator--eb993018-0131-4b52-86c6-21c25fba264e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ef4ab8-2e34-42d4-9a99-831b16b3c418", "sighting_of_ref": "indicator--39af7bd8-ea12-4e50-9e14-7b2fdad9c6b9", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01121b04-b4bb-4178-8d8e-41a9de1ad2f8", "sighting_of_ref": "indicator--a6cfdd4f-3836-4498-bb46-b8d67deb80e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea91ded3-4088-4b32-b076-f71f23edc59c", "sighting_of_ref": "indicator--a6cfdd4f-3836-4498-bb46-b8d67deb80e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9a3777-8b14-4214-a94e-d2956a9874ee", "sighting_of_ref": "indicator--71d1398c-3e85-4f08-8bfd-dec203697a3a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c99d033-75ea-4f55-9c11-197a7c853e86", "sighting_of_ref": "indicator--0125fd40-05cc-4f1f-8f17-bfb8df788f34", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b08fbb-ce02-469d-8b9f-737ca4679b31", "sighting_of_ref": "indicator--0125fd40-05cc-4f1f-8f17-bfb8df788f34", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76fdba7-79a1-446e-9ed1-93ec62817e20", "sighting_of_ref": "indicator--547ad9f5-e376-43c4-af0b-43a3d740b6c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13e5ea6-2da1-47d1-8c3f-f9268b76b98e", "sighting_of_ref": "indicator--547ad9f5-e376-43c4-af0b-43a3d740b6c7", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501b35ba-5e50-42f8-b449-5e54a054bb63", "sighting_of_ref": "indicator--27969079-e09c-454a-8782-27e2e8cbc25c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ec4ab8-6d2a-4708-87d7-ac281445375d", "sighting_of_ref": "indicator--3508695e-3785-4636-aeb4-985bab212315", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335525a2-0204-4904-82a0-bc76726e468e", "sighting_of_ref": "indicator--22d6b1b1-b094-4c78-ada8-1273a24639e7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed117a24-f10e-447d-bff2-e8374940a06b", "sighting_of_ref": "indicator--6808a62e-620f-4c31-b482-0ecf54b63aa7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a817bb-5d6a-44a6-9760-d3ee66a5f3e5", "sighting_of_ref": "indicator--6808a62e-620f-4c31-b482-0ecf54b63aa7", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a31a09-92cb-4cfe-b9a9-390df3211f58", "sighting_of_ref": "indicator--cd7e3051-cffb-45c4-a974-a24c96d2eca3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e89d580-435a-4e36-a1c1-95cf28550e6c", "sighting_of_ref": "indicator--f4eaedf7-a32e-4c34-b7db-06c06cd16953", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f3dcf1-7751-49da-86ad-5648e2043e96", "sighting_of_ref": "indicator--f4eaedf7-a32e-4c34-b7db-06c06cd16953", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4fa529-68e1-486c-bda8-551528b947fb", "sighting_of_ref": "indicator--f4eaedf7-a32e-4c34-b7db-06c06cd16953", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0db307-a9b4-490c-9942-61808c14238c", "sighting_of_ref": "indicator--e2a91f7a-4811-4c01-9ee0-ebfc06a6a446", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467ec3d9-6547-451e-8547-e2b4d9ea5d66", "sighting_of_ref": "indicator--e2a91f7a-4811-4c01-9ee0-ebfc06a6a446", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483224a2-556d-4ad5-a4d6-cf2675f6a139", "sighting_of_ref": "indicator--e2a91f7a-4811-4c01-9ee0-ebfc06a6a446", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be594455-9c15-4622-87cd-b99fdf9fa07e", "sighting_of_ref": "indicator--c204c87c-d545-4518-939b-649d08f1d7c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb57ad4-11b4-42f7-a048-40a47008b464", "sighting_of_ref": "indicator--4657d014-cd29-4269-879d-0133b4ecaacc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ce72cf-150e-4fd6-885c-0ab069039b07", "sighting_of_ref": "indicator--a069a04f-9f31-480a-9635-8de7a8714b5a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcfc1ba-a61c-4c6b-8e92-3808dc6d9cea", "sighting_of_ref": "indicator--a069a04f-9f31-480a-9635-8de7a8714b5a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e59703-1df5-487e-bf7c-8cededa85d4c", "sighting_of_ref": "indicator--d9f8e1a2-17cd-498d-96a1-ed98f25d8af5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2334b1f3-94dd-48dd-b08d-4d565ded2561", "sighting_of_ref": "indicator--d9f8e1a2-17cd-498d-96a1-ed98f25d8af5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e88ab2-522c-409f-b243-06691544f465", "sighting_of_ref": "indicator--59441585-7580-45bf-9c53-629156f6d136", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bdb5d6-e001-47fd-adf1-702d7a8abfc5", "sighting_of_ref": "indicator--59441585-7580-45bf-9c53-629156f6d136", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935d5339-58a3-4400-8f62-c4cdf9ec995c", "sighting_of_ref": "indicator--59441585-7580-45bf-9c53-629156f6d136", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab468d1-19eb-48d3-9a5c-8398bd3d710e", "sighting_of_ref": "indicator--753a1abf-62ce-4d62-ae32-111765e00e6b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0fefc5-a3f3-4946-9713-2d3e96eee7b4", "sighting_of_ref": "indicator--753a1abf-62ce-4d62-ae32-111765e00e6b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a88decf-e777-4587-a37a-2ccd598d5f5f", "sighting_of_ref": "indicator--753a1abf-62ce-4d62-ae32-111765e00e6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19956d24-865c-47b6-ac52-5c10330d3b2d", "sighting_of_ref": "indicator--5ef214c4-4fcf-46f1-8f7a-b4e1fe53e8b3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb1b6d7-f996-4207-b218-8ca42de57e9f", "sighting_of_ref": "indicator--5ef214c4-4fcf-46f1-8f7a-b4e1fe53e8b3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6e28aa-fd56-4b40-95ef-53713d23923c", "sighting_of_ref": "indicator--5ef214c4-4fcf-46f1-8f7a-b4e1fe53e8b3", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310c6372-5de8-4b47-94ce-b04713140ca2", "sighting_of_ref": "indicator--2f744eba-b641-49a1-85ba-2e55ae9ccbe5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ca8be1-4cb1-46a8-8a2e-768fd6f54b82", "sighting_of_ref": "indicator--2f744eba-b641-49a1-85ba-2e55ae9ccbe5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2847ad6a-31ca-484e-ad72-7632da3fadcc", "sighting_of_ref": "indicator--2f744eba-b641-49a1-85ba-2e55ae9ccbe5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a10546-a38d-4dea-9ce4-6328d7771d48", "sighting_of_ref": "indicator--617b3485-241d-4ea1-924a-2d3173e54268", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19fea0c-e92d-4ec0-bde7-b15c7ce0d715", "sighting_of_ref": "indicator--61b32d26-ab74-4d5d-88fd-bfbc25328523", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7b33f4-f4ab-4265-9774-f344ed3cff8a", "sighting_of_ref": "indicator--61b32d26-ab74-4d5d-88fd-bfbc25328523", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58760e06-40e0-4d6c-bc9e-38f4a3955f69", "sighting_of_ref": "indicator--88fc7255-98b7-4c7f-82e6-07ed6530ee56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6388353-0140-4575-a5c3-2fb457377de3", "sighting_of_ref": "indicator--88fc7255-98b7-4c7f-82e6-07ed6530ee56", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9464927-c326-4238-887a-11bb498eee4b", "sighting_of_ref": "indicator--35ae9a70-8fc3-4f99-980d-d91e8743a42e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f77c17c-1967-49f0-a093-2413eda0371f", "sighting_of_ref": "indicator--35ae9a70-8fc3-4f99-980d-d91e8743a42e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ca4114-72fb-4947-a510-417256f23c66", "sighting_of_ref": "indicator--35ae9a70-8fc3-4f99-980d-d91e8743a42e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca51e642-2fcf-4390-b748-f69bbf5278c3", "sighting_of_ref": "indicator--793305a9-47e5-41ae-9dd5-4758c79cc314", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c50648-4f50-4080-a6fe-ceabbaad25b8", "sighting_of_ref": "indicator--793305a9-47e5-41ae-9dd5-4758c79cc314", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c2a9a0-2046-4594-8a67-4107fd9c7f7b", "sighting_of_ref": "indicator--793305a9-47e5-41ae-9dd5-4758c79cc314", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518aa931-079b-4ffa-bedc-009368578ddd", "sighting_of_ref": "indicator--e9900877-5889-4df5-8754-67945e2a65a7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee5355a-652f-4e3e-835e-20680c7e2fe1", "sighting_of_ref": "indicator--e9900877-5889-4df5-8754-67945e2a65a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e72bac-38da-4b75-9577-434483a8e1ff", "sighting_of_ref": "indicator--e9900877-5889-4df5-8754-67945e2a65a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf135f6-13ea-4a6c-b4b6-8d8f2eaf40b1", "sighting_of_ref": "indicator--8aca0152-bf4a-4071-bf74-6820763d2ce5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce36c054-c3ed-47c4-a860-46feb858ebd7", "sighting_of_ref": "indicator--8aca0152-bf4a-4071-bf74-6820763d2ce5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a562d1-92f0-4f87-b641-dce9ec1f0256", "sighting_of_ref": "indicator--8aca0152-bf4a-4071-bf74-6820763d2ce5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ecbfe4-17b4-46a1-90a6-e282cd867a19", "sighting_of_ref": "indicator--3e69f3cc-bfab-4afb-8f70-86450e9dea6c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a392881-6f19-4964-bcd8-c50d7e12bfd6", "sighting_of_ref": "indicator--918417fe-c10d-4296-a0f0-c25e1751e49d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52200826-406c-4036-b6a6-4078459b39ed", "sighting_of_ref": "indicator--918417fe-c10d-4296-a0f0-c25e1751e49d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d7fd8-749b-4984-aea3-e6ec6cb00cc5", "sighting_of_ref": "indicator--bd9fdcd5-ba2a-4075-81a8-29041c12f846", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144c0ed0-3a4b-42c2-9e3e-2cddc5f04388", "sighting_of_ref": "indicator--e16b2931-d2dc-41d6-8132-9b4d6cea3640", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094bce6a-1973-4a4d-a242-8acd9a374cdc", "sighting_of_ref": "indicator--e16b2931-d2dc-41d6-8132-9b4d6cea3640", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17df4d5c-c3b8-449b-89e0-aa8ace7ab9b3", "sighting_of_ref": "indicator--e16b2931-d2dc-41d6-8132-9b4d6cea3640", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2879124-7a37-4c25-8556-0579d34f5851", "sighting_of_ref": "indicator--88939375-e59e-4896-8e64-d2d49ecdea3d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75279bd1-2aa7-4d24-afa6-51f54950ece0", "sighting_of_ref": "indicator--0b0a4eea-f032-427e-9424-0b898a34584f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a2c252-4bbc-4521-9e24-68d1813ae891", "sighting_of_ref": "indicator--0b0a4eea-f032-427e-9424-0b898a34584f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1671049c-8b23-42a7-b05e-95141eef355e", "sighting_of_ref": "indicator--0b0a4eea-f032-427e-9424-0b898a34584f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4a1ed7-4133-42aa-bfff-05fd32188965", "sighting_of_ref": "indicator--27273c94-5e0c-4fbd-bbb5-9dffcb699863", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5bca70-978a-47c7-a118-4eaf36c58dc9", "sighting_of_ref": "indicator--27273c94-5e0c-4fbd-bbb5-9dffcb699863", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e46465-5890-4dfe-9189-e56b1055e2b9", "sighting_of_ref": "indicator--27273c94-5e0c-4fbd-bbb5-9dffcb699863", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5c6e23-6591-43c5-840f-5d5f393c3aa1", "sighting_of_ref": "indicator--def26772-f65f-4087-b75b-60475d490cc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c22137-6354-41bd-a123-f3c2aa51184f", "sighting_of_ref": "indicator--295de142-f0ef-4fba-a091-8e4b8b03a68c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833ac284-1914-4f55-ab42-df18bbc74623", "sighting_of_ref": "indicator--295de142-f0ef-4fba-a091-8e4b8b03a68c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd09d4a7-d8fe-456d-9ffe-f19276c87166", "sighting_of_ref": "indicator--295de142-f0ef-4fba-a091-8e4b8b03a68c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9a2385-1508-4a84-a86f-69106663d4d1", "sighting_of_ref": "indicator--c98ba0d2-9007-408f-ae28-6783b896b0c5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6b3d32-d083-4d0c-99df-13d0d5326734", "sighting_of_ref": "indicator--032c99dc-1569-492e-8757-324bfe277ced", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0789e3dc-63d7-45b1-9705-8f91dffdbdf6", "sighting_of_ref": "indicator--ea181bf8-9441-44a3-a1d2-fb8ffedf319a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e995a55-b2ae-4681-b3c7-8d8b9d121c8b", "sighting_of_ref": "indicator--ea181bf8-9441-44a3-a1d2-fb8ffedf319a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ad45fd-1309-491a-995f-bd832d00bc40", "sighting_of_ref": "indicator--ea181bf8-9441-44a3-a1d2-fb8ffedf319a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfcb810-cd0e-4085-831c-4e0b5761f5b7", "sighting_of_ref": "indicator--f28a70e6-1c36-4afb-acad-17555ae14542", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0f02c4-3259-4240-ad19-1b80c01f8836", "sighting_of_ref": "indicator--f28a70e6-1c36-4afb-acad-17555ae14542", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8828279-23ca-47c9-aa9b-bc6e181c9361", "sighting_of_ref": "indicator--f28a70e6-1c36-4afb-acad-17555ae14542", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3a8688-6354-41bd-aba8-e7ccef31ec93", "sighting_of_ref": "indicator--64bdda9d-0795-4e9b-a3b4-4315de994927", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b89e69-a996-4403-aae4-d2cffb3b0d21", "sighting_of_ref": "indicator--64bdda9d-0795-4e9b-a3b4-4315de994927", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f0c43a-3425-4301-bcd7-d87914abd58f", "sighting_of_ref": "indicator--ac862941-99f9-4775-b7c5-703b00a47be0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc09abbb-2684-4653-b4d6-ff5d2a79778f", "sighting_of_ref": "indicator--ac862941-99f9-4775-b7c5-703b00a47be0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1c690c-b4c9-4aed-b202-d50f573fc19c", "sighting_of_ref": "indicator--ac862941-99f9-4775-b7c5-703b00a47be0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6af7866-7fad-4653-9241-62ad5ac54c57", "sighting_of_ref": "indicator--c42edb0e-2d50-409c-a147-71e7b7662267", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3f6ce4-248c-41be-ac34-db9d12164876", "sighting_of_ref": "indicator--c42edb0e-2d50-409c-a147-71e7b7662267", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7e99da-44ff-4158-913c-ad3ab99a3e20", "sighting_of_ref": "indicator--c42edb0e-2d50-409c-a147-71e7b7662267", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d60333-a64d-4eef-891b-6b16e470d3a5", "sighting_of_ref": "indicator--d40b1c83-e328-461c-96f4-26514f58ed5f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13631ad8-3176-4bfe-ac42-e6867b3b02a8", "sighting_of_ref": "indicator--d40b1c83-e328-461c-96f4-26514f58ed5f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75012119-1330-4ce3-9333-a20d9622beb6", "sighting_of_ref": "indicator--d40b1c83-e328-461c-96f4-26514f58ed5f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae008da-9bfc-4b18-8008-90014db64ceb", "sighting_of_ref": "indicator--242c4a5f-0ee3-4479-9b1b-44bde3c2dcf6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cca522-2731-49bc-934e-2a6458a413c2", "sighting_of_ref": "indicator--242c4a5f-0ee3-4479-9b1b-44bde3c2dcf6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52512718-f118-4726-a6d1-7e631681c125", "sighting_of_ref": "indicator--29eddbc2-3821-4773-8a98-1c427776b44c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ca0909-c463-463c-9af6-adb881d9ed08", "sighting_of_ref": "indicator--29eddbc2-3821-4773-8a98-1c427776b44c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38663e75-0179-4f2d-825a-964f755ea3e7", "sighting_of_ref": "indicator--29eddbc2-3821-4773-8a98-1c427776b44c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a354dd2-a763-4c6b-b46e-ae8e6f809985", "sighting_of_ref": "indicator--eba81695-4f84-4f26-a309-fbf9cfe73b58", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b669e882-573f-469e-b168-d7464d76905c", "sighting_of_ref": "indicator--eba81695-4f84-4f26-a309-fbf9cfe73b58", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82839ae1-3805-4372-aeca-4e3f93fdc3c4", "sighting_of_ref": "indicator--eba81695-4f84-4f26-a309-fbf9cfe73b58", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c436768-8367-466b-b332-18681ee5084e", "sighting_of_ref": "indicator--57a251a8-2391-4bfb-b6df-48014721e004", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516b3e32-2afb-47b9-b29a-550031b95d0a", "sighting_of_ref": "indicator--57a251a8-2391-4bfb-b6df-48014721e004", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2875284-cabc-4504-9bc9-e571cb391909", "sighting_of_ref": "indicator--57a251a8-2391-4bfb-b6df-48014721e004", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5f6326-24b1-4aae-9a9b-3c55aa4f7695", "sighting_of_ref": "indicator--fed77d63-144f-4807-b4e6-276a297d7eb5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e4041d-dbcd-4805-a6b6-73286c20df08", "sighting_of_ref": "indicator--fed77d63-144f-4807-b4e6-276a297d7eb5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2d6d82-c5e5-418a-a3a1-b06c9f127d18", "sighting_of_ref": "indicator--bf6da524-fc11-40c9-941e-a512ce43fba7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ada4d5-2042-4c20-bbdb-31598b40bc1f", "sighting_of_ref": "indicator--bf6da524-fc11-40c9-941e-a512ce43fba7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0221c8-06b6-4e0a-9c8e-2bdf63b05013", "sighting_of_ref": "indicator--4463a1db-12c5-40e4-bb7d-1e603c756de7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71d824e-84ee-4aed-acc5-a35bb805a161", "sighting_of_ref": "indicator--4463a1db-12c5-40e4-bb7d-1e603c756de7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611fa231-338c-42ce-ab57-ac97ded90d05", "sighting_of_ref": "indicator--101ee141-d0a6-475f-b133-5ac4f6a8ceb9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afcfd72-4b85-4890-9e58-ff3af5b896ca", "sighting_of_ref": "indicator--3e15b461-49eb-4dcb-88c7-f33bbda60dcc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd2b7a4-508c-4bbb-bf5f-5dc1fd1f242a", "sighting_of_ref": "indicator--3e15b461-49eb-4dcb-88c7-f33bbda60dcc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b879de-aea4-49a7-b14b-9763e144c159", "sighting_of_ref": "indicator--3e696f7b-90ed-493b-8e9a-ccba10d0de56", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0d94ad-55c1-417a-b6ed-1a10fdd66ffd", "sighting_of_ref": "indicator--3e696f7b-90ed-493b-8e9a-ccba10d0de56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7134eaa1-90b3-47f7-831e-acbaa613fe25", "sighting_of_ref": "indicator--f07a53eb-da22-49a1-906e-83f87379256d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faef4fbf-5408-4b91-9c87-54c4e96d990a", "sighting_of_ref": "indicator--f489c5c9-4339-45d8-b7eb-2bfc44bc8abf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9590d79e-e12c-4e6b-ae7a-d8c0e4cad247", "sighting_of_ref": "indicator--f489c5c9-4339-45d8-b7eb-2bfc44bc8abf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c029db8-1b28-48e1-8bc6-46b1607e0811", "sighting_of_ref": "indicator--1eb61856-cd52-40d4-8932-cf2020b431be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618edb58-10c1-497f-a907-69f847343b76", "sighting_of_ref": "indicator--1eb61856-cd52-40d4-8932-cf2020b431be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5cc779-08c5-4b2c-bf82-7293c16093a9", "sighting_of_ref": "indicator--5bc80a00-eef3-4b4b-9c9e-f790c949c99a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01fd03a-c1d5-4c86-9f15-74cc45025c20", "sighting_of_ref": "indicator--5bc80a00-eef3-4b4b-9c9e-f790c949c99a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed90be4-421a-4f7f-9077-703b51aec2df", "sighting_of_ref": "indicator--75e1ebbf-a556-4534-9671-d54963ac4e7f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6beb85d-fb44-4fc5-98b4-e563ef0deaf2", "sighting_of_ref": "indicator--500bb269-7b5e-4b0b-8856-594e458e577e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00063052-cef4-4870-839c-0302c7b2d0eb", "sighting_of_ref": "indicator--500bb269-7b5e-4b0b-8856-594e458e577e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d6a33d-d904-4442-b55b-17d76da71639", "sighting_of_ref": "indicator--af5ccb6c-1a56-45f8-97e2-a0cbe2cf5c1c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d09ca2-c7d7-4b6e-b503-6c96e16958cf", "sighting_of_ref": "indicator--df973b87-3623-4f51-bf29-199ac2cc0b2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837fd796-34f5-4a1b-b6a4-50f32e5ab47a", "sighting_of_ref": "indicator--a20770dc-8569-487b-9dbf-313b79d0d0de", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde98bdc-cc0b-42f3-80ca-1e5581b818e6", "sighting_of_ref": "indicator--a20770dc-8569-487b-9dbf-313b79d0d0de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808a0713-efc6-495a-8cb5-f9c46641ad7b", "sighting_of_ref": "indicator--7bcf7792-5a76-453d-8360-63036981a4bb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a935fce-b6d8-4f68-9e75-3b9605ef1540", "sighting_of_ref": "indicator--7bcf7792-5a76-453d-8360-63036981a4bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc63b92-db2c-4154-8e19-aa40816e5cdb", "sighting_of_ref": "indicator--7bcf7792-5a76-453d-8360-63036981a4bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92d39af-8ded-45a4-8c41-1f4b8a51fbab", "sighting_of_ref": "indicator--ea03ea44-30c6-47d6-a50c-5804a0fffdfe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42639147-9a1d-48d0-a5b0-94df83d6c9d8", "sighting_of_ref": "indicator--8034daa2-e2ca-4249-983e-6ef0e70da695", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7822d5cf-30c3-4712-8538-f3ae45ba4023", "sighting_of_ref": "indicator--d438ca7c-7ec6-4388-ae87-4145bdb7b847", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d2adfc-9fee-40b0-ae31-3726bc3936ee", "sighting_of_ref": "indicator--abe7ca3e-3227-4fdf-9fca-c67e57169035", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85af91b6-56fd-4366-98ef-e8aa7762e7e1", "sighting_of_ref": "indicator--01c913f4-eec7-43a3-9d4a-4158d9e59f94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5824a4-6ae9-4574-82e1-ea288c9bf331", "sighting_of_ref": "indicator--665b690e-134c-4fbf-b555-11f6c22c2667", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca3455f-a05d-4839-a9f7-caa6e9a5f704", "sighting_of_ref": "indicator--34aedf9d-4707-4506-8c87-9f555b82b813", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a52c9e-1bf4-4756-96b8-03ae94f6ade3", "sighting_of_ref": "indicator--8a4dd4ba-ec39-4e81-832f-909514f2e2d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3e74ca-6f27-4688-a717-afba2f0425a5", "sighting_of_ref": "indicator--89dee30f-5678-41e9-aeba-07a6bd65c61b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fa6989-5e47-4dd7-b167-99b3a1eac2c8", "sighting_of_ref": "indicator--1f8a8c8a-9697-4b15-bcbe-a4aa20e3c7fb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db401942-68cb-4b5b-a76f-3c127e2a5a44", "sighting_of_ref": "indicator--ed2da81c-292e-4c9a-97ab-265448216472", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed4cf54-a261-4405-b92e-30ae0f1ce022", "sighting_of_ref": "indicator--c9dfba9c-e565-4da3-a382-2d2b49c77529", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c696fb-84c8-47d7-8f2f-77426ca5ee31", "sighting_of_ref": "indicator--eee940c7-ceee-4c44-9074-88604dc17fdd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0863b24c-82d2-4f6b-8188-86ce0eafbe69", "sighting_of_ref": "indicator--3c86e99d-c54e-44ad-8f0b-1efa3208d510", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8a83b3-0384-4552-9ce8-3d8c69eca53c", "sighting_of_ref": "indicator--df83d06f-f172-4c45-804f-eaa516375370", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291d7232-b4a8-4188-a8e7-d4ffa85aecd6", "sighting_of_ref": "indicator--93f660b9-1ff5-41f2-8de4-2b7b94c5c5d6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111cdeba-d72d-4d02-9f02-3bcad449644b", "sighting_of_ref": "indicator--93f660b9-1ff5-41f2-8de4-2b7b94c5c5d6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4044748-b891-409b-b445-179d4af37ca1", "sighting_of_ref": "indicator--93f660b9-1ff5-41f2-8de4-2b7b94c5c5d6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb457e3-8626-46cf-8e4c-64e711b8169c", "sighting_of_ref": "indicator--88e1cfeb-2b58-4d24-82db-4f0517a6237e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d557d3-cd7c-4515-bf7e-a7e4af48d675", "sighting_of_ref": "indicator--51c36199-6fef-4f1a-a0e7-f7bc6d1fae54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733e78a0-5f10-4142-a3c4-498d8ae6bd5b", "sighting_of_ref": "indicator--f1ce38a3-06d2-457c-9508-bf304e67055e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f92377-55d0-4f5b-80e0-b9b7b659a72c", "sighting_of_ref": "indicator--b1abd290-08b9-4c82-bbee-ec640aa78971", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669f2111-4d4c-4592-857a-9e88ceb50d98", "sighting_of_ref": "indicator--a3e0a5ab-b003-46fb-b0ae-3d35bfe1da9d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3af734-fec9-466e-bc27-532367a85d70", "sighting_of_ref": "indicator--b76e33ad-e801-463f-baba-2e7182e23588", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405183fc-b8ed-440f-b9cc-eaf304871b00", "sighting_of_ref": "indicator--b76e33ad-e801-463f-baba-2e7182e23588", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4268ba-0156-48f9-a83d-27d72d9f7b5e", "sighting_of_ref": "indicator--bbd7f24d-f9b7-4f82-a483-ed628c36e1b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f84ec5-314d-435f-891c-fb65a89f1444", "sighting_of_ref": "indicator--d23d3e69-eb76-43ba-8076-2a8de6dd98f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a26a4dd-13a9-450c-b41f-04f09723e9c4", "sighting_of_ref": "indicator--1c07d5dc-9756-4b66-a6eb-91382db1af08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9746b1d4-3b63-4abb-b9ed-7dca1a06c418", "sighting_of_ref": "indicator--1c07d5dc-9756-4b66-a6eb-91382db1af08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba277165-de7f-4d6f-933c-5b4625a54055", "sighting_of_ref": "indicator--1c07d5dc-9756-4b66-a6eb-91382db1af08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d1be6d-dead-4e77-a247-1ed763dabc83", "sighting_of_ref": "indicator--fc699d78-6f02-4029-b92d-ff9f94a4bb3c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4374dd-d16a-4a2e-8a0e-2866ad51b727", "sighting_of_ref": "indicator--fc699d78-6f02-4029-b92d-ff9f94a4bb3c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2397c1e-9a91-49c0-b0d1-1c5d0e140458", "sighting_of_ref": "indicator--fc699d78-6f02-4029-b92d-ff9f94a4bb3c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7907bf2-b2d3-418d-bd09-3f289d449928", "sighting_of_ref": "indicator--8df2f30e-3bab-499d-98ab-d0053ba9c9f7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ac78ae-8e90-4703-9403-432632b6486a", "sighting_of_ref": "indicator--8df2f30e-3bab-499d-98ab-d0053ba9c9f7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47121256-2a94-42cc-9408-02769e7ae9e3", "sighting_of_ref": "indicator--8df2f30e-3bab-499d-98ab-d0053ba9c9f7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4f0354-7394-46cb-813f-133ed00dc1b5", "sighting_of_ref": "indicator--6056d5d9-47b4-4587-89a2-4354cc852eb6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5890f0ba-162e-46b1-aed2-ab09be5d8982", "sighting_of_ref": "indicator--9fbc06e3-02fd-4ca2-887e-2850bd1efab8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006f652f-7b65-4b18-a0a2-0445bf1e1269", "sighting_of_ref": "indicator--4803ed3e-ed0e-4bb4-b7ef-59baeb218567", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857f7382-dc4f-4042-aa33-1078fe9f960c", "sighting_of_ref": "indicator--df775f04-fa2f-4c9c-adee-26f480866793", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e884c43-34b3-49c4-96e0-1743178d0791", "sighting_of_ref": "indicator--ca36eb2f-4612-4e4e-ac84-98e693e76681", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfce9a9-42c5-4c7d-8338-9afdd28647ea", "sighting_of_ref": "indicator--5b005b56-b6ca-4632-97a5-bfaee797dceb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9aca22-3483-4ae6-9917-f72025a1328c", "sighting_of_ref": "indicator--0cd8aa88-18d9-4a5e-a3bc-986e3c761bce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10111855-cba6-4128-8c17-69913b932cdc", "sighting_of_ref": "indicator--487ee108-2e2c-4697-b46c-36b6ead9c242", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ccdd8f-f6a6-4a37-b3ef-0c1b7fc5d931", "sighting_of_ref": "indicator--8abd4ae6-f6e6-478c-b252-2001b8bd87dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70022933-ea2a-4dcb-90e2-b60a55d5023c", "sighting_of_ref": "indicator--2e94ea79-1d3f-4ab9-8b1e-b7374d898fd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b51f8c-2c41-4d6e-83e8-6d25b4506403", "sighting_of_ref": "indicator--478bcdf9-6312-4185-9f6d-28b46d2d462d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a976309-5827-4eb4-87c9-e59573fef41f", "sighting_of_ref": "indicator--c0303d31-bcab-43d3-b39f-7f5142c1c021", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fd3b57-2ddf-40e7-985d-56e43d4ad0bc", "sighting_of_ref": "indicator--14916a5c-02fe-4a5f-861e-5c9b4792e7ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf93643-a7e3-4df2-ad7b-2fb18b196504", "sighting_of_ref": "indicator--db8b010a-ac6b-475c-8411-0f18b9e38aaa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e445f61b-7866-4e40-98ce-be6cc9521971", "sighting_of_ref": "indicator--3d954b79-ab61-4d93-865a-4338b0472e4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c86dab5-504a-43de-8f57-44ff6c275bc7", "sighting_of_ref": "indicator--5a12e200-850f-4a6a-b39b-9ab1930eeee5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd470475-4cd0-46f4-ab59-563a2074be71", "sighting_of_ref": "indicator--a3997944-2f7e-4839-a5e2-10b662293e43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2c5506-3398-4f84-b20d-88dfa4cf4026", "sighting_of_ref": "indicator--50854241-1a71-4f80-adfb-8535f406e073", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182354ef-6a93-4868-aacd-776f8d4d76a0", "sighting_of_ref": "indicator--7494860f-abac-420a-a43d-7c45a8e5b7f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7e33dc-a093-4e34-8eae-30cbeb664934", "sighting_of_ref": "indicator--26abdaa1-70cc-4d61-8965-d515bfdfdbde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302b251b-f0c7-4ee7-ba98-b34ad31ccddb", "sighting_of_ref": "indicator--5d7dc929-0aee-4c30-aa46-a64726381475", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bf06d0-da6d-4b74-9d64-b6b8ca3b32ee", "sighting_of_ref": "indicator--f381242b-edf2-4038-9ba1-ff4cd4eb4bae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f529b5-7693-4480-b9f0-1156427ac20e", "sighting_of_ref": "indicator--b58befaa-658c-457d-bd15-1693ce332024", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc89f29-b9fe-43c2-9611-16c9b10b6240", "sighting_of_ref": "indicator--f6f18af5-107e-4fc8-8868-0b39d5814f61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4892c70e-d5e2-4240-806c-36427bb908ae", "sighting_of_ref": "indicator--d071881f-9731-4bd6-a913-4e30a1ac19e5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaa57ae-518d-44d7-86b6-fa61079268a8", "sighting_of_ref": "indicator--c51a91f3-96a3-407f-b6b0-2d8d544eed28", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db307afd-86cf-4f79-b241-fc2ec38c6bb1", "sighting_of_ref": "indicator--6a479153-5f41-4e5e-a92b-3ce98586bb3e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f730fff-10b5-4d64-accf-1c6ea7b878db", "sighting_of_ref": "indicator--c95e2f99-d411-41ed-85e8-e861fc499e0c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b78cec-9aa7-4291-84ae-ef9ab0ba5ef0", "sighting_of_ref": "indicator--c86d57a9-c1ef-4fcd-a58e-a6f02402ff44", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9214fae3-a9a9-4aa3-8f8b-34a80e812a97", "sighting_of_ref": "indicator--b82456c0-8d8a-4747-839a-d6a497cfc4aa", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6c9bc6-c961-4b18-ae06-9c6e77b0441d", "sighting_of_ref": "indicator--92ec1d3b-f43c-47b9-9bc1-b98aec3350e6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c890276-9ca3-4cbf-9aad-0b2461e71cf3", "sighting_of_ref": "indicator--e0675fb4-15a1-4d73-8bd0-fe6364c49cdc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a8b00d-e321-4dde-900d-b4f77de240ae", "sighting_of_ref": "indicator--8ba4da7e-500c-4d01-906c-ebf755a24dfd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e55a99-9845-447a-b490-f4293960f913", "sighting_of_ref": "indicator--c64f51b1-6074-47cc-b8ac-b7e7c9826175", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4287bb67-cb2e-40c6-98af-688f925b97b4", "sighting_of_ref": "indicator--3b1e8cee-9813-4d07-9d2a-01cae2cc39a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca41454-6e79-47fa-9ac6-afc4d67f286e", "sighting_of_ref": "indicator--553b79a6-6b71-4e77-97ab-8d5b2ec6f6f9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb804e6f-bea7-4829-b7c1-a37553a6510f", "sighting_of_ref": "indicator--98cfd8b3-bab2-457d-a04e-87201c34c73a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c256a7cb-1a7a-49b0-b94d-8d739e37796b", "sighting_of_ref": "indicator--8bd1bc2f-1e69-447b-b7ab-a7733947957d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02100bbb-8b21-428e-93af-d262c10ba93d", "sighting_of_ref": "indicator--ad57d8ed-ef3e-401d-8f13-262122e71f48", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1354647d-dcdd-4365-a1f4-2fcf0f2f3c49", "sighting_of_ref": "indicator--85991486-5ad7-45e8-8083-cb8e80233755", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d19d5c-4524-4a36-a421-9fa10f179cb4", "sighting_of_ref": "indicator--0937d6a2-d275-42f2-8792-a7adfac8f024", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2beb1b-8158-4c53-8b24-6c6f3c512ec2", "sighting_of_ref": "indicator--25ed1fd0-df18-4e03-b2bb-959cd1959b8a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e9357f-371f-47e9-888a-2bb3ab5bbf4a", "sighting_of_ref": "indicator--ec8424bd-ebec-4aeb-b6b8-431b1d1e05ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda13d45-86f5-4ed9-9a15-f81b7d4373a3", "sighting_of_ref": "indicator--90ba19bc-2206-468b-8648-47b01e4dafde", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3993bd4a-ecc1-4df9-81cd-e3b5306515a4", "sighting_of_ref": "indicator--be7b25ee-29e6-4df7-a2ba-4545efa6b7ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1d6222-7f48-44c3-a72a-654e529674a0", "sighting_of_ref": "indicator--7d4ca428-6c0f-4c80-9a57-59b0ca7e18e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1767421-3bc8-414e-8d55-d6e007265e33", "sighting_of_ref": "indicator--52407d7e-1ae0-46f9-9596-95e2fae3fcd2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557c5d3c-4dc6-4fea-af56-25f126bbdd79", "sighting_of_ref": "indicator--f9af9d67-4725-4cca-afa2-2d715bc0f5ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8576185-8748-4538-ad86-10b1ade85b05", "sighting_of_ref": "indicator--1ed81d6c-c05b-4365-8347-13f45b740f64", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73c96f9-8a42-403e-b868-5306958ed254", "sighting_of_ref": "indicator--06f6ca41-4876-4274-bf1c-976746d7d852", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d00335-72ae-4e74-9af1-465585ad4280", "sighting_of_ref": "indicator--24b93f92-1a76-46f7-857d-5d1854fc0d1d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255bd821-a19d-4030-87c5-fc8e2c26a210", "sighting_of_ref": "indicator--9c7ad87b-0144-4927-9445-cd64aaedecb5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d836c6-15de-443a-9fcd-0737622176d2", "sighting_of_ref": "indicator--6a1500c6-11c7-400e-9cd5-c163a3a4425e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2490db8-57ba-4696-8634-4d6ce033ef62", "sighting_of_ref": "indicator--c8268e95-b350-4a7b-8224-7a9d3a72a8c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb9692c-02d4-45f8-adee-9e753f6d7ea7", "sighting_of_ref": "indicator--754eea0d-c6b3-45a7-9fcf-3555aed89461", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fd6f13-9878-46c5-9216-0d0b115dd01c", "sighting_of_ref": "indicator--1c6468c7-a970-413e-b971-d0c19492297e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7c0695-4681-479e-899c-f8b80f6ee807", "sighting_of_ref": "indicator--c1e362cf-2df6-41ce-a34a-0a8170a316a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3e6293-3e24-4460-8c82-ac630e5935bb", "sighting_of_ref": "indicator--e7dc0f36-192a-40fe-bfb5-e9641fc2f00e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8128866a-6f22-47d6-9b9c-5af9af592941", "sighting_of_ref": "indicator--0e4b183b-b93b-4a64-aa0b-c826af693ed2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4951808f-82bc-4604-bb13-5b4be9adbdf3", "sighting_of_ref": "indicator--0e4b183b-b93b-4a64-aa0b-c826af693ed2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0594775d-5938-416f-9f22-1b044059dc1b", "sighting_of_ref": "indicator--5cce38a8-f7d3-497d-8f7a-46c63df502bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacbfacf-ec39-436e-9125-501e7538333c", "sighting_of_ref": "indicator--8f77fdce-eb75-4329-974c-310f3ecbb70d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3e621d-97c8-4934-9efa-bf73c55f98b9", "sighting_of_ref": "indicator--78eaa811-1bca-4ae0-a9a1-7e9fa97a80bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e3f1a6-3af4-486a-b4ec-5dd62d8fbe76", "sighting_of_ref": "indicator--0715dc44-6a24-48b8-a8a2-19d1ddedf465", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50338cd7-dce8-42ea-8bba-ebf4bf597962", "sighting_of_ref": "indicator--5af6c20a-d4ba-447b-a760-eef583c71b1b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c555fb1d-1606-4d32-a3ad-cd4530816f25", "sighting_of_ref": "indicator--a1f909f5-b02a-4345-ba3d-dfeaa3745051", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2a1942-ea7b-4cf6-834a-af4c5a8048a1", "sighting_of_ref": "indicator--b3d841a3-6205-4445-9e8b-a3e64f0c5508", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30ac146-e2a0-4628-8086-830c6f446565", "sighting_of_ref": "indicator--9d931529-c9c0-4c06-b8c5-a6cff45fedc9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08532361-d4d6-4fb9-bbf2-0ec0cff2a3de", "sighting_of_ref": "indicator--9d931529-c9c0-4c06-b8c5-a6cff45fedc9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f526662-5a29-4df3-806e-e2b7a97e821d", "sighting_of_ref": "indicator--df119f53-9898-48e1-9366-553c41f0eaa9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cdf466-a16d-465d-8ce1-e0c608b3fc4d", "sighting_of_ref": "indicator--2662d0b8-7a22-40d2-8b9f-e47b1c33d5ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd316b0-93cf-4d83-866e-b5ffa2078a77", "sighting_of_ref": "indicator--4392635c-7e89-4ade-ab38-cd3ecad20fb9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a006a8-02c5-4889-9c10-8448e737cd3c", "sighting_of_ref": "indicator--ca2321f9-e99d-4c06-8c72-7d10251faba2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703adf50-b4b8-4c63-9cd5-4aefa851bcbf", "sighting_of_ref": "indicator--49fe5ad6-a51e-4a69-bcf2-2802d2eaa249", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3362f4b-1f40-43c2-ba96-d5a5302e2e40", "sighting_of_ref": "indicator--b5941ce2-fb8d-45d6-9362-8ed8bbe89735", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbb99c1-bc70-4d63-9c24-e5c73dc49f44", "sighting_of_ref": "indicator--f0049f90-12be-43b5-ab3e-687574672b54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f82486b-c1d2-4f1b-ad36-ffbe527c250e", "sighting_of_ref": "indicator--e5a17cd9-008f-4af0-90ba-4234e94f9bec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ebf170-7743-4e9b-b8b4-d34ba78fc200", "sighting_of_ref": "indicator--a99f175d-563e-4663-91a9-791418208061", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6f75a6-c8d8-472f-9e0e-e32ee49f0f13", "sighting_of_ref": "indicator--fc6583c5-da20-4884-ae50-88a881ccee56", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222a00f4-da28-4231-9c86-842ae19fda98", "sighting_of_ref": "indicator--fc6583c5-da20-4884-ae50-88a881ccee56", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986836b8-79c0-443f-b3f7-1ed1c947d60a", "sighting_of_ref": "indicator--b1fffd3c-d4d7-45ff-b781-ff54da144df7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f1457d-5998-4089-b7b0-9a44e4cd2f94", "sighting_of_ref": "indicator--a1bf8538-d785-4e57-9652-8502aed72ec7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b6ea7b-7191-4883-915a-bb7249548507", "sighting_of_ref": "indicator--e734da3d-9b6b-4f0f-a0f9-d286504f64ea", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f75391b-152c-4994-9035-66fa1bf09e49", "sighting_of_ref": "indicator--9a936bce-9a62-4b65-84fd-d82cb0c74960", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d479a863-249e-4ffe-976e-d28db6c21ca7", "sighting_of_ref": "indicator--8352a423-69dd-4765-bf03-827adb846b80", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ae5f46-ada7-4b85-ba17-f38db72d05e2", "sighting_of_ref": "indicator--45829018-5eb9-4dec-852a-9e8e463f1c63", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b3dbf2-33e7-44f4-a511-cc8e4f5e43eb", "sighting_of_ref": "indicator--c1f3fe4a-abca-44bc-aa4b-a19d7f0c9bdb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e12b51-caaa-4fd3-98dc-a4409f580d9c", "sighting_of_ref": "indicator--a31db3c0-4245-4f13-98fc-44a690c956af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392d0e91-6342-4b8d-b2fd-a1c79afd16c5", "sighting_of_ref": "indicator--a31db3c0-4245-4f13-98fc-44a690c956af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0f0811-dbd6-4930-a933-410e30a2fdae", "sighting_of_ref": "indicator--424a4d5f-7b4a-4d22-957f-e9ea1e3ff590", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f798136-b824-4d71-90c4-5c444277e758", "sighting_of_ref": "indicator--2b3b62a8-22c0-44e4-9100-d9e14efc38ee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d43d1d-9241-4c57-8c8c-249a6904e485", "sighting_of_ref": "indicator--7b3bb0fb-a2d7-4578-a2be-4f5bd1c2e89f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32509ed4-cc87-46a4-855a-718a2b18d7bc", "sighting_of_ref": "indicator--671942b1-5bc3-43a4-a8b7-c0dd7fac35e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e29ea5c-b844-4d20-851a-53ea5bc0bd69", "sighting_of_ref": "indicator--95c38f35-bdef-4a84-ae50-c462ae84c84e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcf45d5-e549-416c-8045-d45b18b4c3c1", "sighting_of_ref": "indicator--394f76ce-5531-4167-8380-cc9cf2526da2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b178d34-2030-425b-ac75-c693f7179ab5", "sighting_of_ref": "indicator--10b3a315-4432-4873-9d3e-e8c64a55f29b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891d9726-4ce1-4a44-a05d-452cd5f1082a", "sighting_of_ref": "indicator--1d72d8f3-dacd-430f-9f14-cc3c17026cac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43358a72-af63-4249-9fcf-d920891ae99b", "sighting_of_ref": "indicator--27574ab2-438a-413a-99f5-d428f826601b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd327f9-247f-4829-ae48-036fa61e9ca0", "sighting_of_ref": "indicator--47f9730c-bb00-44eb-9e14-c155b3ce7896", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4153bb-e3c9-4d5b-a724-05d86b262cf7", "sighting_of_ref": "indicator--38589cf4-7614-473d-a724-9148318d0616", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18df503-d88d-4e92-9601-23f99fc053cf", "sighting_of_ref": "indicator--44207fdb-c873-4593-82f2-772fd509a27a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c13ae50-8577-4758-9004-3060d2ea262a", "sighting_of_ref": "indicator--ec680717-d063-452f-a940-f11946a36595", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d901f14-59a6-422d-a426-182ef1c5ab94", "sighting_of_ref": "indicator--c9bb5a25-a9f4-408f-b06e-281b0ceac1c5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3118a01-5c09-44b5-9433-94c3610e6f17", "sighting_of_ref": "indicator--0a4c8597-d85e-400a-a39c-a2fb3ad49787", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35719f16-e8af-4daa-b583-c6207221ceda", "sighting_of_ref": "indicator--b7fcad43-7908-42b6-892d-b7a8f3ed2e44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bfcfe4-c439-4a1b-81a0-50b64336b252", "sighting_of_ref": "indicator--cdf49ed1-8bb6-42c3-80cf-52d09ef46e1d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a00fc0-b3b3-4095-bd86-4929d443f546", "sighting_of_ref": "indicator--e5c9c9ac-50f4-4ab1-bb43-b3ca763c560d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f044c8b-aa84-4bed-b7dc-b5a941b6605e", "sighting_of_ref": "indicator--9c663a74-ee9e-486f-b779-819f7543b942", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6b75a3-c03e-473b-9781-0a90facde15c", "sighting_of_ref": "indicator--7ac73396-d8c8-4135-82e9-70fa3d591a57", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56240f96-5595-43bb-a10d-bfc800436929", "sighting_of_ref": "indicator--f76a2b32-f1c3-4d68-b5d6-0b22857bdc1f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba989a26-ba09-4ab4-8200-0f5c4363ff31", "sighting_of_ref": "indicator--ed78dd13-3156-4dd1-978e-47e63cc04a90", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5dd4c4-26d9-4ff0-98fb-251e22b33e2f", "sighting_of_ref": "indicator--7ab0b292-f7c0-4b97-8705-240dd4999327", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d15541-b57a-45d1-8aa8-53142f42baa3", "sighting_of_ref": "indicator--7ab0b292-f7c0-4b97-8705-240dd4999327", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132c489e-fabd-4929-8395-6b10766f4867", "sighting_of_ref": "indicator--7ab0b292-f7c0-4b97-8705-240dd4999327", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7844b9e-48b7-414c-87a5-77f83966ee48", "sighting_of_ref": "indicator--5cc54e5b-cba7-4c04-a4d3-c297bb4fab40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a065ed0f-e033-48b7-8974-0683562c2ec0", "sighting_of_ref": "indicator--4407998e-6df2-4ccf-a2f5-2d67f759e762", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5822a41-5adf-4a9e-9817-af8b9fc4aec1", "sighting_of_ref": "indicator--6f0d5eaf-6f73-4042-b08e-2955dec2f409", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b39cce-2217-4ace-bc37-0530cb8a19dc", "sighting_of_ref": "indicator--1cd0b839-ce0e-4d5d-a38c-fc3a63badd16", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1d8723-1813-457f-85d4-f5f8564c0498", "sighting_of_ref": "indicator--1cd0b839-ce0e-4d5d-a38c-fc3a63badd16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625e9de0-45e9-40cc-92f7-50f1fce0236f", "sighting_of_ref": "indicator--2c8c2a83-81c8-4a58-a536-037abf7f32c7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d31eecc-72cd-46df-8092-f7ed3a13da63", "sighting_of_ref": "indicator--2c8c2a83-81c8-4a58-a536-037abf7f32c7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb4f0d1-0d6d-45ff-8a1a-ec8383a472ef", "sighting_of_ref": "indicator--2c8c2a83-81c8-4a58-a536-037abf7f32c7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ef7394-adb0-4b37-a246-430816718dae", "sighting_of_ref": "indicator--49d80c65-3592-4e38-a7cd-6f89159b7068", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b5c7f6-7588-4cde-9fca-af4353607e6e", "sighting_of_ref": "indicator--a6ba69fd-8383-410b-be2e-a9adddd95711", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53acb289-c599-4e87-9dd0-04385c4146c0", "sighting_of_ref": "indicator--99f06e63-8ff6-4e30-98cc-d741cdd6c28e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea05694-714f-4455-86a0-bdf1af16f86a", "sighting_of_ref": "indicator--52136d48-efe7-446c-b460-c169a96c9e9c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36eb297-ded2-4580-9293-c2669c4f324b", "sighting_of_ref": "indicator--52136d48-efe7-446c-b460-c169a96c9e9c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4959799e-4791-47ec-938d-aab0fb87748b", "sighting_of_ref": "indicator--52136d48-efe7-446c-b460-c169a96c9e9c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd1695d-13c2-445f-8375-2d6762634490", "sighting_of_ref": "indicator--9bde789e-7feb-446c-8934-37589e512e8e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f304c3-0354-4f84-ba2c-874377a95da5", "sighting_of_ref": "indicator--9bde789e-7feb-446c-8934-37589e512e8e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130e7558-1e8d-49ec-9832-20211d585e7d", "sighting_of_ref": "indicator--9bde789e-7feb-446c-8934-37589e512e8e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b581ea-6f00-49f6-b88c-46dc764db1a5", "sighting_of_ref": "indicator--187e34e4-5746-4062-85a7-623da487db06", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b417e4-9e3e-4c4b-a4da-dba6d553dcdb", "sighting_of_ref": "indicator--187e34e4-5746-4062-85a7-623da487db06", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ffa68c-2830-45e2-b174-0c1e6330cf49", "sighting_of_ref": "indicator--187e34e4-5746-4062-85a7-623da487db06", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d190e2-5408-4461-a309-b9c2cc1b5c31", "sighting_of_ref": "indicator--5f6fc370-eb37-4760-a7b2-f879fa059f8a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba88517-7e42-4ade-94e9-084e88d4b15c", "sighting_of_ref": "indicator--5f6fc370-eb37-4760-a7b2-f879fa059f8a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706b406e-8d49-46d0-8c11-9b1997f5a5ef", "sighting_of_ref": "indicator--5f6fc370-eb37-4760-a7b2-f879fa059f8a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feafdc7a-eb91-40f6-9c49-14f57bc7e964", "sighting_of_ref": "indicator--288842c0-732c-4d4d-85c0-704f1d4ada40", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a854d8-afd4-41eb-8db5-b4fee6b1ad9e", "sighting_of_ref": "indicator--288842c0-732c-4d4d-85c0-704f1d4ada40", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceeee25a-5d01-4584-8c97-c3b216eb5376", "sighting_of_ref": "indicator--288842c0-732c-4d4d-85c0-704f1d4ada40", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d6027-ee03-44f7-9d1c-fb5902c76a4e", "sighting_of_ref": "indicator--ebc69c57-47f8-4872-864a-72fecbe7de7e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000289b6-63d7-4e5a-a165-2f19253e2cfd", "sighting_of_ref": "indicator--df05a0cd-f0e2-4e13-996f-eec2a752f3f7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5f1a07-f8b5-40b3-8bcd-b2f36a0195be", "sighting_of_ref": "indicator--df05a0cd-f0e2-4e13-996f-eec2a752f3f7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0481cc38-f95f-4672-944a-bd768505acf3", "sighting_of_ref": "indicator--8e105fd2-7b26-459f-87af-8ca411245d6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065f4b63-c457-44e0-b06d-bf042832550d", "sighting_of_ref": "indicator--0b5eb50a-d18b-45f2-b8c2-9330424266ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d26ab9-a1f1-4247-81ae-b3ae5dccba36", "sighting_of_ref": "indicator--762ab17a-7b59-4fcb-b2c0-1b03e203253b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a35cd4-8831-4eaa-bd9b-4f29e8ea0a62", "sighting_of_ref": "indicator--52ae9195-09fa-4d96-8812-3835c471f71e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737eadec-2a0d-4420-94f9-51800f79fb91", "sighting_of_ref": "indicator--e961d814-d833-4bf2-96ce-dd7cd73f2cb6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd991b7c-9ce0-4164-9515-cbe922ff5144", "sighting_of_ref": "indicator--723cba7b-790e-47de-a3f8-31d3e32396ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f262e0a4-70d5-42c1-b998-c49f05a20f44", "sighting_of_ref": "indicator--5082f6d2-c51d-4b35-bd4d-d2428e52471e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d03f5e-6e77-4762-8f43-e6456ae2cb2c", "sighting_of_ref": "indicator--e1f047f3-c129-47df-9bde-308dc2841bdb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad6c001-bca1-4aaa-bb74-d02302b4c3ac", "sighting_of_ref": "indicator--e0ddac74-6079-45fd-bdd8-c7936aae0751", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee331bd1-6655-4ff2-a41a-901cb89b369f", "sighting_of_ref": "indicator--5412771c-9547-4e9a-93f7-c9c70d0e6115", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8142010c-ab6f-4a15-bb55-0ae01064d65e", "sighting_of_ref": "indicator--e6630434-bc89-4cbd-959c-53a523071009", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01411743-4155-4c05-b4d1-bd9aa14430ef", "sighting_of_ref": "indicator--e6630434-bc89-4cbd-959c-53a523071009", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6a62a8-789a-48f1-8e50-0d152fa46f23", "sighting_of_ref": "indicator--e6630434-bc89-4cbd-959c-53a523071009", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1b5aa5-c634-458d-a59a-99eeb038bffe", "sighting_of_ref": "indicator--bed4602e-0f4d-4f49-8006-6d0101cedf51", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b84d293-3285-444c-9df4-55c90293d7d6", "sighting_of_ref": "indicator--bed4602e-0f4d-4f49-8006-6d0101cedf51", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18567798-fe10-4f7a-9811-b71a95745b38", "sighting_of_ref": "indicator--bed4602e-0f4d-4f49-8006-6d0101cedf51", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1cf238-6c62-4954-8ab5-05fe2535f09c", "sighting_of_ref": "indicator--4a4a64e1-47da-4c14-a6c8-c583a5943265", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40af786-2868-412f-8dc8-19099d43c0db", "sighting_of_ref": "indicator--4a4a64e1-47da-4c14-a6c8-c583a5943265", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86635674-bc2c-4cb0-9601-60f2c8657237", "sighting_of_ref": "indicator--4a4a64e1-47da-4c14-a6c8-c583a5943265", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c819e1da-6083-4179-97f0-d4d59f530962", "sighting_of_ref": "indicator--a8d237bb-5653-4fa5-912d-712ae197ad2a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeaf194-7ce7-4fe3-b825-f7c4bcc69897", "sighting_of_ref": "indicator--a8d237bb-5653-4fa5-912d-712ae197ad2a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b52a133-58d6-4fa3-9a4c-3515f7f7014b", "sighting_of_ref": "indicator--a8d237bb-5653-4fa5-912d-712ae197ad2a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7132e6-75fc-4ac9-913c-9cbb2c054e1d", "sighting_of_ref": "indicator--09d2a519-4218-4b9d-a07e-5026f0d542cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24510b5-30f2-4bf8-b27c-55ea6fad6d1e", "sighting_of_ref": "indicator--09d2a519-4218-4b9d-a07e-5026f0d542cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c80fab-7ae7-4063-962c-c5893e9e175c", "sighting_of_ref": "indicator--fe7b56a0-7053-4de8-9b06-d34b107dfbc5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bec4aa-71a1-4ab7-928c-92560a6b9201", "sighting_of_ref": "indicator--a522fee4-3bdc-4253-a6c9-d0a2fd197b50", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e727fa67-ad69-4755-9811-d4a8513be841", "sighting_of_ref": "indicator--beb1a7cd-2694-479f-8b22-8824d6faddc2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be56401f-96dd-4994-b4ac-f43f7732b04d", "sighting_of_ref": "indicator--beb1a7cd-2694-479f-8b22-8824d6faddc2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6f9575-3050-40e0-8782-d37642a79217", "sighting_of_ref": "indicator--beb1a7cd-2694-479f-8b22-8824d6faddc2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc9e0e8-d595-4d52-ba5c-2b27614bcabd", "sighting_of_ref": "indicator--bb6676f7-9986-47ac-830b-0b37c01cfcb7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c742b8c-51f3-442f-94c0-e0981bdd9636", "sighting_of_ref": "indicator--5a5b8745-8fa1-42f3-8860-dbc12d84c386", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309c5efa-5923-487c-adda-6a3b5b779085", "sighting_of_ref": "indicator--7b1a20a7-ad0e-4b77-8dd8-368a10335a17", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13835b0a-6325-492a-8a5e-d4b1bd9b8f45", "sighting_of_ref": "indicator--d94a8115-fb84-43eb-9358-6fc3e7a6652e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dd025b-a3ac-405a-8c60-a407d808b48d", "sighting_of_ref": "indicator--62af9f51-8fe9-4b11-b67e-ffe8ba045424", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a840cb-6ae7-4d1f-94ff-ac8f187483bd", "sighting_of_ref": "indicator--e87972c9-207f-4948-b97d-49bb15b2a070", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3051a768-ccc9-4266-9d99-a25be285fc40", "sighting_of_ref": "indicator--94595a04-c338-4406-a666-690424ff9912", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ddc972-49eb-4599-b385-64b7786354d2", "sighting_of_ref": "indicator--27cc892a-5021-4d31-a5b9-15101892b241", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2ac1d3-77b9-4570-92a1-531758b0f1e4", "sighting_of_ref": "indicator--2427e669-0627-4cc4-a738-c326531eb588", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b59fe7a-66df-4ec9-b9c2-59912ea568a3", "sighting_of_ref": "indicator--2427e669-0627-4cc4-a738-c326531eb588", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dec250-03e9-4dc3-91b0-ba5d2ecbb0d2", "sighting_of_ref": "indicator--f4ed3d36-11d3-43e2-bd89-3c377a813489", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf54848-78ff-4ea0-9240-cbcaefc773b5", "sighting_of_ref": "indicator--1b225002-4e45-4423-87d1-b2810fe2089f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b41c6d-10a2-45df-a6e7-0eabe65a093a", "sighting_of_ref": "indicator--106401ba-b951-4661-9bab-bc5cd327c1f3", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1bd250-7b16-46c2-b850-ce67f0a66968", "sighting_of_ref": "indicator--106401ba-b951-4661-9bab-bc5cd327c1f3", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba74477a-6ae5-4e3c-a167-51442c8d725f", "sighting_of_ref": "indicator--b784f394-6d4f-40f9-b55d-6c4840229f7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a883304-c8b2-43d8-8d14-d7dba9ef20f5", "sighting_of_ref": "indicator--7aa6c3c7-25dc-4b5d-a66a-50eb8b15a994", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149c478e-7cec-4847-b1a4-20318b49e270", "sighting_of_ref": "indicator--7aa6c3c7-25dc-4b5d-a66a-50eb8b15a994", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b66546-b193-4ca2-8174-e89e13b24747", "sighting_of_ref": "indicator--8227a714-394a-460c-9b84-f54c2f0d2789", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e7d0b8-4caf-4d68-93b4-cfb1dd755f33", "sighting_of_ref": "indicator--8227a714-394a-460c-9b84-f54c2f0d2789", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653af510-1108-4ae9-ae1f-ea26e1b91d88", "sighting_of_ref": "indicator--d5388149-1d4b-4dae-9de7-5df806788ee2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2af1f8-7986-4bfa-99cd-9ce3a519bc3b", "sighting_of_ref": "indicator--73436072-8196-4243-8f79-3d430785ee08", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb9f4c8-098f-4d5e-9e15-1a8fc52c579c", "sighting_of_ref": "indicator--73436072-8196-4243-8f79-3d430785ee08", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f262e55f-f81f-4042-8644-cf7ac746e811", "sighting_of_ref": "indicator--73436072-8196-4243-8f79-3d430785ee08", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9cbcb1-86f0-4c6b-aa49-5fbd0192d78c", "sighting_of_ref": "indicator--3916aa1e-d3ae-4541-a9d5-c9b36b4a43cc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9c2255-4f3a-4173-8cd8-f664109efaac", "sighting_of_ref": "indicator--3916aa1e-d3ae-4541-a9d5-c9b36b4a43cc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253c351f-c554-498d-b20a-2f15d9ca7d8c", "sighting_of_ref": "indicator--3916aa1e-d3ae-4541-a9d5-c9b36b4a43cc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f04eb11-0d18-4f05-ac5d-05ac8333bc5e", "sighting_of_ref": "indicator--ef39d41a-f468-4473-8045-27f314c27550", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172bffd5-59c5-4d66-9bcf-db0fed57662f", "sighting_of_ref": "indicator--ef39d41a-f468-4473-8045-27f314c27550", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca23bc-b683-4e8e-a9b3-8f15ff32807d", "sighting_of_ref": "indicator--ef39d41a-f468-4473-8045-27f314c27550", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2847e1b9-262f-40ad-83bb-007ecf41e6a1", "sighting_of_ref": "indicator--927b65b4-216f-4dc8-9337-b4de15556923", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefbeb79-28ac-438f-9c39-e263f2c2ef79", "sighting_of_ref": "indicator--12558432-bda9-4635-86c4-fce46b02af90", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543ab2dc-6df7-460e-92b7-ae20bece2abe", "sighting_of_ref": "indicator--12558432-bda9-4635-86c4-fce46b02af90", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c9eb5c-bf0f-467a-b4f9-35601db5d625", "sighting_of_ref": "indicator--12558432-bda9-4635-86c4-fce46b02af90", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a4f2d2-76f7-4665-864a-020e013e5468", "sighting_of_ref": "indicator--e2b88a5a-783f-459a-8fd0-91c651811ed6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288c0027-98b7-43f7-bf4b-b6010576af37", "sighting_of_ref": "indicator--e2b88a5a-783f-459a-8fd0-91c651811ed6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08e7716-3c59-470d-b551-16b358d364a2", "sighting_of_ref": "indicator--d2997b99-2d59-46c6-9e06-3c50e7254a7e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bb58a3-8954-4986-a0ef-32a7f3d6222c", "sighting_of_ref": "indicator--e64c4c53-4809-4b13-9824-cd8e9c5a65ba", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b21143-3ac4-4998-b9fa-894374bb947f", "sighting_of_ref": "indicator--e64c4c53-4809-4b13-9824-cd8e9c5a65ba", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5d902b-f937-44bb-a656-8b80f6f05533", "sighting_of_ref": "indicator--e64c4c53-4809-4b13-9824-cd8e9c5a65ba", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8ea015-f17a-4487-b7cb-733142494acb", "sighting_of_ref": "indicator--ee85c966-98d2-4cd4-845c-343bd9a5af3b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2259e5-03d9-432c-8cef-548d222ffd40", "sighting_of_ref": "indicator--ee85c966-98d2-4cd4-845c-343bd9a5af3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500221d9-d3b6-4b16-88a4-430252025f62", "sighting_of_ref": "indicator--ee85c966-98d2-4cd4-845c-343bd9a5af3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d88fe8-faa5-4e3f-864f-5aea7920aa6b", "sighting_of_ref": "indicator--ecac51aa-7093-41b6-bdfa-e745a5c4167a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88808a57-8fb3-48fa-a501-db238a908379", "sighting_of_ref": "indicator--ecac51aa-7093-41b6-bdfa-e745a5c4167a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbd0616-1515-4875-bacc-fed49db49fa2", "sighting_of_ref": "indicator--5f7749da-a83f-4bf2-9377-f289f15d5c21", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8882f7e1-f106-46a1-8c7c-a45ea44029a2", "sighting_of_ref": "indicator--5f7749da-a83f-4bf2-9377-f289f15d5c21", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbcdd94-0532-4558-a019-48e8f75aac4a", "sighting_of_ref": "indicator--5f7749da-a83f-4bf2-9377-f289f15d5c21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f9b6cd-217e-46a7-b2a3-0b9e65c8ec85", "sighting_of_ref": "indicator--4d8e9c40-8a46-4463-a5dd-6cea7b19acab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cf5bd8-8591-4481-b46d-6d7ee078295a", "sighting_of_ref": "indicator--4d8e9c40-8a46-4463-a5dd-6cea7b19acab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78399852-0667-4b1d-aa7f-6fb584f2bdaa", "sighting_of_ref": "indicator--4d8e9c40-8a46-4463-a5dd-6cea7b19acab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81af7456-5fd3-4894-868f-2e119da9b1f7", "sighting_of_ref": "indicator--ab97feb7-bec3-401c-a3d4-ad2698fbdc95", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ef123d-c7f8-44a0-b245-065286f2e855", "sighting_of_ref": "indicator--ab97feb7-bec3-401c-a3d4-ad2698fbdc95", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63996b36-594a-4603-8a53-ab7f03db8bcd", "sighting_of_ref": "indicator--4a245ae0-8d9e-4608-87db-78208b934805", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4505446-5b9b-4a53-a33a-9696c836ca7c", "sighting_of_ref": "indicator--4a245ae0-8d9e-4608-87db-78208b934805", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b221f88-a641-448c-a66d-1629f4f1410a", "sighting_of_ref": "indicator--0c2fe540-5e9f-4bdc-baaa-f056b2ddec87", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bb376a-79be-472e-aae7-ca95d57eb875", "sighting_of_ref": "indicator--0c2fe540-5e9f-4bdc-baaa-f056b2ddec87", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3a1373-6176-4df6-99bc-7027a2db6616", "sighting_of_ref": "indicator--0c2fe540-5e9f-4bdc-baaa-f056b2ddec87", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a672ca6e-daf8-4f65-ae32-d1a3f2fa704f", "sighting_of_ref": "indicator--a89631bd-6b71-4505-9253-fb9a3294efb8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622516c2-e3ec-4c95-a758-6b825ed5e650", "sighting_of_ref": "indicator--a89631bd-6b71-4505-9253-fb9a3294efb8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eab1a6-0b99-44f7-9d93-7a0f4cb07cba", "sighting_of_ref": "indicator--d91a1771-fd6e-41df-b4e8-a0af4745c738", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716ddc79-9a12-4a01-8817-df3464e09f38", "sighting_of_ref": "indicator--c205138d-158b-4246-9491-785615d1d9e2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86e723a-e2ec-4ed1-b022-4dbd339a139b", "sighting_of_ref": "indicator--c205138d-158b-4246-9491-785615d1d9e2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e9032f-033e-41b0-80ae-a5a68f9a9bf3", "sighting_of_ref": "indicator--c205138d-158b-4246-9491-785615d1d9e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa551bd-8ebc-4633-a88f-f64c8d1166ab", "sighting_of_ref": "indicator--e3262bb7-f2da-40ca-a6ef-b01d5d54a8df", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb91a91-4d7a-44f9-bd55-6a0d3027cda5", "sighting_of_ref": "indicator--12ae90eb-36f6-4531-a7ce-ce474883f3f4", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21ce8d2-d948-4f01-be5d-db2d44889876", "sighting_of_ref": "indicator--12ae90eb-36f6-4531-a7ce-ce474883f3f4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223ad3e6-ea1f-492a-8bdb-11bdf490c109", "sighting_of_ref": "indicator--f38b8498-4001-4aae-98a7-aad6c5ec26e1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59456f9c-97a8-488e-9eff-18c31344fef5", "sighting_of_ref": "indicator--f38b8498-4001-4aae-98a7-aad6c5ec26e1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58635224-468b-4f19-9b40-bfb6ab020a9a", "sighting_of_ref": "indicator--f38b8498-4001-4aae-98a7-aad6c5ec26e1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4d88b4-63aa-43b3-b58d-3a2a5660289f", "sighting_of_ref": "indicator--8422467b-5fd1-4b6e-b956-fe96a3786937", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a217c73-84fc-4eb7-b6c1-f103a9d31e4d", "sighting_of_ref": "indicator--8422467b-5fd1-4b6e-b956-fe96a3786937", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3954bcf8-9cf2-4294-931b-b38c425e28d9", "sighting_of_ref": "indicator--8422467b-5fd1-4b6e-b956-fe96a3786937", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afa80fa-0783-483d-a8a7-0ae909cba1ce", "sighting_of_ref": "indicator--7cf9147b-d782-4d57-92ce-ddb38eaeb71e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43099ee-7251-4473-894c-f4266bd87e94", "sighting_of_ref": "indicator--7cf9147b-d782-4d57-92ce-ddb38eaeb71e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd829f68-617c-43a3-8e5a-0d7cf4591343", "sighting_of_ref": "indicator--091d55ee-d32a-40ca-b3dc-4159c7b0161d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c037840d-979c-4e6b-9551-7d1a85c4ad2e", "sighting_of_ref": "indicator--091d55ee-d32a-40ca-b3dc-4159c7b0161d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4814f0f-56c3-4ea6-960b-b35cf77dc5b9", "sighting_of_ref": "indicator--091d55ee-d32a-40ca-b3dc-4159c7b0161d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e07b4d-128e-4dee-998d-827491527d8c", "sighting_of_ref": "indicator--ab0ecff8-f812-4582-bc95-74e41456bb9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeb199d-fed5-4dc3-b5a3-a964356613a5", "sighting_of_ref": "indicator--ab0ecff8-f812-4582-bc95-74e41456bb9e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03746497-c781-4a0d-973e-0239932d814b", "sighting_of_ref": "indicator--619c7ff0-573d-4f19-a619-dea4c0bbd707", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd64ca51-564d-44d9-9be0-32cb8e4666fb", "sighting_of_ref": "indicator--6f5796ef-8c89-45bf-ba5c-7f24f06c552a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb4f2de-6c16-48d0-90d3-151231e63564", "sighting_of_ref": "indicator--6f5796ef-8c89-45bf-ba5c-7f24f06c552a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470f80f1-b029-42e0-92fa-3658cfdc046d", "sighting_of_ref": "indicator--3fc482ca-ffe2-44c9-8017-1f5eaa028c94", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11add0c6-383d-47fe-871a-010473943257", "sighting_of_ref": "indicator--3fc482ca-ffe2-44c9-8017-1f5eaa028c94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227f20d0-e5f9-4995-9bcb-84ef1097d691", "sighting_of_ref": "indicator--3fc482ca-ffe2-44c9-8017-1f5eaa028c94", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e63081a-0929-4209-8b5a-b88bdc65dea6", "sighting_of_ref": "indicator--b4451278-8057-4b6e-ac20-8d198a8b10c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ee9676-b52e-4974-84f3-a4887ac59896", "sighting_of_ref": "indicator--b4451278-8057-4b6e-ac20-8d198a8b10c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b095d9e2-311a-4e36-a303-0782f04ac506", "sighting_of_ref": "indicator--b4451278-8057-4b6e-ac20-8d198a8b10c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72afa01c-990b-422d-8eda-d52e0e527321", "sighting_of_ref": "indicator--a0e9a18a-318e-4815-9a14-9e3585c80d39", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2e5368-5651-44be-b4f8-86e88e028d94", "sighting_of_ref": "indicator--a0e9a18a-318e-4815-9a14-9e3585c80d39", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6526c026-1a4f-4d2f-b16d-ad7e825d8f63", "sighting_of_ref": "indicator--72bc29dd-475e-4a21-8a1d-50bf097604e0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575bc785-0981-4d38-b60d-62d0161361f0", "sighting_of_ref": "indicator--72bc29dd-475e-4a21-8a1d-50bf097604e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9343ed96-ddf7-465a-a1ef-75b7399bced1", "sighting_of_ref": "indicator--a91f2611-690e-41ff-99f0-90c53ef743c0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b700a5-ec56-466a-8241-dd89fa2bdaad", "sighting_of_ref": "indicator--a91f2611-690e-41ff-99f0-90c53ef743c0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3474b61-0f6d-46d7-8284-6b14b99df80d", "sighting_of_ref": "indicator--426aeecd-f000-402f-ba36-763a77394038", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3d6af3-a257-477d-990d-e9f0b535376a", "sighting_of_ref": "indicator--426aeecd-f000-402f-ba36-763a77394038", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7aebbe-cdce-4a02-b7b6-186960f1baa7", "sighting_of_ref": "indicator--426aeecd-f000-402f-ba36-763a77394038", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45641c3f-7dc6-4ab1-a019-9d9cfb04cb16", "sighting_of_ref": "indicator--f4890851-b5a0-41a5-a0d2-305f37970f83", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52607284-a862-4b32-98f0-50b72e9462f1", "sighting_of_ref": "indicator--f4890851-b5a0-41a5-a0d2-305f37970f83", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668fad67-359b-48f8-b656-0e362d349e61", "sighting_of_ref": "indicator--f4890851-b5a0-41a5-a0d2-305f37970f83", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5549bbc3-dca5-4ea4-b2ac-4d917cb7ce40", "sighting_of_ref": "indicator--776e4a6d-4ed2-4f08-9883-d2adf89b06f9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648ea121-e775-4a28-a0ab-5e24520955b2", "sighting_of_ref": "indicator--776e4a6d-4ed2-4f08-9883-d2adf89b06f9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0696d8-748f-4724-97e9-be5f7b2ded70", "sighting_of_ref": "indicator--ec417ff2-bce7-4980-a9e2-2033df1d90af", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67750e1-df6d-4136-bba1-d1fa9743c24c", "sighting_of_ref": "indicator--ec417ff2-bce7-4980-a9e2-2033df1d90af", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04e0ec5-d5eb-4d95-8e03-6140f6581438", "sighting_of_ref": "indicator--ec417ff2-bce7-4980-a9e2-2033df1d90af", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5142ca4-0382-4adf-89ea-aea30ce39bcd", "sighting_of_ref": "indicator--4c42ba6c-211f-4154-be3b-69ea070184df", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab536b6b-73dc-45d9-8a6a-35fbb6f483f5", "sighting_of_ref": "indicator--b525348e-b6e8-420e-8584-65fa19acc83e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef26db4-5b3d-4d45-8142-0df9e68667e0", "sighting_of_ref": "indicator--c02bdc76-dd2a-4e49-bc6f-579a94bf571d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f82c495-a0ea-4bdd-b699-e1be1bf378f4", "sighting_of_ref": "indicator--c02bdc76-dd2a-4e49-bc6f-579a94bf571d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9fae4f-ffba-40ce-9001-db37667a57fb", "sighting_of_ref": "indicator--2cc27c96-25b0-4253-a923-2696000aa828", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5aedce2-2a0d-4051-bf82-4229785f1e3f", "sighting_of_ref": "indicator--2cc27c96-25b0-4253-a923-2696000aa828", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e014aef0-32da-45a4-a8a7-37f44a362ffb", "sighting_of_ref": "indicator--2cc27c96-25b0-4253-a923-2696000aa828", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d033db1d-0368-4bcd-a5d5-22d0bd9b5ff6", "sighting_of_ref": "indicator--1d57fd56-4b64-46e4-98ea-720adaff9027", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbbf2d7-ce08-46c4-a6cd-410399685638", "sighting_of_ref": "indicator--1d57fd56-4b64-46e4-98ea-720adaff9027", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3081ef1-d804-4571-be0d-1c91b7ce1607", "sighting_of_ref": "indicator--ca3f28b5-c0cf-4e68-b6fa-e26e5ddcac42", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1352ed2c-ef53-4cdf-bde5-f8d7915e3d25", "sighting_of_ref": "indicator--ca3f28b5-c0cf-4e68-b6fa-e26e5ddcac42", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe770a5d-5829-4f07-944d-505c1b5a0d52", "sighting_of_ref": "indicator--ca3f28b5-c0cf-4e68-b6fa-e26e5ddcac42", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dc009d-4e98-48a6-87bb-66e40287bd40", "sighting_of_ref": "indicator--ec00613d-5b6a-41b2-b551-969142a5a9bd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b64252-f6e6-4945-9635-5ce839138c72", "sighting_of_ref": "indicator--63037b86-7490-41a7-8801-e11f4e92c98f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50b2ecc-2de8-41f8-be24-9e76ae156ab0", "sighting_of_ref": "indicator--5f052401-dc05-4b0d-a69b-b0712c73c356", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f9766f-9bc3-4f6d-b9b6-502e76283fa7", "sighting_of_ref": "indicator--5f052401-dc05-4b0d-a69b-b0712c73c356", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5a492c-7979-4848-b9b2-34117050bbc5", "sighting_of_ref": "indicator--5f052401-dc05-4b0d-a69b-b0712c73c356", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a9a361-b1e7-4233-b2ba-08c5958ce720", "sighting_of_ref": "indicator--991c45e9-cc77-4053-a40c-db464ca3021a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e559ce5b-d2be-4e5d-9644-a949a23924d0", "sighting_of_ref": "indicator--783aac8e-c4d1-4035-a108-b8b04c67a69b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13fa428f-d8ba-4d88-86a1-614ea7a21d12", "sighting_of_ref": "indicator--df3359bf-ab90-4401-93a8-50656478e76e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7213142f-15b3-44b5-b5a8-20a598fab065", "sighting_of_ref": "indicator--df3359bf-ab90-4401-93a8-50656478e76e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475092ba-b614-4fb4-bbac-c88806387131", "sighting_of_ref": "indicator--df3359bf-ab90-4401-93a8-50656478e76e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170c657d-77ac-4fe8-b3d9-5103e29578cd", "sighting_of_ref": "indicator--4827bf08-bb6a-4088-a553-7d6931a43835", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f2a3e2-117b-4c2f-ba42-307c6d66fbf4", "sighting_of_ref": "indicator--4827bf08-bb6a-4088-a553-7d6931a43835", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0626f823-a9f8-4041-a772-f3bb27b7bc54", "sighting_of_ref": "indicator--4827bf08-bb6a-4088-a553-7d6931a43835", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc71a0c-875d-452f-b8a6-61bc9df7fc2a", "sighting_of_ref": "indicator--055137fc-0403-44bd-8c69-977cb77c4de5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dad35b-9d2d-4934-a439-b8241b12bb5b", "sighting_of_ref": "indicator--055137fc-0403-44bd-8c69-977cb77c4de5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e36b17-2934-497e-820c-879a6aca6d82", "sighting_of_ref": "indicator--055137fc-0403-44bd-8c69-977cb77c4de5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82885737-e60b-4f7e-9551-561d4a4fe47f", "sighting_of_ref": "indicator--f4604e96-8f0d-4235-ba31-2848521077ce", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493c0401-9e32-416c-b36a-d2444eafb721", "sighting_of_ref": "indicator--f4604e96-8f0d-4235-ba31-2848521077ce", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ec62b4-543b-44cd-856e-380935d74533", "sighting_of_ref": "indicator--1e02a7b5-b35b-458c-b04a-694eca98e04e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d365a5f-4afc-4075-bb42-31fc377b1c84", "sighting_of_ref": "indicator--1e02a7b5-b35b-458c-b04a-694eca98e04e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc68c913-08dd-414a-ae9f-58bad9b17c39", "sighting_of_ref": "indicator--340ec8b2-f9ce-4386-a7be-43a2c9670b33", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e5c2ba-7604-4ce0-a02b-dec540e8a0a4", "sighting_of_ref": "indicator--1e180c7a-ad3e-47cc-a2c4-425d1b40a637", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acba0ea-9d08-49f5-bc0f-cc1b644f21d6", "sighting_of_ref": "indicator--1e180c7a-ad3e-47cc-a2c4-425d1b40a637", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff9b113-cea8-4633-921a-f619805881a4", "sighting_of_ref": "indicator--f9e85806-ed7e-4a26-95ea-edfdd0de53dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56c86ab-a31e-4114-9a7f-93a836f7b96a", "sighting_of_ref": "indicator--f9e85806-ed7e-4a26-95ea-edfdd0de53dc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168c3280-26ff-469c-9a62-42207b9bac35", "sighting_of_ref": "indicator--e160c992-44ca-4158-81c4-dcd20f0d6c24", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f50bd1d-9bcf-4812-a622-4dcfc218aea3", "sighting_of_ref": "indicator--e845f1c6-e890-40e7-a115-55274b3f5691", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98be7897-b6e6-4fd7-8469-d39580dff5bd", "sighting_of_ref": "indicator--e845f1c6-e890-40e7-a115-55274b3f5691", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4d4763-eead-4eb8-a489-0dd9c5fc61b5", "sighting_of_ref": "indicator--66cec94e-4365-44e3-a9fd-e55401f52865", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a12c32-fc79-423c-8734-8d4be59b31bf", "sighting_of_ref": "indicator--ceea1b03-3b00-4753-a46a-a5d287603b2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50523de9-12dc-419e-b161-0e08eb8fcdf0", "sighting_of_ref": "indicator--658b4f21-8f70-4386-8ac3-91fa373339eb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad77fb6f-1a7c-4a18-bef7-8217f9e8976c", "sighting_of_ref": "indicator--658b4f21-8f70-4386-8ac3-91fa373339eb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f7c4e7-c7c8-437b-ba1d-ec05b424b2ee", "sighting_of_ref": "indicator--658b4f21-8f70-4386-8ac3-91fa373339eb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff64b529-425b-45ef-a181-0c3cf8ab79e5", "sighting_of_ref": "indicator--f6ef96ab-6d97-4714-985c-435c02d811c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78920429-87f6-4c0e-b5b2-3039b5ba4e49", "sighting_of_ref": "indicator--23b307ba-dda0-492d-8ebf-b6ba0bed91ac", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9fb028-a05e-46c8-bc0b-da089b85e5dc", "sighting_of_ref": "indicator--23b307ba-dda0-492d-8ebf-b6ba0bed91ac", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e1d6a9-0c8d-452b-9c48-74432018b612", "sighting_of_ref": "indicator--23b307ba-dda0-492d-8ebf-b6ba0bed91ac", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde63394-12d3-46d4-9b6f-5a77db06dc37", "sighting_of_ref": "indicator--b522d40e-c898-45ef-b96d-fe9b5adf75ca", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635908c4-e36d-4e62-8a7a-c6785b6a1a9d", "sighting_of_ref": "indicator--0c18d947-d65b-4ef6-aa3d-8f201f71e897", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faa86c7-9e1e-406c-96b5-e8c69b588e31", "sighting_of_ref": "indicator--0c18d947-d65b-4ef6-aa3d-8f201f71e897", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9efbc2b-9c18-40c0-ba41-031dae72b193", "sighting_of_ref": "indicator--0c18d947-d65b-4ef6-aa3d-8f201f71e897", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91377358-d0aa-47de-a069-f4750e107325", "sighting_of_ref": "indicator--44df1ef5-cda7-4030-bc0c-81208df518e8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a53129c-1bc0-4081-b6a9-81097ddcb9e3", "sighting_of_ref": "indicator--44df1ef5-cda7-4030-bc0c-81208df518e8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3074381c-870e-4158-a8c3-7269b79d222f", "sighting_of_ref": "indicator--44df1ef5-cda7-4030-bc0c-81208df518e8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63ecdf7-02de-41b6-83cf-079b3b85bc8f", "sighting_of_ref": "indicator--91e79b86-901f-4c0f-ad5f-57338abba475", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330019ac-1f80-42d2-92db-ca0c4e52f9ab", "sighting_of_ref": "indicator--91e79b86-901f-4c0f-ad5f-57338abba475", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134ed42f-3c97-452e-9e4f-bcdd19946a8d", "sighting_of_ref": "indicator--91e79b86-901f-4c0f-ad5f-57338abba475", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f91c96d-b486-48d4-804f-13b5b501e4e4", "sighting_of_ref": "indicator--75fa0fc2-8a4a-470b-8365-2c0243d450b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485d7b87-3b0d-4076-99ea-93eaa484c66f", "sighting_of_ref": "indicator--bf428316-e195-4fcd-b248-0eb55bd5befe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f39b92b-5122-4ad1-aaf2-1c908fa67bcf", "sighting_of_ref": "indicator--783f2386-9b4b-4eed-8b6f-ac17e7ea791b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a7b41a-8a0c-4a38-bfe9-7c0d2e8fa978", "sighting_of_ref": "indicator--9eafb29f-d664-42c0-960a-c47df01e8128", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a862ac2-f0eb-44f9-af7c-a8f6b7e22518", "sighting_of_ref": "indicator--807e5981-c709-4e12-a7cc-54c08966c31c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004b8e38-2a74-48ef-9f1d-1591096a4bd8", "sighting_of_ref": "indicator--14e0c823-3c51-42c5-b21d-89547ee7e8c6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61366dc0-3894-4fef-b0e0-d324d98fe4db", "sighting_of_ref": "indicator--b9602dc6-670e-49f1-90ae-e819b8a43847", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2642c760-ab13-4bb7-800e-8b3b0f1e7540", "sighting_of_ref": "indicator--9882f622-5502-4269-b3d2-fc3cf4b088e0", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7540ee7f-2506-4497-ab91-e39ec9fbf3f2", "sighting_of_ref": "indicator--9882f622-5502-4269-b3d2-fc3cf4b088e0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89eaa05d-3586-44c5-8f8f-f20f11e164e4", "sighting_of_ref": "indicator--42e968d9-c262-4813-b252-2f600f3b6601", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c439db2-ac4b-4661-b1ac-d21995e8d8be", "sighting_of_ref": "indicator--42e968d9-c262-4813-b252-2f600f3b6601", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b41f6cf-a129-4b9f-a796-079f4c8b0c93", "sighting_of_ref": "indicator--fa09d3e3-651d-4566-a616-cfba26f13c14", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e175222f-8284-4b26-b1f4-fc5b5bc79027", "sighting_of_ref": "indicator--35c4b7cc-3cd2-45b4-953d-8cdeab93d326", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77fb3db-b354-4f61-a2de-16b464106b27", "sighting_of_ref": "indicator--a777402c-963b-42ae-b650-cad62210816d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d68c2f-53c0-4f4b-8653-b085becb6dcb", "sighting_of_ref": "indicator--71fdb257-e66c-4121-b350-2f63702c47b4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b819166-780b-4ff7-9cf6-896326781f30", "sighting_of_ref": "indicator--d16e28bc-eb45-453d-9510-1863e622b9f2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01395024-b5ec-4a06-aed5-8340964d30f6", "sighting_of_ref": "indicator--95dc6766-e68f-48bb-bb91-df81d3805868", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05554b45-2e13-4490-bac5-34409d517cd6", "sighting_of_ref": "indicator--e37fee59-16a4-4617-b87e-09c169420077", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeea6bb-aa0f-4459-91d4-214770346fed", "sighting_of_ref": "indicator--4a0884e8-7c31-4671-9500-37d7d84e3e6d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332bb000-7009-4c22-9e3f-9d717044bb21", "sighting_of_ref": "indicator--67dc5603-3896-4a87-833e-a19517017343", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6cb2f9-2abf-4b38-95c8-c5cdad85345a", "sighting_of_ref": "indicator--2fcaba33-04d3-47fd-93f1-ec7d353d9922", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d4bc75-7e3e-455c-b410-003917cd9aac", "sighting_of_ref": "indicator--8b73e831-3a13-4a51-a151-7f0959cbdc5a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc1e616-1fa5-4dc8-8ad5-94357384d95f", "sighting_of_ref": "indicator--cea9ca5a-f78a-4911-8b25-0a99296c44ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f34d0a-c78f-4043-84c0-3ca5b1046b89", "sighting_of_ref": "indicator--cea9ca5a-f78a-4911-8b25-0a99296c44ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314377b0-c868-4f2f-8d80-dcb7ee1fcc0c", "sighting_of_ref": "indicator--3fe291fa-7170-4e7c-a844-f44283e507cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5890cb41-df7a-4ab6-b873-dba4b11e13ef", "sighting_of_ref": "indicator--5dcd5820-e39a-4193-89db-0a510dcf56fb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d44cf2c-1701-4a95-a5ec-8e7f1922a71e", "sighting_of_ref": "indicator--a4fa71f8-847c-43e5-b622-11a792f56ffb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7898b4-da45-469b-ac3e-a53cfa04d531", "sighting_of_ref": "indicator--d4b22336-d0c7-44a8-94c4-1296ee08376b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db06c279-6d47-495b-8872-d6cd7a6fc169", "sighting_of_ref": "indicator--d4b22336-d0c7-44a8-94c4-1296ee08376b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0fb220-f385-4a3d-bb8c-5cbfb4c1fac5", "sighting_of_ref": "indicator--d4b22336-d0c7-44a8-94c4-1296ee08376b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bb6a52-1574-497b-afa6-7bf3617156ef", "sighting_of_ref": "indicator--13b60785-f52d-4d6e-b4cf-a77d7d19a6cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9be50aa-7f61-4238-af4f-58db8d2fe09f", "sighting_of_ref": "indicator--f4ce966e-d47a-4f20-8fbc-b7fc2ca8cc62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90fd435-2fcd-4afd-bce5-33a99b1af60c", "sighting_of_ref": "indicator--f4b7b279-c95b-4b61-ab1f-d20583b2e631", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26037c7-d9cd-4f3d-b429-4c0112b328cf", "sighting_of_ref": "indicator--930b5d49-d117-4ef7-a28d-1ae7cf73ee8d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0621b2da-1b62-4e5d-af65-046f2d04f02c", "sighting_of_ref": "indicator--930b5d49-d117-4ef7-a28d-1ae7cf73ee8d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bfc46f-4f72-41e1-b694-9852157cc905", "sighting_of_ref": "indicator--15a7f44d-275c-4e4f-a9fa-d1956ee579f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7d8c74-ab7f-458f-998f-649955fbac2d", "sighting_of_ref": "indicator--15a7f44d-275c-4e4f-a9fa-d1956ee579f6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c0addb-05bb-4b02-9022-83f121e3bd8b", "sighting_of_ref": "indicator--3e6fcdcf-b41d-42e6-ab21-af2c574bd3b7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42d22c7-0784-4e58-bc7a-178e6694dbc4", "sighting_of_ref": "indicator--3e6fcdcf-b41d-42e6-ab21-af2c574bd3b7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed754ca-dfee-4d90-b3fe-31545f36f4f0", "sighting_of_ref": "indicator--5c1ca276-d9a8-4d12-9df0-ea72f11516c8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad1cc94-7c07-4456-bc5d-57dbf8922a3b", "sighting_of_ref": "indicator--43dea191-e190-4299-909a-8494ce13aba7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c76e333-bfa1-4ae7-9830-a2777292753c", "sighting_of_ref": "indicator--43dea191-e190-4299-909a-8494ce13aba7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936cb997-c9d5-4107-bd47-23bf309a3d30", "sighting_of_ref": "indicator--6b802c7d-ed2e-4f8f-92cb-46988e12bf05", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91194d3-ef5f-4179-92d6-139c0862e539", "sighting_of_ref": "indicator--6b802c7d-ed2e-4f8f-92cb-46988e12bf05", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507e6733-0255-4a40-9b7d-b5a25bba89ee", "sighting_of_ref": "indicator--aeebac51-217b-4c15-876f-db1c6fef32d2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e540bfe1-4e0c-468c-b741-5fc219497ba4", "sighting_of_ref": "indicator--aeebac51-217b-4c15-876f-db1c6fef32d2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b5f925-32ca-4aac-bc68-4281ce74fa59", "sighting_of_ref": "indicator--61b2ebc5-2691-4406-8da6-a6915e288836", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2829c65c-8002-4f69-83c8-54861afe7470", "sighting_of_ref": "indicator--61b2ebc5-2691-4406-8da6-a6915e288836", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cbbde0-9a06-4c11-aa5f-3c661f359cef", "sighting_of_ref": "indicator--8878b233-f5d0-42e5-8f3a-dbfd7bd2e811", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf5ee2d-23df-47c3-911e-f6a582b1049c", "sighting_of_ref": "indicator--e258b1df-3b25-4239-adce-67d9cda26a3b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745440d5-d2f6-48e5-a8b8-3902b2f9b3ca", "sighting_of_ref": "indicator--e258b1df-3b25-4239-adce-67d9cda26a3b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967539b5-d831-49e5-a2db-b1741be3f72a", "sighting_of_ref": "indicator--bb1fd901-3bf1-4bb2-a999-0630c8d8aa7a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753961cf-655d-48e2-9add-fb588771e8a7", "sighting_of_ref": "indicator--bb1fd901-3bf1-4bb2-a999-0630c8d8aa7a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07d542d-94d2-4004-8993-5e0d8133717a", "sighting_of_ref": "indicator--8e264d35-8de8-4f18-9d85-3fd72354049f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd7dc55-43f7-4b91-865e-8ff88bb830b0", "sighting_of_ref": "indicator--8e264d35-8de8-4f18-9d85-3fd72354049f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945df8e7-03df-4c9a-a85d-5ad50b861f2a", "sighting_of_ref": "indicator--9200f3a5-0aa3-4993-abcd-e6b724e312c5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eda1401-20eb-4d79-be70-678698851daa", "sighting_of_ref": "indicator--9200f3a5-0aa3-4993-abcd-e6b724e312c5", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab68758-d969-4753-aeaa-4c44270cbc83", "sighting_of_ref": "indicator--63ad1d6b-34ab-4f2a-9d1f-46b409336fa7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a122752-4f78-4e28-8d03-47114e541235", "sighting_of_ref": "indicator--89059c63-d741-4894-9590-d896e1d6cd1c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac2b46f-0ce8-45f2-be82-27bc74e2b73b", "sighting_of_ref": "indicator--1e3a1d30-42c6-4a4a-8a72-796dabbf1ebf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625c0c6d-fca3-4748-a61d-01888449bff8", "sighting_of_ref": "indicator--1e501bf5-d693-4b9e-8a75-1ef60fbcaba2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef1614d-ba1f-41b2-bbc1-efd4b79ec43b", "sighting_of_ref": "indicator--5b8657c8-48ce-45f7-b872-bf22fefbedb7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153a3d5b-989d-4d5d-8779-a94651645995", "sighting_of_ref": "indicator--a7c07af6-6899-4584-a522-e9c08a7acb21", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57fc687-b611-42e9-a524-613c6539edc7", "sighting_of_ref": "indicator--18ecc06c-bfed-4ce7-9372-381532db2871", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825b8f51-efff-484c-8e63-bd4788a35028", "sighting_of_ref": "indicator--fac96fe6-4ded-44f3-b116-6ee93df400df", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f696fb1-5b30-4fc0-a2db-ef9d396bcdfb", "sighting_of_ref": "indicator--0578fe7e-6160-4424-a0cd-397d0804ce79", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4104dd9-510b-497b-b963-de7702311ae3", "sighting_of_ref": "indicator--546993cf-c4c7-43c8-baae-83ac0d63cbd4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e111983-90ff-491e-9262-db6e4257a59c", "sighting_of_ref": "indicator--546993cf-c4c7-43c8-baae-83ac0d63cbd4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3820f589-0f9b-471a-ac32-e44050acfebb", "sighting_of_ref": "indicator--f9bcb370-cba8-4fca-929b-5b3530a41ef1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10934442-f3ea-4e03-8d21-8be8ef95ab5f", "sighting_of_ref": "indicator--f9bcb370-cba8-4fca-929b-5b3530a41ef1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a67b0e-8ad0-4605-9cb5-06271c0f1c04", "sighting_of_ref": "indicator--11a9e4dd-915c-46a0-80a2-55952891ed6b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fe2daf-bae3-4a87-91f4-e648fa7c32e6", "sighting_of_ref": "indicator--11a9e4dd-915c-46a0-80a2-55952891ed6b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83be2b8c-0a52-476a-afc7-03981f3f9bab", "sighting_of_ref": "indicator--ef5e4d94-0086-4e81-9e57-60141e9fb23e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3435ce40-5237-4d68-bbc0-abb14dd1261d", "sighting_of_ref": "indicator--ef5e4d94-0086-4e81-9e57-60141e9fb23e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0678e9e7-aa59-468f-a7eb-f03af11e8132", "sighting_of_ref": "indicator--ce672fbd-dce6-4890-a9e2-d59f7b8ab521", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247c018d-3a9e-4a93-b37c-2e7da0c5b44c", "sighting_of_ref": "indicator--67415395-ad73-4f4c-9c60-5251c3491664", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d71eabc-e8c2-466a-83e3-67801988e747", "sighting_of_ref": "indicator--dfc20b46-8716-4061-9d62-cf49c14a541d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121506e8-0060-4f1a-ba4c-df42f6025d61", "sighting_of_ref": "indicator--07495959-3481-482b-81df-b0ca55b98b54", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac376a5b-075d-4425-9bd3-b8b72618cc98", "sighting_of_ref": "indicator--07495959-3481-482b-81df-b0ca55b98b54", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a4dae0-2798-4d05-8dd8-d8e6119b5a61", "sighting_of_ref": "indicator--f5086a81-7cdc-4b60-bf20-1ba1561c8219", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85a06f1-6c0e-4457-af97-38446cfc8552", "sighting_of_ref": "indicator--f5086a81-7cdc-4b60-bf20-1ba1561c8219", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8d645e-c1b8-4963-8d28-203e7f42b83c", "sighting_of_ref": "indicator--a1db7eb2-1a2b-43a1-8eef-d52183bc77de", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d8b7d7-f95e-49e1-9fbb-84454ed6d374", "sighting_of_ref": "indicator--a1db7eb2-1a2b-43a1-8eef-d52183bc77de", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd7110f-cfe3-4b0a-92f8-587c5fbbb8db", "sighting_of_ref": "indicator--0c968368-8078-474c-9fa6-a808a1f4a29a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fae97e-3a83-4b6c-98f5-0bae94275a25", "sighting_of_ref": "indicator--0c968368-8078-474c-9fa6-a808a1f4a29a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3423e83e-e743-4d99-8a0e-5353e32bd24b", "sighting_of_ref": "indicator--d9ed34f5-0576-4993-9297-5e1c057d7a0c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f9a0e2-0cdc-4bef-a8f0-4b54c07afb26", "sighting_of_ref": "indicator--5ffb6b5d-1bab-4364-8f31-89dd4d5d49c5", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df44ac63-c4fc-4584-829b-5d653ff3bffd", "sighting_of_ref": "indicator--37263433-b371-4bd0-8bb0-02f147bff549", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5081c641-ea44-4e2a-8214-0acb1ae546bb", "sighting_of_ref": "indicator--cba0e522-f452-4ac3-a137-5ef5320438a9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f11439e-f303-403b-b3f0-206a60d0637c", "sighting_of_ref": "indicator--cba0e522-f452-4ac3-a137-5ef5320438a9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398eb112-483c-491d-a01f-dbe6b32685f3", "sighting_of_ref": "indicator--db208d84-3dc3-4d60-bfd8-90bf1a4e75f8", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d8a924-4c70-4e83-95ce-b71a9d3ff07c", "sighting_of_ref": "indicator--db208d84-3dc3-4d60-bfd8-90bf1a4e75f8", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d964d7-2aa8-4aec-9ed2-9b157d0e1339", "sighting_of_ref": "indicator--fb5c78dc-4a1a-455e-8a62-87ac980b3c41", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cd3bc2-9325-449b-97a6-061399ab0194", "sighting_of_ref": "indicator--fb5c78dc-4a1a-455e-8a62-87ac980b3c41", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9071ad31-f4fe-4cac-a2ed-ad28feeb5358", "sighting_of_ref": "indicator--89ce689c-71d8-4149-99fb-8fb7083741fa", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b882df2a-c2a4-4b3a-8806-db6bdf13283e", "sighting_of_ref": "indicator--c2f14ea0-d6bd-44f0-a442-bd184c20dc62", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a5b009-2225-414f-9715-641e793d4adc", "sighting_of_ref": "indicator--bb25d996-eefc-42d3-8749-ff86fa4c1e90", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72865f44-9586-4fe0-bca6-3f9153baa4cb", "sighting_of_ref": "indicator--bb25d996-eefc-42d3-8749-ff86fa4c1e90", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dece1e9-45da-4212-b7a7-1ec036d6194d", "sighting_of_ref": "indicator--10a18cad-7b00-4317-93fe-bda42fbc12a7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a567e30-a2ed-4857-8032-97a1d1f3c183", "sighting_of_ref": "indicator--10a18cad-7b00-4317-93fe-bda42fbc12a7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d32286b-a0dd-455e-a83c-4b9fb38f35fc", "sighting_of_ref": "indicator--43d1f524-ad33-4d05-abe9-4f31da2ee593", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1207ce0f-8003-4527-b5a1-ba974f277819", "sighting_of_ref": "indicator--43d1f524-ad33-4d05-abe9-4f31da2ee593", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e33434-04d0-4820-938a-608a8e913a5c", "sighting_of_ref": "indicator--b06f9137-2f9f-4a06-ae26-f8bbcf953846", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56ba8d1-6295-42f6-987d-9fe8b9db5fd5", "sighting_of_ref": "indicator--b06f9137-2f9f-4a06-ae26-f8bbcf953846", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f972c7-301b-46a3-8596-0dc7ec8d3dc1", "sighting_of_ref": "indicator--93fc75b9-135e-4687-8ea0-f500f08df5c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de663d86-6a3a-4aa3-ab32-53ac63a27576", "sighting_of_ref": "indicator--e7e82358-ae49-4af4-b212-899f26032a6a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5596b219-dcae-4454-a7c1-ee902b76ffdd", "sighting_of_ref": "indicator--7895ee7b-fddc-4e1a-9b0f-efa0a92d12ad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae44b30-03d4-48dc-936b-b809ea731ea6", "sighting_of_ref": "indicator--f2f34133-d926-4abc-9d06-f2339a45a65d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f3b480-0b7a-4469-944d-db8566066377", "sighting_of_ref": "indicator--81c10e93-4c1b-4ab9-b3c6-e17c2ef1d1ec", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252af04e-2244-40f3-bde5-dbf022daee65", "sighting_of_ref": "indicator--e5998c07-eacf-4443-bf3a-5f1fc8eccab1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018e36b3-74df-4412-b1c0-b7cd6b0240c7", "sighting_of_ref": "indicator--e5998c07-eacf-4443-bf3a-5f1fc8eccab1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98a6f30-0a61-4587-8e89-433f82c985f3", "sighting_of_ref": "indicator--1b55f6f6-e1e6-4b4c-8bd2-a2ee2727c8bb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8ee73f-8fb2-453a-96c0-301d8effbd45", "sighting_of_ref": "indicator--1b55f6f6-e1e6-4b4c-8bd2-a2ee2727c8bb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13830695-3f0a-45fa-9cd0-c90f4fb0a0ec", "sighting_of_ref": "indicator--f28ede46-b934-4d4e-8e84-afed59450808", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec2db4c-d930-4b17-97fc-58ffdc734a16", "sighting_of_ref": "indicator--f28ede46-b934-4d4e-8e84-afed59450808", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0301e1b-2359-402b-a8c8-ddfd19994646", "sighting_of_ref": "indicator--ea6697bd-e67c-4455-9bd1-5c4dadc7dd94", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3720ed5a-a532-4505-a391-1e6009bb4a80", "sighting_of_ref": "indicator--ea6697bd-e67c-4455-9bd1-5c4dadc7dd94", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a670ec1e-aa52-4d57-bfb7-dc80500abd3e", "sighting_of_ref": "indicator--d26d4359-ec48-4aa1-9153-bada93a44f4c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1ad518-27b5-40b6-8421-2cb333fd8b9e", "sighting_of_ref": "indicator--3ee215df-acb2-4f2b-b654-eb8d3b2bf7a1", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd97f7d-dce0-4f20-8744-50871316a55e", "sighting_of_ref": "indicator--c6e852d8-2ade-48d5-a1b5-d2522390197b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa22c822-4f1a-4af5-830b-7e71638501c5", "sighting_of_ref": "indicator--96d84b63-a909-47a5-98a1-21c24e860f77", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32aed509-76f1-49d2-955f-c40fd6993ff2", "sighting_of_ref": "indicator--ab40d590-41a1-41d7-91bf-011aa6da6fcd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21be6902-e899-41bf-9984-7954a6ef65fc", "sighting_of_ref": "indicator--ab40d590-41a1-41d7-91bf-011aa6da6fcd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eb3afa-95ad-49fc-8c4d-0517a3899b78", "sighting_of_ref": "indicator--5070d94e-0f3b-41ee-b4fb-9d6f31f8f40d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f25e8b3-ccc8-49cf-9979-c0e04b75d3bb", "sighting_of_ref": "indicator--5070d94e-0f3b-41ee-b4fb-9d6f31f8f40d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fed2a83-1818-4107-bb30-76ec855409f8", "sighting_of_ref": "indicator--ede0cc3f-a33e-4ad2-b9ee-ca57ae196338", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685b9d6d-ec0f-4bf9-aed6-41de2f929a09", "sighting_of_ref": "indicator--ede0cc3f-a33e-4ad2-b9ee-ca57ae196338", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401e73b1-9b7d-44a4-a05f-cdde38c49ad0", "sighting_of_ref": "indicator--5fd1a2f9-fcc9-4dad-98d7-5eea373cbdf4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b40d46-9d6e-43ba-8133-02422e9ede82", "sighting_of_ref": "indicator--5fd1a2f9-fcc9-4dad-98d7-5eea373cbdf4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f315275f-3b0c-4962-a247-4e71bd0c7ec0", "sighting_of_ref": "indicator--f13b508c-c33b-42ab-ad07-3eec6f20a9e4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a44794-e790-4c81-9911-e084a8f0c2b0", "sighting_of_ref": "indicator--f13b508c-c33b-42ab-ad07-3eec6f20a9e4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a74bc5-2629-4239-836f-647c0968a13e", "sighting_of_ref": "indicator--7cbbd9cc-0808-4836-a40b-851a703b2233", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099d94e7-b070-4e6f-bec6-e04fc48a4bd9", "sighting_of_ref": "indicator--7cbbd9cc-0808-4836-a40b-851a703b2233", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8368f17d-6a1e-4223-b81a-de6695313136", "sighting_of_ref": "indicator--9ae265e5-fcad-492d-9321-5033bd5b115e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f625f94-b9af-4bc6-9fec-2d88d7c418a9", "sighting_of_ref": "indicator--9ae265e5-fcad-492d-9321-5033bd5b115e", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4bb5b9-554f-45de-9b5b-9d4011c522f2", "sighting_of_ref": "indicator--86a317a8-6c78-48e1-9b0d-a073e89e3cad", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a5187c-9169-4b95-a5f0-2a312e6f9351", "sighting_of_ref": "indicator--86a317a8-6c78-48e1-9b0d-a073e89e3cad", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ba3ef1-fa32-4d8c-b1b9-c755a2b779bb", "sighting_of_ref": "indicator--6eea3db6-984d-4961-b97d-e867b1056e37", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade8723f-d397-4c99-aef6-0ee37e7fe3f2", "sighting_of_ref": "indicator--6eea3db6-984d-4961-b97d-e867b1056e37", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e63c33-74f9-4d69-9fce-91104cca4687", "sighting_of_ref": "indicator--79d09fcc-ba48-4a7b-9ef3-890256422c7d", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869af868-c661-4583-9d3d-89a0c1f0f520", "sighting_of_ref": "indicator--79d09fcc-ba48-4a7b-9ef3-890256422c7d", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000bd3f6-a479-4d2d-b116-b5eec4fdf53a", "sighting_of_ref": "indicator--ed412637-771a-4212-b3c9-428c6be2eb69", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83161e5-18d3-45ff-b9d2-a236ab233a46", "sighting_of_ref": "indicator--ed412637-771a-4212-b3c9-428c6be2eb69", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ca2c7c-5d05-43c7-9064-4d295161c486", "sighting_of_ref": "indicator--ed5b9131-8cc6-47ce-8814-8f7404c67bdf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ac934e-f3f9-49ee-9632-80a1b4156415", "sighting_of_ref": "indicator--ed5b9131-8cc6-47ce-8814-8f7404c67bdf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107f9505-1237-4a8d-8d0a-9657ab4ff184", "sighting_of_ref": "indicator--6eb87d1a-d94d-460e-bb83-4f909543d8ff", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf793d8-578d-45bb-b7e7-e8e9e9cd6cc1", "sighting_of_ref": "indicator--6eb87d1a-d94d-460e-bb83-4f909543d8ff", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e2fd1-e54d-43c8-93c9-9c9c3b215c00", "sighting_of_ref": "indicator--ff65d0ed-f374-4919-b1d6-e1d48282c5c0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4dd447-f382-4744-a386-2e284a684dae", "sighting_of_ref": "indicator--2dad0041-fe95-4831-b3ad-da8d0135ec09", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e79d3a9-409f-4332-bfc7-6301b556c8b0", "sighting_of_ref": "indicator--b6e406db-e239-48e4-970f-94b5fd3fdf41", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b92f64a-45b6-4954-b01a-5c8fac4a5757", "sighting_of_ref": "indicator--20760a9d-ce2a-44af-83af-027d61892d44", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b796d6-c331-4315-9b9b-81015b0434cc", "sighting_of_ref": "indicator--fd9aa723-6416-49df-b83f-d31563efafa6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9421be-712c-43a4-9b2f-63842be92687", "sighting_of_ref": "indicator--e07f27c1-402c-4bea-81ff-caedb1079ff1", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a23cb42-1d3a-4ce4-b6fe-887342677675", "sighting_of_ref": "indicator--fde006ab-a687-4a62-a976-a2442b874e65", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d3b631-9c98-4266-b6a2-52f08e2f91d2", "sighting_of_ref": "indicator--212dc87d-a102-430d-bf11-6558fc5035dc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2245fbde-7e1c-4331-9a06-0738ba1976bd", "sighting_of_ref": "indicator--04c94c9f-9018-40e5-95ca-5e8256f7e46c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae1d7bc-3294-45ba-8a53-b0ba26918a5a", "sighting_of_ref": "indicator--47e53dee-dc31-4dea-844a-1dafb1e906db", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b429731-6591-4a6a-afd4-ed302d0e5c1d", "sighting_of_ref": "indicator--0efe11b3-88b5-4f1d-8538-244d03cea643", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e97501c-5fbf-413c-ad65-83e85919e8c1", "sighting_of_ref": "indicator--0efe11b3-88b5-4f1d-8538-244d03cea643", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a157d4-473d-4f6a-b9a4-1f4b0c9fd057", "sighting_of_ref": "indicator--19752301-1678-4e85-a182-680e39d16623", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d604ec-a7af-48a9-be12-3c1bd0b64444", "sighting_of_ref": "indicator--e53d95ad-9d6b-4b82-b758-93747ad59307", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c067979d-0117-4034-bdff-694682ac4a51", "sighting_of_ref": "indicator--e53d95ad-9d6b-4b82-b758-93747ad59307", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbb763d-d64b-43fd-9812-6702c4a1488e", "sighting_of_ref": "indicator--11b1d0f3-3e83-473b-b045-bc9558b5c057", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef43e51-9ad2-4280-9d87-3facb80fec9f", "sighting_of_ref": "indicator--11b1d0f3-3e83-473b-b045-bc9558b5c057", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fcc140-143f-49ea-b27d-e7be93870a21", "sighting_of_ref": "indicator--b36e4bc9-c36c-4e9b-ad0b-618c692fa819", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9116e951-7b0c-446e-9af4-89589d0ed89d", "sighting_of_ref": "indicator--b36e4bc9-c36c-4e9b-ad0b-618c692fa819", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027a035c-06da-4d8d-b371-c965b0bc1237", "sighting_of_ref": "indicator--431c760d-8ffd-4597-bea2-fea2007a80cd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02d4192-71c7-4a08-bbd7-b1de5ea4d15d", "sighting_of_ref": "indicator--431c760d-8ffd-4597-bea2-fea2007a80cd", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc762c0-8228-4cae-a99e-cd088f276a26", "sighting_of_ref": "indicator--1d6db9db-56a3-4b62-87f4-4a4540e2e6be", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7138cb-7c1c-4cd9-a02c-b2c5cb2af14a", "sighting_of_ref": "indicator--1d6db9db-56a3-4b62-87f4-4a4540e2e6be", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f306ed55-0f5c-41fb-aa0d-a6e610a6325c", "sighting_of_ref": "indicator--38eebe3d-1a6b-474e-bd26-89bfb6c21984", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee0560d-0ec9-49a4-a5ed-2d637a0a00b5", "sighting_of_ref": "indicator--38eebe3d-1a6b-474e-bd26-89bfb6c21984", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dcbfbd-2c27-4ebc-a6f3-c2cb7ee8c7c3", "sighting_of_ref": "indicator--d931c6c3-1440-4759-921b-f010d7e0a0bc", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6204a4-48b5-4092-905a-4ab1dc223061", "sighting_of_ref": "indicator--41469fd0-ea92-4b0b-9835-e0b4b20bcd18", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f743e634-0bb3-4b32-a84e-b03e0fce62c7", "sighting_of_ref": "indicator--41469fd0-ea92-4b0b-9835-e0b4b20bcd18", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bca6285-1c8b-46b4-907f-6ad3fdb65e20", "sighting_of_ref": "indicator--b0fec75a-b656-462d-ae51-b883d2e613cf", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c1966c-5299-47b2-9734-a7fbe03ea91a", "sighting_of_ref": "indicator--b0fec75a-b656-462d-ae51-b883d2e613cf", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923f0bcb-bac1-4773-83ef-3a7edfcdbd6a", "sighting_of_ref": "indicator--fa4a1bdb-5d33-44fd-8042-3a3e789ef35b", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dee9ca-6ce8-4a99-bcdb-480686fab76b", "sighting_of_ref": "indicator--fa4a1bdb-5d33-44fd-8042-3a3e789ef35b", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3db69d5-a1ad-4a10-95dd-40b5a1f3ab69", "sighting_of_ref": "indicator--529e0bb1-c596-41e2-a799-10c1be708605", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e1de14-9e23-48cf-b08d-584e9b6458e8", "sighting_of_ref": "indicator--e80bdac4-6133-4ee8-9978-f86114c5dcd6", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3484f25c-957f-4158-b189-863c2ead6d8e", "sighting_of_ref": "indicator--7f913fe1-afe9-40c9-9852-d6b6ce5a5aa7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c783e3ba-c1ee-46be-acff-1c4ee51862b8", "sighting_of_ref": "indicator--767cd52c-2658-4bf3-acb4-66b143b5b01e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1710e3-c692-4624-afa9-25857bbe6c9e", "sighting_of_ref": "indicator--367a7781-1627-4a17-bd1c-021a74757b16", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f22009-b333-45f6-87df-f34213e5b87d", "sighting_of_ref": "indicator--43f42d25-c7ee-4ab2-94c8-f4ff6e93e8f0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c890df2-461d-430c-9682-0a0e99e7db2c", "sighting_of_ref": "indicator--43f42d25-c7ee-4ab2-94c8-f4ff6e93e8f0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27745bb-72e4-4c52-b1be-0402b81c6758", "sighting_of_ref": "indicator--54b8cd7a-9122-4996-9db4-ab0f95601145", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48edf5e-8b9a-4d72-b288-43df3f6359d1", "sighting_of_ref": "indicator--54b8cd7a-9122-4996-9db4-ab0f95601145", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79839541-c1a5-4f33-b2e2-81444720bb55", "sighting_of_ref": "indicator--a551c6e3-415f-4571-9298-b23481c3e57c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b279d238-e0e9-4ce5-ac57-c809108dd3cf", "sighting_of_ref": "indicator--a551c6e3-415f-4571-9298-b23481c3e57c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7c0f82-b7a9-4b33-bd1a-83bcdd41a388", "sighting_of_ref": "indicator--7415b712-5a03-4c52-9750-a928b5b6b7cb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07848974-ab57-4685-80a6-f99a573955e5", "sighting_of_ref": "indicator--7415b712-5a03-4c52-9750-a928b5b6b7cb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14ef6a2-bed5-44c8-8cc2-735018b96975", "sighting_of_ref": "indicator--b99fb9fe-a328-41b4-b83a-eed7b54aa308", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec1206e-288f-47b6-9467-71b23eceb842", "sighting_of_ref": "indicator--f312896c-da5d-4633-816c-95061972e363", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c1a1dc-7d1d-43ac-bde4-9c3e38100d65", "sighting_of_ref": "indicator--f312896c-da5d-4633-816c-95061972e363", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98d2030-0c9b-4f88-893d-5869d17502c3", "sighting_of_ref": "indicator--8779b0d6-1375-411e-89ff-d975681027c2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b13362a-2287-4f35-b386-7a49cb547fe3", "sighting_of_ref": "indicator--8779b0d6-1375-411e-89ff-d975681027c2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec949f2a-2f57-4c00-89a9-49920c83b977", "sighting_of_ref": "indicator--269e226c-bcc6-480f-ac53-7c650deefa0a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6304b957-0526-4a00-9e2b-0d66f22b6320", "sighting_of_ref": "indicator--269e226c-bcc6-480f-ac53-7c650deefa0a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa31a11-7cf6-4684-81b2-f768b42acdfd", "sighting_of_ref": "indicator--0e44f312-56c8-4fef-a675-2dd373202983", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdc58c5-4273-4fd6-a755-f86c3b5c40a1", "sighting_of_ref": "indicator--1af41a1d-baed-452e-b90c-77cdc5d9c706", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f24998e-7ea0-4861-9c03-f114b0ef238e", "sighting_of_ref": "indicator--1af41a1d-baed-452e-b90c-77cdc5d9c706", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0fa679-0976-4dd7-a855-3741fc916fb8", "sighting_of_ref": "indicator--d7292d6e-9400-4129-92a5-84f1a2b87425", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0eef23-231e-40b2-9a3e-37d17675ae34", "sighting_of_ref": "indicator--61d91c42-599a-4681-b168-ee830c962986", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7642f1c-5535-4d44-beaf-78eba0489524", "sighting_of_ref": "indicator--cb764284-acfc-4cf4-9d6a-d4a667e97964", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb816d9-50f1-4129-a9bc-cc73fcfb6de8", "sighting_of_ref": "indicator--17d2c7d1-4749-4086-8926-8ee21216edd7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f1c32b-68f9-4fbd-becc-1528d4d1c55b", "sighting_of_ref": "indicator--e67bf271-6cab-4d7b-b3ef-f3726c1f8261", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e0f463-7e6a-4382-9953-ce325764815d", "sighting_of_ref": "indicator--0d132ec3-908a-4014-b279-d5066e3305c4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aff96ac-64cf-4a3d-a868-97747fe2a7e9", "sighting_of_ref": "indicator--0d132ec3-908a-4014-b279-d5066e3305c4", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fc24dc-5403-411c-be50-5d51dda29e01", "sighting_of_ref": "indicator--b37097fd-11c9-4f08-abc1-4d6e6a2e0226", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e17d21c-a49d-4807-82da-23eb427f216d", "sighting_of_ref": "indicator--b37097fd-11c9-4f08-abc1-4d6e6a2e0226", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472dc506-bacb-4172-a795-f3b1bcf3530a", "sighting_of_ref": "indicator--b37097fd-11c9-4f08-abc1-4d6e6a2e0226", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e101a3b-c5b2-40fb-8f90-0696dd99691e", "sighting_of_ref": "indicator--e7635b2b-4912-4ec2-b7a9-93325661968a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f019ce-16b4-4b73-9fd5-0a211299bc53", "sighting_of_ref": "indicator--e7635b2b-4912-4ec2-b7a9-93325661968a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2656b222-40ec-4061-a35c-89aa9d6cfbec", "sighting_of_ref": "indicator--e7635b2b-4912-4ec2-b7a9-93325661968a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e509c9d2-453c-42d1-8629-494392869f92", "sighting_of_ref": "indicator--9b99f558-842b-4e6f-b040-da1bd18c74f9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0c27ff-0100-4669-ba2a-bdc8314a8382", "sighting_of_ref": "indicator--a2b2dc6c-fc82-4fdc-8be4-504bc477aef7", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5bfd73-ecea-4d28-a5db-ffcc288c1a99", "sighting_of_ref": "indicator--a2b2dc6c-fc82-4fdc-8be4-504bc477aef7", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d22550-2d82-46cb-9ff2-becffcf36762", "sighting_of_ref": "indicator--a2b2dc6c-fc82-4fdc-8be4-504bc477aef7", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16f4135-c38e-415c-84c4-e2a5b6c59658", "sighting_of_ref": "indicator--a2b2dc6c-fc82-4fdc-8be4-504bc477aef7", "where_sighted_refs": ["location--4fec4c03-9cf8-4861-8623-1ac7b590bb37"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe324f0-2147-42a0-92e9-d1e6f62dc354", "sighting_of_ref": "indicator--53535bb6-947c-4c31-a647-20f64f6231ab", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd453a92-8e86-45ef-b98b-bcc55bd0e349", "sighting_of_ref": "indicator--53535bb6-947c-4c31-a647-20f64f6231ab", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9f6107-9840-44d8-86b5-fcedbe85e180", "sighting_of_ref": "indicator--53535bb6-947c-4c31-a647-20f64f6231ab", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ac077c-fa09-491d-ae24-a7745699eec8", "sighting_of_ref": "indicator--aea45e5e-6f67-4db1-ae52-e47662926e26", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec797588-7fed-41b5-886c-d1f74c835b9b", "sighting_of_ref": "indicator--aea45e5e-6f67-4db1-ae52-e47662926e26", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8013821c-0cff-4567-b306-6f0b7163dab5", "sighting_of_ref": "indicator--9c8be281-5d3f-42fe-9a88-790de56b7505", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7433b456-7660-4848-8d6d-b4d768728279", "sighting_of_ref": "indicator--3404d669-8120-4230-808e-b44248a98417", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381f9322-40a4-400b-b422-b67a3d78b2e5", "sighting_of_ref": "indicator--dbc7ad0f-1c4d-4859-b79a-1d77b1ed662c", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec379543-032d-4c68-a654-1f9777cba171", "sighting_of_ref": "indicator--dbc7ad0f-1c4d-4859-b79a-1d77b1ed662c", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1b46f8-9c96-4957-8823-0070a13bdb71", "sighting_of_ref": "indicator--dbc7ad0f-1c4d-4859-b79a-1d77b1ed662c", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4435120-12b3-4e02-a6ca-d344abfbda84", "sighting_of_ref": "indicator--f91e5f3b-e70e-44aa-ba62-2543c4b3cc71", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d96fbb-b887-4c37-8c9e-62bcae9921f7", "sighting_of_ref": "indicator--2873ca7e-6fd4-4e71-bb93-e674138c2b29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba835a0-9eea-45cc-8fd9-130b507e4c35", "sighting_of_ref": "indicator--30150a16-8e1b-48ec-acf9-e7eb6754cd49", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7827eac2-d2d1-4855-9294-4fc26285d5f2", "sighting_of_ref": "indicator--30150a16-8e1b-48ec-acf9-e7eb6754cd49", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df5613b-ffbb-4da2-81ac-3b260663e123", "sighting_of_ref": "indicator--30150a16-8e1b-48ec-acf9-e7eb6754cd49", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743b4555-02dc-4dce-840e-68ca5ca90af1", "sighting_of_ref": "indicator--dbf2e792-4770-4433-9883-0a0c0a753d93", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbd9f18-6098-405c-bdea-9ddddbc0265d", "sighting_of_ref": "indicator--dbf2e792-4770-4433-9883-0a0c0a753d93", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9c2d9a-cd9e-406a-bbc2-deb3a93daee5", "sighting_of_ref": "indicator--dbf2e792-4770-4433-9883-0a0c0a753d93", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0641bc5b-71cc-4b0c-ae62-f3273edb229a", "sighting_of_ref": "indicator--966fac3a-7bb3-46cd-9991-bc97e0231926", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319eb489-567d-47c2-9d17-7fcd896f3d37", "sighting_of_ref": "indicator--1d07bbe0-ef33-48d3-a42b-112417ba78f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e845391-52c7-4335-a662-5a5ae2ca87ae", "sighting_of_ref": "indicator--cc5b4323-0567-4a52-8483-76ea6e0df6f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0213e29d-9345-477b-8222-5e9a5bfe97a9", "sighting_of_ref": "indicator--3c7f2090-b62a-4a59-b18e-5bfd395dc5ae", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c53dcc-89ac-498c-b9f2-c1fed06421b8", "sighting_of_ref": "indicator--3c7f2090-b62a-4a59-b18e-5bfd395dc5ae", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13abac34-97a6-4caa-bb20-9b45b122c715", "sighting_of_ref": "indicator--3c7f2090-b62a-4a59-b18e-5bfd395dc5ae", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c038d2b-5a7d-48d6-8f67-59eeee325cb0", "sighting_of_ref": "indicator--9a11a5a5-7a2b-4fc6-9226-d263d13bbc2f", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242d76b3-c0c7-4578-a198-0c1c64c5ac5f", "sighting_of_ref": "indicator--9a11a5a5-7a2b-4fc6-9226-d263d13bbc2f", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3b019d-b43d-4715-9899-b64c9608096b", "sighting_of_ref": "indicator--6e19e558-2342-4e98-8d6f-a5669a395817", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df8572d-240d-46f0-bfa6-22fa3a3a01e5", "sighting_of_ref": "indicator--830a3d19-7d43-4dc1-92ce-0e53fd839078", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997071da-8f77-4ac0-9e46-6514e7740a14", "sighting_of_ref": "indicator--68c026f6-9bce-48b4-91a1-29e2af9e09fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100ee0a9-ad9c-4afc-8fc9-105aa0ba7b43", "sighting_of_ref": "indicator--cabb35f4-cfd7-42d1-af73-5be045ace750", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d435d723-55fe-4c80-8100-84ed7262fd11", "sighting_of_ref": "indicator--29a9dcbf-e513-43d7-91ff-396a2175d375", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7582be6-8c3f-4c59-b3b7-2023b04606af", "sighting_of_ref": "indicator--29a9dcbf-e513-43d7-91ff-396a2175d375", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76425778-7147-4c31-ade1-d87b4a344a14", "sighting_of_ref": "indicator--44523f6a-2d6c-4ff7-b4dc-6aa3c3238650", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85a163e-77d6-4b24-9eac-3d5d4a909f13", "sighting_of_ref": "indicator--44523f6a-2d6c-4ff7-b4dc-6aa3c3238650", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5cfede-d49d-40a5-a68e-31d7daaafccf", "sighting_of_ref": "indicator--4d660b72-81ad-4ede-8e9c-12676d9076c6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef4814f-a867-403e-95f4-02febaef1bb4", "sighting_of_ref": "indicator--4d660b72-81ad-4ede-8e9c-12676d9076c6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fdf201-64e0-4c17-9517-d7edf8830929", "sighting_of_ref": "indicator--c7c72505-0e67-4566-a467-a2282360133a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfbd8aa-5c0b-4aa3-82d5-9f9a7b673edd", "sighting_of_ref": "indicator--fbb80233-985c-44b0-8e0f-cb3ea8c211fc", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d881ae-239d-4bbb-8d50-cdd3d6c1f1f6", "sighting_of_ref": "indicator--758398be-8cfc-4579-8e80-9b97bb65fccf", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989c4600-0bb2-4a39-aee6-e8ae4984a396", "sighting_of_ref": "indicator--94416f1e-af21-4993-aa69-5ddc6d63a7ea", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bf18f9-8824-4f08-91c2-b6e10c3df3ee", "sighting_of_ref": "indicator--ee50e5ab-117c-4750-9f32-92a552d00b87", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa11599c-e18b-47ad-afa2-12cff6723999", "sighting_of_ref": "indicator--22edf208-5f4d-43db-bca9-7f74b3571877", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4991d17-ddba-4c13-95eb-4b6d9c3c5df5", "sighting_of_ref": "indicator--0665e6ee-029f-4f9a-99f5-8fe7016305e2", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05ea58b-328d-4843-8c9d-75722857c541", "sighting_of_ref": "indicator--c29f71e5-0a11-46bb-98f1-1684d554252e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac23912-0b18-451e-b3d2-ae15ce437410", "sighting_of_ref": "indicator--75780a1b-9cfd-4f7b-b35c-0b71062968b9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24c45f1-2ce6-4420-ab99-9630d30147de", "sighting_of_ref": "indicator--0130e8b8-b013-49f1-8a50-f894d848b42a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d0b57a-9378-48da-872f-10f853401bd6", "sighting_of_ref": "indicator--7fe3f8bf-d70b-4128-996d-f173bdccaaa2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ba30ed-9c36-47bb-8248-447c23fcd118", "sighting_of_ref": "indicator--31108f0c-2095-4227-a1e5-beb21c5f9f5a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1878b74-b23f-488b-9d9d-947a83b30765", "sighting_of_ref": "indicator--2ac92f65-8128-4827-aa85-522f371b1ce8", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67db03b9-ce84-49f6-a3ec-759553bbf74e", "sighting_of_ref": "indicator--4a4744c4-da16-42e6-9fbd-e6d6f877c86a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb0215c-b437-4f8e-a5cc-b6231734bf9c", "sighting_of_ref": "indicator--b0281f73-a2e3-46fb-9cd5-eab902158e15", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789db4e6-7c8a-4a85-b7a0-19ffcde73c9d", "sighting_of_ref": "indicator--87b99ae4-2f2c-4788-97bc-6cdc7e36f4ca", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b7672c-c005-4612-9416-613ab946be3e", "sighting_of_ref": "indicator--5d6c2576-2683-42fb-bca9-48a372fa6fc0", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36be2415-a531-46df-b48f-b03d5eab6d79", "sighting_of_ref": "indicator--5d6c2576-2683-42fb-bca9-48a372fa6fc0", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c0953-5ff3-4536-aff8-7c74dba38b82", "sighting_of_ref": "indicator--74d6cac2-f1f9-4356-86fc-34fc9c73fba1", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d38f26-53d2-4850-8b23-8c5cff647b82", "sighting_of_ref": "indicator--34c3700f-0709-4caf-8acc-f7ea8d2ead44", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bebb42a8-6a6d-40f1-9aab-df1832287423", "sighting_of_ref": "indicator--34c3700f-0709-4caf-8acc-f7ea8d2ead44", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1030e92c-9b68-4256-8839-eaa21dd5929b", "sighting_of_ref": "indicator--34c3700f-0709-4caf-8acc-f7ea8d2ead44", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696782fd-ceab-4cb4-8c74-4d00def66bd0", "sighting_of_ref": "indicator--ee312b75-af97-4696-bdee-17e2560a65bc", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bcddc2-b621-4471-b1bb-21db2b621f2d", "sighting_of_ref": "indicator--a18fb56a-a094-4fd8-9cbb-ea7aee254234", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2885f850-346c-438b-8f89-d2f586b8ce5a", "sighting_of_ref": "indicator--a18fb56a-a094-4fd8-9cbb-ea7aee254234", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926b05d6-986c-4167-91b5-7ce2a2d978b7", "sighting_of_ref": "indicator--a18fb56a-a094-4fd8-9cbb-ea7aee254234", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b4c005-8d3a-4e79-ab59-9444ab21d4f4", "sighting_of_ref": "indicator--4d051a13-76c9-4dd6-b6d3-9fab183d4fe9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5156a7f-eaef-4e16-9f92-3d3e28783bce", "sighting_of_ref": "indicator--4d051a13-76c9-4dd6-b6d3-9fab183d4fe9", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63951fa-c9a6-492e-8a6e-e7212e1ee254", "sighting_of_ref": "indicator--4d051a13-76c9-4dd6-b6d3-9fab183d4fe9", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8d87be-fd8c-47d8-b775-8e91510f5a1c", "sighting_of_ref": "indicator--14632d77-5448-44d6-8d91-adaeea056682", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6284822e-8657-4a00-897d-8d5ecbc9ca12", "sighting_of_ref": "indicator--14632d77-5448-44d6-8d91-adaeea056682", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9015c4-f1fc-4be3-993e-c2412d5471af", "sighting_of_ref": "indicator--14632d77-5448-44d6-8d91-adaeea056682", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4f2132-592b-4b3b-82b7-9991849d5e9f", "sighting_of_ref": "indicator--14663e4e-b622-47ab-b994-434c59065534", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9ce86b-1b47-42fd-871c-facc5f7b2721", "sighting_of_ref": "indicator--2f823617-89b7-4169-82ef-ebe86d2fefbe", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb691c4e-c8ff-4d5a-a71d-55d4c1d8f49a", "sighting_of_ref": "indicator--2f823617-89b7-4169-82ef-ebe86d2fefbe", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f21203-75fa-4256-80f0-05bfc4a08eba", "sighting_of_ref": "indicator--a3f00acf-dfda-4cf5-8f78-40000868025b", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e9af4f-7133-478c-9649-395228aafaf2", "sighting_of_ref": "indicator--68c74ea9-495f-4882-9038-6500c4357b6d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a590e4de-c5ac-4e43-b29a-2e79627e2f98", "sighting_of_ref": "indicator--7883ccc0-8dd8-4996-b596-2101221472fd", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6887d7-23f9-41bc-a9c1-bf5a2561b6e3", "sighting_of_ref": "indicator--db44bcbf-e010-42d9-a010-f97dab3d1b37", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7c54fb-3c59-488f-8398-02cd0902117e", "sighting_of_ref": "indicator--db44bcbf-e010-42d9-a010-f97dab3d1b37", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c164b46-1dc0-4f60-9068-06e194654bff", "sighting_of_ref": "indicator--6fab7d9f-bf7d-4353-b328-0c872e331c7e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3139a6f-0e67-4172-bc6c-78282a4544e5", "sighting_of_ref": "indicator--6fab7d9f-bf7d-4353-b328-0c872e331c7e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabb5600-dd73-4210-8a57-339aa615ed8d", "sighting_of_ref": "indicator--d9241d4d-5b5c-45d9-b866-914e5011cc4e", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a407c4b-5197-4a62-a226-dd01fcd79147", "sighting_of_ref": "indicator--56161547-0d1f-46a1-96b2-bf62ca8d0567", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c82569b-28d3-41d3-ab36-6bc4b370180d", "sighting_of_ref": "indicator--216929fe-dc5b-4814-9dd8-7da0d82a5e17", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f9821f-e895-4e0a-9c57-9fb45ceba8b8", "sighting_of_ref": "indicator--63a6a935-d915-4b8d-9810-6aa117b8debe", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfbe290-e0d7-4b29-9e0d-8066f26a84b4", "sighting_of_ref": "indicator--13fe0bdf-c4d8-42eb-8091-5044fc7a431a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6255f654-c62f-48bc-8f20-0e1fe5dc00b6", "sighting_of_ref": "indicator--53d288a7-186a-47e3-986d-f63fb1fe1ea4", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c39c91b-f1dd-44ad-8310-48fb0050fcfa", "sighting_of_ref": "indicator--44773714-1d37-48e1-827a-88736c9429a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00eaa27-4188-48fd-8977-0aba69bae960", "sighting_of_ref": "indicator--aae16c42-d537-4a11-bba5-0d60fd0f8efa", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2c30f8-31d3-4568-9737-3ef2b0b879df", "sighting_of_ref": "indicator--1fdbfcbd-0a63-4801-86ad-d3bf59665a9f", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b88145a-3a06-4c4d-ba27-5245a82bb0a2", "sighting_of_ref": "indicator--9fca9bb8-09b8-4a8f-a0ed-3ec29da524a2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc84678c-84c1-403f-8a74-34ef12a0491d", "sighting_of_ref": "indicator--9fca9bb8-09b8-4a8f-a0ed-3ec29da524a2", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a925eb2-23be-4d8f-b6d3-07a2a45b3269", "sighting_of_ref": "indicator--6c32c4fa-ef8b-42d8-b1a6-425cc2a9723d", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dffde1-0a0d-4a86-814d-1a3ce3cb9e61", "sighting_of_ref": "indicator--45307187-da7b-4766-9833-a3095ed4ad78", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea844f83-10c2-47c8-a4f6-deb0f2c78d4f", "sighting_of_ref": "indicator--45307187-da7b-4766-9833-a3095ed4ad78", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a2454b-fd99-40a4-8937-7a34c2979f58", "sighting_of_ref": "indicator--25c37cb8-2658-4054-9723-33b6d7f5ceee", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01348f06-2081-4ded-a412-cfe094aee7ec", "sighting_of_ref": "indicator--25c37cb8-2658-4054-9723-33b6d7f5ceee", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14edd9db-6fd0-4025-a8eb-79b95ebe920f", "sighting_of_ref": "indicator--33f9b594-85cb-40d8-86b6-b70155d1227a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60a1c20-4cf2-496d-8256-be7bceb03072", "sighting_of_ref": "indicator--33f9b594-85cb-40d8-86b6-b70155d1227a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e12232f-9c35-44dd-8ba1-4962bd42913c", "sighting_of_ref": "indicator--33f9b594-85cb-40d8-86b6-b70155d1227a", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0dee32-8b6a-4428-bccc-1751aa5aee08", "sighting_of_ref": "indicator--8f253437-8ccb-450f-aa5c-9b5364d88ac2", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fae235-2979-4fb7-aa85-58d690b7b5cf", "sighting_of_ref": "indicator--b13f3a46-a185-4788-baa3-77d883bde659", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c621ef-734f-4b3b-89eb-d0a6354fc497", "sighting_of_ref": "indicator--28ce50e8-38e6-4aa6-afb1-2a96f427566a", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67345c5-9803-4238-a408-bde00172a892", "sighting_of_ref": "indicator--99f86d42-6035-45c3-8ea5-2a479f64e3fd", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e87450f-15e1-4ed1-a181-931f1c9fb5cd", "sighting_of_ref": "indicator--b636567d-217b-43e9-87f2-8c1ece038b53", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d473ea75-14b4-4f66-97ab-d98dcdc71ae8", "sighting_of_ref": "indicator--b636567d-217b-43e9-87f2-8c1ece038b53", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a7de00-658c-4add-a275-f29dc83806ca", "sighting_of_ref": "indicator--f3f45698-e34c-4ba9-b256-1b891788dab9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd94139-cfea-4fd9-bb42-93be4dc6672f", "sighting_of_ref": "indicator--b3ef7bfe-8eb9-4b9d-b54c-8a9c0ca2459a", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3ca789-8c3f-403b-8ebf-7736015cf497", "sighting_of_ref": "indicator--5c934301-8d5e-4ba4-bb1c-821f3dd78ebb", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e0e0db-329b-437a-8147-e8a1d530e681", "sighting_of_ref": "indicator--5c934301-8d5e-4ba4-bb1c-821f3dd78ebb", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9efc4a0-9117-4a77-a54d-db55f48dac63", "sighting_of_ref": "indicator--5c934301-8d5e-4ba4-bb1c-821f3dd78ebb", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4611be6-941d-422e-b970-e98a14739685", "sighting_of_ref": "indicator--1948cd18-1422-4d65-9c54-e9a4d1958c43", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866a5676-7ba6-4bce-bd75-caa1649be514", "sighting_of_ref": "indicator--db1e490d-3b65-449b-9b35-1651fed242f6", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84692970-02f0-4787-bb3d-343bcf3a1872", "sighting_of_ref": "indicator--db1e490d-3b65-449b-9b35-1651fed242f6", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cef468-4a49-40f3-9020-5de7d88864fc", "sighting_of_ref": "indicator--b67675b4-9c10-4e6b-a0fd-db23b61019a5", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05f85e6-fed6-474a-9a7f-8eb7854147af", "sighting_of_ref": "indicator--66491549-38ad-4eda-8c43-15831936e349", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab12fee-c8a5-4f7b-866d-3f205ba79d77", "sighting_of_ref": "indicator--66491549-38ad-4eda-8c43-15831936e349", "where_sighted_refs": ["location--3f87335f-6628-40a1-97f7-e360d3901c0e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43663c2b-651c-4f54-bbb5-4391ed8af8be", "sighting_of_ref": "indicator--c959c199-000f-4a7a-8b25-636751731a1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd1ac58-3c10-43df-85f1-882f0473853c", "sighting_of_ref": "indicator--00049654-60d4-4003-9222-02f208678b9e", "where_sighted_refs": ["location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08c206b-7b6d-44a6-b0e2-c7f5664c9e2d", "sighting_of_ref": "indicator--842dbab0-4397-4cc5-995a-2df3db0259a9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b564d57-a955-4bce-8278-7486bc846bb4", "sighting_of_ref": "indicator--05387bd0-0a78-447d-848c-7f461afaf2f9", "where_sighted_refs": ["location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344"], "first_seen": "2026-06-06T00:00:00.000Z", "last_seen": "2026-06-06T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--4fa8a3b0-60b6-49e6-95dd-42f8b0224572", "name": "Threat Report for 2026-06-06", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-07T11:00:01.701Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--389ad9b6-4ec5-4d3a-ba5b-cb41e9e24344", "location--3fb9aaae-7654-4fa4-9a8d-1cfee18bd87e", "location--3f87335f-6628-40a1-97f7-e360d3901c0e", "location--4fec4c03-9cf8-4861-8623-1ac7b590bb37", "infrastructure--a17db459-e84d-48fa-8024-cce93704b7e2", "infrastructure--7d88641d-5cd0-4b1e-b3e1-54fa45dac06d", "relationship--5863581d-2617-4f67-a93c-ac9271f2da0d", "infrastructure--e6e00555-10a1-4acc-80f2-67cb3414a919", "relationship--300b767d-ec7d-4fac-b03d-f319d7cf37d9", "infrastructure--1ae5bd3d-d673-4849-be73-7de46738e811", "infrastructure--6af65b62-9289-4cf7-8aa5-d1a85a288ac7", "relationship--c519d28f-b397-4658-8551-06718801dfc2", "infrastructure--89bf7814-232a-4c36-b962-c5aa628890b6", "relationship--deaa3a91-5e41-4683-9229-b0a33cb9726c", "vulnerability--e8892fb0-879b-4a43-b40c-bb10e4f92b58", "vulnerability--2181e159-f0ed-43d4-bd0f-ead54d1d86d3", "vulnerability--00a5a929-22a9-4aad-b669-7baaedb2cbcd", "vulnerability--c5918a23-1975-4d59-b93d-1b94c4496aef", "vulnerability--57d0f18f-ca0e-461e-b051-791e381b7036", "indicator--9bd11f3b-c21c-470c-96d8-99639dda23e0", "indicator--f20a130c-a7d8-4b1e-b3db-2cf00b41de1a", "indicator--5828a429-8d67-4f82-8dcc-c3b7d4df076d", "indicator--afcd9309-939b-42ee-9716-30b5baf77aea", "indicator--a99523e7-13df-4508-84dd-36bed7d67747", "indicator--0e216b8f-7285-4df4-9525-c7c68518d840", "indicator--786e51fe-ff5e-4171-bcf5-7a249c8e2fc4", "indicator--5a01413c-9c32-48f3-a312-d0bab9ef1d3a", "indicator--44ed7c8f-ae53-4fd7-852c-729a6fcf3b7c", "indicator--58afe59b-7741-44d9-a726-5f1e3a5c862c", "indicator--8b3e2864-4506-49f1-8978-7ff61bf48bdf", "indicator--ea50490d-d4a5-439d-9bc5-08e599609c81", "indicator--09e8c80a-2862-4211-8272-b101291cbfc7", "indicator--c5f4ab8c-f9da-41ff-8770-ca91b5306d26", "indicator--19bbfdf0-690d-47ff-947f-7b5b1a913591", "indicator--aa132871-49f8-418f-b1c9-44232a81d9d8", "indicator--79ba853d-a738-44b2-9bce-b931d4cd1602", "indicator--04133900-5263-4542-b24f-9fdc589e62d2", "indicator--67221980-17c0-455c-b684-b9878a0637e9", "indicator--a420cd3e-9a95-471e-94d0-a423205023b1", "indicator--1b5f1295-5533-42d4-abe4-86450bd6afcd", "indicator--2e9bf3ff-ea50-432c-ac3a-6f73a2279de2", "indicator--3f61c458-1143-485d-918e-0b60ca3a4ddc", "indicator--5ac052dc-f806-46b5-a97e-d76cd08dcb06", "indicator--522c53f5-eea3-42c6-b5dd-2289e37ecb28", "indicator--bd672d4c-ad20-4728-a3e2-ac6f2feb4585", "indicator--1ec20879-25ee-48ad-8223-72c632faac56", "indicator--3f4390ed-f4cc-4f9f-b7c5-7f507048dd37", "indicator--7c31283b-bd3c-48d5-a0c4-fc4254ead2a7", "indicator--77dad3b0-dd87-43b3-bde0-bbeda9827ea0", "indicator--33c00b38-9dc0-4eb9-b090-6955f515c835", "indicator--252839ba-1304-49d6-b909-c869ec353525", "indicator--384ca01f-1acb-4a2d-9b21-aa928a3859ce", "indicator--dc55372f-86cc-4bab-9fa6-ee3c76a1ced0", "indicator--11389f05-d48c-4faf-9ab0-eab10fb875d0", "indicator--14e7c72c-c523-4b01-9f16-ba6a7eb6b9ea", "indicator--491b2094-6839-461a-8990-7a96bee4bb84", "indicator--d93c5d41-8b65-4f27-bd22-9d1ef6403559", "indicator--e529a59b-62f3-41a4-99f7-912e2f5f188b", "indicator--9fbe7d8f-add3-4d31-b6d6-c1f66006a857", "indicator--4efcfb22-d4cb-4e3f-9414-5deb19872fa2", "indicator--09789741-9bc8-4e0a-8855-5189cad0e987", "indicator--5b690850-0eb9-47a4-8a8f-8b1757eacf85", "indicator--c8152017-9ac9-4629-b610-a993e7161f12", "indicator--a38028dc-1899-4d83-a8c2-a92bf10b51ab", "indicator--b7ce5c69-ac20-4918-abcf-7d4030dc77d8", "indicator--beb0add7-652d-4828-be88-f67b6cb79746", "indicator--4053ab2c-7c98-4957-80ba-0ac36d99072e", "indicator--95fefdd3-5f03-461f-b608-154a424209c2", "indicator--72f00cef-6773-4150-b5a1-87074e9dc418", "indicator--23c4dcc9-9a97-4258-a5e5-b16bd3993e8a", "indicator--78602eac-79ad-4d89-87c4-01fb2dbfbe73", "indicator--17bdfda9-02cb-4a31-a321-25a84033ab4c", "indicator--54320ddc-d3ec-4d75-bbef-4fffdadc8c1a", "indicator--739ec6a8-7bb0-4e2f-950e-427687201a99", "indicator--d199ca87-71bf-4ce2-a76d-514a2229c8c8", "indicator--f48c7f0c-cb1b-4ced-8d74-563e183f406e", "indicator--fe59315f-facc-4732-8a36-fc333b2896e4", "indicator--31f131f5-0092-4934-a709-c102778c8283", "indicator--f44016c5-847b-48b1-bcd0-ce13c7009a43", "indicator--ee342f7e-8da0-443c-9c38-5490d97526c0", "indicator--c6a0b60f-3a4b-4510-a2fe-c8493dff404e", "indicator--f98cad49-91f9-4ead-bd6c-d07c75f78a34", "indicator--284d589e-aa15-41f7-ba16-05bd1e88b756", "indicator--b1d66fce-5fe7-4ecf-bc80-3e130fe53507", "indicator--0e39d26f-8b73-450d-bd56-7cac02ae9aa3", "indicator--8781bb5d-795a-49fd-a81c-fe2511bb8aa6", "indicator--4d39f305-ac7c-4305-9155-dec2892fc12a", "indicator--270c9c21-9010-42ce-a275-8bd451fefc7a", "indicator--8ef02e04-367e-42ed-bfaf-a287954bde6b", "indicator--09a53fdd-fb5f-43b0-931c-55bf854bc552", "indicator--34cfde88-be08-42d3-826c-28330ba7d1eb", "indicator--c22c831e-18e2-40b2-aa4c-9ed7d5051730", "indicator--d28264ad-8306-4a89-8d54-c102d873219a", "indicator--30f3817a-721e-4e8e-ba31-40e6d13f1cb0", "indicator--54fadca8-6376-481a-a332-8fc5ddac3b94", "indicator--c76f153f-ec37-480c-8b8f-d01f1e2bb9a5", "indicator--77a64f6b-4404-45b3-82b9-535f82670c50", "indicator--65e093a4-6323-48b4-a81c-84d1bfd4501c", "indicator--a33ed29b-fc2c-426f-ac1c-76b0c1e62767", "indicator--91cac632-24c2-40d6-a789-4120fa3c8def", "indicator--01a6bc2b-1167-4b88-a2df-498963f43723", "indicator--d6f2da93-f5ad-44dc-93f8-f01dddd9593c", "indicator--d9999a56-5231-4c20-b1cd-a9ae78cd6969", "indicator--456f4247-de26-4522-9159-be911c8c0309", "indicator--bb795481-7076-468b-894e-c0f4113ce1ae", "indicator--26db6e59-18fc-4467-81f7-c91d62b9260a", "indicator--2e684c55-bad7-43bf-8271-c48db65cd998", "indicator--ad7363de-5496-4b88-a898-c687ee37c84e", "indicator--43b8fc4f-5423-41d0-b609-37465842a2bd", "indicator--afa8cc06-0c34-4116-9a21-255077941371", "indicator--9b243128-4bb8-493e-b782-9dc583827c87", "indicator--86532bac-8864-4724-aba0-c2b4c9d68c65", "indicator--9791fc05-d397-4c00-ab2c-dc38eedcbabc", "indicator--499fe558-64e4-45e1-9170-ae0e89feadbe", "indicator--751b4724-7b30-45ce-99d2-f6160ada1cff", "indicator--dc8372ea-4778-47d0-b41e-ddb134b96474", "indicator--c17186fb-c61e-4b5f-b36b-f4be32e970c1", "indicator--901f6b11-d4aa-4208-864e-04ea7bfd027b", "indicator--477bcf33-78fb-4085-931d-13443e5f8de9", "indicator--4bf5f045-6206-4159-ba1d-630bb6995560", "indicator--822af9d7-fd56-48f2-b119-ebdda3a97d9d", "indicator--32a3eb4d-0c31-4e0d-bafa-2ac600f75d42", "indicator--7fb7cda2-7da9-4149-b2b2-6a26e862b43c", "indicator--2fa72608-8bea-474d-8e68-a3ddf79bb1bd", "indicator--a064817a-411d-48f2-b89d-29daac4951cd", "indicator--ed7a4f55-1f44-4911-8fda-c27595803ec0", "indicator--3348404c-c763-4346-ab8d-67ba55656977", "indicator--d5b86814-5fe6-4602-b01f-833f4f79bb6e", "indicator--4b993fe5-ef02-4761-95ea-c4a0e5be3f2b", "indicator--81e0f5df-dd77-4838-a1c3-ab6fce860bd6", "indicator--e4338541-035a-40b1-8cbd-0470d113a496", "indicator--67627509-3f45-4b0c-a14c-b0c5594de8ba", "indicator--1dafa7ea-bf30-42aa-b258-174ef973df4b", "indicator--b2ed896e-3676-45be-8232-f15495ce3707", "indicator--e9d76dfc-14d9-44ea-afcb-005c0aaf3fb4", "indicator--6f5356dc-a976-4167-9658-9e338777edb6", "indicator--1328bc8f-10e7-4ea8-81b6-a0ea0dd6b3f7", "indicator--62bc6330-27a8-4d0a-89ed-c0683bb6cf82", "indicator--3bd5d910-2d5e-4a7b-9a99-1a256dc37b70", "indicator--a842e18b-4dff-4b30-bb89-586d26aa50d8", "indicator--3832d667-abcd-41cb-bfdc-2afef51e016b", "indicator--b6da9c4c-b088-4692-b5fc-9e750363a8d4", "indicator--51e57882-8697-4f55-947f-601f9fb06495", "indicator--694648db-334a-44a3-8128-fed8b170f395", "indicator--beb4ed66-503f-464c-b66d-e6577473faac", "indicator--7c4ba246-abf0-4a54-b1a1-e69dbd252796", "indicator--68bc0e72-f196-456a-a54e-6ee7186f550c", "indicator--88f3c018-f609-46cc-abfa-8da6e40de8f5", "indicator--348a6180-a060-468f-82c3-b5eee930b38c", "indicator--9ab9e9fd-5d75-479c-be77-df5b81ab2f49", "indicator--ca600aa7-5679-4ca9-a10d-d122f48de6a6", "indicator--84b17978-6b35-4458-b3ed-624fd4bea29d", "indicator--03fce1e8-aa37-4b46-a421-5293e64e897a", "indicator--62ca2cce-83f8-405f-ac28-530cd002ea97", "indicator--40a1ab3b-2bec-4a99-b3c6-193e878ac955", "indicator--9c9f6ae5-64ff-4492-91fb-7a106da85770", "indicator--3cddb0da-bf1f-4545-84ee-b8a5171a433a", "indicator--1913aad4-9809-472e-ab43-de4156936737", "indicator--02adcbeb-d8d0-4b7c-b4a4-553b94036ae0", "indicator--209bed91-6b0c-4193-8c4a-3e118f4e07d7", "indicator--7427e039-d42a-4501-8467-57f3aef6db53", "indicator--59fc895c-ec08-480f-ac71-f1731653cf74", "indicator--4b220222-fbcf-45f7-97a8-75eba9f1ebf7", "indicator--f95c8199-3b12-47c8-a4ef-ce5a8930d395", "indicator--49391004-3018-480f-9b8a-c652404ff585", "indicator--7d8210f2-3b36-407a-b3d4-e1b212e83167", "indicator--9becdfe7-7dc1-4baf-9360-6c81e1532646", "indicator--53768978-7d33-4b2b-b02f-a1df423abccd", "indicator--07547a5f-4f8e-4f18-83c1-661230bcdf89", "indicator--96c2942e-6260-45aa-81d3-3035cb04088f", "indicator--09d3d5d7-0949-4275-8b5a-b36b8a6760c2", "indicator--4b83840a-461e-4522-8927-7af7ff1fa8ac", "indicator--d03be26a-b4c2-44e1-b99d-b806bcde5bec", "indicator--163975c7-0ad9-4666-9d08-1796f97544d6", "indicator--81449d01-25e4-45d2-ab91-fc2ef6dcce7e", "indicator--b6e7296f-cb74-40db-912d-92c86d798d33", "indicator--cf7a3bc1-9e39-423f-9f1f-5cd923dd2055", "indicator--6ea3adbd-9de1-446b-8d58-c1239a24721e", "indicator--0df955cd-7e65-4528-88b0-57e6f2d0515f", "indicator--fb37b9df-01d0-44ca-ade9-eb12414a9d5e", "indicator--a25acbda-edc1-4243-9ee9-8b95fb2cae19", "indicator--ad7140d1-5e88-4faf-8327-6d3368c2fb7f", "indicator--c0202fb1-5d1d-4fb8-be28-23041c6068da", "indicator--c5bd581b-0839-4e13-8d0e-7daab0a04333", "indicator--28d3cb61-ce4e-4f8d-a63d-8334a5f8958d", "indicator--0d0b05a7-0874-4248-bd33-5c2040667adb", "indicator--ae6b9e76-e5e4-4196-a895-f8015f77945b", "indicator--75b24245-4d94-4d6e-a037-2dfceb4db9bd", "indicator--c033aa0c-8d66-4b20-92ca-d1bd73f915f2", "indicator--dff36e09-6ae2-4a4a-a343-823f6ec8aebf", "indicator--6f032d66-9553-406e-9594-dfaf572559e1", "indicator--20a98025-f857-438f-b17f-29439d3d79c9", "indicator--ac128ddc-93dc-450b-bb2a-56e665e2d68b", "indicator--122c33e2-027a-4591-99de-ecb5bd44e10e", "indicator--cd0fead6-fed9-4866-a34e-8aadf177399f", "indicator--0c5d7e39-cc03-4798-a54a-e1e723c9c8fe", "indicator--3263da7f-b70a-4b5f-82e7-b47bd8872075", "indicator--520c563e-0823-43ea-8761-283e248a7287", "indicator--9f6efd21-ca1b-4c72-96e1-4c34d58ce0d3", "indicator--c256fe66-23e2-4ca0-9998-39e0ff281cda", "indicator--59362ce7-1009-492d-8a3d-5d5d9a0756d1", "indicator--504ee191-9c2f-4a2a-8c1f-afedd5c7d86e", "indicator--3713a35c-9fbb-4f6e-9928-bcba0f013317", "indicator--228b9890-367a-4eca-b582-6d657dca03fd", "indicator--4213b062-7c60-40b4-ae30-51613a2cdb61", "indicator--6e1526c7-2001-49a6-9d2a-8e2a23a340ff", "indicator--927aaf6b-e2a6-43c0-9517-f022b94edc8b", "indicator--3237d42e-bc38-45e4-9aea-b9e575218bfb", "indicator--64035667-e5a8-49af-a5f6-7b6fd1bca317", "indicator--f66beb28-40ae-47d5-afc2-b4ecfe178ea3", "indicator--e995479b-82c0-4e98-a692-b6d75cb0fe3b", "indicator--52e3f479-0126-4eb1-9a34-29d0fd537a0b", "indicator--9eb6e6cc-decd-4cfe-bbcf-0f13c958d834", "indicator--c3a6e023-c712-4ae1-a926-973001952567", "indicator--54daf64f-8012-463a-ad72-b40e6186cc8f", "indicator--db7a6637-a470-49c4-a33e-97018c4d1b29", "indicator--47a88b2e-413c-4fe1-ba37-0deedcf80fb6", "indicator--c9151a07-76eb-4cd6-92ed-6c56fa097810", "indicator--1feb961b-4f8a-4967-b0d8-6f5b16340428", "indicator--d3487a66-a129-4213-a178-6a5eccfc0fb3", "indicator--f9ac3cab-9e7d-4e11-9315-1dc0b1696300", "indicator--4c7f3866-6a45-4565-aec7-68c0272760a7", "indicator--62aca557-4b20-4993-8cf5-9468075153cb", "indicator--bb596563-6dd8-40d2-bb56-bf7624e5afea", "indicator--53c4f028-560f-4b1d-8b63-0f8019364a73", "indicator--043f5cdf-04e0-4c02-aad2-e1f7ef614ec9", "indicator--64dca7e7-e29d-4d32-adc9-49e456ec92e3", "indicator--a3b5a9eb-647f-464b-acd3-7089d5acd0ca", "indicator--0bb70f34-98b3-4946-97c9-7bcefc80f589", "indicator--83804e43-9c70-4e1b-8865-99aea0832129", "indicator--a0d1dccc-f0d1-4f5e-848d-8b82171c9907", "indicator--04c71645-9d55-439d-a3c5-36e64fa1cc8a", "indicator--db78cfcb-90ac-4428-a6d7-1e9ff2b5bd75", "indicator--fa03e76c-0288-476e-a02d-7d5bf187440d", "indicator--383a7a93-b9c1-4791-8b65-21b1d782367a", "indicator--6e1a8716-1606-47a7-9f5f-1426f1b8018f", "indicator--53f6db1b-879b-4c13-bc5d-ddb1d0c0d11c", "indicator--74a78ad8-1ef1-4cc9-bae5-3947a0feaae3", "indicator--165f7acb-6606-4fab-8c6b-fff5fabb8e27", "indicator--30cf1750-ff6c-4273-bd16-b4ff0911630b", "indicator--490dae04-f4c0-4357-a3f4-ae70f1acf538", "indicator--06239025-49a6-49cd-8813-1616c892d605", "indicator--b2612bf1-e2dd-4e28-9af6-dcc13cf617be", "indicator--60dec13d-f51e-4565-8996-88d32e38c81d", "indicator--d49f3d60-797d-44d4-b367-7067f5dd92bc", "indicator--fa3045bd-dccd-4cb7-a811-9c553ce3479a", "indicator--2292f8db-531e-4585-92eb-ad70c5fff411", "indicator--03b6e6c5-1591-4567-873f-2eff817404d8", "indicator--f5f81620-643b-4820-b89a-c4fdf62ab5ac", "indicator--32cf434a-3284-447d-b227-996fba385b69", "indicator--ed389a98-8a14-4241-987e-30db55e0db3f", "indicator--b464d542-97ca-4ad4-80a0-78625b3243b1", "indicator--cf36260e-d239-46d8-b8d0-8f69be035ca7", "indicator--369375b7-285a-42e6-8509-92aad73e4035", "indicator--dbda61e3-7451-492e-a796-79341651607a", "indicator--92cf8e27-1cc0-488f-9d92-ad73b220cd91", "indicator--32e46e40-7c14-4b97-a3a4-f3eefca98c7c", "indicator--99b4b3f8-f59c-4875-83ec-1acd82dcf31b", "indicator--8acccae1-70ff-4745-9d59-12ad5f5ce16d", "indicator--e095b103-c42b-4eaa-9949-fbb3da21305e", "indicator--49115ba5-a04f-48b6-b01a-089ee8b9cb2b", "indicator--e8ba8fe9-1174-44fb-bbbf-59a44529340e", "indicator--aa175982-1bff-45ab-8eca-b5e28cdf4816", "indicator--481f42c8-cd1e-4c1f-99dd-d9eef90a2533", "indicator--dd7807e5-e318-43d2-ad8c-4e607536749e", "indicator--021545b2-68ef-4fbd-9788-ccaa9aecb373", "indicator--a4dbb77e-a532-4373-b7e9-b7bcd4d11135", "indicator--d6269aa8-2498-4778-bcdb-66b24f131951", "indicator--8b97b1f7-d849-412c-a858-86ec854d9d61", "indicator--417f9a39-83ac-4e6f-b846-32118856a74c", "indicator--25953ff5-7df6-40c1-97c3-7f77bb7d9adc", "indicator--331b694f-80e2-4cec-a304-ea4630fbd80f", "indicator--fd146865-e695-4c9d-afcf-7e6172f59243", "indicator--da32e032-63de-4d36-b589-e6ad034b184b", "indicator--ab6b84f4-0d98-4449-a364-bcff9e8a8fe9", "indicator--fe6c4999-88d8-4961-a9f3-0e44db8ac9a8", "indicator--04100a43-d7c0-4f69-8f91-f040484708ea", "indicator--5fa88dd7-2ba6-496d-953a-515ae1e45e6f", "indicator--54182a58-2ae2-4e8b-86f3-072a9ad3527b", "indicator--6b51b56c-86c9-450c-ac2f-45622ed64c13", "indicator--c982788a-564d-4913-9023-f1629052d4f9", "indicator--7c36fbf0-3190-4f3e-9908-10189a6852a0", "indicator--14366c13-95de-43ea-8fb9-15c4ba15192e", "indicator--9124efc6-4eb3-419e-9992-702e0d093ba6", "indicator--3f2a05ab-036a-4cff-9954-e5818ef41d1f", "indicator--82deac81-1b7a-498e-afb7-beb380159d66", "indicator--19b0a997-51d8-40a7-b922-68a9c2a22cb5", "indicator--b3fda2ef-b1e2-460d-bb6c-5ba96a441db2", "indicator--37910608-0a0a-4605-9077-33150599a24d", "indicator--8f8f4324-2692-401d-ada0-6569b11993eb", "indicator--73e562a5-4bc6-4669-ad12-7cf7aa482c89", "indicator--c1ae75a4-de47-43f4-857b-a08e74f991ea", "indicator--583caac6-1b9a-44ba-9718-35959b7b6f0c", "indicator--d7c79b9f-abe2-4ac4-b247-8718570ecad7", "indicator--c5d3d84e-ea28-463e-95dd-3fa6932937c1", "indicator--e859d386-2de4-4367-ab91-f382c2be839e", "indicator--08437c3e-7527-40c0-96f4-a3ff07735a9c", "indicator--80dca7ac-89aa-4b26-b317-53fe57714626", "indicator--c5cf2ae4-0100-4bfc-bf97-f68ebbc75004", "indicator--2e082214-7dc8-4d67-ba8e-808864ea852c", "indicator--add86fa5-6e32-4caf-bd77-2f634563f7be", "indicator--48f3d44c-4f26-4e82-bd91-920b5e5382e2", "indicator--46b3baaa-62ab-42ed-8332-b715aa19e1bb", "indicator--052f44c3-b686-4292-8252-e15b3322ae1a", "indicator--9df7d82d-0d04-4c21-8f93-416b6cc2fb0d", "indicator--2d070349-f8b8-42ec-a778-15abc3381ba8", "indicator--bc35676e-2e09-4c57-a7a1-db388a7dfd8f", "indicator--77469921-cd28-4ee7-b1f2-7987cddfa2e5", "indicator--d59a935c-839f-4770-9f5e-042658774e7f", "indicator--5021db52-5fa2-40ca-a94b-7c4212856632", "indicator--e9e163e0-f225-4fcc-b60d-f0fb85306793", "indicator--553da46a-c91f-4276-95bb-af4584a5c6a4", "indicator--a923f7ca-24a5-4606-84ff-dea91608a8d1", "indicator--793e6eb3-43eb-4ad7-8014-292cc83a19a5", "indicator--8a8e45d3-cc6a-4062-9399-f41fca680181", "indicator--03236b46-9108-47cb-9cc5-59c8b51b80a9", "indicator--8010f448-da3d-4ef3-9da9-f264dcda9a0a", "indicator--9f87b88c-d80d-458e-a027-afa4ced07bde", "indicator--d61d151c-5692-4ac5-9f9e-b05cdb4d6b27", "indicator--ff778afe-580d-4daa-86b1-3f180993b965", "indicator--e8800453-3a8b-4905-b4be-72031ce01891", "indicator--81eeeaf7-d80a-495a-b016-da7c36e7f73a", "indicator--d4f6595b-53f4-47df-82a1-cba4e21d4029", "indicator--a0bc1dbc-4f79-4df3-9f40-225f404bca83", "indicator--b5f20bdd-4b78-4e61-b0b2-22dc11c90fdd", "indicator--5db4182d-cfaa-465e-b396-6961e3cbacb1", "indicator--0bb9db27-7355-443c-bdd7-8d964235e32b", "indicator--c7b601ca-f6d9-4cee-bad7-61150274a5e9", "indicator--27f8bd28-3c46-44a4-98bc-2636d7c3a6b8", "indicator--625613f3-f58d-4a43-a05a-59507440ac25", "indicator--3ec95833-cecb-4465-bca0-402b8ac0721e", "indicator--49ebe37b-acd3-4092-9a0e-e9e5919a4ae6", "indicator--dda69409-0ef8-407d-8450-a8856d916dd1", "indicator--6a53c455-9010-41dd-8a41-e8419e9a9361", "indicator--2c7841e2-bcd6-43ba-a7b1-d96192876575", "indicator--6d85f4c4-cb7f-4ac8-a355-ed34ec3e318f", "indicator--3b4716ea-2bb3-4763-a83d-0a0a53ccdeb2", "indicator--d2ef1dc3-5466-49ac-8331-e05483ac3494", "indicator--d9768c00-46c0-49da-8050-9bdd09742542", "indicator--3d010762-429c-44bf-8777-f6a83708c3ee", "indicator--b21ca754-d35a-41d6-8010-0c1af1295b54", "indicator--61b00d2b-631e-46b0-a396-6d244d9c007e", "indicator--21bbb99b-4f54-4b10-a98c-86afa5d99e84", "indicator--4418a075-99d8-468c-9ebd-f4ff22b8f44e", "indicator--f6342c94-0689-4102-b174-9dd5d6ce7548", "indicator--437c0d2e-ae97-4b2e-baca-35c5db98c5fb", "indicator--a554c14b-e5dc-4724-8f44-6d4452de99c9", "indicator--5ea2217d-478e-4910-806d-600dc3abc969", "indicator--431406e1-cf4a-4de2-a895-c38e68b1ab2f", "indicator--419ef0e2-0219-470f-ad54-a528d78a0972", "indicator--6e9401d2-87e2-4b2b-b5e9-8de714d0df36", "indicator--ab8d2fb4-7104-48d4-9f1b-d35a1d5ecf22", "indicator--4b36b6ab-6533-4935-8e7b-41c7c4a05801", "indicator--4e803820-74bb-40f0-9bf7-4817d2cb2733", "indicator--54a32d41-54cf-4918-b25c-b2ae44de0b58", "indicator--c194e3db-01ee-4c63-bc06-a58d27a409b1", "indicator--3de64a89-e2e5-4da8-ba48-391340e91952", "indicator--1561c602-f0c2-4a29-8694-9109bf155ca4", "indicator--8cf6df95-3213-43e0-aea6-a71248441439", "indicator--ec8f7d9a-c1ca-4c35-8c8d-fd1eeaad6e27", "indicator--719b94ed-10e7-4908-8361-7a5430d18b43", "indicator--58d53edc-c7f2-4297-9d45-5ab8db0e217b", "indicator--370ea772-ffd0-4ef1-8fd4-6ec951d7d010", "indicator--b85db31f-6334-4623-b507-94639f35bd41", "indicator--6b280ca2-a030-4ce8-b9b1-2333addbbe9f", "indicator--41d22b4b-770f-4919-beb5-cf95071d71fc", "indicator--785a2248-a141-49e3-8fdd-ad7d2287aaaa", "indicator--8bcd7269-df93-4d1d-9909-99206e4f5647", "indicator--08045bba-bf73-412f-94a5-b5dd6a6d0296", "indicator--194d91c1-449a-4ede-acc6-15c486683880", "indicator--0175e00d-10b9-446b-9696-c7198ed00f7f", "indicator--ee13a3c5-9dff-4601-9f6f-9dd11e13892c", "indicator--6926d07f-38cb-48f1-b0ad-5454e1acc061", "indicator--bb0b7e9e-f73f-4e22-963a-2e49a135bb16", "indicator--de5c5a22-d930-4b9f-88c9-1a02cafa41fc", "indicator--4c24140d-bbe2-44c9-8b2e-7a3143f88e13", "indicator--600f06a1-d629-4c87-a0a7-1c3e80d9cc8c", "indicator--153192e5-6971-4c96-a49e-466a35b1686d", "indicator--6cebbaf8-ee5d-4d21-a9df-e3d3ec01c68f", "indicator--a4853a42-9e4e-43ac-8775-b39de6afca65", "indicator--b2b465dc-903e-4fd0-a6ba-efec1895e772", "indicator--eeb90955-182e-40d0-9c42-34020025cf58", "indicator--c2f92045-9810-4912-ad7a-af583508547e", "indicator--f92663d9-be43-4210-8869-085b849bfe9d", "indicator--7e49ec69-520d-4710-97a3-babb93201fb2", "indicator--277291c3-a2ee-4344-877a-731082f73eb1", "indicator--c05271b1-6a4d-4733-ad2f-a1f13ef88f70", "indicator--a1e593ee-6084-4ccb-9163-bb0e75d19aed", "indicator--e9d23703-7960-4650-9ccd-695879dea77b", "indicator--80f8d6b7-ce4f-4d1b-a187-5c8237a62192", "indicator--09452309-8160-472a-bd74-a9d352da97e7", "indicator--08343b44-ec9f-4d4e-bad3-eb047cc0b9c3", "indicator--bb98927b-6518-4a7f-9fca-fbc82de871da", "indicator--ce98de48-a1ba-4a93-ac58-f47d56b73385", "indicator--50c0f86a-b40a-4853-8522-b52be544d46d", "indicator--71ff480d-d4f4-447b-ad42-10b3e3e4695c", "indicator--a0716351-13b1-4888-a480-02d28190b6c5", "indicator--72057cd1-d635-4f24-beb4-39eb466c063e", "indicator--26e2e016-f875-4731-a502-503260ea81d4", "indicator--c7611494-4dc8-4a1b-bd1e-363446d93804", "indicator--9e57029d-8cc8-4530-8efb-cbe39b1997bf", "indicator--99dee922-b506-45e3-b61c-ec454bcd5075", "indicator--502d422d-588a-40ab-b511-ee5aea435dfc", "indicator--b11ffbed-35f2-4033-96d3-99574c8355fa", "indicator--7403e34d-4b25-4de0-b45b-fd63e06b4a48", "indicator--d63d22b9-8729-4279-97cc-d5794efe3321", "indicator--0cb051a3-0b20-4ffc-9902-7ade196a4937", "indicator--0977649d-d785-4958-ab87-535914ba2e50", "indicator--8800977a-2e12-4d5f-b132-be34231de9fe", "indicator--7676b954-0a2b-4390-b574-dddc41096745", "indicator--61488ca1-5799-4d66-a286-e3800d7f2d76", "indicator--688251a1-52d4-49b5-897e-993a5fb8cf27", "indicator--85f03683-04d2-4e5a-b81a-76196cb16995", "indicator--1dbe1f03-342a-4bc0-bf64-cbdea78f18db", "indicator--c446362e-9688-4c2d-9146-f6c4adaaf3b9", "indicator--311c328c-7dfc-4e2d-b64a-9e727ee86093", "indicator--5e279f7c-991d-4ac9-ac7b-d085da2f0890", "indicator--01fd496a-199b-4307-b890-161eae51c622", "indicator--180435fd-8064-43a2-88a9-16e7405504fe", "indicator--64749ad1-5a8b-44f8-a204-59d124909538", "indicator--7f0818b5-a932-433f-8cdc-88a8aa4f4230", "indicator--f47e642c-80c2-46b7-aa7c-5ec0082658cd", "indicator--6bad8e1d-b032-49f0-adca-8d0265eda744", "indicator--fd377142-230c-4682-8776-4e965a0212b5", "indicator--677e2461-04f7-447d-8bf4-62f4b44778f2", "indicator--5ddaa732-7b78-40e2-8e00-0d256de6612c", "indicator--c2a049cb-d88d-44b0-9978-98e15695f65d", "indicator--505011b9-5bae-4e4c-98ad-fa9116e59bb6", "indicator--b44ebf9a-a43c-4d34-835f-410bf7b41db2", "indicator--7bd17a52-1738-4cae-a4f9-5da9d5183c3c", "indicator--48cac907-24b8-4213-9cd5-a6dc30998556", "indicator--3dcce028-e0ea-4047-8498-d534423fa6a4", "indicator--ae17334d-2808-4a85-a2b1-0b3d032823b3", "indicator--afd35bd2-0247-4c3a-958b-f1a01144c335", "indicator--dfc5a311-417c-4e85-a80e-7a7ec98eacc0", "indicator--f31b96d3-bef2-4506-94eb-a045e670b5b8", "indicator--51308e8e-4fe9-4820-8c13-4a4ccb1aec28", "indicator--e5ea8c94-8b40-4a61-9432-84e9611e6b07", "indicator--fc4e90d4-201b-4c55-96ab-319e612e7015", "indicator--428f0cb6-8dfc-4493-bced-8544c2110b92", "indicator--b1558c38-1f2a-4576-9a57-73c67badec68", "indicator--37bdbf1c-6cba-4aec-9629-3af99972a00f", "indicator--d7967af6-ef78-45eb-95bf-631974a0bf6b", "indicator--4be2d112-7107-479d-8af1-e65916f5b6bd", "indicator--25cb3b6d-eff5-4488-8fbd-7ca9400ea09a", "indicator--b5ff8c5f-787a-4a7f-a440-e9561620842c", "indicator--1075fd29-b2ef-45c0-a899-811c15a6fe3e", "indicator--c26bbc38-3f57-44c4-8bb9-a361114faa63", "indicator--ac8f697c-5505-4d50-9289-e98e42f9cdff", "indicator--e98a08ef-5765-41ae-809b-8e0cb41a7f1d", "indicator--38001131-b379-4fdb-936d-7979db31bec8", "indicator--7bdeb67e-c1cd-4ce9-8c66-b66a7d61043a", "indicator--0888cc54-a74e-4dbe-a328-b4d13a214747", "indicator--15e4f536-1988-45e6-bf9e-15270adba45f", "indicator--315dfd03-bcea-4f06-ae17-b10e9fc4ddcd", "indicator--80841795-4590-41e6-b023-378253a4ee1e", "indicator--c6786e79-699b-4416-90f8-caaaf5e61db5", "indicator--41e6fa55-b065-4b68-8180-28889b1b2f36", "indicator--2387a3ed-9fc5-44e9-a6d6-03ddc11c8cb9", "indicator--df135f34-c507-4b06-8e79-1c8d891f3b06", "indicator--97d5a330-b9a4-4c84-a09b-e562cd604b3a", "indicator--0d0e6f88-965c-477b-8db8-9ab85c79682d", "indicator--357266cf-e79c-4903-bb9f-42f8aae61986", "indicator--b0b1c568-0f18-4713-b61f-91be64abedff", "indicator--25ec88e4-ee12-404b-819c-fc4548568ae4", "indicator--88986c3c-c68c-46f8-907e-70c25cb67ae1", "indicator--afe740dc-b2f6-43f7-a5d3-8d908329a1cc", "indicator--04048124-4179-4ea9-85d1-ff18a874ae77", "indicator--94f65494-b683-4caa-81e6-efc218930c43", "indicator--ac9206a2-3019-443e-b133-7802bba68638", "indicator--6a6b6f02-ef19-40d2-82cd-0f1f8ed40797", "indicator--cfbb7d88-aa83-4d02-9eb3-5ae3013fd4d3", "indicator--fd97c678-2f38-4de8-989a-d5bd25a59436", "indicator--fe43ee8f-6dbb-4db8-8828-7d9c39466687", "indicator--4f62e66d-bf35-4db8-a6d2-fbd5a545572d", "indicator--b843d4e7-e2ce-483e-bea4-152b85c5d951", "indicator--ca3294b0-f17a-4759-973d-fa4efa60f458", "indicator--cc337ad8-47ad-41ed-9b31-aac7311e5c1b", "indicator--93c792af-41fc-4af6-b1c6-d662d136951b", "indicator--508b5821-eb9f-4b5b-96b5-da0f5a03f27d", "relationship--67cd2296-c789-4436-9d89-cf28145896e0", "relationship--f3cc33b0-a24c-4755-849d-0dbeb13da596", "relationship--cc8957b1-4f8c-4307-b5ca-2821138c82b6", "indicator--a32134ac-009c-4677-a799-c6c7bd3fa0f1", "indicator--327a57eb-553e-4740-a86a-6bc4ef52e830", "indicator--9bed8215-3441-4301-8598-90d937eef615", "indicator--12a2d97e-cfd5-4d90-8eb7-60348815db03", "indicator--779b76c5-0f5d-41e6-a25b-46fceddcc1cb", "indicator--5aa727eb-9731-40a0-b58f-0d29bb27b4d2", "indicator--392d0ba8-867d-4576-b5b4-575530e51f59", "indicator--9c54a0a5-238d-4ce0-9e4f-08bdb76cf792", "indicator--e69b9770-2edc-464f-8992-1f385e9bf3bc", "indicator--fee52efd-bc9d-4f54-a1a2-d5d82e2cc2bf", "indicator--dbc552ad-28ff-4e87-b8d2-5d8fe796e833", "indicator--a2167157-673f-4d6a-b00b-cf9d6bb6ea5b", "indicator--c85cbbee-0dbd-42aa-9fea-7d6fbc4ab06a", "indicator--f966c742-c5ae-4595-a285-c5f780ea8209", "indicator--ab80f9ef-bd8d-476c-9e89-65ed39e2b66a", "indicator--d0385b93-52cb-4a71-992c-96cdf2317cd3", "indicator--e5a96d1b-be89-4678-80e5-0e2c47be3f02", "indicator--d487d354-9808-4bfe-acba-2a62964e19ea", "indicator--2d703c28-cf1f-4f0e-92fe-f7268ab783fe", "indicator--90afd50e-db15-48d3-bacb-c835b25bb2b3", "indicator--780e1390-fac3-42a9-b90f-d663c17f23ba", "indicator--575d87eb-9e93-479a-b153-227eb50d4e97", "indicator--e4d0a231-e23c-4584-9ce0-94bd8e5b7141", "indicator--b737fde5-0ebe-435a-9190-df9bd6240cc6", "indicator--467d5da8-c76d-4f5c-8d59-863b68928a59", "indicator--a21d49a0-0a23-4f48-8c62-27c7a0084f84", "indicator--ce9698c5-7556-4bdf-b854-f3707d850681", "indicator--91541f85-f6ad-453b-b4fc-337f26cbeb1f", "indicator--c381c73a-fd74-4058-8146-f583b6891b69", "indicator--0692b7e9-f3b8-4b58-a3d2-b48bdd0224b1", "indicator--c5f871f1-97e9-4c74-b692-490d9ca97bba", "indicator--ae9d8881-9110-4888-8b51-9b234aa73db0", "indicator--10a692f0-3457-4f72-b630-7f60cd48f6c2", "indicator--be7a5196-4706-4ab8-aa61-c691816d2bc8", "indicator--bc7045ea-b757-4980-92e8-e243e3d8bd61", "indicator--d25eee15-682d-4843-aab2-f563d7ed9be2", "indicator--3250c22e-2b7d-46ec-b351-7cdcd7565cc7", "indicator--c8e33243-411a-4067-8566-b69389b1dbcc", "indicator--563bc90c-44d3-4f8a-965f-1d4ccca47564", "indicator--82e6479a-fb63-4b4e-9107-80e5abccf4c1", "indicator--e8665837-1e10-4b5c-ba30-acb807ba2fd4", "indicator--35f38831-ba77-4914-90eb-90d97e861a37", "indicator--e9878ec1-1213-4734-baad-dcda15f74be2", "indicator--2f2b466f-80be-4c89-814c-a97ccec647bd", "indicator--ff84eed6-b16a-44ba-9425-f7651563d0cd", "indicator--578b8476-7f6d-46b9-8ae6-d3b881bfa137", "indicator--80b5cdb4-8ed1-4bcf-8ebc-f69fc2b8dcee", "indicator--2105fd23-33fd-4f44-a7ae-cc747d0ac822", "indicator--d4328f4c-6f3a-449f-98ca-7707b9872dcf", "indicator--f022eb02-8013-45a1-a645-4c48cbbad0c4", "indicator--5f680aaf-5cb5-420c-a702-9401e5be2c16", "indicator--9e624203-9410-452d-a032-dafe492eacaa", "indicator--d53200f5-18e8-4d71-babf-c2c7981fc264", "indicator--90b981dc-370d-4314-ae42-7cf678d355b5", "indicator--1b88261f-7c94-486d-9271-84e933d51ac1", "indicator--54dbcdb9-ea98-4589-9138-6c2fe2bed3cf", "indicator--53489ff6-7ef9-43a4-ae3c-93fa6e3e0c83", "indicator--7356593b-de05-4e7f-882e-b20f86ee1e9f", "indicator--1fbd6537-56fd-4d5e-a172-5a298b97ce0b", "indicator--2f169e1e-015a-4e77-8d51-050ef2850950", "indicator--d4a431ab-2a55-47b3-87c2-b08485d356fe", "indicator--49951f66-fa14-4800-8640-0b6549cc7c59", "indicator--4eee7a25-d684-4b7b-817e-fcd79a2d84e5", "indicator--cc45e083-28f7-47e0-a4e8-ca46840487d6", "indicator--dbb82495-09dd-4d1b-80d0-0092c751ab68", "indicator--a220b092-3cfa-44c1-9cce-193d258a0c1e", "indicator--5a88e5a3-548d-40af-9929-5ebe3db2b4fd", "indicator--53deadd7-dac1-481c-9d3e-42bcd6d3a213", "indicator--5e034515-5953-4f65-a8b2-1448b940c719", "indicator--4b693cf0-4a40-4c12-856a-e21b9e0e92b4", "indicator--a6cf3bbf-6cdd-496e-822b-9c3b5f98875a", "indicator--beceff6c-d3a1-46a7-83ad-1bdaaa0bb587", "indicator--ffcbee5f-3c8d-4530-9860-e442ecf4df45", "indicator--e1beb70d-71e1-43aa-a3f2-8f257cf2ae3e", "indicator--8b156cc9-05a4-4c14-a243-45a58d5dd4e3", "indicator--b69a4ccb-b4b4-4d65-8d76-d8c590fbdd14", "indicator--353c3503-5c86-4bd1-a934-6a153e9fcad8", "indicator--199dae63-0de8-4064-b225-b811f6cc422b", "indicator--8733adb5-ffcc-4098-9e8c-7fc1a95d0e27", "indicator--8587afa3-d826-4975-b017-f6126f4149c1", "indicator--2f1c9028-84e6-485d-b4e5-29aee5535501", "indicator--79df583d-1e8e-4af3-909d-917315df44d2", "indicator--84699848-5e27-4bcb-b128-4de93c268f45", "indicator--6c062101-caac-43a2-acb2-6bf4a8520628", "indicator--5b7e99e4-fcc5-43eb-9474-c9c17ba75834", "indicator--95a5f507-b696-4ca6-aa05-8ddd4df4b00d", "indicator--2616d65e-856b-490b-ae8c-2baa43bd4639", "indicator--82beca9e-dff1-4856-a459-9ba0d4b442ca", "indicator--e9228567-83ed-4dfa-b2f2-353c7ef587f9", "indicator--8030e08b-3b0f-4886-8602-7229c70d0585", "indicator--3e9da8bf-9b93-4cc8-a33c-37516fcd42fa", "indicator--f137a991-1499-4c33-8fa7-0a4f820eecfc", "indicator--9928d05d-7f11-458b-9058-eb7e82dd6474", "indicator--96e89686-6501-49c7-b2e4-f0d80b621ee4", "indicator--0eb96249-f380-490e-b5cf-74c5c86b3317", "indicator--286e659c-f495-4233-8728-a1b7d5b950f4", "indicator--5981190d-c81f-40aa-b77f-a7e3257b8d58", "indicator--c8c064cb-d918-491a-a043-5cb342bac409", "indicator--655ac1e2-2d95-4fb7-aa2d-d3d7886feef7", "indicator--41ec82a4-b989-4466-b226-f0064560c20c", "indicator--b36c4154-0897-4c84-81a8-1062816e5b3b", "indicator--77c3c25f-eb61-464a-b37f-a1f1aa42b913", "indicator--33e6c3c1-664c-44e0-bc62-4fee42605c47", "indicator--ab9f265a-cd44-4472-be6c-30162b9ab338", "indicator--57799948-ebd8-4588-9a21-a88495194cde", "indicator--385d0713-bfe4-4c0d-9499-32f6c8d3e3cb", "indicator--4a116083-4d5c-4f91-a10a-b4c7926e2209", "indicator--a092dfd2-dbf8-4821-9a16-f8b4d549fe89", "indicator--c7fcd6c3-8bee-4129-b808-b981ecc6dfd1", "indicator--f8f35411-5a17-4a13-bbd7-26899f85bc7b", "indicator--321698b4-10a0-435e-ae8a-20e074f92377", "indicator--0b5bd1f9-81dc-4097-ae9e-3e0ea717d165", "indicator--596469b7-5c80-4f18-965f-44d0723b1520", "indicator--dc35f2b8-32fa-43ff-8828-11239aa45346", "indicator--4aff04f0-60a6-42c9-ac93-e5c81d4faaec", "indicator--883622f5-2411-4fbd-8d34-24b1e39bfb35", "indicator--02a0130a-2fe6-4f5f-82b1-9385a0fae0db", "indicator--3ba22223-46fc-4592-8c93-936f6fa99a46", "indicator--e948e017-319b-491d-952d-c044f0c67178", "indicator--ac6fd390-27ef-404e-a57c-32c2e1404cb6", "indicator--7f5f0901-564c-4c4b-b5dc-3fb7f6883ea9", "indicator--deca3fb9-c4c1-4661-8351-4053078d9e85", "indicator--fa1de00a-a3a7-44a4-94fa-738ef1537e82", "indicator--1f2a9fb5-f3d1-4a56-b68a-c3e89d48abd5", "indicator--757940cf-c275-436f-b561-daafb9f27896", "indicator--45a73d5b-7d22-4a6d-a849-210ba76ff185", "indicator--73bb827e-4b99-429b-8cd3-c284b0c4c05c", "indicator--0512b987-a132-4363-a9ba-22205baee485", "indicator--ebd25740-da88-4a47-8d51-1e527bc18b21", "indicator--c6f6af6a-858c-4fdd-939e-3cb40fadcd5d", "indicator--a565d707-5599-419c-a3fc-d59655ee8b31", "indicator--b6abc8bd-3104-42b9-95f0-d75ea89027d7", "indicator--68d28821-e820-4ffd-a6ab-c4b98aa81c4a", "indicator--78c25a71-1810-48b6-83fb-4833cba97b72", "indicator--77d38473-967c-4d30-b216-011422ee2157", "indicator--33e49e42-7e46-4c4c-b90f-d5ed4441cff7", "indicator--7c42f81c-0ee4-4abb-b5fc-4844b91ce155", "indicator--7fea0230-4a11-4c74-88ad-f4db18144b48", "indicator--d96b11d1-7c81-4fed-950c-343a4a54460c", "indicator--2e597290-7c3a-40d7-8431-167372ebf0ee", "indicator--77f41f89-1a8c-47d8-81a1-5a03582d068c", "indicator--8acd1d28-b9ef-47c1-bacf-5928588c0c3d", "indicator--6d172b87-5763-4180-839c-1cb2de1544d7", "indicator--9b346f32-155c-46ce-9f01-220cc6b5c1be", "indicator--be42348c-bf82-4a57-a169-768dc736680e", "indicator--7311c07d-c609-4d52-9f81-7ef349b77e4c", "indicator--bc46dd6b-d280-45ae-84e1-5ac7031dd676", "indicator--527c1d53-260b-42f8-9ebd-f252a0e2e604", "indicator--e826e31e-627c-4908-9b48-2b78b667f180", "indicator--627208d6-d1fe-4b19-88f0-28cf4dd01353", "indicator--46f2bf81-b73e-4cf0-b8c6-602efedad9f0", "indicator--9ae77114-3da6-4fd6-9c95-d0c5d04806fe", "indicator--bb06de65-6f5a-4f70-9774-973560800a0c", "indicator--34af8d3e-f8ae-451a-96a5-7310ae8fa8ac", "indicator--fa1a3af7-ba24-4c09-a5bf-f5fa1051cfe6", "indicator--88980481-159c-40db-9b0a-5d66099e63a0", "indicator--be30e5da-22ec-4ec2-a507-c5b27cf67e4e", "indicator--a213cec2-40ae-463e-9de6-08f2f3fc24ab", "indicator--5c7cee2e-8108-462f-9805-56ea674f1113", "indicator--a63f1c4a-6724-4d81-8bff-1fedba476864", "indicator--d713921a-5ecf-4130-92d3-d83ea1a608b8", "indicator--72a284f5-4e1c-4495-888b-7054520b8a1a", "indicator--e530e21f-8c39-476d-b579-ccc738cbdcb6", "indicator--9e0542e7-544a-4b1d-815f-a53c7ef2d759", "indicator--13a44710-8077-4ae1-be7e-0a7f7b8bca1a", "indicator--0ec38fe1-3f50-40c9-b8e4-c9f37e05dd3f", "indicator--9e427d45-d847-4132-b3ed-13a98934d7ba", "indicator--bb0bf0f2-8633-4583-89b3-4aa506d148bf", "indicator--ac347a35-f43c-4aa4-983a-ffd5ab79bd3d", "indicator--247a5f10-7dbf-4db2-b60c-fd8eb5ff879c", "indicator--27c21f65-1731-4a57-807f-aae52cacf6b9", "indicator--8a23fb78-a890-4b4d-9a51-41f485fe5801", "indicator--e5dbf64f-e1ab-4977-971b-5f029bde561d", "indicator--6b9480d0-ae3e-4511-9d8c-37d4d28c067a", "indicator--20603b13-6b7a-49dc-8aa1-775589a9de44", "indicator--f234fc39-2072-4dcd-95c9-a79fa1230814", "indicator--83e6a332-0145-4ead-ad9f-29dce9669985", "indicator--392b57a7-cb26-4f01-8e98-323614fc5a03", "indicator--a8f717e8-ac89-4c2c-9563-e1118462f46a", "indicator--caec80cc-8063-4b74-ad71-ec2fe9cac700", "indicator--a833457b-dabf-4057-a755-0ea5f8059f7c", "indicator--7a111321-9e9f-48bc-b10a-6c1eb8d45c1f", "indicator--8e80e4b0-8f14-4dd3-a573-351c3778b656", "indicator--f55e4f2b-c472-4781-b082-2a565639f845", "indicator--2498d361-c7df-41bb-a6a8-0734aef59ef0", "indicator--62cb2c36-5ef7-44de-abbc-edbdc09c95a0", "indicator--68ec48f4-6132-450a-a7f5-83065cb22a7c", "indicator--a8cf5a28-2980-40c5-a026-e8531c2d5367", "indicator--ab6e80ce-2df4-4ca3-b4da-4551ccd9e42a", "indicator--7f6334bf-e4b8-42ae-989b-4ac19ed5448f", "indicator--11e1c5bc-f697-4d65-99f7-bb5a540f7787", "indicator--1e0e707d-c751-4cdf-ae48-c18c5f4e7e4b", "indicator--1223a7f0-b130-4aa2-9161-7b145530584c", "indicator--64bcc211-9836-4533-8956-d60ce4c901d0", "indicator--2e0bcf6d-e109-42e9-93d6-59cefc4f1b62", "indicator--405eef13-8287-49fe-bf84-579544893a28", "indicator--41761363-9f97-4813-ad7e-1123e8310d58", "indicator--1efcca9b-ce1a-4956-a851-2472eb621794", "indicator--7005a8b9-151d-4cf5-98a6-ca457c94ff86", "indicator--00ff9cbe-1cd8-4bc4-aab2-b04edfb1f5c2", "indicator--5f5432ba-9b12-4cb5-9f4d-fa413a8013e2", "indicator--261f550f-74f3-482c-98d0-0ce3b3183bf2", "indicator--2cb587e0-838c-439c-8dc8-a81e627eecb8", "indicator--6d49f32c-cd1e-48d3-97cc-5a6cce7495b8", "indicator--27d94f52-f127-49a2-956d-53378906cf77", "indicator--3f7c14e8-ead1-4c7d-b19c-82de134efc11", "indicator--6e62e265-cc2e-439b-b189-2886f67f0c8c", "indicator--645c12a0-00fe-4c3e-ab40-a524097701c3", "indicator--135af04f-c85e-4872-979c-34933ae1527d", "indicator--1c012fdf-1333-4757-b940-0c8a3b497f88", "indicator--74233a70-45aa-4bf2-901a-d1cee83485a9", "indicator--3d5014a8-3cd3-483f-a408-ba4bb0eb237d", "indicator--36a1cb44-cc1d-4972-bc14-ab8a892515b5", "indicator--42f36cbf-3623-43cd-88f0-6e168d634851", "indicator--8c5a58d6-39c9-449e-adc0-8a0b496e0929", "indicator--96611b06-5917-4173-9b29-15ff9c618720", "indicator--53b43912-ac02-4bb9-aff1-5d5bb2432ed3", "indicator--96ea277f-a6f6-483e-ad7b-ce268304a74e", "indicator--1619c228-3061-4e2b-af24-9783767f4236", "indicator--3c68089a-e529-4875-8ef1-1b5e67836158", "indicator--8aae4fc7-8768-4d89-a37d-9ffbd4e3f5c8", "indicator--76fa83ca-197f-4c00-8479-08d29fe5c981", "indicator--8a6eec84-fd9d-4f25-86ab-210f5cf6249c", "indicator--a46a0d41-9624-4a4c-8ed0-a1392ec9f8b6", "indicator--9afa970f-27fc-4093-9950-72115288c0e8", "indicator--141c3ad0-5ccd-4abc-97c4-031d1de1874d", "indicator--d5013fd7-02e9-4b13-806a-fae3e478f379", "indicator--fd9df1f7-825c-43af-8b45-c0aa3ed26959", "indicator--69d44dcf-16b1-4747-b3fe-db381ce4e40f", "indicator--14425430-294d-4bc1-97b8-717b96032ac5", "indicator--e81b338b-425d-4611-bdfc-ba0c55b3f69e", "indicator--a9bf2aa2-45bb-4b3f-b063-556625ea1e8a", "indicator--ade2dff8-14b3-4605-84f9-88b010529004", "indicator--49d3822f-d7a8-4978-aa88-bd23b4abf1b4", "indicator--e615afff-8e2c-46ae-b168-02dce9428590", "indicator--e2ee0a3c-8ac7-4d70-9dfc-63f6e1dec1cb", "indicator--630fb1b4-a5e9-47f3-a726-b454fbb8c251", "indicator--a234e842-508a-4215-ab3f-511d90783b15", "indicator--5823b6cc-5d76-448f-b980-a8f9a9c80356", "indicator--65f22e68-30d0-4c2e-a8ef-9665507a161b", "indicator--d0d18a0c-971a-467f-a07c-b1405e86a193", "indicator--51f3a919-06e0-4408-8e9e-594f0fdaf372", "indicator--20832b83-0865-4e65-857c-5fdb36b6668a", "indicator--a55268e9-b0f8-4304-a606-45af9c6aa2eb", "indicator--26a4e8b9-9abf-46ef-8e62-98676240cbed", "indicator--c75147e1-d517-4243-bf52-2c1d381eb355", "indicator--27e59884-e55d-4d72-9726-38911fee920e", "indicator--afb98a4b-927a-4d1c-8217-a53a63b2d244", "indicator--848ca72e-d7eb-4e03-bdaa-929510657b73", "indicator--30a01406-dfcd-455b-92b5-e646b55322fb", "indicator--f6dccefa-17c1-4b43-820d-fbc8b8e7020d", "indicator--0ba514cc-0d31-4181-8d12-67a934665b46", "indicator--08ead9cd-2e0d-45ea-a49d-c89539721aee", "indicator--e546c9ad-8383-4128-b699-1a2cd0d24c31", "indicator--7f9cbfe7-85b6-4b54-85b4-7f21ea07658a", "indicator--a3a9b8ed-cda9-482c-b61a-fe9c3a14d12c", "indicator--bfa18693-9c79-4480-9b80-6403e9627856", "indicator--70e3b3bf-fb90-47db-832d-12a9817c20cd", "indicator--d9579da4-4623-48bc-853a-4286037735f1", "indicator--2985f8c8-f5e0-4aa2-aed7-a238c1a7c7e8", "indicator--1d2783a2-98a4-4210-80a8-0bfb03f48906", "indicator--e2fcdc93-0f5c-4886-85ef-eda8f69731e5", "indicator--68c4c82e-e3df-4537-9de2-33e45298f85c", "indicator--2c061c17-5112-4088-9d46-610ad769db5f", "indicator--067e8c5f-ec80-4aa2-9479-ab6b66416610", "indicator--f6cf7206-4b70-4483-bb5a-8d321741e0c2", "indicator--8c2c74d5-42f2-46d3-a651-3b6577cc75f1", "indicator--dae64f9e-c813-435f-b03a-618dfea5233c", "indicator--9a7ca24d-dc7e-4e49-8941-f07b49fd8ee7", "indicator--50cd4f8e-a797-4976-b7be-acd42cc5b039", "indicator--90f2b1ad-d946-4661-9cb3-0bff1eae428c", "indicator--382fb552-fc05-4fc0-b870-464cd22ceb70", "indicator--3256f750-7c75-40c0-ba47-e20dd19199da", "indicator--adca030b-38c6-4f83-807f-fdd592b8ad27", "indicator--7b2e7d8a-b251-4d4b-9fb9-46f7e1ebf783", "indicator--edf54707-6e29-4d0d-88ce-8785d146a230", "indicator--186d9765-9f3b-4bc6-8ea8-a7e61c20b44a", "indicator--86a5f428-f1a7-4eea-9002-c12ed831308c", "indicator--17312715-1c03-46d9-9f70-616094de6188", "indicator--1f4d32b3-7005-4452-a2b2-2bc99e15bd3e", "indicator--c6f63e83-0d61-47c5-97d9-4a72957ee7f4", "indicator--952fc68e-7852-4911-bde0-efe0eb2b61e3", "indicator--e9bb5326-fc33-41d9-b8e4-6b0fa19a97a7", "indicator--a0ca44fd-f8fd-4fc2-bf70-a53008493106", "indicator--67337d94-afc5-4269-ae52-7f275b13356b", "indicator--261d3ff7-c879-4b55-b45a-3c0112731c51", "indicator--d5db6d77-cc5f-4568-be01-c6f8d3edd548", "indicator--b73a098c-ec4b-49e7-ad07-f09aa68e0871", "indicator--0cece8f4-1736-41ea-8a70-5c872f2a5b9b", "indicator--64c002a9-0d77-4a07-aaf8-e2347c0af504", "indicator--de721f69-169c-4d57-9877-5e4939a84c07", "indicator--b5ca03d5-d30d-42a5-8c1b-9705c5a0a027", "indicator--0e82cf8e-6058-4d06-bef8-690962976fe7", "indicator--801088c9-3988-42d7-aa0c-e24513f8c7ed", "indicator--f91c92d3-82f9-4451-8140-d8e316d4cb57", "indicator--eaafcbde-2061-42e2-ab1c-e323dae83495", "indicator--c8e0de72-91b2-466f-b988-cb66c1352900", "indicator--b5a939ca-fcf0-4ed5-9e5a-b132af24b22b", "indicator--bb5627b6-e5bf-4522-acac-e5684e994a97", "indicator--f69233f8-2965-4b12-b236-c9bd21354936", "indicator--6ce1820c-8b6a-4a87-988c-d65c5fac1fca", "indicator--2a5cff7d-2005-442a-a0cd-aa71d1e87328", "indicator--7c1b5e55-138d-4234-a6c7-b4dee34b1caa", "indicator--9b78ac2c-ceb9-4f22-9dc9-26f2a136c0c2", "indicator--80fae822-a215-4e6c-bf2a-53dbbfa2cca1", "indicator--bc97ffb8-3c2a-4852-8065-30268d1553a3", "indicator--28664b6d-0bde-4fb6-8eee-68966502b57a", "indicator--bd9108f8-06d1-42f9-b4f3-b80b7dd42373", "indicator--3cace55e-7eb1-49f4-97e0-26c6ea4cd9ea", "indicator--f77247a3-9292-4d33-a8e0-ac49917d9199", "indicator--5a227cff-d016-420b-a928-c090c5ccff9f", "indicator--73900b48-31d9-457c-ab0f-120c4096c9cf", "indicator--c03cb3d8-d14a-4f84-85f6-51a068a47c85", "indicator--b276d16f-e396-4408-b31f-4f8fd2dd1e10", "indicator--31bba972-f551-4c09-9f66-f307ab2425b1", "indicator--e7bf4e4c-5772-4442-9fef-7841e6484c1b", "indicator--c2400425-7dd2-4314-a6cd-0da826627a24", "indicator--8dfb522f-7fbc-453c-afc1-f347179ffe66", "indicator--b630079e-897c-4e3d-b5b2-43598a4ebc18", "indicator--9278953f-89de-4dc5-b153-c3d16e9a7b3c", "indicator--6a145a1d-7f38-4eeb-af19-9607bfdefd9f", "indicator--d96b7989-a221-4385-b308-9bc537ab2151", "indicator--b8a14ed5-1441-4a2f-a395-caf01ca4dd7f", "indicator--d5857a66-8bba-4d50-b3b0-649af255b51a", "indicator--d75795ed-e336-4d14-8ff5-f7251be73042", "indicator--e1f9cbe9-47d5-4668-8196-6f7bbbc9f79e", "indicator--124879b5-692c-4c83-b096-554cef551ce0", "indicator--776b53c2-bdeb-42f5-ab7d-00c5658b069c", "indicator--76fe5f9b-dcab-4e19-a60e-a40601783ce5", "indicator--680d5d76-7835-432c-b938-2ec2626ef2c3", "indicator--774625bd-02c2-4bb4-be20-c10f56ed0142", "indicator--525a6a3f-a4b6-4ddf-9756-df26d278cdaa", "indicator--4b1347f6-7b31-417d-b2fa-c6cd0380414d", "indicator--07470003-3c85-468d-ba93-6d62da5425a1", "indicator--1f6997c0-f698-433f-a027-f6ebfcc84303", "indicator--ef12c606-8c72-4ce5-8f18-680f27bb9432", "indicator--728cb246-5f4f-463b-ae8d-6d201bde9d7b", "indicator--41825585-d77b-410a-a082-10cf64eed77b", "indicator--19c4dd11-5574-4c48-92d5-df488e6a001c", "indicator--0f6f2117-3724-4f02-8e6b-f82901dc9017", "indicator--a08187ea-ee07-4ce0-8752-13529328c440", "indicator--1356cda5-8ebf-4ba0-b790-034b10a65833", "indicator--7aa93d9e-75aa-48e1-b4ed-f5838e1af7ab", "indicator--fed3eac8-cb4e-45f2-b372-d4ee6d17e2c7", "indicator--b1c153e7-5303-4361-9fb1-0fd13e72d6d5", "indicator--51c52c24-f00b-47c5-8d2b-3eeeb5a84d2c", "indicator--ce6b261b-6e31-4ec6-9dcc-0b0d3fea8fb9", "indicator--9209fb0c-229f-401c-81a2-2bfbf51a9b68", "indicator--33a13529-ea8c-49a7-a8af-b4cd60f8cff2", "indicator--36e538ff-3734-43c9-8b47-1cdbbfff8b22", "indicator--af9936d5-173e-47a3-91fa-c5d5923ee4b3", "indicator--392ad431-dffe-4265-858a-854f3ac973e3", "indicator--92075470-a4d7-48e2-9085-2c26aae97da6", "indicator--f3388098-35d0-4083-bc5c-18e9833485c0", "indicator--4d0e8330-206d-4637-99b6-0eac8df85b88", "indicator--f1b2c841-6b5f-4631-9a1e-13ae4ec84774", "indicator--8a46f1bd-7546-4ca9-aef0-c37b12db35d2", "indicator--c25963ac-b7a6-4702-9300-1ea81e8b2cd4", "indicator--01b51740-d71f-4d01-8fd5-843408c243eb", "indicator--b3888491-efc9-4f37-926b-17996db63bb5", "indicator--9c7615c6-6ee7-4a57-bffe-17ecb2672878", "indicator--f32c9e82-922b-4994-982a-00020281fad6", "indicator--f58875f4-ed10-4f7c-80c3-3b607956286f", "indicator--9948eeb2-42aa-40d7-bd5b-4e445ce4d504", "indicator--729573bc-ddc2-465c-9668-f5f7fdb9a1d7", "indicator--3ce06534-1ee9-4287-8ab2-1d188a7777ca", "indicator--3169b775-8ce5-48cd-a810-2d8183a5b742", "indicator--bcbf2baa-abf3-49a3-8ef2-192d532fac70", "indicator--164b371b-6362-400d-b596-6f455670e168", "indicator--df9d4fe9-f673-4603-be9e-3930516a9a67", "indicator--80d85988-b3ab-4fd4-b9ff-dcbff2c5576f", "indicator--f4cf5a0a-89ff-4d14-89fc-8992a3b66175", "indicator--a8cebe95-7025-45f4-9703-59154feea4ac", "indicator--f279b808-5fa6-4737-a5f7-9bc93e291330", "indicator--65bcee73-64e7-4c8f-adff-b25895b96780", "indicator--b6b51229-5213-4dfe-91b4-fca4ce625c81", "indicator--c4d849f2-d512-4a69-97ea-0ab5cc75fb0f", "indicator--f0b0c911-f6e2-43c7-817e-7a96b5b468e9", "indicator--05649e94-e5a8-45eb-9ab2-b5f0a802a7cc", "indicator--ffc52fb1-f055-47d2-a259-6a94f35489a8", "indicator--f406bbd1-0319-4f23-bc10-ec4adb47d1cf", "indicator--fe17059e-7d4b-494e-9066-4e0c841d3869", "indicator--a4b3b87a-761a-46d3-83da-639c15ddb650", "indicator--fd04270c-559c-4602-8783-ea11d944e26b", "indicator--ed0b3b5b-7267-45e8-ae32-2dae26ef1322", "indicator--9539f37e-9340-45c1-b0d5-94beb408a917", "indicator--a977e71a-15ba-47f1-a9d4-d339d1cfae29", "indicator--0a9f5acc-079e-4c97-a14e-802b8def0eef", "indicator--feed5391-d0e9-4d27-9729-ac8f97590d19", "indicator--e279581b-32d0-44d8-af02-5741faec178d", "indicator--cac2ad11-3128-42c9-b0da-cb03a95cd06e", "indicator--751e4f26-c37e-4ddd-bf82-0b601061d4b5", "indicator--1da52acf-a766-4b04-be85-ab76e5c41df2", "indicator--98a4c569-b285-453d-9100-2d49ed8e7ffc", "indicator--fec74bf8-8a76-4ffe-930a-524e0b4b0910", "indicator--35553a12-9d84-4c7d-bf66-027ea424bc8b", "indicator--cea5e99f-2881-44de-9abf-151f2e889dde", "indicator--dcd05dda-a258-49f8-be9a-6fb201714f1a", "indicator--5f8d605c-5a09-4f21-9bc2-4fbc9d29d901", "indicator--087b6d9b-d75b-411a-8b6a-180f7394c220", "indicator--007955f2-5595-41a8-889c-0aebdc530b2b", "indicator--3017eada-12e8-4cb6-88a1-6f0c5e868385", "indicator--5611f76d-8856-492d-8d9e-2a0909196e6c", "indicator--4461bd04-bdbc-40e2-b223-017fbf1d0fe9", "indicator--ef7e9e4b-3da9-48ab-b631-2d2599810fd2", "indicator--69391fb8-0da0-4927-956f-a3dc442d1eaa", "indicator--83b50203-12a1-419a-8623-98cbd330ec3b", "indicator--7f5cdc44-a86c-4509-9057-2b151813e66c", "indicator--e2ed874f-fc80-4b6b-9be4-a88548397a45", "indicator--87cf8a0b-c668-4445-9aba-6bd8e34bb50d", "indicator--70e6a60f-7af9-45ce-a3ab-1be2383ad26a", "indicator--8ff32b4e-f86f-4e41-94cc-4343739e87b3", "indicator--2f14d0b1-bdf5-42dd-b641-1623ef279bb8", "indicator--23f08ac6-75a0-4c9c-b443-4e2275cf8642", "indicator--ce776d9f-9cb7-4901-b1fe-852c76c28ec2", "indicator--2252d127-dacb-457e-9461-5f1fb18dc746", "indicator--ae67fbcf-d82a-4ffc-86a3-8b208b23eedb", "indicator--156ced10-276a-441a-9d02-8f40bb322688", "indicator--0b156cce-67fe-4645-b4f4-909b884777bb", "indicator--70bb3b16-666a-4e0f-a8c5-78fe5a4a0cd4", "indicator--1fef792b-a0bc-40e9-8948-13a2b896a238", "indicator--658e1df9-c2a8-481f-a190-428423759d3b", "indicator--9f2f34c7-1f0c-4d46-b282-d2c281b1fdd5", "indicator--74a3fea4-faf8-4c6d-bbda-d1cb903b12c1", "indicator--03b2e062-8f60-47df-be22-63aa976655af", "indicator--79811144-c75e-411c-a7ea-fd9dfc2eb2d0", "indicator--19d3b65c-60de-450e-8cac-904159e91228", "indicator--455e061b-63e1-4267-875f-c66e1a1da0e5", "indicator--0c883531-e91c-4c69-b910-5ab446c19959", "indicator--a8f8f8e2-ef79-4be9-827e-1b82432298ca", "indicator--aed1a124-252c-44f1-a410-c6cb62aa1511", "indicator--5d77e082-7e5b-403a-baed-2c95dbe2bb8d", "indicator--e4abbfd9-78ba-4400-962c-92b0e6c6239f", "indicator--139536de-6284-4c3b-99d0-d030f3070750", "indicator--1c1d45f8-14bf-44a7-996c-63757015c7fd", "indicator--5b02c449-c296-4bb8-833b-0a9397d87357", "indicator--f2b86a20-9ef3-4dc6-9fdc-a5944bcda959", "indicator--6fdf1e7f-be87-4cf5-b7b3-0700200daa49", "indicator--269f5bfa-c473-4aea-86d9-cb2207b9b498", "indicator--095bff6e-255c-45ba-b51f-5ba051987e45", "indicator--64190f27-3c74-4c6a-a5af-7c000dae5166", "indicator--6d5e85cc-5cc2-4d03-aa4a-fb4defa7df05", "indicator--49dd8aba-91de-4514-ba2b-ffd56ae5b5df", "indicator--945e03c3-0afa-415f-bee5-6fd143a0e957", "indicator--beacea12-8c6e-43ed-9649-17d01490c2fe", "indicator--57f91ec3-8173-4ef8-85e3-abe03817c3fa", "indicator--db21ce40-2528-4d77-8a14-29e248ef293f", "indicator--9375b26a-1c7d-4b7b-987f-609c2f4d1a2b", "indicator--ca5d2a30-14bf-4696-a72a-76dd14a39c5d", "indicator--75a4ec19-4390-477d-98db-10803258f33e", "indicator--b60ba4aa-0399-4f8c-8a45-b448f91843db", "indicator--6ab41d7d-a1d3-494f-b6aa-b9e14f25fd18", "indicator--657f63ef-2fb6-4de9-84b5-3b5e171558fa", "indicator--67a339db-2137-42b5-b702-6de2ff21da90", "indicator--fc7cb0e4-7077-42b4-9908-dfb7423a72cf", "indicator--c2c96878-ff1f-4705-a6af-7ba5c19b1d6f", "indicator--82cc68ab-c5be-4528-b76c-5402352edb40", "indicator--606bfd6a-a8c4-4864-a20c-55c7b9cec97e", "indicator--e824b103-ec8e-48ab-96dd-71ef487b3685", "indicator--1c02d7c1-5832-4776-bb79-92c3918c8a4e", "indicator--b4292bb8-44c9-40ae-9e9e-76f0648de75e", "indicator--1eb417bd-98e1-4f36-a0d5-a7e96f961d5b", "indicator--1d003290-f3f0-4acc-bf01-31f005c37c28", "indicator--9ea44aea-e6b9-4593-ac4f-dca794136bab", "indicator--bf26ca97-280c-4b40-83cf-6366f47623c0", "indicator--577a4137-f811-4fcf-9f86-cc0cd4d065f4", "indicator--9c48a1e6-9551-4e27-8523-b5be189e30f5", "indicator--2c8dbe45-ed48-49df-b98c-7f3850197edd", "indicator--62394c8a-9d3e-4138-aab1-ed3bf61c9415", "indicator--a6a66e5d-4d7c-486b-b3b6-41ec671c3403", "indicator--a2b40181-8607-4aac-8fc0-602799514b4a", "indicator--6d6c6fde-2344-43a0-aa3e-31bf80191369", "indicator--6c33b17c-0d40-4727-b88f-16a8aeeb999b", "indicator--112a6626-777d-491d-9bbc-e30ea2c6f2fd", "indicator--829536f1-5582-4908-83db-be8abdb4fe8b", "indicator--14e154c6-b184-4d0a-872c-81d6f4babd44", "indicator--0691e980-01e7-4381-955f-55cdae7fe39a", "indicator--9c78f061-e9f2-4717-a2c1-65c4a8b1c80e", "indicator--2301f8f0-f393-47e0-b2be-9ce2725ec887", "indicator--377520a1-e70d-478c-8c94-f22ac832792c", "indicator--9f62e71d-b9c8-40b9-bd22-8820d0e5cdab", "indicator--75f61292-b542-40de-a114-9bf6dd8d1e9a", "indicator--a3472440-4b9a-4ce0-b279-66526630e167", "indicator--1c166747-e3ff-41e0-8b9a-35f93d33373d", "indicator--4f590568-dc79-4cd7-9525-abc90679bdad", "indicator--b946468a-3597-4583-8c06-4b6fb8ea1a12", "indicator--b6a533a6-cbb3-496c-996f-10d6360e2bb8", "indicator--ea205b24-8f07-4bbf-83d4-9aa680dbd7f9", "indicator--717b5da7-0dd7-4437-959a-acf6f7e7943e", "indicator--b18d1199-d9ce-4297-84bf-494b65c26ad6", "indicator--a54e7540-723f-4164-b828-fff09d11d7bb", "indicator--3ede2099-90ca-46ca-af39-a8ce6446a207", "indicator--644c345b-c564-40e9-80eb-8efcdc80d104", "indicator--54c31e13-125a-4004-b84c-915905c103e3", "indicator--8227c1ea-6776-4b05-ad1e-0857ef081f3c", "indicator--0bb8ae8d-b369-4bbc-a6a8-6b4a15ca5dd3", "indicator--f63b90c5-7deb-4b16-96e2-81d08817fc9f", "indicator--025331d2-eb95-42bc-a348-ccb948cae681", "indicator--0ddd140b-ccd3-476b-aea2-b2192506bcde", "indicator--43d9dc61-4836-41b8-9c52-3a9df54c49ce", "indicator--2a9e3a95-7b7f-4011-9b40-ff3f63dc0900", "indicator--7c9e5e73-01af-4fd1-82d3-d6b0fbff1479", "indicator--e7a160d4-90aa-4ff3-aa37-b1d1f4759062", "indicator--1a23ea75-c139-4ee2-bba9-ba2f47c09c8a", "indicator--23e8f5b7-78fe-416f-875f-25c12254161a", "indicator--191edd86-ed1d-48f8-89ea-a1fbf5d9e2b1", "indicator--4ab6b932-97f6-45cd-a258-4ee1ba427376", "indicator--07e5be50-201b-4b11-b2a8-651eef3c1699", "indicator--e8338a38-87b1-43e5-882d-d4d4ada53ed3", "indicator--7618773a-c4b6-4400-8180-8706c850f631", "indicator--16d16239-07b3-4854-a2dd-2b969b7c70be", "indicator--9b78306f-81bd-4632-88b6-d04013e6dc33", "indicator--6b1d1a24-f2d2-43c0-afd1-e05ee03f3365", "indicator--5089852d-8d2c-426c-b89a-ea367bd36a5b", "indicator--46fb7f14-6e81-42d9-b4f1-fa70379da833", "indicator--a54c3071-71b0-40fb-9c59-5869885120d7", "indicator--8bae3708-d5b5-4bb0-8dcf-d3bcf0af97aa", "indicator--84931955-de1d-4357-ba6f-42a68887193b", "indicator--4ef50023-b422-4e49-b690-276a9cdb2a0d", "indicator--19bfe672-6a3e-43bd-9815-d84c2c70ef5d", "indicator--c5a6d027-26b1-4da5-86f4-2074cf59dc80", "indicator--da8b9fc8-5d26-4516-9ea6-437b120c5814", "indicator--4cdee7ac-4c39-489d-8fc2-b1bd846aff83", "indicator--330bf636-ce1f-43b6-a95f-519723297434", "indicator--347030eb-f0bf-42d0-a47b-3373b9a8e693", "indicator--e09d44ae-8b0c-45fc-8118-9695a23ca1e3", "indicator--b94e69e9-9e82-49eb-9957-678588645ac6", "indicator--41f31145-ef1d-4f7a-890d-d77a7bdd8f29", "indicator--07d9feb2-9fd6-47f5-b3f2-70c333900f29", "indicator--624f3c8f-b2a8-4525-89c7-2493fe6a881e", "indicator--95e1d98a-119f-4ec8-8975-9b369a9c2e88", "indicator--b19e8cdc-d7d2-41ff-8285-d63d39279141", "indicator--a4f15fae-3513-4f6c-a1e5-10e01ced41ad", "indicator--eca14ce6-5845-4b0d-bce4-08058cbc138b", "indicator--cdfc55fa-d422-451d-8762-772afa8e05c3", "indicator--0fd1da60-e9f3-4794-9395-d0497f4e41a5", "indicator--b23c4c56-6ce9-4a22-8a4a-fd851f1be8ab", "indicator--dc78536e-dcbb-4ce4-a938-59a57d982f63", "indicator--c1a28b95-a591-4d72-8ad8-76ebed190102", "indicator--54e1b1ad-0d32-4961-a75b-aacc0b567b2d", "indicator--8c3ac080-3aad-482c-a854-453bef8350b8", "indicator--d3f97a87-7481-43e5-add5-cf059f198057", "indicator--972fa05b-c1ed-439c-95f6-19855b017ae7", "indicator--a431e458-8370-40d0-acc7-62ab0ecc16b8", "indicator--2cb09bda-97c0-4a86-8559-58e0ae8e5b60", "indicator--bcdbf3e4-c211-4137-8a6a-9959200e79c6", "indicator--dd4c4f51-940d-4ba4-af93-89420d36e293", "indicator--ea19598e-8c3c-48d4-80fc-23583b57892d", "indicator--efb5aa3a-9f06-4ce4-88e5-cba101f9fd89", "indicator--67f42a55-a696-4bc5-b08b-b381e1203462", "indicator--2723f420-bd19-46fd-af1c-36388aaa5c01", "indicator--94175f49-dcae-457b-bc74-86be36520b84", "indicator--05cf9c93-927b-44c9-a6ff-a24142f786c4", "indicator--bbc253a9-d8eb-4174-94eb-76356d6143f4", "indicator--f44b0392-cdf3-43b8-bf4b-fc249387fb8d", "indicator--fbe771a9-7cbb-492e-9014-2e27ec3e881b", "indicator--3af56d03-f8d7-4e83-9468-4a7622c3d1a4", "indicator--dd0ac574-f7ea-4a8d-8697-812e0ed0cd1c", "indicator--5b189d0b-a605-4d42-b2d6-296c68ef07f1", "indicator--7ffc90bb-e560-49ec-b1fb-836a6c9a12d9", "indicator--14bd3c48-0600-4996-9a05-1ba3d48a17be", "indicator--513ded66-f3dd-4096-8d57-b5cf0ff75047", "indicator--15d92fdc-7aa4-45f9-8871-095ed514a6b1", "indicator--c3a7e117-e4c5-4846-b293-b72b34a0730d", "indicator--97ccc3fd-3f89-4fdf-a59d-0a441359c0af", "indicator--c94971df-07c7-492b-b06a-63c907a6156e", "indicator--fb013ecf-08c3-431f-aa1c-6cfa5cae319b", "indicator--bfce1a95-0f44-4d81-8992-957b4268ec99", "indicator--97319baf-07b6-473b-9810-914da89ebe0c", "indicator--fcc58dee-05f3-4202-a1f8-6664110219b2", "indicator--12953213-65a2-4ca9-a8f7-b0c64412d500", "indicator--5403c5fc-b46d-4f16-99fa-6b2f8943eedb", "indicator--2d8a7cd4-c68b-4b45-8e46-d555bef3ab5a", "indicator--56a073a3-9e94-4eb6-9e4d-8c63034947b4", "indicator--5040b39c-dc41-4741-90df-23aa558d4485", "indicator--08affa73-603d-48d3-a0e8-d0f838abc861", "indicator--93b827db-e79e-4d21-8715-122e2f4cf90b", "indicator--281f30fc-2ff9-43bc-a895-dfef153ff6b4", "indicator--7418c3d4-d109-4446-9ee2-dada30a4b253", "indicator--bcf87c04-b790-4bd4-8a95-7a3a21a4562e", "indicator--bd6ebfc9-1227-4bc3-8ca9-c7837418296f", "indicator--12b613c6-f1b8-4a2c-addc-70fe8e792551", "indicator--9649fd23-ad50-4d10-b874-25d56ba40ab0", "indicator--46d3bc72-74d0-43ee-8ecf-3fab0525666a", "indicator--ff4767f3-abfd-4149-a43a-1d1ae5b0a9c9", "indicator--982e9ea4-d861-4839-bc73-75a249aab8f5", "indicator--144c41d9-8564-4f3e-8ed3-e846335e2bd2", "indicator--4e955d52-38f4-4253-bc40-be3fe7109207", "indicator--8c2ef03e-853c-4136-8e2c-e2298882f4ed", "indicator--54a53465-2fb3-430f-a2ea-3e20a43c9c0c", "indicator--adf3401a-6fcc-4b85-9000-037f2915cdaa", "indicator--3e3f735d-f289-41de-8599-359bcb5be972", "indicator--bee0df59-fa77-46f3-86ab-2075f847c580", "indicator--e86f799b-d746-4168-9c0b-660ee5ad8872", "indicator--1b3af63e-c58c-4b13-bf2a-229064de78d7", "indicator--f4f257db-2367-4547-9137-3590ac75d8ff", "indicator--eeb2e336-ba7e-4895-91a9-eb36fc980095", "indicator--df33bf8d-6c21-4afd-a016-f44c70beb443", "indicator--94f69169-4c91-440b-953a-cf44804ae5a1", "indicator--7c4da53a-9bcd-4493-99d9-c0d19c83fc89", "indicator--dfd5d39c-ab80-46eb-88f3-72eb5150acf2", "indicator--8b5ce8fd-f15f-402f-bdd1-bc91f531a1db", "indicator--e17c1cc6-08c4-495d-8901-3369847d70b5", "indicator--f53a3843-28bd-4675-82d1-6708fa24d91f", "indicator--11cafa87-7592-4334-a471-23f8b2c0682e", "indicator--2106f769-9a02-44e2-8a9d-0440fea07242", "indicator--a16da140-12d0-428d-9231-3e0382c8912a", "indicator--e941cbf5-f14f-4d62-b2ea-fec665c2ce5d", "indicator--ab4bef81-191a-4927-a610-649745971bc0", "indicator--32f4c951-f230-47ce-848f-c90266e96e34", "indicator--13f86110-e295-402c-801e-72df41e41056", "indicator--7c825e9d-7a3a-4559-86b3-88ac24877e95", "indicator--2d85a8a0-ea91-4656-950e-437324cc868a", "indicator--afc20a18-8948-4edb-820c-5e3e7a06d5ac", "indicator--6593c1aa-1827-40bf-bebf-7ad6c2593e17", "indicator--57e6be5c-d13e-46e1-8e4b-1f7f35c7d1ef", "indicator--16851c0e-8085-47b2-91d3-65f5c2424de1", "indicator--199ea143-0a08-4bf1-bab3-839f36bbd008", "indicator--a1baae52-4893-48bf-a009-8bc6aa6fee42", "indicator--c12dbecc-8442-4f22-b267-1acc9e5bf6e1", "indicator--18707a3c-c4fd-4205-964d-8b0adb073988", "indicator--7ebf72b2-d275-4b7d-8dbc-613bb8c8d12c", "indicator--19f11f68-c380-4923-b15a-1f6b8d84eeac", "indicator--fc9722dd-be85-465e-a1b8-df329ea4ff7f", "indicator--f70a05a9-77d0-4bba-9352-bbb2b49ee682", "indicator--341946e8-719e-46fa-a14e-0c5c1a7399bb", "indicator--8bddbf28-0882-432a-97f4-def6adfb6924", "indicator--da7ac340-e194-4b0b-9eaf-e870baf8809c", "indicator--f3e2d3ff-a464-417d-9254-bf6f349496db", "indicator--7f140285-f351-4853-a060-d3cf3ecc8303", "indicator--6072d509-ec45-4454-ac62-cd632a87185f", "indicator--6154ed30-2014-4231-93aa-ba7a8332591a", "indicator--7c198344-2f64-45f5-973b-f889efe67166", "indicator--b08e6dc8-d8e8-46ce-80a1-21fe7431d8d8", "indicator--59d83989-3e24-46bb-a1ef-a046b3098ec9", "indicator--6412d0ee-abf0-43df-9bea-28bdfc528a4b", "indicator--f284c6a0-6a9c-47b9-b18c-92ca5fbd953a", "indicator--ecbce55e-6891-46f6-ab6f-5a219f8165c6", "indicator--ba964c03-2c38-4c88-8bfe-b092054f6f36", "indicator--09e925fb-4c8b-451c-9a9e-61ba8b0dcb07", "indicator--938aa2ba-feaa-436a-b6dd-08bd1e3d7f39", "indicator--4fd2e382-552d-46ff-93a5-7f56135b3cb4", "indicator--84f8117e-2150-47b1-a9dc-34a5a1486f36", "indicator--f95c6aa8-816f-484e-9582-d4ccfdaf9523", "indicator--96586ca0-8719-428c-9d98-0c0606451c2e", "indicator--e3bd9dba-f3f7-4296-8b47-c8477f45f394", "indicator--24e641a0-9745-4994-9cdd-f77583843a88", "indicator--90447711-8a02-4b61-9012-2f1f6b2b95c7", "indicator--a2909318-fbc9-4720-a828-9c2ff2da3a63", "indicator--2ed04ee3-f2ad-45f1-be86-4604024f9c54", "indicator--0f1fc3cc-e747-4770-b681-d8e79feaa31e", "indicator--a0c84427-589d-40c7-8340-6837144777ab", "indicator--fc617cce-7144-4cba-957a-7af3e2440090", "indicator--62df1e74-49ca-43ca-9c02-d644f64fe4aa", "indicator--c84e55ab-fc0d-4d49-ae64-4e0b97117788", "indicator--a1ee9ad6-297c-4e6d-838d-ace9a1f117f0", "indicator--1559b4a6-a67d-4488-903c-cb5f156487a6", "indicator--42efe0eb-e685-4fac-a6b8-0b3658162dba", "indicator--6fd09097-dbd7-4067-a35a-a1467a383d25", "indicator--4df13c0c-2745-404b-9885-1dbca7f0645e", "indicator--ba61ffb9-4a10-424d-8701-29616ca2c26b", "indicator--e646301c-cb5a-48fe-9317-e4284a23010a", "indicator--01c6daa1-d2f5-48c4-bf7a-ea3d29778afb", "indicator--c343eec9-c49e-44dc-aa76-611db3d666fd", "indicator--c3f9500c-91ec-4cd9-b4f9-07a3331baa00", "indicator--64eb2c2b-069f-47ee-b1a1-47bb62e5ab19", "indicator--feb23af3-7bf6-47b5-ab1e-bb1235dd7a36", "indicator--d99059c0-e4aa-4377-a761-e00b38d76b8f", "indicator--63b49df4-6288-4587-b6a6-412728e39ad5", "indicator--470c1249-613f-440e-877b-73b154fb694d", "indicator--e89eae51-2eb2-4523-b1db-d35df4ce73a3", "indicator--44eed116-aa0a-4e02-bd2c-6fa8a19634d9", "indicator--928e7be4-274a-4636-bd42-75ad96ec625e", "indicator--c0e6489b-197e-4589-b13f-0ece8632ded4", "indicator--3a88a511-2d63-47ab-bf3c-8458f018fe16", "indicator--d6cfec77-dfac-4c68-b160-cb559a4bcdf2", "indicator--95758bcd-394a-4bf8-9aef-d80b1ec811c4", "indicator--3a74e815-ee44-4cfd-b83e-900762ca8f44", "indicator--bd9ddb64-0cb0-42e0-962f-76d165d5b29f", "indicator--ec154adb-d748-4f14-8397-10120f2e837c", "indicator--2e87a685-54bc-49a4-b0bc-0204889c51f3", "indicator--4ce5bab2-4b69-4618-9a24-21673657e58d", "indicator--71b37fe8-cf3a-41fc-a025-bc928b8eb4d4", "indicator--7b6f335a-7547-4b6a-b481-32f21ebb1a65", "indicator--8eedadad-3556-4f7a-92c0-8bb655d6a556", "indicator--d15b77d1-80e2-4cd2-89cf-9d588e85e8e2", "indicator--1813caf1-ccf8-40a3-9c90-f056acd047eb", "indicator--35f1b965-26b0-4163-93e2-03648b41e53d", "indicator--2104f166-714b-4398-83e6-c0ebf931a3c4", "indicator--699f390d-4866-4b89-a711-a5a47cb51902", "indicator--4a1af8d4-32af-406c-bda1-562cbec31a9b", "indicator--378e44a2-aa55-4186-ae28-32a374f50eb0", "indicator--6436b6e5-6c8e-42b4-9109-7b475eb0eee0", "indicator--f5e9916d-8cc6-425f-a414-d0a0187eaed6", "indicator--b319f7b6-dd45-4d1b-bf6f-9140e7520fae", "indicator--ca3aa93b-cbce-4265-a377-b52825d6b4a6", "indicator--1ad4a91c-b00d-4a1f-a63c-6d503e065255", "indicator--b0e3158d-fa5f-4322-bcf1-b8f9d7db7ea5", "indicator--141c4a73-f5d2-4701-b18a-3c437dd2c08b", "indicator--b755572f-d14d-45a0-b4dc-a045b2abbb92", "indicator--c6ec8a1a-2231-415c-8d1d-608c8d9ebb6a", "indicator--74f6df6b-9774-4d38-a602-ac98ef6cd1c6", "indicator--7c98316d-4b3f-4bc5-babe-f54f9902a227", "indicator--8c6511ee-1247-4f3c-b9a8-06bf1079f56f", "indicator--77ac4176-0beb-4437-aa91-23ac7be0abb8", "indicator--f01e9259-aed4-4486-b41d-088dc150725c", "indicator--18d60e02-d48a-4e7d-b6e9-9c6c1dd8e2c0", "indicator--39b052b4-5d71-48ce-b3f9-0fd04ce8b00b", "indicator--2ed09f69-4138-4c03-a113-614b40dbab78", "indicator--68accf04-3bcb-4d62-9353-fd389004f3ce", "indicator--49940c00-62c3-4066-a922-fb91da05a98f", "indicator--c91482c9-134d-4032-987b-34cf681a0603", "indicator--46fce9c5-bda8-4ffc-b01e-88b6559941e5", "indicator--cf8e4aa3-49a8-4587-91f0-763f2ad636c7", "indicator--e06c8f10-6a18-4da1-91e7-a75e75a7acdc", "indicator--1bf58ccd-5a70-4a14-a68d-e7b51f559ac5", "indicator--beb0c9ce-c34b-453f-b8dd-2fb6bf093671", "indicator--068bfdb3-3715-4b44-885c-9334a70e1595", "indicator--890c6e2d-74e0-49dd-8cdb-4e4294bc457d", "indicator--114c7edc-c47b-4c48-94fd-8ed3756b5655", "indicator--4ce2d6d2-5b7b-41b5-9f26-68c39f88a422", "indicator--1c3d7df4-3f8e-4444-a378-ab5b69c37df6", "indicator--1b2c12b7-c9e6-4c13-a578-fafc59402626", "indicator--82b9ff78-c6cb-4cfd-b61b-34f67b53f7a5", "indicator--b927eae6-ae43-4229-a4d9-bdfe6965f5c2", "indicator--67caa1d9-6006-4afb-9c07-6cfb240049fc", "indicator--28147004-66c2-4f50-9f2e-73a98b7aa904", "indicator--75274561-ed81-40e5-9382-2ee47570925a", "indicator--0ac30673-d0bb-41da-a2df-dfb13cd01541", "indicator--c0dd6b84-f976-40aa-8416-24e258896901", "indicator--21822dfc-771c-4d63-941b-7f9ab5d4def0", "indicator--61359d8e-d5d6-4c06-ba05-6527505d2ab6", "indicator--cd9c4739-fe1a-4db4-a22d-dc2549f53857", "indicator--17dd2c2c-2988-4796-877d-d97e487af7ac", "indicator--2c69e525-d4eb-4d1d-9ad6-194af8321a78", "indicator--22b045f3-7c1a-45d6-ab6b-62bea42ce6c6", "indicator--7c0e441e-144a-4e51-a5a5-6bb572e0e572", "indicator--7ac0265e-83f3-4a87-8daa-8a53d50f7baa", "indicator--565f6c28-8196-47da-84e1-36dce93a191c", "indicator--26bf6eec-0c01-4110-aa65-a4915214ee10", "indicator--15d4c4b5-e7c4-4461-8364-921955673056", "indicator--c421d540-04ff-4ea0-83c1-0c423efb59dc", "indicator--8bb6742f-2f2b-4c62-a1c7-24f140e51ea3", "indicator--d30d2f16-bee6-4a65-9aa6-801f7dc99dc2", "indicator--deccddf3-c4b1-48c8-b53e-f42dacdfc574", "indicator--e5755767-3aa4-4470-be01-8771e37bb2ba", "indicator--659f33c3-8515-43ec-bb17-ee296ce4871a", "indicator--03d563b3-810b-4e9d-9d21-f3af0e0e2539", "indicator--2ed2d8d8-1396-42b4-b240-7bbd34add42a", "indicator--b0747b6a-5835-40c7-ae9f-113979752a5a", "indicator--16e43509-8636-4e02-8c7e-e21e83580164", "indicator--3d659447-e9e0-4fe8-a36e-09cee4ff70de", "indicator--1dc1aa42-8c2b-43dd-9cb1-73e901c1479a", "indicator--85f8c55f-19e8-4d9c-86eb-dfaeb09b765f", "indicator--82edbdf3-7703-40a1-95b0-5d3401e8071e", "indicator--82943b29-4f9c-41ef-a449-7799cffda384", "indicator--c93314cc-7062-4e25-824a-9ee6b1276125", "indicator--425d3944-d058-4c48-ad22-6fe4d49384fb", "indicator--0a68c244-1732-4d8b-9e40-173d9fa516b0", "indicator--80ab410f-7388-4821-8cd1-1f8ef190f664", "indicator--943f4c60-6a35-480c-92ca-7947eadf409b", "indicator--24c6f3c2-04c4-4bb5-b1e7-357a91667ad2", "indicator--c5d78cf2-1191-49f0-a762-e2c071a19cce", "indicator--0bd42109-88c7-4c3e-8d1d-54e53785a0e3", "indicator--9775cd55-7b3a-409c-8cb6-d57682536c6d", "indicator--ac508a65-e1f1-4435-a7b0-126b087455d5", "indicator--4865906a-348d-4094-afb0-f4b1dee247e9", "indicator--0a8e8fc2-8a04-41d8-8217-ea63b1f3361c", "indicator--11b5b829-09c6-4254-80bd-b2b7bff0d50b", "indicator--dfd7fc4c-5696-43f9-b8dc-805b7424545c", "indicator--1189f9d9-ee38-416c-8de0-9ca24a21dfe6", "indicator--68b43f67-6d7f-407f-bb24-0b4802e537e3", "indicator--532b11de-698d-41dc-a30d-292df1531fe6", "indicator--036980fc-4d62-4058-baaf-cbea405f97a6", "indicator--77678167-0992-4a50-b33c-ccdd100f9af0", "indicator--a54e102d-f4df-4e32-b0e9-2c5e6b452975", "indicator--85d44e12-5b48-47ac-bdb3-772937cad0a6", "indicator--67b1c29b-01d4-41c2-82b8-a555a3379f66", "indicator--9f9157e8-1ac9-4923-8061-13aa4add5398", "indicator--9cbb4ccf-4605-4481-9f64-296e7bc14080", "indicator--9ecfde25-9acd-4ea4-8916-3557b18aad2a", "indicator--34420f41-7f80-4ca0-a0df-389dd0abd290", "indicator--1ab19367-53ef-40d4-88da-a00b715dfb01", "indicator--57377b43-8da8-49b3-96b3-d5ca7c89c9e0", "indicator--7760ea31-9d04-4037-9005-8f80cdb4fba4", "indicator--ffe1cbc4-b7a1-482b-95d4-2c2157a9ccc1", "indicator--e19ca0bf-7920-4c91-9676-ba63fd354902", "indicator--a96227f5-da06-428f-94e7-f46c2404c93d", "indicator--b7c5e535-1bb6-4451-8db4-b8defb8a9b56", "indicator--6a3ef95b-9edd-439f-99a2-2f87e3df9c2e", "indicator--e9069a0b-3b67-436b-b87f-0dcf6b85067c", "indicator--a7e69fb2-1af5-4874-9e3e-9479f7a6eba8", "indicator--3ade6303-ba09-45de-871c-111f3a390b4c", "indicator--e71c87f5-a41d-42a8-84c7-bda35d206132", "indicator--6a19a5ac-7bb9-491a-9c96-6fd9ee5d460f", "indicator--136d1102-8d7f-49da-a3bc-5401867f563d", "indicator--6734de2e-a953-4a24-b6b7-7f376a950dfe", "indicator--d5f5726e-f8ee-46d8-bd94-ad0e14666eb2", "indicator--944ef799-21d3-4e91-a2f6-c2eda8c9a31b", "indicator--eec6cc05-f7bd-472a-87c6-94e18febf39b", "indicator--699364aa-99df-4cf6-9058-8c2fccd51654", "indicator--fd315cae-e819-440e-84e6-00d5899f9d5d", "indicator--bc5fac29-2278-4ae7-be02-dba154e52f08", "indicator--1b9053fe-08d2-4222-b0f2-69e7eb8ae274", "indicator--cbad62c7-54ca-40aa-96e4-022096d0be5b", "indicator--0754df71-ddda-4435-8701-4a6076064c30", "indicator--11b061a1-fa60-4fc7-be41-250c7618859d", "indicator--eda1df21-b20f-4374-87eb-427b608c62f6", "indicator--6cb9a4a8-401b-445d-9fb2-030dc3dfb001", "indicator--0f6d26b6-7154-45f9-ab33-b8d427448073", "indicator--40f016a7-ec64-46b9-960c-5e9d3ab34ef8", "indicator--37b635e9-bef8-4c2e-9f35-4018e64c81d8", "indicator--3eb02b97-dfb8-43ca-aff4-ab1931856b25", "indicator--d5c71d8d-80d2-400b-9513-cc4b743917ae", "indicator--5858f00c-ef0b-44f7-877b-f50a92b22a12", "indicator--82ef00e6-845a-45a7-abcc-0e80cbc17593", "indicator--11e12acc-f419-4c72-a9f7-f88a3ae7c0fb", "indicator--07b4528f-5b31-43ed-abf5-19afc408e9a1", "indicator--f94a18f4-046b-48e5-9a4f-5c9022090fab", "indicator--c0ca1b57-d597-4876-8753-ecf37e10aca0", "indicator--d52b8ec2-1bdf-4c4e-a077-213c48e0e079", "indicator--39d13986-5caf-479c-94d1-19ac55acbcde", "indicator--3c36a14b-662f-4d2a-b7f0-be8b952e009c", "indicator--516e51f8-1a2f-42e2-9e18-e9712b41b3f6", "indicator--88834390-707c-4179-bef2-94f230a6a0c6", "indicator--10e78fd8-1756-4fb2-b281-9f3e313d69b1", "indicator--de4674d4-e392-4875-b3aa-f9bd1c49191a", "indicator--3b022c6b-aeb3-4a9d-bd9c-237dc4020bf5", "indicator--7832895b-5ced-4102-91bf-9ad010b0fac8", "indicator--c8e2c025-6ce5-4b39-b47a-2ad635836744", "indicator--c97c6b93-4387-4867-a285-9891e2e66088", "indicator--41ad3358-03c5-49d2-96d4-73b43d5f9e3d", "indicator--6c2e59fb-1d72-4fa7-b5c5-186b81d825dd", "indicator--cb5e6b95-810f-462f-8c92-06fd62431e3f", "indicator--2c4ac54a-819d-4c10-a9e4-0772284d1c83", "indicator--9e29683d-9b95-495a-8a5a-ff84205bc88e", "indicator--1e359c80-b75f-4295-b09b-f291cb33ae22", "indicator--86433154-9c63-4aad-af6b-63326b3f1273", "indicator--037a392f-2a73-45fc-8822-2eb870b064f4", "indicator--9a9cbc72-3b87-4aad-8aac-624aae4fbfb1", "indicator--0980e631-b2c8-4a7d-9b67-a1ec41e0ba9a", "indicator--7b2d3829-4939-492c-9fe3-33ccf900e528", "indicator--4f41753a-0d7d-4fc8-9804-a3ae7156c2fa", "indicator--2f5aac14-0aa0-4f1d-8103-2cfedc112fed", "indicator--8a902a16-79f9-4092-99b7-b689dcfdcd36", "indicator--94f4243f-1bfc-4472-90ed-76fa898a162d", "indicator--17b48cee-5bee-41a7-8058-48fcefcb822e", "indicator--ba9b0a43-a109-4d88-a597-b190320ce3ef", "indicator--8a2913d1-0144-4838-8224-a2cce89ed6b1", "indicator--3c5214ee-3f39-4823-94a2-16b678096650", "indicator--2200420d-7cd9-408d-909e-0a0bd4e324a7", "indicator--007acf7e-4c3b-4476-a07f-7552afd213a8", "indicator--4023317d-0178-4092-b3ba-8ad90269d66f", "indicator--cd899c57-6e9d-43fa-a57e-e6e51e7cc359", "indicator--d8f9e289-62a9-4dda-81f6-a5b3d807a20e", "indicator--3c512e3a-4377-490c-83c0-22900a26f9bf", "indicator--dc99837d-9bc8-4a65-a561-350fd520c802", "indicator--28f76fab-d371-476a-87b8-0b4f42dc8c40", "indicator--c53c85ed-04b1-4960-91ed-85fa0a52c89f", "indicator--0b5e7d02-8c72-421e-bb91-c6efc15e42b5", "indicator--e466256a-5e2a-4b51-ba4e-8a57d55bc51c", "indicator--d43c2ecd-656c-4276-9d6a-a3e699879022", "indicator--5a726922-f275-4ac1-b41a-bc165f03a12f", "indicator--1e77bfd3-4040-4d55-9532-72f311371122", "indicator--461f55da-47e1-46d3-b531-a0e6a14cb649", "indicator--64e24d5e-bbe2-4771-b4f2-c1866d635dfd", "indicator--f0fced62-8319-4ce5-8595-8be6099c106d", "indicator--8761094f-a8c6-48fd-ac40-1cca6f2fe607", "indicator--d54c4a84-53fc-426f-a2b6-cdea0d00ced0", "indicator--3c756a57-cc9d-45a1-9c07-5d47dde95a65", "indicator--1db74778-b53c-490d-97e1-45d4254c784d", "indicator--94fede59-d224-4bc2-8464-12447a42b3b2", "indicator--76d85680-7212-4a69-a3a9-bc2cf3246420", "indicator--ed50a90a-155e-485f-b9f2-ece6ad19e045", "indicator--05be7ea0-3768-4e86-9c53-4df595d2eddc", "indicator--ef8c4736-cbbe-4fae-b7bd-82cbbbc952a6", "indicator--e0a41094-d01e-49c7-8a8b-3a204f903204", "indicator--ca111585-1f28-41eb-a672-d64a603a7f11", "indicator--cec65296-4ffd-44b8-b003-1043bdfa0916", "indicator--34d50f74-037d-4c12-bee9-52e2d4dde0b4", "indicator--e4ee0b13-be13-49dc-9025-610969475ebf", "indicator--f0ed1868-d6ea-48d4-97de-c17ad3ca9b76", "indicator--f75aea51-f1e2-43a6-b803-4070c5dcdb8a", "indicator--54d1268e-cebf-4913-9fef-b0fa76ef8aeb", "indicator--0bcf309a-9bd2-4f67-bf44-f893bf88431a", "indicator--ecf7e603-d476-4672-be72-1eae43926345", "indicator--ea9ce2a5-5c9a-4ceb-80c8-396802911256", "indicator--8d80add2-c736-46dd-8c5d-f268e6606665", "indicator--81bea8b6-f8c4-427c-b84d-b1e1c2cce0e4", "indicator--7a3ec5f2-bf8c-4bd8-baeb-6d155b46c5e9", "indicator--7253fddc-9597-4402-9b07-c866e47fc943", "indicator--78b6de83-548f-4540-995c-c85e6991564b", "indicator--b443d24b-6de2-426e-b9bc-b513b2eb644c", "indicator--74978a9d-ec26-4949-b664-b7f3b2ccaa6a", "indicator--91a33dff-4b77-4672-b46c-8244566112bc", "indicator--ea8b4c67-5cb6-410c-8142-c4cbd9d303a0", "indicator--35120a4b-fa69-4cd7-b099-9b6b727fd875", "indicator--f947f72e-1c37-4231-9d07-2e101c06a579", "indicator--47576bc3-860e-493b-8a31-11482635fdeb", "indicator--8a551a15-c612-456f-b67c-11434a9ab0e0", "indicator--2026138a-c26c-4ef5-879d-873c315b257f", "indicator--d15479c1-1f9b-4472-a330-64f6e65cab28", "indicator--21913f03-d39c-42cf-ba64-8d7c682f7ed2", "indicator--2dd41096-e095-4abc-83c5-c9e541c56933", "indicator--cb50e1e4-15bd-4082-b529-abab73ddede4", "indicator--4690a0eb-4050-4999-9bb4-1d9bd4b04f8c", "indicator--0c643e56-b3a1-4202-98ad-aae3743010db", "indicator--3602b426-2e14-456b-8413-584a4968f860", "indicator--d4584329-f78d-4f59-9f59-7f7f2983b757", "indicator--2a7b3a7b-e105-43ca-b17f-a0847f08b343", "indicator--d329ff20-8947-413a-955c-8237a01c769c", "indicator--ed0d11a4-eca0-4563-ab02-4d3a2a94923a", "indicator--91f20897-dce5-46f3-a058-5081331b8503", "indicator--0dd3afd0-98f7-4e9e-af42-b1b6c11f6ffe", "indicator--d461ccdc-bd02-4f4f-a42d-0c618fc0f00a", "indicator--316d713f-aed8-405f-8e19-4d167302f1d1", "indicator--e37234b5-2e8e-41a6-b9ba-ea30e1984da0", "indicator--847c2ed0-8878-46b0-ba52-4540688f1e32", "indicator--b367f237-f776-4c25-881a-55b776e1a8a8", "indicator--566d7126-7088-4520-b6af-874c7cf93b85", "indicator--7dca5abf-4eee-4aee-83dd-2d6146ca5235", "indicator--4c360aa0-1306-4bab-9807-13ab019d9969", "indicator--9fa9c274-9162-4c73-91a5-859ee37c962f", "indicator--e4cb57dc-4076-4f3d-9da9-92e9fbcc74ae", "indicator--028f727d-b023-4a62-8df7-26945a001e4a", "indicator--7e4c8299-78b3-4178-84b2-01ac0b999b73", "indicator--00ef9a8f-f278-4939-81c0-4054c54a83ce", "indicator--058af9a4-d6b9-415f-a88c-1f0763ca5f7c", "indicator--2abebb00-6977-4844-8fd7-c3f1a54403f4", "indicator--983351dc-54e1-465e-b691-7938b0de3b89", "indicator--cfbf2e25-3162-4d47-a82e-f5edadbc4843", "indicator--8bc7cd68-b1d5-41a4-ab1f-66ce26b277d2", "indicator--778cd52e-1c8b-43ff-bf8a-525e5c8d8602", "indicator--c40ced1f-bffc-45a0-828f-1de1d4b71559", "indicator--928833a2-d740-4be7-94bc-a45ca2154d6f", "indicator--2f45f002-c955-4cc4-8694-493fb9ccd4e4", "indicator--ffa4f100-db46-49a0-bef6-0c847248b288", "indicator--3901271a-e71a-4adc-9784-0767f597282f", "indicator--c45a305a-483d-4734-84bf-3fc8eea08c2b", "indicator--c60233d7-b2f8-4f6b-b0bd-7e2262da2cbe", "indicator--5499c6fe-0ff7-4fc4-ac41-ffc4cdc96e6e", "indicator--ecd1f42f-1995-48b9-8dbe-edc3e67c3ff9", "indicator--dc5e3d65-2483-43a8-848c-9b9c14c28cdd", "indicator--8a8b71f5-4375-4a01-8bc0-8a2f5fa70482", "indicator--24496038-30e7-4dfb-997b-e71db4a332a5", "indicator--f163a16b-e0cb-4978-abb5-e2183aa9bfb8", "indicator--f463f52a-41c4-4559-9dcc-f03033404850", "indicator--b1a077ae-4bf8-40eb-88f5-ad0e02bbbf30", "indicator--81428153-2911-4669-8b31-f8b26fe557dd", "indicator--dd171add-22fb-479b-9320-f69b1231bed1", "indicator--eda60f5c-81d8-4446-a953-ee44a64e3c0a", "indicator--72f27c3e-fb55-4c0a-b806-1e13062e217f", "indicator--4b0d7acf-4cde-4b4a-b974-32780160c12a", "indicator--a00f8699-72c4-4d3e-853e-2c4baa5b37df", "indicator--811d2f9f-c2e3-45de-af47-768df5a2408b", "indicator--3787c70f-1f53-4068-a491-e636f9e185ba", "indicator--19366ada-7361-4d6c-b241-fd01cd63a27e", "indicator--71831263-892a-4ae6-94b8-fd3cf2750e0a", "indicator--24544f8f-8c5b-4636-a14d-0f8fc5057fdd", "indicator--7e8da830-9f66-4ca6-b1b6-64348e7dd885", "indicator--54c1f902-2dab-43df-9d2c-3cebe88be725", "indicator--c45fa507-b8b1-4014-b66d-4c4194e9da0a", "indicator--618be438-afd9-4f02-8842-8d4fab30a433", "indicator--59d4f077-6aa3-4d11-b5a3-fbed17251e8f", "indicator--feed38eb-06b6-4101-ae74-7dce3b7e4c35", "indicator--1bba79f0-f9f7-48aa-92de-2a655051b844", "indicator--2c18cf2b-d292-40c6-9bc8-54c78497e2cc", "indicator--6c9ebffd-d235-4da7-963d-f7cd6822a591", "indicator--6afd319f-e497-4424-abf7-e92bf2043ee0", "indicator--4302f885-1abd-49ec-b87f-56cbd0119e21", "indicator--5c7ee761-8d46-4602-847e-2564f515dba8", "indicator--0d982bea-44ea-4540-87d2-89a3a9e74833", "indicator--ee41e9b0-f72c-47db-8bf8-a37020462fd6", "indicator--80260f84-ecfe-4320-aa7b-c5e15b57cf9c", "indicator--48ce62fa-0ab6-4ef9-aa01-2ce4b14f2bda", "indicator--64b560c3-de47-45dd-9f0d-ddf868b823a7", "indicator--97303d16-5c7f-46dc-b7df-642269253835", "indicator--cf25a4e0-5a9a-4630-aa89-101749a0d0be", "indicator--6c6296c7-b6aa-4982-9353-035e96092fbe", "indicator--3d9c00db-ba42-4403-bfd7-893b84b55301", "indicator--9521f6ac-f510-4604-9f78-a72c5b68e301", "indicator--6edef10e-e608-4659-94e3-cf574571273f", "indicator--2d2b49b8-bd7f-48e0-9979-cef708247226", "indicator--03234325-9b6a-4ab6-b541-9fdced5460b1", "indicator--b81de254-8f21-4120-beeb-7873f45586c9", "indicator--211e2f44-26e2-4e0d-bf8c-8cef7262b434", "indicator--e248bbbf-0327-4893-8c34-8e8e069187ec", "indicator--8cb221f7-6c09-406b-95a7-7daa88f388af", "indicator--52d370cb-b1a8-4521-a3d3-009fe6f52e51", "indicator--4efa87cc-00f1-44fd-bc63-16ab0d8cc10e", "indicator--eab66486-a62a-43b1-82a6-3324f2362a49", "indicator--0ccb4901-2612-443e-91b8-5fb55babdc85", "indicator--c9ad0d11-e290-4f42-bde5-43d730e4d9a8", "indicator--b917e0c1-2cc0-4242-9b5a-14a1a160170a", "indicator--398b78cd-c4ac-49c1-aab1-9f6711403b7b", "indicator--a08d2437-af31-4fee-98ed-3507cb54e12a", "indicator--b792ed84-2c1b-42bd-b9c8-2a1469f169e3", "indicator--c08a9435-4343-43b2-877e-f9e164743e32", "indicator--ef872a14-fae8-45b9-aea2-0307b4c763fe", "indicator--307512c5-113b-4354-b321-1d6c1147de67", "indicator--4ebf7667-cbf4-4080-9eb5-0637bd89b6a1", "indicator--78791409-a49c-4818-9a29-1103f1d658aa", "indicator--b1e0a5c5-7be4-450d-88d3-6cd88d43c041", "indicator--30bab059-5166-42b4-8775-63ca32f0f840", "indicator--f07cfe53-00f5-4f5f-a4e4-101e76d8ed34", "indicator--0d6d141b-1ead-468e-b95f-1e361b78543d", "indicator--7d4fd8ea-ca20-46be-8049-edbe9cfbaa56", "indicator--826e60d2-c4b4-48cf-a32b-c6cef6f53ac6", "indicator--71e74a04-0ae6-477b-909f-9687e8706f85", "indicator--05e36db6-04a5-4caa-8a59-0d571d684ea1", "indicator--f3324aef-dafb-4604-842f-988aedead5d6", "indicator--b7a322f5-f3c5-49cb-b712-73e65e6888fd", "indicator--26eee82d-98ff-4a86-999e-b84041f52fb2", "indicator--11ba8618-33dd-4cb9-9242-3d296a7b8286", "indicator--9b3643c0-a9a9-4418-96ff-4adc5576ed80", "indicator--aa338f52-3c8d-4419-bd8d-e8ded703eac5", "indicator--abf8c092-ef92-432d-8436-4540533fe47b", "indicator--5c2e4836-080b-450c-95ee-e07902ce5df3", "indicator--e3d7dcab-b081-43e0-8cac-4b9733aab14e", "indicator--764e7476-027f-4c55-ab11-28c75d6835eb", "indicator--677a07a4-e4dc-4997-9955-b8359aaa2fe8", "indicator--1c45b198-20f5-4835-a8f1-a438da6ac041", "indicator--c9da54f6-940c-4ac5-90e8-1cce0538cf0b", "indicator--4a72f6d5-45d9-4d2e-b71e-15caa6c04d88", "indicator--5e2d144a-a9a1-434d-bcd3-9cc394b17179", "indicator--dad10097-f316-4869-a7cf-0c4b6b25f6b4", "indicator--f44b193a-023b-4d21-9040-cea5b9d6349f", "indicator--20e38e1b-be65-4974-bcb0-f2557c728e88", "indicator--a4202253-12d1-41eb-8c57-6c3e3b795ca8", "indicator--e0e35800-a6e1-4034-b69e-fe92ad47149e", "indicator--cd3ebc26-5c1a-4385-bc3b-e9d61cd00e4c", "indicator--e1ff428d-95c3-4d00-94d1-7200dee03607", "indicator--0713615b-0fc7-42ca-a2de-b9a3f6640759", "indicator--28523776-baa7-46d4-b168-cf069741bada", "indicator--ff65b26c-b19a-4a8e-b838-f5007d221464", "indicator--cef658f4-c9ea-4544-9363-7c08aeb03592", "indicator--8b74991a-73ce-42e1-8828-0c27c25eea0c", "indicator--1a2ea204-6459-45f0-89a8-59dac1b10b22", "indicator--c9435ba4-7913-4e6e-b4ed-5ef1c28e0301", "indicator--d9e12f8e-48cb-43a0-80ff-b8aa44165a88", "indicator--fd111abe-4e46-45a2-b8d4-456fc761355b", "indicator--5c66fcdf-ced1-4cad-a102-bbb5e5200025", "indicator--db97d2c2-affa-45d3-8223-3c400e22e5b6", "indicator--c7a2eec6-3bd4-49ed-88c9-4c2ea8d0ce32", "indicator--e4fc56c2-32b2-4e3f-9f7e-92f327189ea0", "indicator--241f1b82-08a8-4260-b1f3-1b6eadabb851", "indicator--101ab861-e34e-4850-bf18-2f9225a9890f", "indicator--f7c68a04-b531-4690-a22d-10afad7f4227", "indicator--d7ac5a63-f59b-4509-a0a9-0fc9a309e17b", "indicator--7dd9fc49-9693-4dba-b3bc-1fabb26b3a40", "indicator--fc466642-d616-4b91-a5fe-a50d630b4cd0", "indicator--d846c89d-c2fc-443f-a633-e5a87b597c2a", "indicator--e67ef2fe-d96b-4ee6-bacc-0817e1f83c9d", "indicator--01536d8a-3061-4d4f-8f64-0c2d976d729d", "indicator--bf12afbd-46e6-498a-9ca6-462dc1bbf710", "indicator--979e01c3-60fc-4ba7-99f5-a8be457eea40", "indicator--f7a70e13-c704-4155-b220-efe9fa520c8b", "indicator--f239bbb8-ba17-496e-92e3-9e1de64db875", "indicator--ceaa62e2-1b9c-406a-a1dd-e453e65360a9", "indicator--274650ed-0e5b-427e-829a-2db7c7e0fa82", "indicator--15e9d1a5-6ce6-4416-a706-d1989760973c", "indicator--b99034ee-b9ee-433c-aee0-d87c052ceb8a", "indicator--4414ca4e-0222-4b31-aa41-9069aba46ab1", "indicator--9e5dda92-7be2-4b59-8377-dc82200cf1dd", "indicator--cfd3d81c-871f-43ca-b38f-b68a657bf82b", "indicator--053dfc53-3213-482b-9e6c-d8b85fa12956", "indicator--11b6ecf5-aa55-4e84-becf-cf07861317ce", "indicator--9c64193b-4079-4f5b-900a-8c72c8e996e0", "indicator--7b17ae1f-c7bc-401e-a648-9ec8c13aae13", "indicator--92625936-6dcd-4c64-95b9-51563d47db3e", "indicator--ad33bd6f-141b-4146-a329-11767c054ed6", "indicator--7022ea4e-ea22-48d5-947b-bc713074504a", "indicator--d93c1fee-9067-4c45-81c6-2d338e4e24d7", "indicator--17a5af43-8b28-4f8f-8417-7915dd323aac", "indicator--987ff57d-a74e-4324-803b-90b57125e43c", "indicator--13e3977c-8e4e-48ea-8808-9e9ec0532455", "indicator--a3160486-c683-47ca-a43c-d3ecfc3cb159", "indicator--f476979a-9f30-42d1-9bd1-ec760ea6ef98", "indicator--3620bd11-c2ab-4b44-8d80-3c614ecae500", "indicator--7fca9062-9781-45c3-853e-d988913931e5", "indicator--f7c68613-b3b5-4c88-9533-991c72a1122c", "indicator--05fe87cb-a326-490b-8f16-257b06ca7bc1", "indicator--4254b5fe-c21e-4a95-9309-bec1ca249f1c", "indicator--c6b2d74f-b78a-4ad3-93a7-1fddefbea15b", "indicator--96236c21-25ef-41eb-bd52-daa4c3f47f9f", "indicator--ab645077-cf05-4a4b-823b-adbe7d823f5c", "indicator--43f49d23-cda6-4c2e-afa7-7b92e6e57619", "indicator--29283b28-775b-43d1-be43-5c824bf1b1d2", "indicator--3cafb8f5-a694-40f0-b974-a5d53921f4f2", "indicator--63e073dd-87b2-4210-83bf-bafff3ec5417", "indicator--af0d2153-cd7b-4c2c-8ff2-e24ac700cf74", "indicator--22eff701-ce3d-4c20-bb1d-0fe8fca4eea2", "indicator--b4f21161-a6b2-4187-9e1c-a099bcf65b36", "indicator--2ed1299c-e906-4f93-b388-ea436bbdd81c", "indicator--0d351431-70dd-4485-9f9d-d5d224fd8550", "indicator--b4b09d26-a178-430d-89d5-4848200ee9b5", "indicator--ad160b4a-331b-4554-9b64-43a0d7afd6e2", "indicator--a3e10c6b-28ff-4636-abdc-db74d8d48b6c", "indicator--2591d353-db58-467a-aed6-c3aeb5860738", "indicator--0a967854-476e-49b1-9344-356b4d6288c4", "indicator--8212be8a-ec48-4e86-bc8e-84d918f8f38a", "indicator--9f767796-0c2e-4bab-a762-0932201e813b", "indicator--106b59b8-1505-406f-89c4-aa0579e65da2", "indicator--2143b8d5-a5d7-4543-bae3-661c664a3165", "indicator--f4faae86-c80a-4979-bf8e-bab37c125000", "indicator--5798856a-3365-44a8-96e1-5b6d9a649dea", "indicator--6ad5dadf-2548-4bbb-8e87-472e0f9785d7", "indicator--0b2f8c7e-3911-402a-959b-b7f6997d4f1d", "indicator--f1184a7a-7d73-4903-932a-a1602b993f43", "indicator--037527c3-04df-4008-901f-a47d4bbaa38f", "indicator--07b25c2f-ec1a-4fff-916e-e03deb066219", "indicator--9c17b7e3-67ef-42e6-bfbb-c675fddb4379", "indicator--982da3be-3f21-4ea1-871e-880eae8c048c", "indicator--646dc0f9-ed36-41f3-a261-9e6b262527c0", "indicator--eeda00fb-326c-432d-b184-af6822e32db6", "indicator--44037139-f439-4376-957e-cec4ad630b35", "indicator--b52e9f4d-efdb-4462-a9cc-346f654b28ae", "indicator--3ec049f3-1804-408d-bb47-2d5eba94d376", "indicator--66a5b694-21f6-49f7-bef9-8b734d4a539f", "indicator--016f54c3-31c3-432e-b880-212df332bd8b", "indicator--547f9f5b-4759-48d0-b127-c03f33e0973a", "indicator--a90c9d94-e262-4af7-852c-d8792168fd3a", "indicator--22245558-dc4d-41a4-a28f-3476d562d716", "indicator--514056e1-aed6-4057-9951-0863f1f3df22", "indicator--b9fb11db-3cd5-493f-b166-a6b73f756cec", "indicator--c5d168e8-d57b-4db6-810f-63ce2ad836fe", "indicator--d847af81-fa97-4ab4-bb64-4cccd899e538", "indicator--f58a0c9c-8c4d-43a7-97fd-230230a242ce", "indicator--7f4ffd46-aa27-4721-86d8-3b56911bdbf7", "indicator--45efd1b0-40ca-4fea-b1b5-cef88e4a0d2a", "relationship--54123119-6eb0-4af3-b204-b0feb1ab70e3", "relationship--1631be70-4fec-46ba-8db9-2d6865ae8d72", "relationship--38ef65df-18a6-4a02-b005-bb4091295950", "indicator--c822fe30-6658-4827-860e-57f6104bc59c", "indicator--f959527e-4231-48c5-bf39-d82b4158d258", "indicator--8494a588-d858-4b6c-ad28-bdee23974c6d", "indicator--1c3f1ca9-26e4-4557-a22a-4d61367d878d", "indicator--4c0ab0eb-bc15-48d7-9947-822e683960e9", "indicator--27bfd1ab-d5c3-4597-a11f-128de455e423", "indicator--c3210f51-ad09-47eb-b006-6ffe32e9d815", "indicator--67607e7c-a697-4fcd-9599-e05b28eec949", "indicator--f1497ad5-227e-4b77-8a3c-a5e60109826e", "indicator--4dd1cf90-b17e-4994-aa88-4946303c69ca", "indicator--12a99c34-3fe7-4116-8ee3-277d75a6c554", "indicator--66cf074d-e9c6-4ef9-8835-64f83f32e344", "indicator--9a8494d7-0241-43d9-8a08-7e6aea4cc36f", "indicator--53ca106e-1e61-4653-97b1-6b4c14a464e1", "indicator--ade3e181-1d4a-49e3-9d5f-b60618d4faca", "indicator--be46f75c-4ffc-40fc-b7ab-625ae2a0598d", "indicator--5ce1939a-e21c-43ed-bbee-904b52892a15", "indicator--5d43afee-608d-4d6d-b397-bd3a100aa3fe", "indicator--c9f27039-a585-4192-a8f8-6d1848286d69", "indicator--c1721158-c90f-4326-b335-f1caeab67982", "indicator--5b2b7ece-41cf-4126-9338-e313d6812995", "indicator--0368933f-fb03-4bad-83ae-1a7201cdaa9b", "indicator--c6928191-9d7e-4789-a1d0-478ef17d5f62", "indicator--0a11149d-0545-4061-8b80-0a7602d56255", "indicator--ee48362e-d3ec-4aed-83c1-1760ef5ab0da", "indicator--012ba562-53fa-4fe3-b3c8-7bd3ecc3c087", "indicator--981b18cf-c470-4c80-98c7-3d7dd40e1b08", "indicator--45f30cb6-22af-48be-b951-8b51a57f7543", "indicator--6a6a456c-cb2d-476a-948c-18690b390664", "indicator--17004346-1020-4908-be7b-f7ec6cd391b4", "indicator--e6ab6683-fad3-49c0-850b-2ce8107d1745", "indicator--5c0e3eb4-f8a4-499a-a834-c24f369a5d05", "indicator--e8202757-05b4-4c6c-ab88-3a4a22aa1e0c", "indicator--550bbde7-0b37-4dee-a739-14fd08cb53d1", "indicator--19492ae5-637e-4834-9027-bc19b6257830", "indicator--1e0e0c0e-4c9d-4262-908f-7a046c121b12", "indicator--1850fad6-8b45-4a5e-831b-b12f0909601f", "indicator--4d6dee59-e974-4e17-a44c-8b0307ce35e0", "indicator--528590cc-155c-421b-baa5-09722ae1ec50", "indicator--67a17441-1e74-4379-8ce9-c82b21279d46", "indicator--3ce78f77-1264-42b8-934b-b7d5930cfa04", "indicator--55b51f12-ab62-4661-9950-d5c91800a3b0", "indicator--a2761433-c300-40f8-8d1d-36948c671faf", "indicator--6d283e8c-ec7c-4a44-8854-352f8f130c51", "indicator--52124a24-6da7-4d7a-a205-335f4bb47279", "indicator--891b3047-21bb-420e-ba42-7a39b2004d1e", "indicator--10964bf5-cad2-440e-9854-c9e478c56ceb", "indicator--968e2b74-521a-441d-bfcd-80bfc99b0a88", "indicator--54f1a27d-02aa-454c-99f7-ba0ba2396a9b", "indicator--9d5dcf03-3042-4643-9669-eba80541f775", "indicator--58d817c5-d9b1-4e1b-b60b-ded2c1fc0a27", "indicator--31bdb55a-e37e-4488-a884-9d1391acdb6b", "indicator--32da3b31-3126-4872-94e1-069bdbe867f5", "indicator--4baea91b-beff-4090-a22f-4569f482914b", "indicator--b286625b-7ef7-4036-8e48-d31622647f83", "indicator--bb11f7fc-eda3-4f10-b8fa-28949a046b4f", "indicator--bb0255ac-da5a-4150-a4bd-27c48108996f", "indicator--335baab1-293c-4873-ab04-3cde416aa402", "indicator--5d440f8b-19b5-4e88-98fb-c9a6f59221dc", "indicator--3d9afe1d-6e18-4e71-b662-1185be7ae0c4", "indicator--1c4ebf9c-2413-4ff4-a7ec-fa5b0a010e18", "indicator--c4d800ec-ea1c-467e-8593-2047ba97bc4c", "indicator--560aac48-74ea-42fd-b622-838baf2cc1b2", "indicator--a95dd6aa-5d39-44c5-b67a-a8ee4c6e2915", "indicator--81a18f64-32ce-419d-868f-2ed7f5457d5f", "indicator--f6a3d4f8-1a69-4df2-9f0f-8c9cbe66252f", "indicator--8e0d2532-6b2b-49b1-938d-c3166ed63f1b", "indicator--44acbb2e-4fb0-4a0a-ad40-155c28695e9a", "indicator--3ab34b55-9cc0-4cbf-9583-585674383a22", "indicator--31ef74a7-b4f8-4cbb-80bb-4479b9fd722a", "indicator--0693ea22-767b-4b6d-8b35-a94c397a767e", "indicator--5b3e93d4-bc04-4938-aa01-ea2ffbe1947d", "indicator--18c08f40-b44d-40bf-a2dc-6f22e80a56ae", "indicator--8035ae7f-ead4-4251-8f31-2201a9c3d1cf", "indicator--c890d910-a842-4407-ae32-8fe1b496d36b", "indicator--40824133-9731-4c7a-af8c-5c6916513cfc", "indicator--3bce4440-80e1-4e34-b0f3-710deac14429", "indicator--d5c0a16c-4b1a-4a77-98f9-b37a7a2d1b3d", "indicator--e5be84f0-eb45-407e-82a0-98a757212dff", "indicator--53d5fe97-f462-471d-863b-c5419c15cd8f", "indicator--0400ba18-c295-433d-9f5d-f3c2bf9816ac", "indicator--b210e512-7f67-495a-86bb-ff2d9db9049a", "indicator--efcfa2f7-1afb-4ebf-883d-4bb60ee70a56", "indicator--11ebca05-042a-4553-af8b-a9e2bfcc3200", "indicator--d6d5a0a8-377b-46a1-bd56-1bc461c27ee0", "indicator--15c7eca0-7513-4902-b5b1-c828e98b719f", "indicator--2e88cc3b-f98f-46ff-b7d7-66dcdee2486d", "indicator--7b414ea4-e9cf-4aff-838f-646514e25a12", "indicator--ebdb8423-0b73-4b5e-bcb3-bb0ca1514e2f", "indicator--ee2411f0-497e-4d54-9558-0e07a22939db", "indicator--682d6072-2f8f-4ba6-b071-da119f618427", "indicator--dd0a3fcd-e05e-4af1-b2c7-aa4e7abacab5", "indicator--d2d2cbd9-1e65-4c41-84fe-a34ae9bf9ad9", "indicator--c2bcbc90-f3ae-417e-be9d-73b8d4be239b", "indicator--fd59848a-4e4b-4276-80ea-e786aeb60a2d", "indicator--a37bda89-3aa3-463d-a6d7-8e08fcdbb2e7", "indicator--ef3818e8-a665-4ba0-ad73-fb3e6a3e98c1", "indicator--e27d8e20-6dc6-4d96-b8d0-4ac243e2f5c0", "indicator--fa2036e9-2534-49ef-a53d-6ed58999a4a9", "indicator--8df22059-d18d-41cd-b546-2973e4262c23", "indicator--44331986-bda6-47cf-9ded-0c9e8a87ab39", "indicator--a36d4c73-e5a5-44f8-a8e8-7fd5aec7ff56", "indicator--902fbb7d-238e-4020-b69e-8279fd27a561", "indicator--a15f1c6f-5fd7-4c89-9bb1-0798b862d694", "indicator--bdfb6d69-c237-4208-85bf-34a0b2851820", "indicator--3d5bc592-e0a0-4f33-870b-eca8c00b1ed7", "indicator--6027d684-8b1a-420d-89df-989519255c68", "indicator--fb37c9cd-ff67-41b5-a187-5752b3b23996", "indicator--42487d47-6bc6-4308-95b3-3fa5ba5b65eb", "indicator--a0c0130a-8dd8-4948-baa4-56a0365c21d2", "indicator--35c3cdba-9789-4e3a-8263-e7810f418f24", "indicator--3677e9f0-0787-4c08-971d-38252663c8c9", "indicator--8ff044d6-a76e-46f5-bf1a-e1b4235b7dfe", "indicator--3b01a0e0-db9d-4fff-927f-48ebdf9afae4", "indicator--0404308c-d258-4aa7-9d1a-6723eff22dad", "indicator--8ee5aca9-5eca-4797-ae4b-bb8955fce75c", "indicator--6c59543b-5c36-4238-bb83-2546b5cf415b", "indicator--0aa66a1c-23da-49fd-9e51-17adbf9f6ec3", "indicator--a647c115-8f77-497f-8fc8-c132af079983", "indicator--ba94e7db-37e8-4789-b746-c3a69accbd07", "indicator--d74c68f7-3a8c-4081-b1d2-ca9337d33bdf", "indicator--1069cf5a-912b-43f5-b0ee-383adfe4c03f", "indicator--f280ca01-f66e-467f-91d6-eb17faea98bf", "indicator--920c89a9-67fa-46ae-9048-2393d0cacea5", "indicator--5788a8b6-9b0c-4878-adf3-ba0fa098720b", "indicator--dfc08485-8d8f-4979-807d-0d401ee18fc2", "indicator--32dde012-3f13-4163-a4fc-184e9b3577b8", "indicator--26d0c9df-1703-4aa9-bc2b-87f8b3e26911", "indicator--0362b8c6-ff7f-4553-98ff-0b3500b4af24", "indicator--0e983af4-a06e-4f11-88c1-0eea68b77baf", "indicator--5e89776c-8323-48dc-9f92-5a5c07de4287", "indicator--b157a44b-6dfb-4ce1-b02b-563e1d6ce431", "indicator--661c527c-7031-4206-9231-3f0515b0255f", "indicator--123a9997-7882-4d9d-b0ec-6e99e7e50823", "indicator--f1b2b40e-5123-4715-b2d3-7442a609cb59", "indicator--fe31fc57-ffc6-4255-90f4-f81695489ade", "indicator--72ae0a5a-f7f0-4e40-9222-b58b55f5ef86", "indicator--ee2013ce-fe02-4172-8f24-e0dc1434c75a", "indicator--eb9f56a5-9d3f-4908-8a9f-cadc8740a553", "indicator--2b3b81da-eec7-4f54-8954-e89ed5ce79d0", "indicator--00343518-2521-4e06-baf7-6462dd7d04b4", "indicator--569e64df-afbf-4de3-bde3-dbdeea509be7", "indicator--9c83427a-3dfb-4777-ba76-d1fdcc1bd595", "indicator--a20ad5c5-1ba5-49a3-bddb-8748da6a870b", "indicator--cd729536-e13c-49a5-b5eb-e68acb835a2a", "indicator--66945598-1dac-4eae-a80f-c175f145cf2b", "indicator--9898a518-1976-498b-a3e5-2ab722991408", "indicator--c6bf41bc-2a3b-4ddd-b071-70b3140f5548", "indicator--64aaabad-163c-4c62-b125-b61012a9f93d", "indicator--02d9bcac-07b2-4e75-b227-9f2c1328db75", "indicator--65efa9f1-dbca-40fe-8e5d-e8bde1c62b7d", "indicator--63bafcdf-0ec0-47c2-bda5-a1c58f7ca505", "indicator--852ceb6a-a744-4c03-97bb-159f1f38aae2", "indicator--444539e5-1620-44fd-a46a-fb4d0fe016b9", "indicator--514db419-c1e4-4901-8e42-aa852240df06", "indicator--ed8de540-bd3d-4432-b332-a0489d209501", "indicator--1829f882-0a71-4be8-8f3a-97fe79e3b963", "indicator--60f555c1-4285-4803-a301-407a1e10c334", "indicator--e8992e32-a46c-4ae9-bb47-e9a05d30d51e", "indicator--91aecc6c-dd77-4628-8e7e-a7c9dbf17951", "indicator--2e7c8533-5147-47a9-86f1-402341016e24", "indicator--4be94ed5-67d0-4b77-83d0-cfccc2aba293", "indicator--64e5c510-24f8-4863-996e-208a08d7c2ab", "indicator--a52c48a2-25bb-44dc-b8b5-4b4cebcd6f99", "indicator--5cdc2de9-5089-4071-83dc-201abc061bf6", "indicator--682d7ce1-8475-45d1-8ed3-af6f0933a280", "indicator--a2cffc17-0722-4281-82a9-dbfe01d30b36", "indicator--79365733-4517-4713-a0f3-26c609948860", "indicator--9adaddeb-fbdb-43c1-bad7-8d9f814c7705", "indicator--18bc60b6-6025-4f71-82fb-b4c9f8684541", "indicator--e2d6b9a1-a23e-4abd-bf5b-344f21ac4060", "indicator--f207d2af-c723-4286-be6a-2d336ef6ca1b", "indicator--4f3d8b5b-f91d-4768-8aae-8ebaf5174acd", "indicator--d0eec86e-0b24-4078-a106-859dcbb056d7", "indicator--04ec5147-312c-4776-9749-4e870c7293e2", "indicator--f8e51bcb-d65c-4d20-bdd7-a511a39596b7", "indicator--b4b345a2-ee75-4a85-b6dc-97560fd9c16f", "indicator--bd8c0e73-3c31-45d1-bced-523de34e38ff", "indicator--2bd7789f-0ccf-4dc3-905f-eded9a76fbe4", "indicator--f1864c5e-2c0a-4981-80e5-2788ba3b5a53", "indicator--b5cb0c2c-2199-436e-900e-f4dbee0f175d", "indicator--2494cd3a-fd33-4c1b-a3ab-4684113ae9ac", "indicator--af5280f4-f324-4200-8a45-dc66322d9206", "indicator--94724f39-683c-4af4-bbac-959df2d38e2a", "indicator--40ff258b-0344-46fa-8da2-2669ce5bd057", "indicator--5bf23e9e-567e-4829-99d6-e4626eea5593", "indicator--66817fde-4b0a-4753-9426-225070b70573", "indicator--e5a34ac1-ac86-4123-923f-6c6aad046763", "indicator--213a466d-e179-4ec3-a655-4e4ae3b8b744", "indicator--55eccdba-c148-432e-b6d5-4365b83a54e0", "indicator--24887a13-16f5-4442-b005-8a06764201d9", "indicator--a303865a-ca78-4b16-bd90-c7033b121ddc", "indicator--392386ed-21bb-4ed8-bfd4-6b3e161b5cc9", "indicator--ba00f907-7de1-4401-8493-9d4e898259a9", "indicator--5f7f494d-89da-4651-a1a0-3f725650de61", "indicator--1e28ffca-3ab2-4bd0-bd8f-94a9f5452001", "indicator--f93f1a95-1922-4b49-9687-5ebaab86556d", "indicator--1be7fa6d-2e7b-4fd0-87b1-011563283064", "indicator--1c9822a1-0e68-4ad3-aed5-0bcb7ad62135", "indicator--8e468f1d-0b91-4d62-b831-89377d44eaed", "indicator--a537639f-33c8-40e7-9ffa-b8ed5da40a30", "indicator--a26acc08-798d-4be7-85c1-3cb8d208c2b8", "indicator--fa9dbc17-9ced-48ce-ace1-b4a558067500", "indicator--16063790-b79b-4437-b77c-955dadce2033", "indicator--91ed5e52-dcee-403f-8f07-f969b4b603d2", "indicator--724bba88-8741-479b-9da6-2d02e651692d", "indicator--479cb47c-b16d-467c-aa89-76fd12e143dc", "indicator--d8810ee8-534d-4fdf-95a4-884bb3580a76", "indicator--cca39c22-4b3e-47e7-8fa7-18a2534ca7b8", "indicator--06dc15de-614a-44d1-ac65-e6de211e9717", "indicator--60b63064-d41c-4fb2-b42f-01c82f76299d", "indicator--fe003dd4-de6a-47fc-9a1f-767c9cfcbaf3", "indicator--8e8786bb-a3a9-4e0a-bc17-304f44d4670d", "indicator--2188bd2f-6ece-4979-8c23-09b9950dac8e", "indicator--0753124f-ec5c-48f8-93e1-3c6f7654167a", "indicator--772f8347-a4ba-458a-9230-066f37f44273", "indicator--d001e373-9768-4313-bb5a-813aa7967938", "indicator--9b5a433e-ad82-4fd5-85fd-b076680797a1", "indicator--c0492a10-ba49-4be8-8864-4d48929457d2", "indicator--14a03908-1c51-45a2-bb0a-9337b5b6fa25", "indicator--8ff7b8ff-9546-4cab-bccd-3bcec6d84f79", "indicator--ac5b1ec6-5ff6-4176-acea-b829a4160ee9", "indicator--a50cc53f-2879-47b1-8412-be7a4c9823e5", "indicator--ee758989-0828-4258-8883-2595660c618b", "indicator--4cd2880b-a334-4203-83f2-a1beaed4c529", "indicator--b9db68c0-da99-4f85-b423-568099328544", "indicator--ca6e3903-ea63-427d-afb5-eff5df88ffd0", "indicator--cf2ae2a8-1834-4045-975e-09a07b571fb7", "indicator--35ec14b3-c97c-4fec-9dc4-d86a11223678", "indicator--d56f346a-8625-44d6-a44c-0e5df851e088", "indicator--4aa4a53f-a273-42ad-8b20-1c17d020f20e", "indicator--500b8be5-ff31-4f27-b91f-b8cecbd19b4f", "indicator--694e2bcc-640f-40c7-99ce-966574d47b0a", "indicator--36e8df22-97a7-44cc-b73b-9f38607c4861", "indicator--48b33ee2-f8c1-4bc6-a43b-a5b99643e0aa", "indicator--1c4c84f2-4a2f-458e-92f5-be0207cb9648", "indicator--f4133c5d-208d-4b9c-87f0-792e82450a69", "indicator--389f8466-53bb-4054-968a-b55583e3aaef", "indicator--c836e5ab-4f45-4f0e-8dd4-e1173930de18", "indicator--5f3cb560-80e7-41fe-91dc-6a3fd0aa9105", "indicator--6ef07273-d1c7-4714-8386-20b105abfaa4", "indicator--9d4f5809-9a46-40a9-9e01-2a93dde0cd41", "indicator--13eec53e-9ed8-4a12-b50e-fccd019eeed8", "indicator--4fdfbcbc-6cc1-413c-a459-00c6cd53cc9d", "indicator--680510af-de9d-448f-904f-8580b134321f", "indicator--5e0215d0-3a10-47a7-a18e-fd64c2051729", "indicator--4fd2f1fa-104a-451a-b4ae-6880bbe68b1d", "indicator--61b4d9ba-a4df-4cf1-951d-1613f3083c4f", "indicator--3c4f0173-0d10-47a2-ba19-72d4d9cbeff1", "indicator--ff5d26bb-24d5-4132-a114-62590fa2b890", "indicator--6c82c44d-9b63-4d74-ac69-bc7657a20dc8", "indicator--1abdd8aa-335d-4f28-b559-df59f006c4b3", "indicator--4f1a6825-a9dd-4bdb-93e2-99efd205bbf5", "indicator--c61a6733-aebc-4dae-8b83-81ae58533563", "indicator--f736dca9-b6ae-4984-8c41-7c870fc4dca4", "indicator--2b2a59d6-d1e8-43af-a7e3-f09da5cdafd6", "indicator--fe26cc82-2f8f-4e0f-9e50-7c7c9804e44c", "indicator--2b9ac3e9-29f6-4589-a19f-327c1036d473", "indicator--3fbd5a17-d9bd-4d72-ad1a-e19b63736a27", "indicator--a97ea757-cccb-41b2-847a-d83decadd29d", "indicator--bfda56fc-280e-4c2b-89c5-828c8a0eeb7f", "indicator--340c9be3-cf38-4c9c-bfb6-88c5a95497b7", "indicator--52af35a2-6af8-4b3a-b7ef-3883a3766e88", "indicator--4b583e69-a8e0-4d4b-9a9f-75085db30966", "indicator--3efbb112-5e8c-419c-b66d-5a785a0661d5", "indicator--50d3d14b-d8b6-42a2-965b-be4b48bf3a74", "indicator--a4e8adc8-37c6-4c16-b7a2-0502628e9357", "indicator--6d9dedbb-b14d-44d7-a3fd-c4aa2cbc0ef1", "indicator--a007bb42-ac7c-46a3-b407-0aa1825330b3", "indicator--65515db7-0d4c-40c3-aab3-9598bc72645b", "indicator--591b98c8-0c3c-403a-8098-5ef5b60fb8e5", "indicator--68d95574-c7d7-438e-bc75-48ed3212d87a", "indicator--ce7f9dc0-4c6e-4ad5-9f20-7861a5e98b75", "indicator--73017ee8-7469-44bd-a71e-38a6b2b78596", "indicator--dfc4cfcc-2ebb-4a88-bf02-b9972448a2ea", "indicator--6cc52165-9cb0-46b6-9d11-57a3e6b9340d", "indicator--2de422f9-d3fc-40b4-afac-c3261b2cf82a", "indicator--90172cf1-ed30-485a-97ac-69aee799e296", "indicator--d259694f-0323-4f0b-9d61-f2b13f26eedf", "indicator--609b4b1a-1abf-4009-acfe-a2cdf9e0df3a", "indicator--b2c37b4d-67fd-4d35-8577-de320df4a115", "indicator--5f95a90f-6e98-490a-a0c9-54f61604b0ac", "indicator--c52bdd10-85fd-4f51-9fd4-9ce0e1d4ce6c", "indicator--05d8cba3-d971-4a57-9837-7b552004a709", "indicator--c84be650-9faa-4e3b-ac71-aa2137f6a2c6", "indicator--34668b8e-4711-47cc-a30d-e14d61ce2801", "indicator--634a06d5-6c9f-4944-a6ec-deead62a9f98", "indicator--cbacb250-0f49-4222-9199-fd88f9b775ee", "indicator--6da966db-df0c-4d23-9551-0d2efec0fa1b", "indicator--d5c33e02-3b94-426c-bb87-bf53becb10ac", "indicator--2fe8b73c-92f7-4bf5-bb66-f01dfb43d313", "indicator--42175a9f-1288-43ae-8b76-de7dbd5fa6c9", "indicator--f6a13d2a-2822-40df-98f9-21f8e04a1cae", "indicator--18331e59-26bc-494c-93c8-0b3735fdf9ff", "indicator--962f5812-a86d-49f6-bada-4436ff7cefcd", "indicator--e67f80e7-7f44-4ad7-b904-0aaf881b2440", "indicator--54d87b7f-409d-4ce5-bc3b-e2d6fb6c99a9", "indicator--2d5a6049-7bb3-4a76-b6bd-3e9ad5b68c7a", "indicator--9f844087-f018-4012-94ae-79ae0e749b7b", "indicator--31df51f8-3a17-4ddc-8252-76e7083d2e71", "indicator--5fe0e8cd-d1fc-409f-9e71-3ac00c2fa18e", "indicator--1c6beef2-a524-43b4-ab71-c3c49b30397a", "indicator--627829a5-8b28-4ea9-af7c-48e4007736d6", "indicator--e13b1614-929f-4f6f-b8ce-f837e29b106c", "indicator--4529a0cf-e353-40c6-bf28-63f7c13e6a18", "indicator--5742d1a7-f045-415d-87b2-cd62437bf4c3", "indicator--911f75b3-9b14-4371-8f0c-5c8338994555", "indicator--ffe9acb9-274b-41c2-b609-f2adbddaffb7", "indicator--ab1cecc8-2121-4963-a06c-3d7899ba0fd5", "indicator--a818519f-18a8-48b0-a205-571458bfabde", "indicator--b36cda7a-d64d-475f-ac61-df69aebb94d7", "indicator--ab652b3b-36ea-4a30-8824-7002c0f89af4", "indicator--fac76591-faf1-470b-b138-9b3f7f687e3f", "indicator--acbfe3c1-6aab-496d-8a7e-95fe2867636d", "indicator--af94b887-a305-4642-a2f7-a9eb6dff7f42", "indicator--01c0ce2e-14eb-4b5b-8f7a-1b56c6136a7b", "indicator--1c1022aa-be33-4cc7-a26f-c0d06db59971", "indicator--d17b17b6-377e-4e3d-ba28-6da9adeb247b", "indicator--434a6478-1020-484e-8852-0070437284d2", "indicator--315859e5-d28e-41b6-9f3c-dbaf83e96d4b", "indicator--7a04df82-50d4-4ceb-83d5-dd236f70155f", "indicator--d1863cdf-f27f-4794-ad04-f47332a26889", "indicator--65f5cd66-c84d-4313-ba6e-1ee3c54c99d7", "indicator--8d3fadab-2d3c-40f9-8b4f-5f5268064f07", "indicator--93c0386f-c853-46f6-acfd-4c778298b531", "indicator--0fc8df7c-97b5-479a-84d8-0f3de83a34b4", "indicator--1721381d-f3e9-4ede-b6ad-835909f1e64f", "indicator--d6f8a7f4-e255-4dc6-8aa6-4ad0c68a7518", "indicator--45fa81ce-ad0b-4709-a2a9-b89b72b7486a", "indicator--bae12bf4-f748-462e-b32c-5a675e01e132", "indicator--1a76e41f-4cdc-4233-89b2-1e405ae17548", "indicator--c38d6633-ec03-4ee6-bc46-e781517285c0", "indicator--332f0dce-caf4-46ee-89a1-6c2fc5629a38", "indicator--5c684fec-09ba-4db3-8584-e6815498c3e0", "indicator--9e72bb09-ae47-4ec3-a22e-25c745c71c28", "indicator--827ca4f2-489f-4e0d-a02e-7b4fbb6f1b3d", "indicator--43151816-b06e-466b-99d1-03817494eee7", "indicator--1b4730cf-6f29-471f-bff0-9955faac44b6", "indicator--67681d3d-954f-4c08-b68b-f84e3f953052", "indicator--11ee475a-7fdb-4713-93e9-b62cbf494484", "indicator--feb9b3db-742c-4ae2-8e6f-b78060c8a077", "indicator--885de97d-3d7e-44a9-943d-e0ccf7953483", "indicator--ba86a4e7-0d01-4716-b751-b49d26b87094", "indicator--6af4c9da-838a-4584-9ad9-ee13a9925dea", "indicator--4064b432-fa6d-465f-bde0-bbeefd2a09a4", "indicator--19510b5c-c779-4739-8bef-58d6a43c57e5", "indicator--782c5e1e-da4b-4a80-ab56-3088de3fecf3", "indicator--184b9ac0-7ae7-435c-b909-f087d73aa94c", "indicator--b2bc023a-8c8e-4345-8fa0-36ab1bf425b8", "indicator--b24a0b0b-979e-4d08-9895-e93936e6c40e", "indicator--59c6281e-ee86-4a9e-9d49-21c9def7122c", "indicator--3153aa9d-12e9-4bbc-a343-276d2239febe", "indicator--705cc342-d56f-450b-a262-79c632b88864", "indicator--07fc845d-d722-4e90-a1f3-65f1bf44ebea", "indicator--c4116e28-9221-447e-afe1-bd899cd5cd5f", "indicator--a3d26aa6-7759-4259-b938-bc06c2340002", "indicator--046c407d-c877-49ba-b18c-8da5760743ff", "indicator--18a89478-9c0b-4090-b3fe-7205ddeb607b", "indicator--c18757f4-21db-4cfb-ac07-5ba6b44041a2", "indicator--a753783f-5078-498c-9fb1-2ec15f937144", "indicator--17fd05aa-b1ca-407a-b91e-be5f49c39c3b", "indicator--e2efcd87-a20d-48b9-9fde-75b127609885", "indicator--2c7448ac-8c93-4b22-8696-2c1b2a32d9fb", "indicator--17f2d9ad-8754-4e28-bf56-3d404f032b52", "indicator--b841dc88-99ac-4ed8-8f27-02777a7b5170", "indicator--af1e0edb-be59-468c-822b-097426b14567", "indicator--2049fc30-e075-4ba1-8eec-3d0f3a93a8d3", "indicator--d56ce9e6-36e1-48e0-b50b-cc2196f964bf", "indicator--3eea42a1-5425-4e76-99ae-2f2b11bdffe0", "indicator--59d0237b-ed2c-484f-b586-3e4fe9a971d7", "indicator--1a7bee39-add1-44cf-b30f-52bc75d044c4", "indicator--4c5af06a-867c-42e8-9ad0-a6041af95c49", "indicator--a169def0-e35c-481d-acd1-b951a8883068", "indicator--2889140f-c318-4e1a-b50b-c52c8d20b57a", "indicator--6b65ffa0-944a-42b5-9392-6ec92fefd041", "indicator--d320b4f3-1279-4173-aca9-b377c4922fbf", "indicator--7bf82587-1a66-4d49-a5b5-6f4094c7b3c3", "indicator--1c8838c5-31c2-497f-98ec-2ca08a6bcf5a", "indicator--db6db960-01c7-4f9d-a0cb-4e9a57328fe6", "indicator--1ce72828-70c4-4b30-b189-ddc9f71e75ec", "indicator--e00b0605-c53d-4bdc-a54e-a88188146f0a", "indicator--823e0549-c0cb-4c4a-a85f-a6ed15acad41", "indicator--5f545067-79a8-4c7f-b183-d058b28ded12", "indicator--1e7bedb8-e32c-4978-a5a6-95b4f14a899a", "indicator--1b642fad-f285-4b4a-9ff7-57cefcbd4f66", "indicator--7e24528f-3e5e-4e70-a0a9-78b43afc7e03", "indicator--0547ad33-dbaf-49f9-a224-67a096f6595b", "indicator--d8f5d533-468e-44fd-95f2-34e7ff5c7810", "indicator--3ca9c4cb-4f86-4f0e-98c9-d5fcbf5e11ea", "indicator--e5d7bb73-2f57-469a-a6f3-5c758bdb3552", "indicator--6b29cfb8-0d8a-41d5-861a-1d2a26b27266", "indicator--65950e44-64aa-449f-81a4-61fa82eba15f", "indicator--311f273a-edf6-4453-b267-26363a3ca2f6", "indicator--c5ac3165-eab9-4a74-96e2-69b73ebc85df", "indicator--340cd2fd-fcce-4251-8404-c53630749b5f", "indicator--14ffd6e3-b6fc-4fff-8ebc-833ddda5494a", "indicator--46dc3233-fccd-4337-96b3-0bed2dcb58e1", "indicator--a7176a25-63df-4da7-9b66-a0eab871893d", "indicator--a2a317bd-02ec-4963-8a8b-a7aa28fb4970", "indicator--dbb953d8-ac48-485a-bc5b-8b0a5f91a831", "indicator--f83cbd8c-2d74-4971-ba88-406ef0962ec7", "indicator--b1c45b6c-f7c1-4547-b092-50aa27853894", "indicator--1c58d005-8d2c-4ada-b401-3d519af18b66", "indicator--170e6dfb-980a-43d0-9077-0d4ef2858b7f", "indicator--1563f65f-8ef2-4aad-9a36-ae9fb7b96aa4", "indicator--7865ef36-9a1d-4d53-8c10-1a3c1d8928de", "indicator--2b3d132e-2da2-40cd-9eb8-fdaefcea573b", "indicator--c206337c-75e8-401e-add5-59d5f60136ef", "indicator--1d4b706c-e0e5-4e6a-8044-a156d8c3691d", "indicator--7d9d6d87-c02e-4270-bedc-c70ec0914f40", "indicator--ff8ac2fb-8bcc-4f6b-83b3-b35a90323815", "indicator--e2139e1b-0c76-4d88-a1bd-7e8379144acc", "indicator--1a6b2cd4-fdb1-4b84-91b9-e5bd0c3ced1d", "indicator--b52bc71e-ac31-4d16-bcbb-392e9365017b", "indicator--441a306e-067f-4bec-883e-d4a7b6619c03", "indicator--fd351b60-ce6f-4196-8a38-708cfee07f68", "indicator--9fd55a12-296c-4f1b-90cf-b287ea6b6425", "indicator--091b9b67-eb5e-4d62-a4c4-8ffc106d6ac3", "indicator--343cba47-d53b-41f0-92ed-937221378f02", "indicator--d6c0b224-54a1-45bb-89f3-b6a80bd41359", "indicator--4eca74cb-ceaa-49f3-88c7-831f79b159bd", "indicator--5110d271-969a-4dcd-9549-ecec5bbd960b", "indicator--9e4579f9-a829-445d-8891-852d996cc309", "indicator--210b06c8-3862-404d-8555-992d67ec7d50", "indicator--6c41623a-e463-4517-b748-c40524633e1f", "indicator--5bce5bd8-2776-4306-a65f-0cf36dcda4f9", "indicator--4a181a91-a24f-495f-abdf-15d1e3b4226c", "indicator--bd32cc4e-967b-4fc9-8388-bb10047d84f2", "indicator--48f3c83f-e9df-4f99-895e-a15be0780569", "indicator--eb1ddd75-844a-4e87-a4a9-e90122e54e85", "indicator--d651e457-6403-4c33-8065-bafeb829d935", "indicator--cab70945-2c48-4523-b842-67b0562b7935", "indicator--362ad350-bca1-4e0a-967e-7998ce6ccd16", "indicator--63cd1445-9cb8-4eaa-a331-b9c2a9010d19", "indicator--06006283-e7bd-42ee-93fb-0bcd3bfdf6de", "indicator--018585d1-b6de-4446-84e7-f208c85ae8e2", "indicator--0a805293-d6ee-44f7-96f8-a876e7ff50df", "indicator--dfffd3ca-1a1a-4e1a-83bc-662f4227e3b2", "indicator--03b9b9b2-cb6a-4287-bae9-bee37fdd8a70", "indicator--58852f05-e7df-403f-9f9d-9e50b2647bd0", "indicator--14492896-dbd8-4584-81fc-e3ffb3a6d79b", "indicator--51cbf02a-f76e-4265-bafc-ea87df7d2343", "indicator--96c392dd-5f41-4f8f-9c13-7229e327354b", "indicator--1c92a4ca-de62-4882-b205-3572a4652019", "indicator--92448c3e-be22-4eff-b4ad-590c7e14d7ac", "indicator--118a96f3-95b1-4eda-9d30-b13501271897", "indicator--d792c1d6-0e57-43ad-a522-465a90e95d31", "indicator--ddefe68e-668b-4f12-bdda-cff0402ff294", "indicator--83085985-6cd8-4e7a-ad0f-9a02fb97a802", "indicator--d64d51c4-3a70-4a99-85f5-fdfbdb7c1546", "indicator--8a3db693-eda9-46ca-8b43-dba83a6a01cb", "indicator--9075cb4a-cc0a-4ee6-a8ae-cbc9dfb75c1e", "indicator--0dabcbb9-77d0-405c-90a9-29c888ac1f04", "indicator--d4d8dbce-7c40-4989-84d3-2fe996a382f9", "indicator--1a3f8427-bd48-4b56-897f-433792328fa9", "indicator--f132b475-cdbb-4ed0-a99c-b4a1c1d9474f", "indicator--fdf6810d-2d4d-4623-8dad-2ae74421eb0a", "indicator--9d4fd649-a150-424d-8c2d-5a1befcad6c2", "indicator--62bb1979-a9c5-43e8-a2ce-6d4c9ab9fd3b", "indicator--4041ed27-59c9-4982-9edb-1f4c0b547934", "indicator--bd640d61-bb3a-4945-a23a-0ef50a045906", "indicator--92e30090-90ab-41c4-a80e-17faddd02721", "indicator--cbdb7bcd-58d2-48cd-84e4-996d37a38196", "indicator--220dce0c-be01-4839-9846-d3e6781dd89f", "indicator--4a5c2e11-98da-4b86-b5c5-073a3d1fe86c", "indicator--792d7ef7-2cdf-4ad6-a840-146676411db9", "indicator--ed568897-cdf7-458f-9995-b5a6603395cf", "indicator--f0e85b1c-bf0c-4dee-b9f4-c51572e0e7d5", "indicator--f104cd2f-6b0b-422e-8df5-d852cb34e8d3", "indicator--344ec809-682f-4dd6-873c-aa8cbe606271", "indicator--3bb756d0-3681-4eea-aef4-7ac09bb08a09", "indicator--ee339f6a-83c7-4696-a9d8-d78c6f1c8039", "indicator--d13614de-f588-4859-b46c-93acef19fd00", "indicator--fddad033-c757-4848-9553-9e4d09735404", "indicator--f37d958f-19dc-4053-ab01-48d0bec120a2", "indicator--85ebc8c0-92ea-4816-8f2d-ed502997945b", "indicator--f35e7d5e-d01b-4e3a-aa76-6c2a1b134875", "indicator--8abb1e68-3b9a-439e-9b94-a1f117dc6d2e", "indicator--0622a9ab-55b2-4568-87e4-687bdbc2fa66", "indicator--8eeb2318-327a-4468-bd04-d93a76fd3e59", "indicator--2d2d7705-274e-4e6a-9a51-ec2557c3f05a", "indicator--e73837de-6061-4077-bc23-28019ffe8c7d", "indicator--ba034891-396f-4f15-a4bc-e6f037f35b63", "indicator--464b08ab-54c5-45e0-9a14-f6257fb13632", "indicator--c16330e7-abeb-4d62-9613-2134ad193074", "indicator--7d746dda-0c10-435b-bf7c-4bb481b12c24", "indicator--54527c47-ec6c-4439-807a-4d0d291d4b3f", "indicator--2addf935-17ad-40a9-81cf-a7155e98a56e", "indicator--4de2d264-3fa8-4102-8656-97865d1a251f", "indicator--b687e671-cac2-4f92-b0c1-ce91f4bccab4", "indicator--ea2dd949-8a79-443f-a8b9-9f5da9a5a139", "indicator--422a995d-8367-4659-b7fa-18eadbe719df", "indicator--cb7de610-cb7a-4f8c-9603-1dd4a00a97a6", "indicator--2c0f146c-6aa5-448a-a7c6-5fcf44377e4f", "indicator--4e7a7aa0-ce8e-4243-ad4e-553dbdedb0cf", "indicator--d723061b-29ef-4037-913f-1db8a3a7cd4b", "indicator--f186469c-10dd-4653-9dd8-d93c73c0341d", "indicator--532e0b46-0a60-4607-b846-826223f5d52d", "indicator--9356195d-4385-4353-8976-3d5c06f85825", "indicator--21263a34-e018-4c19-ac70-f8dfac865b40", "indicator--ca1dff24-57d1-42f4-aabe-81e139f607dc", "indicator--b891d07b-4270-4332-a884-20f6e8e17c01", "indicator--2c3ac25e-01bd-4f5c-8b51-2c1e3b206c67", "indicator--6e155b10-25e0-45b9-9a8d-d8e438a682c7", "indicator--fde2120c-c545-4f4a-b0d9-41178e4460c6", "indicator--40c80568-0db4-44a8-b60e-baa7e89ad73b", "indicator--7c29b9bc-7cfc-466d-9992-0ce8bc32ec3c", "indicator--3c13ffdd-921c-4d94-8f1f-8773b2a0c6a8", "indicator--30f69605-5b85-4ada-aec7-662f7ab6d6c5", "indicator--b24c7718-6c39-4f59-a061-ce8934831b6c", "indicator--e7147eb3-926c-4d36-8ef5-c266dbbf61d6", "indicator--75367510-a156-4fb7-8cd1-62cdc784d421", "indicator--0025b9d3-bf0b-4d48-8f89-2d4d2da2787a", "indicator--175ce832-ab9b-4e36-8a82-6a44f7a535e2", "indicator--e2ac1980-3961-435f-99ba-d124d11f068b", "indicator--4c374498-a03e-4e60-8ccc-775431fe4884", "indicator--3e7f13de-db65-4c30-9cb1-9fac1b236363", "indicator--2fdfc6a0-a07a-4283-885f-815a0a18e0f5", "indicator--0bccc7e8-b5a4-47c3-bc53-6ad59df0e5c2", "indicator--bfb75bbb-d61e-44c9-8cc9-806aaa2f6e2f", "indicator--87598444-e445-4a81-8ed8-3aa4dee884e0", "indicator--b2b72b4f-865f-4237-9e2d-ee77792dcbb6", "indicator--fd60aa70-b5bb-44d3-9424-6651ec4bd3c7", "indicator--441cf419-ae4f-4d04-b7f3-3e8c717d4e33", "indicator--7ef9cc6d-489b-432e-9c5d-c8ddc75f1d18", "indicator--d5e77b64-758f-484c-ac01-e2d1bd6a3abf", "indicator--1c527bef-66d2-432b-b90c-17ac5929ec24", "indicator--a4921ff1-2bad-4dd9-ae0d-30a4bf7eac2e", "indicator--aab2a2fa-6eb8-46b6-83cf-e56fd7a5df4e", "indicator--0ae598c3-de5f-437e-92e4-7f41a7040eb7", "indicator--3304d137-0c28-4072-84a4-fa5de22e2900", "indicator--a555e05a-e4b8-4225-9bb2-0bf83711d47b", "indicator--f742a12a-f5a5-46f5-bf37-5855e96bafab", "indicator--ab085eb5-105c-49e9-bc17-a1f1ff14f858", "indicator--b0429dd7-5bce-4154-a927-cbce18d9af3d", "indicator--6640fc7f-ffc6-4d31-b838-c80cf1f31ce7", "indicator--5648d0f2-08b6-4fff-80da-74946885dde2", "indicator--cdc6e2ba-75d2-4160-b941-4fefe44ff2e3", "indicator--2188059f-b205-444f-b3b8-b1287959a882", "indicator--7b530606-a19f-4470-9c18-e171554e5351", "indicator--25a70c60-0abc-446a-9928-d3c7e224f112", "indicator--cfc62985-3a3c-447d-9fe6-0cb0f74b9995", "indicator--a1606946-86b1-4335-8797-ba9d60e7111a", "indicator--bce93fa4-92c9-4e6f-831b-90442fe66c43", "indicator--2ff75f67-6341-4709-83c4-ef76db977be8", "indicator--846dba69-8edd-41fc-b201-62a65df60a3e", "indicator--5440cec1-63b4-4b6e-b4b9-db984819c59e", "indicator--0d104ab3-c815-4ec5-a1df-6aafb04d52e1", "indicator--1978d15e-8318-4e32-a211-7a0f51298776", "indicator--0db159dc-bebb-4758-b4ac-c675715b8d5b", "indicator--61958b8a-46c5-4c87-b504-d589661534d6", "indicator--ee6b5619-3352-4eae-978f-dd20bccc18fa", "indicator--d9661a5d-c36a-40f9-a6e3-814a3a5e8c80", "indicator--053c5c89-407f-477f-b0c1-c561f8f500f2", "indicator--2696b3b4-6b51-4b6a-a87b-338cd7c27d01", "indicator--3f49014b-9bf2-4333-9c57-6daf2368aff9", "indicator--5b895a98-8b03-4039-b06a-7f9ba4a54173", "indicator--67e5c7cc-89a7-4847-bffd-099f400829c3", "indicator--78e79f32-184a-4542-be98-b6d0f3aa6426", "indicator--762a9876-1d2c-4f02-a3ee-8c6630f80aa9", "indicator--1cbc0a5d-3c45-43ce-961c-fe1286135007", "indicator--0a13b6ea-508d-4401-8431-a2e488cedc76", "indicator--0a702687-8cad-4381-82ca-04fbd24c90d4", "indicator--9970f7a4-07b1-4be7-9c4c-7c880ede3833", "indicator--2cb0f64b-ce8f-44b8-97fc-f28867385dd3", "indicator--57e31d51-11be-46cd-8462-710ba2f756ca", "indicator--b26e5d63-d750-46cc-b9cd-efd41c0552fe", "indicator--05bcecf0-cd3c-409c-b139-d25d2fa5877b", "indicator--344901d2-996b-43c7-a9c1-3746da16a3b2", "indicator--5e41ecf5-99de-4336-bd32-1ac430ffcf99", "indicator--bec53bae-41c5-48ea-9960-6b52de084330", "indicator--cb7b44c0-391a-41a2-86b9-4d1ecc171506", "indicator--1d0ab1f3-2837-483a-889f-fcca2432e189", "indicator--9bb3b589-5054-4093-9bb4-73caadfad86a", "indicator--9ad9a2fd-95f0-4061-98a3-6b29ca6d160d", "indicator--49d4b8b6-0811-4c72-b032-33059a7623a6", "indicator--b7ac513a-b829-435f-9933-b6d48f729e11", "indicator--b978442a-6664-45a0-8e68-2022f9f89016", "indicator--ddadabc7-a68d-4dd7-b079-3fd2cb1c8f22", "indicator--5a5f0f91-2a40-4c64-a7b3-f0904c69f680", "indicator--29215c17-5131-438c-9962-4370d5a16329", "indicator--cd847adc-717d-4062-9487-55d9b665ddcb", "indicator--98e9dc22-a4d2-4b21-bf55-4f322bb550e1", "indicator--8394f7f4-4d6d-4bb2-b93a-a831095af513", "indicator--996f3f1f-4fa4-4726-9804-1cf85c71eb5c", "indicator--67b7f708-9de0-478c-9c4a-932391107934", "indicator--dfec3eb3-e6fe-4ad7-8068-0536dc5d2863", "indicator--86424e70-13c9-4237-8299-c84aecebea07", "indicator--0ef0dece-16ba-4ede-b421-813dcf4c32c4", "indicator--2c17ed7c-c4df-4bdf-a18f-6de99f4e4d68", "indicator--c92b7882-59c9-4ded-9f92-e61466c83b13", "indicator--67115c88-5b1b-449a-8ada-b06e17d83378", "indicator--d266f534-93b2-40e9-aea6-463688c924fb", "indicator--fe32bb8d-016b-442d-b8a1-9bcb65d4ffa4", "indicator--69b8159e-25b3-445c-92df-db3fc40c3ed8", "indicator--0edcf761-389e-412f-a07e-800b08bebc12", "indicator--5fef38bf-0f88-4cb4-8c64-5fb94a92cf18", "indicator--9f54d6d5-8ee4-4068-99d0-71b27ae0ece3", "indicator--663b6233-3ad5-48fd-9428-3e4e4dac7d43", "indicator--a328ea4d-1674-4cf6-8135-89b61ad061bc", "indicator--0c15e192-ece5-4b44-ad34-64a99004b2a7", "indicator--b629323e-8c9b-4957-bf90-abc148ba76eb", "indicator--126194d4-b8f1-4002-a1cb-e8cb18b7aeb3", "indicator--876db2e6-50c4-4aa0-9e86-81441325ba5a", "indicator--5f6dd4a9-cc30-4131-b7c4-c13098f9f267", "indicator--a5127d54-3c25-42c1-a7c7-1144746e76cd", "indicator--a216b447-ed2b-4739-b710-e52f8425b80f", "indicator--588ce6b8-6bc0-4cd3-93e1-13093a955c1e", "indicator--d37a6960-0c79-44de-9bd3-400dc1d7e665", "indicator--6cc65796-7793-4947-8d4a-bfd723ad3a3a", "indicator--7b19979d-5751-4fd8-8ea0-bc73f97ad9b0", "indicator--c8b8c600-3b0a-46e8-a1d0-0b5255773499", "indicator--1fa20785-1c91-4027-b163-0e2ee422a266", "indicator--f3b2e8d7-f85a-4a7d-b6d8-ffdd90d56efa", "indicator--c8d4adb7-58e4-48d9-8ad0-9dfe58ea6478", "indicator--ee5e5e01-ccbe-42e0-a93c-d259b4664648", "indicator--e6454e8e-e019-4189-8bc4-6ec3f8f29b74", "indicator--fe4ca793-7d41-4f8e-8e7c-f96e19fc9afc", "indicator--15833d2d-b441-44ca-be64-f6063d915c1e", "indicator--5b4f2d18-8ef9-45d1-b931-f50bb1966ce6", "indicator--9a33e850-54e7-452b-8783-40212404e453", "indicator--c890451d-674b-4c01-b4d5-c51f9ff1e21b", "indicator--16741d71-a477-488b-9b65-996596138276", "indicator--bfa18c3a-f850-4ade-bd65-aed04905133c", "indicator--31a7b055-5e34-4028-923b-996079c29d14", "indicator--d98dd2c4-721d-4556-8706-0b5f027b0454", "indicator--10503797-25bb-4f9e-b252-c073d730d262", "indicator--11350bfc-b8c8-4d54-99f0-cb3576768bf1", "indicator--9649b987-0f03-4416-9d4c-398b266d1f76", "indicator--b2a8d825-c9bf-416b-bf6e-6d894ba68b93", "indicator--dbe46f20-72dc-4f23-bb9e-b01ab58af023", "indicator--d3bc6757-fa08-4737-bc6b-474013d9f54f", "indicator--295cfd27-2896-4f6e-abcc-8ee79183004e", "indicator--3d7cf911-2509-495e-975c-5352ecd63eda", "indicator--f29c509a-2829-4683-96a3-f6e2d4aaa605", "indicator--f1dd6d47-07af-4abb-b936-a79e6e4e8005", "indicator--ee003496-f2bc-42cc-8740-909e862913cd", "indicator--202976c1-274b-4a49-b362-b2f981b996ea", "indicator--3d0a26ca-89ce-40c0-8706-8fc43235acd1", "indicator--84a871e7-621b-46cd-aa08-97514351acb6", "indicator--551c8327-2ee1-4955-8a15-6efa28343f1f", "indicator--667efd3b-8049-4685-bd17-f2ecbe0d7edf", "indicator--c8ad6dc8-5041-4907-9452-fdbf8927f018", "indicator--4677eae9-b580-4113-a8d2-b35f8ebf719b", "indicator--6c74df26-fb27-4841-81f4-3f456acbcf3e", "indicator--d6ec60ec-6166-4c17-8a47-6edeeb9dac7d", "indicator--6ec68cbe-b163-467b-8bc6-6c0041653bd6", "indicator--74161237-f6ae-4c48-a927-4ce23822b1fe", "indicator--bdc8c135-6826-47dd-986d-e8ac897fa696", "indicator--47a48289-3271-4d53-8572-bbf67b16bdfa", "indicator--5411d60e-45c0-45ff-81d5-5aa37352fc04", "indicator--15314eb2-30be-4efc-8275-fde352548b9b", "indicator--8ff946c3-604d-4828-ac23-f01ec308c048", "indicator--ddcedfc3-dcf8-42b5-b9a1-96c20abf0e52", "indicator--f9d0986a-8176-4f3d-9f62-3ee31358ab2a", "indicator--fbd47eca-37e7-43ec-aecf-a798289dcf17", "indicator--2466c88d-7493-4665-a247-27cbc0c33acb", "indicator--d2f5cd7c-96f8-4673-bbbf-7b9731e7855b", "indicator--33b763a1-d21c-442e-baba-15f5442726ab", "indicator--b2485965-4207-4e18-9718-d4c7f94c31ae", "indicator--805569f5-30f2-4248-a3ee-df89f6197a14", "indicator--02f326b7-933a-4ba7-977b-64ed3b36edcc", "indicator--64fc0469-99ec-4d7a-91b0-3cb9a2429f8b", "indicator--3e71b3c7-879f-42c3-bb09-14e91c21f1fc", "indicator--be257992-121b-4d02-b131-95aa460c26c4", "indicator--66529a93-0180-441e-916b-bb5e2e63c88a", "indicator--d7b211a9-717a-48d9-96cd-e29171b383a3", "indicator--69763ccc-69a4-487a-9c14-101e81e57720", "indicator--0adf0e99-7613-4edd-aef4-9812917f69f1", "indicator--a6e48f1d-5d62-4472-942f-48a6a5a33dac", "indicator--7843d5af-9413-4b23-b154-6d5cc7e073d0", "indicator--a71bb5c7-0fcd-4487-965a-89d5c17b7146", "indicator--a6962303-e047-473c-ac09-f43bf4d342a7", "indicator--ef62fc5e-98c2-44ea-aeb6-1b9bb9e5a41c", "indicator--4d795a3c-a7c5-4357-b848-e8117810d342", "indicator--74e213a2-ea14-4716-b8bb-853eb966bf8c", "indicator--8f3862e5-fae9-477f-9316-6eb204e98f24", "indicator--e8a8875e-0eb1-43f3-9cfe-9e3f7a3bfe39", "indicator--92221eb4-9be0-49b0-9a36-2435cf2a7661", "indicator--7b995de8-9c9b-4ad5-b69b-b8630e0276a8", "indicator--30b6fbc2-bc0a-4cc0-b74e-c48a73cdc1a3", "indicator--a136392f-3add-49b9-8a23-ec27d68bded1", "indicator--33613a2d-8879-4519-a7e1-71b92e8aa995", "indicator--ede4cb7e-1d03-4e84-bc05-aba3f0d5d5e8", "indicator--8f261831-5a52-4644-b1e0-e5e1412664e7", "indicator--dab83d1a-c0ca-4ba5-a299-e8f34d546175", "indicator--73a1a0dc-edcb-4020-8c88-bca52ffef2f3", "indicator--e2cbb549-89f1-4045-922b-b3a7d3c21302", "indicator--46f4b8c4-b1f7-4999-98a1-eae685ecf92f", "indicator--a15e9eb8-5ec2-4edd-a92e-7bfe050ce846", "indicator--3855a877-2860-4723-bff8-b6060630d9a3", "indicator--6ed1ee9f-ffbf-4a4c-bb03-370b99b3c6f9", "indicator--3cb020fa-7ded-45a3-b5f2-dc948f516f87", "indicator--02fab7bd-fb27-4fcf-bd68-1dd9442e18df", "indicator--bbe58535-4065-4f3a-82aa-a01bf661078f", "indicator--144c6838-3556-4473-9430-fd3885a466cf", "indicator--ffc6125f-ba8f-44b5-8f6f-87378101abfa", "indicator--ab6b5910-46a1-4923-990d-019c750e60ec", "indicator--21084e08-e80d-42f5-bf8a-f789dbb2adbf", "indicator--9844e314-e7e4-412b-a508-9e0bd37297fd", "indicator--44a9ede3-15e5-422b-ac07-a67789a1cae8", "indicator--c356808e-cbad-4387-b3e3-a41825a30a29", "indicator--623402e7-b045-4956-9f9a-e997c0525519", "indicator--bd3f8770-663e-4891-9ccb-7faae56d0bd3", "indicator--92a53209-435d-4b51-9288-64bf5b5931a3", "indicator--a0ac948d-756e-48a4-9a68-f1e860156769", "indicator--ebeb8f21-db21-423d-98bb-0e0d0713fb0b", "indicator--28f4bccc-e70b-4c67-b026-f2ff5b63dec1", "indicator--4ff8d179-501b-4c2b-9379-0a55535f246a", "indicator--f9eb39cc-e31f-49e1-ae34-1e4e64a6ebba", "indicator--d3891ad7-56b3-40ad-978d-b72493accd77", "indicator--ed592d2f-4185-422a-8d80-054334ee4739", "indicator--2ce3aa55-301d-42f9-afa8-4aea7e5e0fbe", "indicator--e6642117-4bce-4b85-8d20-6dcb605f1c33", "indicator--34724f5b-4597-42f8-becc-3f729f89b750", "indicator--5302e2ee-7149-43ea-ae73-d73c0f0afccd", "indicator--0a985b02-798d-448f-91d9-fc99614d2839", "indicator--277d87ae-ab97-4b45-82b5-cfb1131b788b", "indicator--92faef77-a290-4cd0-888e-848918727b96", "indicator--02892da4-de43-4ae3-9970-fcacd596b2a3", "indicator--9c55c86f-b8cc-4982-bf96-f1dca2959821", "indicator--3ac2405e-16be-4f6d-966c-d3e23f7610ab", "indicator--7223e82c-4039-4ef4-8b26-ff681aaae3e7", "indicator--f7701b62-ee64-4112-bbdb-9e9c49c0f36f", "indicator--a0c77cc2-a153-4583-b6e4-7ad556889a9d", "indicator--a26f0789-7380-4ad4-8877-7f37fb68f806", "indicator--f0f741cf-d4aa-4b91-9e23-df2f502a8f21", "indicator--fd4d5f44-9e52-4d09-acb3-a1d7c912f571", "indicator--f3f27b19-243b-47c8-aa09-67f9bf03a1cb", "indicator--a40c956f-2201-41fb-8512-c0402187c1da", "indicator--73bf31b9-0719-4cfe-b8da-d58e41469484", "indicator--28f7977d-03d7-479d-9863-aea0906a5f07", "indicator--1fd71ed7-ae24-47cd-b468-1098cfb7d735", "indicator--3b4543e1-82e8-4e6a-92b2-d64e91c2f67d", "indicator--1a3b605c-ac62-47b9-b836-994877c64831", "indicator--047e2f0b-a82b-4fd3-9779-3a2a89f3b85f", "indicator--c6f7b1f7-fca9-4229-841b-edfb35bcffea", "indicator--93b4617e-47b6-406f-8bef-9ec48d7b593b", "indicator--54b2ceb5-ff77-4006-bde0-4e073baa1c5d", "indicator--ae584585-3e10-4f65-9cdf-f0a8e136091b", "indicator--431661da-ad57-40c5-b149-8b6ba1ebf9fd", "indicator--b666cb4a-7875-4ae0-bf05-8ae22da300a9", "indicator--e9b167b7-2323-4980-8eff-168f354ebb1a", "indicator--5e301670-5b60-442e-8fea-fa98af9038c3", "indicator--10694a72-e649-46ab-9270-bba6b68c37d9", "indicator--0fc24468-09c2-47ae-9dad-a1219a4210dc", "indicator--83e20d4b-0bb4-4d6a-b78f-738eee8c93a2", "indicator--0fdcccd6-037e-44e1-a00d-ba486a564e64", "indicator--54ed3172-3159-4e8c-a2d2-cb6d5eb7a831", "indicator--ab59257c-20c9-421d-b304-9ecde3701ebd", "indicator--8739b70c-58fc-43ca-b783-fb7734fb8ba8", "indicator--6cffcd36-d54a-46a3-bd14-d9e3d3ca2a4e", "indicator--a6fb486c-6ace-4fb5-9e5e-a7de260a5ed0", "indicator--c0fbd5b3-063a-4509-997d-e2ad1a78a58e", "indicator--6e76f6b1-0ace-401e-9db4-284eade88c7b", "indicator--e111b258-382c-4bb4-aa61-4c6967effc49", "indicator--3e1a8874-b9c6-4922-9b3e-5ce627b7fc96", "indicator--286d4ea9-9141-4e3a-833a-cb99974a796f", "indicator--550a01cd-242f-49e4-bc24-eb85dccc453d", "indicator--13d124b3-82f1-4ea4-89f6-e2351c5253ef", "indicator--f547907c-59e7-40f9-a127-ec259e96fc92", "indicator--ef2b01c5-88ce-4268-942d-e386dd82cd82", "indicator--8a2729b6-9188-422d-b81d-684f498fb7af", "indicator--77e7c8b3-d216-4fde-9401-ba20d20721b7", "indicator--e4419963-341f-46a5-ba44-0d9daafc7966", "indicator--9e175667-f467-4a87-be41-f32e4f9e02c6", "indicator--b8e7d9d5-a6d4-4c19-a86a-316c66d68c65", "indicator--80db4706-7624-47fe-9cad-7a1c4bc634f3", "indicator--48ebf56a-9adf-42d9-9160-39f57a9d0260", "indicator--2b75406f-1bc7-4f1f-a59b-7bbc3b59048c", "indicator--b809043f-b18d-4ae3-9b53-004367852d8e", "indicator--08471bc4-1a0c-4692-b87e-a2ca48f3ca51", "indicator--de6546c8-c5c3-4fdc-a1cf-a5065be18882", "indicator--792dfc28-beeb-4e23-bcea-7a7f9456a6fe", "indicator--38f11f8b-d3bd-4afd-8617-86d066c9ea04", "indicator--efa68277-ba86-4fb0-878f-173771e71d9a", "indicator--68d1ff5d-daeb-459c-96ba-582de832cd84", "indicator--9c204717-5eff-4f9f-9b46-9c3e47879ef1", "indicator--c468b759-08bd-4ab7-be56-2e07f7e7593f", "indicator--89ac299f-a128-4afe-82a7-00110d20b526", "indicator--57921acc-2203-46b7-9302-e38daf18549e", "indicator--2ad23eba-7e64-45d2-94bc-e9e8e63b15ac", "indicator--086f2195-47c6-4575-9feb-042383cb9d37", "indicator--689c6410-5005-4330-a536-88a6679cf005", "indicator--a41baae1-4f0f-4905-b21c-3941e5e1c4fd", "indicator--4ab11784-909a-4b35-9e21-283a86cf84f7", "indicator--7c363908-3fd0-4eac-b146-6d04f78a6714", "indicator--bc2edfab-a9a5-4c03-9ec5-d956855a4760", "indicator--38b6145e-7c79-4cf9-b154-d45eab76cd17", "indicator--80ecb10b-80e9-4c0f-a1ac-5d0fea6abca6", "indicator--ebef975c-3a29-43d7-8305-b16954e2927a", "indicator--2251d6af-0d9a-41e4-b5b7-a48b63cae837", "indicator--5c0fdf31-c9bc-42a8-8215-f8b0d2817669", "indicator--d5c46efb-d096-4458-8e9e-f87ca09bf40f", "indicator--41bfc26a-df26-4428-959a-6c112033e92a", "indicator--d7902feb-3f4c-4c62-b50f-135b7db60faa", "indicator--e14313b0-d098-40b2-932b-cf20ef61b987", "indicator--09f93a2c-0202-4de5-8900-93f77a06f03c", "indicator--dc2d181a-e032-4d80-a1fc-698330eaff26", "indicator--13e4c3a4-647f-418c-a2b4-c61bea6823a1", "indicator--f96a8ec9-178f-46bf-9450-70b49e856491", "indicator--8f4ca7a7-d180-424a-914f-663ac91cc422", "indicator--07232d58-698d-4fef-911c-388249f8e287", "indicator--06b063e9-0d5e-45e1-8d05-cb7761bfe0da", "indicator--fc9a7393-7bdb-4f62-acab-9c5f2fef4bae", "indicator--644e69aa-25bc-4988-9c2d-9a23929f3edf", "indicator--79a4daa6-2f0d-4cfc-a9fa-2c8a52364f3c", "indicator--c1e13493-b266-4b02-ad7f-8ea4216cd5dc", "indicator--da537fe7-922c-4696-a788-5fde9dcc891f", "indicator--ac577b3c-80ab-432e-9f58-62ecebb75aff", "indicator--c26d5b04-96d7-4472-9b21-3bdcea7c7eff", "indicator--1eb771bc-5df0-4f40-b2a9-34aa487732e5", "indicator--61878376-f540-40ab-bbc0-714b8274cb64", "indicator--d9eac433-b537-47f7-ac90-b54026bbb06e", "indicator--8fa02290-af4b-42a4-b604-8ba9089466a7", "indicator--bae32bfd-1286-4967-8be4-f9d1cfb268dc", "indicator--413969b6-ccb9-4430-8ce5-84476043eee4", "indicator--c2fef279-7c59-45f9-a6e4-e7e2f27572d3", "indicator--6512dc68-3814-41b6-8f99-82f74d6da9f2", "indicator--62edcf9e-1b32-4a3b-8c18-d0361f139e5b", "indicator--e0567351-3e3d-46b2-afb4-70015851fe55", "indicator--482890f8-58f5-4141-89dd-c1a8b316dd4e", "indicator--e652a3c8-118a-4a45-928a-8e1c92b7555c", "indicator--ade789c0-3606-4a38-935f-16b774bbc9c8", "indicator--93ea8f60-1c89-47e4-bc15-96c7ce58b74a", "indicator--c08672ed-64a2-40b9-ac80-219dd7b62095", "indicator--7ebd3aea-b77b-4515-a011-9a28f11da1c9", "indicator--5454e787-cc23-4a15-9551-c6e496901281", "indicator--d7774c9b-a916-4b4b-9067-ce5ccd785cc9", "indicator--e3537092-5e56-4121-8728-4b07db9e9c89", "indicator--30d3422b-4d7c-481c-b9f1-91dd98cac002", "indicator--ae6b7366-28b9-4e1c-b144-5fec9e849c9e", "indicator--4e434f19-6edf-40f5-b3be-af0bd50e7470", "indicator--69e9d640-d25c-44ed-932d-17b64e4d51ae", "indicator--8e66d7ef-ed9e-4834-97d2-8ea23ca393d8", "indicator--d65610b6-84eb-4d38-80d1-1f67056e616f", "indicator--5ee30ff9-07f9-4515-85a1-bf09773150d8", "indicator--8bd6449e-2ad8-4700-8f4f-e783e68a1ee1", "indicator--8c07e826-e0b5-46d4-a2d1-b6fd0d7b9ff0", "indicator--6b2183ef-6ee0-4111-aa01-da94640bc725", "indicator--3b4a4378-3da1-45ae-8ffd-d19c53c2eec5", "indicator--770a6d36-bbd3-4149-bb0d-4b4c197a5f4b", "indicator--e29d7340-fe5d-43c4-a2d2-3710121cf26d", "indicator--d6d81c27-4fe6-4750-a857-31eb18a2dbbb", "indicator--a6a2320c-9176-496a-9252-93c2ccc656ca", "indicator--d057675b-c628-458f-bc34-28ac88c331e3", "indicator--0b13e8b7-beb9-4f3f-a614-fa789c1eabcc", "indicator--42fe598a-cc94-4a54-b181-dd9d7eb016a8", "indicator--e905c696-c709-4a43-85e5-96713825d8a9", "indicator--ac881b08-ebb5-4b97-84ca-f639af638e6e", "indicator--1f883aa6-a7de-4151-928a-636ae5f62367", "indicator--dd0d1541-cd22-44ae-8bba-bb23a86be1ca", "indicator--2cfe342a-1f17-491e-8c3c-579a98a281ee", "indicator--f8db916d-9416-47a1-afd3-244b82f44685", "indicator--19d9955e-66be-4fa7-86c5-0c84f38e223b", "indicator--792d1324-78b1-4324-bdea-ab57940af88a", "indicator--4ff8ebd0-9023-4e59-b9ed-056936b38f09", "indicator--7fc64e76-f3bb-4c54-b794-2792ac89d888", "indicator--086f21cd-8d00-4238-aff6-bcb38d409b4f", "indicator--a1e60cea-6696-4510-84ea-6c5e0511d2aa", "indicator--822141a0-aaf7-44a5-ad21-cadd9c140a20", "indicator--e7f75dbb-7704-4181-bd65-b1da48dead29", "indicator--13bdf422-c543-41af-a18c-1c0d2271c48d", "indicator--62029fa4-bf0f-43ca-b2a9-6544681075cd", "indicator--434d81f0-3f18-4d18-9fd3-a5ed1f34de4a", "indicator--9ad6077f-b109-4575-a4bb-7dc490b433df", "indicator--8dea6183-7ab2-4791-8ddd-8c6325e58ad7", "indicator--32608575-348b-4435-9d9b-c9ad653b0584", "indicator--b687efd7-fc5b-46a4-8744-6beac1156585", "indicator--8943c2b0-6924-47e7-9080-a8e83b92f1a8", "indicator--ff6e2c57-38cd-4e94-92a4-6234f6f43d22", "indicator--205c000b-a860-412b-b74b-260e2992b867", "indicator--198efa22-d0d5-4f57-b71a-5eb0f0a46883", "indicator--ab4a2a2c-dde3-451c-96ad-8cd4a10f969a", "indicator--401e057e-a8e6-46e5-9905-11dcc658a377", "indicator--e73a1592-cf9a-49ac-8ec6-e6ebbed7464a", "indicator--8f23b494-a3f7-4a16-8f59-3bc2f7257941", "indicator--0c820bcc-c3bf-4bcc-a05c-3a3a7c6d098d", "indicator--80416739-0579-4ced-8a10-079a9e9e7c93", "indicator--7eca5c91-bf4d-4753-8d78-e4dbb49e74ec", "indicator--73633401-b0a5-400a-9354-be2a5d86047a", "indicator--4a9c0023-f190-4e00-9f1c-ef5dc6bf3120", "indicator--a226e28c-1673-49ec-a83e-f4446af143b5", "indicator--bfdc294a-73d2-498c-9a7d-878964865215", "indicator--ada909ef-62f4-45c0-9235-2c2e26fe037f", "indicator--bc952489-7b9c-423a-b225-06e66311aa4f", "indicator--965617b3-2b2e-4555-b0a5-809a819f7152", "indicator--256979f2-7f7f-4a45-ae21-0a771a81f290", "indicator--4aad098c-9e09-4744-af6d-2cbed382b5f2", "indicator--1ce9f782-c199-441c-ac96-1891e4bfd9bb", "indicator--a9bbb5ff-e1d5-4acd-8287-5e35c05f1c43", "indicator--cf01f365-077e-43e7-96fe-d125691b5655", "indicator--59a839f1-6a3a-4aad-b5a4-a7404b8be377", "indicator--e88fe464-ea90-4ca8-9f90-e73d97ad1128", "indicator--e17bb6e2-d1af-443e-b5ad-c6cc0423d459", "indicator--790faf65-6bba-4185-a58e-3878bc5db97d", "indicator--bea36a49-6280-48c8-9412-8a997d008372", "indicator--5d44922b-2625-4f3d-b68e-8c746a6bc205", "indicator--a60d838c-394a-4d81-852a-e2bcb24b9990", "indicator--144ab58f-36fc-4f1c-92f4-d6e6ae3041a7", "indicator--a3044fdc-806f-4601-8af1-fa4b129cda51", "indicator--7ed8d5a8-3d4f-46bf-9152-7aa3db32d58b", "indicator--8ffee5cc-cdf2-4d87-8cd9-73b935e174fc", "indicator--a7d30eb9-a5d4-4cf8-a25b-f607254772dc", "indicator--ddd7ccb1-9f8e-4beb-a920-b227ec7dcc8f", "indicator--c0d64030-e32b-4295-b961-53eacffee5ea", "indicator--191d1883-0dcc-46b2-a4d9-4ee73bc46ab2", "indicator--f1a09df2-9ec8-4f43-9763-664f6e4186cf", "indicator--d154badc-c315-4792-a1d9-e188a3c828e2", "indicator--cde14e52-46ba-413f-a8f9-f44f9c3d7db2", "indicator--55ee6312-80dc-4f84-9749-da3a1926bbb3", "indicator--5b9b8027-480d-442d-9c8d-5ec428cd70f7", "indicator--3fc82d61-540f-46fc-94de-4e50f1878b31", "indicator--08ca4806-9cbf-4db0-8ff1-9a90480081ca", "indicator--03fa2598-0abc-46d7-a9bb-96fb339c8ab3", "indicator--4260f7fc-4fea-4e37-8002-d77519990f26", "indicator--3550ed0a-596b-4afc-ab67-badafda4a026", "indicator--9d2c4345-6b7b-43c9-a775-fa06c0627b16", "indicator--a1809c50-c935-475e-8bf2-58f187d7c3c7", "indicator--5d0673c5-fc6e-4a11-ae14-a49a7c943740", "indicator--ac2fa13b-e747-42b9-9f94-aa923a11b24e", "indicator--de3d7d44-ef0d-43d9-aca2-d3544fa224a7", "indicator--0e145a7f-fa9d-4999-b027-6cb31d2b5de8", "indicator--f115df4f-c842-4176-999c-8a8bf32c2df0", "indicator--b063708c-ccf1-4be5-a8a5-ceeb6493e800", "indicator--ff7bb8a4-aa2a-4f72-a947-89b87aa74640", "indicator--515146bc-15cb-45a9-aa8e-6a0cef99d204", "indicator--d668a6db-7676-4045-9e38-33c54bc2dfed", "indicator--14c32d99-a580-4d3f-af1c-842cc861f951", "indicator--c0de7a2a-50b8-48a2-8b6a-b1649773f53b", "indicator--f2d69cca-ab2f-450d-83b4-f3512aa6bb72", "indicator--74ad33af-88be-4379-8377-86325f8ea8ca", "indicator--bea54d3c-3fc7-4cc8-bf54-7a5444191547", "indicator--40fac944-f146-42ec-a172-c65c8604199b", "indicator--041bc8a9-fdd2-4478-b074-e111b9314ea0", "indicator--c1d2b954-4edc-435a-9583-30d16eb6edaa", "indicator--416e4596-112a-497c-9f95-dff88fa64ffa", "indicator--1f0c6cee-f5d2-4dac-9e92-7951d16161ba", "indicator--d0aea264-7d00-487d-af70-7190bf6a1ade", "indicator--9ec48ffe-0e2e-41ad-a8d1-50017c848e73", "indicator--4ed78b2e-bee7-450d-91dd-3539376af9f3", "indicator--d9e5e729-0018-4f3c-b1d0-0ada7f2c9582", "indicator--6f025d1e-2d7a-4f37-b000-7b9bbe5872eb", "indicator--bf99d364-bf97-4d15-959b-5660a370804a", "indicator--3dfdb838-49fb-421e-b730-cb16a7d6266b", "indicator--1745f901-46b5-41d7-9abe-8d387631c923", "indicator--59c5a017-1ad2-4458-95ec-5883f0076625", "indicator--94c51f27-0eda-44cf-9c6e-baf433ac4e7f", "indicator--322f1ab8-7a3c-41a8-a321-fbd2a80a995b", "indicator--7cea6213-414d-42b1-bf30-f00dbef004e0", "indicator--4364af27-c908-4211-9cfd-ac87b637a828", "indicator--1b22db35-b4a4-4054-82e9-005b934c60d3", "indicator--3d66624e-f352-40c8-884d-63fd1674f162", "indicator--91feac31-17b1-4066-81b8-faecde7a9709", "indicator--e2bcd0cc-c756-4f6b-9d1b-c69d75a69509", "indicator--dec47ff9-ad20-4492-9b2c-0e7a0f983eb2", "indicator--9f4a5c7f-9920-4688-a136-4a1acf954587", "indicator--4c18a604-c0aa-4cae-a082-83fb82dce694", "indicator--4b8dcfd9-ae2c-430f-9ae4-9d8fb1e05c7b", "indicator--12a5f112-316b-486c-97ce-7ed818f2a6c6", "indicator--0a547dd0-cafe-47f4-8341-4c175fc27b6e", "indicator--c146368a-d291-40b3-98cc-dc87a3e390ea", "indicator--cbbd235b-a03d-425c-bb44-c7c879e6d9c9", "indicator--f843faf2-38ff-4f55-9df5-db735a6b0eb1", "indicator--147d7ca6-c0de-4b8b-a692-defcb571e4fa", "indicator--85430e4c-fe91-4495-b54c-76c23e985161", "indicator--33504842-4681-4ab3-8689-2b8bfc724a2e", "indicator--a6e4b52f-9ec9-4a57-8bc2-f03509c9eacf", "indicator--5489b057-6714-45be-892a-8494a80c24d9", "indicator--5423122a-accd-4f4b-8cc3-ff4d39cf691a", "indicator--c1f87ad3-d5a8-44d3-bd00-147261a1e205", "indicator--683f524c-17fd-43aa-b370-bb5a91338f50", "indicator--af056c91-f213-4058-888d-e9e4335f6325", "indicator--22a8d9a6-3da6-4d62-b342-deb14d5179d8", "indicator--5b45e98c-131e-4458-82d0-bac76891c782", "indicator--ca9c59ca-7c3b-4e1a-a831-2a7ca89dc343", "indicator--d4e6687f-68b8-4c14-b483-23ef5f03768d", "indicator--1ce7806e-16e2-497d-b09a-f680dbe4554e", "indicator--5362311f-f39a-43f9-afa0-319512704e13", "indicator--f74231e6-b31d-4bdc-8cbb-b1199499370d", "indicator--f7c8a9ff-bec8-4f25-94b3-e7d661f41566", "indicator--0ceb226d-b37a-4801-9a4e-eac302d89be7", "indicator--c20f59d6-7a5a-4e83-9537-32be3f01dd63", "indicator--b6be15ed-85bd-4e2f-9a81-dad510482e42", "indicator--3511e25d-5cef-442e-a6bc-366c2abade3e", "indicator--ff5fb17f-f7a5-4b27-89d0-b5efdf6e4569", "indicator--ce76db40-1969-4fd1-a089-ae2c81e32d83", "indicator--4ac09585-f7e9-412f-ab14-37d6afa03626", "indicator--4687bf38-f4fc-4999-b0a4-a6c4d5fe60e2", "indicator--63888cef-0449-42dc-a309-7d88b80b3445", "indicator--e73735c4-9cb1-45c3-ab3d-e9a9a51adaa9", "indicator--d97ecb47-08f1-460b-9d2e-0bb9eec3a2a8", "indicator--5bc75537-0380-4c3f-acfb-6a7af5dcc5be", "indicator--4ee8f4d2-5d11-43d3-97dd-d9b1b479e97e", "indicator--1848e87b-ca55-4c1f-b75c-47f7aaa03353", "indicator--1ea126b0-5f87-4c85-9dbe-f55803179baf", "indicator--3d9452a3-e3c1-4529-917d-9913e086a911", "indicator--328c41b8-5de3-4f95-9191-c83b9af821ca", "indicator--457c4c8d-9c0b-447c-b2aa-4bf887b4e51c", "indicator--0cb4623b-128e-43b8-84c2-5677dfdc110b", "indicator--5e55ce4c-c9dd-42d3-81ff-a739780e4350", "indicator--8c22db69-5819-4a69-a7e3-c984cb8d03a3", "indicator--63f8ca57-0a65-4e7e-a452-757b7a16056d", "indicator--4777e2e6-d437-4046-bbb9-6a668f1f7346", "indicator--409bea83-3c27-4506-b555-707a9ff06f71", "indicator--72d103b5-5cf0-4e5b-a967-8e5606bcf572", "indicator--a790dfdc-9113-4f4b-8110-6a077b90c81f", "indicator--5f624a11-dbaf-4547-8a88-a488994afe51", "indicator--ab2553de-92c3-4a11-833e-e3db1b6b38ff", "indicator--793c188c-744c-4e56-8a0b-8becd396ef21", "indicator--69f7ab73-1e3f-4b69-9164-906ada1b24b6", "indicator--b7500676-f87e-4768-99ea-6879570c8bf5", "indicator--6fd2e08d-cb04-47e1-a3b8-391c1983f14c", "indicator--2f1e10c8-0a6b-4e9b-84ad-0a2be7e2741e", "indicator--6e1fc5ab-d2c5-43d6-ba28-8f4dd1f57be7", "indicator--da79db2b-9932-4cc9-8baa-6f0b728b2efb", "indicator--90707540-39d6-4bf8-bf95-938e37f8f22d", "indicator--ab58d06a-40f9-4de1-841c-30c31461d1ad", "indicator--35c27f07-7252-4224-ad6d-e4c48a62f572", "indicator--65d8ba54-b77d-4627-990d-6dc4efac5409", "indicator--43d5bbbe-7041-44d3-8205-e9d62ae787e6", "indicator--1a73c78a-678a-4015-8c53-7976f3778278", "indicator--f5dd1fe9-0777-4358-9a36-e860ff54924f", "indicator--fd5a7eb8-82b9-4e64-8c7e-abb3e25e427b", "indicator--469cd5a7-ee10-4ef3-8abb-74c2339f8dfe", "indicator--18697f1e-20bd-4d10-bfe2-c51569ea7348", "indicator--b7b1d65f-ccea-428a-b1af-8e1d6a46d638", "indicator--67432202-58ac-4298-9eef-4648cbc24907", "indicator--ffb649d6-9048-4b78-b241-eb4c3f15bf48", "indicator--b1e5c354-cb69-49ac-95f2-4b5c7a5a5a78", "indicator--7321cac8-b122-47a6-a425-a5d71870d3d0", "indicator--32042abe-8f16-49ce-aa63-4e1dc35772a5", "indicator--bd6ccac1-9172-45f1-87d6-27ed4018671d", "indicator--d0171174-2841-466d-a297-696d36db50f9", "indicator--b6c009ec-a053-4632-ad73-588b4c45cebe", "indicator--d79e97fa-fd54-48bc-992b-b56eb2cee257", "indicator--948f744f-aead-45e9-a1ca-e6d10a8bfada", "indicator--595d5161-477f-4694-b8c3-154753322295", "indicator--e68e61d1-6616-471b-a9c8-4f639a07f8a0", "indicator--f3a691ed-12d5-47cf-95a8-50f6acdecfaf", "indicator--5a544ab7-f527-4014-a0d9-115b21f5806e", "indicator--c58b6ac2-d124-4cf3-86b7-64df6b1ebb74", "indicator--9d53721d-2cd1-487d-aed7-2f066b45b132", "indicator--72872b8d-637f-4558-a999-02883289b222", "indicator--1b19ee9a-079f-469c-adf4-19195eba1eb9", "indicator--bb3ed446-e2d3-468c-b066-f9fa1140216f", "indicator--309ad3a1-349a-49e3-843d-b1aa70f4c939", "indicator--91abcfe3-1098-4542-a7d8-c1a6db00d62a", "indicator--bfd45bff-b67d-43a8-823e-a1e7401c78f4", "indicator--05869ec8-e479-42b5-a4d0-bc76a76855cb", "indicator--eabd3f55-8dbb-4d56-9321-9beb1c44b50b", "indicator--cff8b9c8-6344-4743-840a-c981cd2fa4c0", "indicator--7120144f-dd12-4749-afae-2fd22c8b979b", "indicator--49764950-0761-408d-a872-6311a9d5adc5", "indicator--ef8f4ca1-9ae2-4205-a450-fe8685ca907a", "indicator--9ad2cdd5-53a5-4a2b-93c5-07b14687f05e", "indicator--b7277394-c6f6-4b4e-8ace-e59ac495aed8", "indicator--5b706425-a830-4249-9964-f01d9090004d", "indicator--78fb0914-4ca0-4e22-9c51-2677f9581cda", "indicator--8fc1e278-e7fc-4958-8e61-07fa318f6711", "indicator--63b1e6a6-a160-4fda-a6de-975f95cab283", "indicator--d6889d50-73d0-4967-b8a8-ad0ce7d2d72b", "indicator--4269c9c9-e351-414b-8a25-95cc88cc9221", "indicator--a62e3743-02af-43e5-8c5b-bdd9d34e39ae", "indicator--0a4bdcc6-2afd-4013-bf82-b642e6a3bd91", "indicator--723b35cf-ca3a-42dd-8137-8d29ae5f8007", "indicator--2eb97cde-093e-4819-83e3-cca95cc04196", "indicator--6b285cd2-36af-4b03-a369-51824ea0ba0e", "indicator--53424979-9400-4b89-9ec0-6137afb62a6d", "indicator--316b6a2c-770b-4d6d-a2c2-f197aadbafd5", "indicator--1d2590be-6be6-4ef2-8f97-ee84eaf28d02", "indicator--11b72679-18b2-424b-807c-741dd84de0ba", "indicator--508d0a0f-c6ca-4010-b4da-a3b1c4cf5d51", "indicator--42464539-e858-433d-8efe-1bbb232fb4ce", "indicator--83483806-c5ac-43ae-b8bf-93f206454fbf", "indicator--eac545c0-5d92-49fd-8b1c-a7db9042049b", "indicator--830fa14e-764f-4cd9-b20a-b1ebf3ecce7e", "indicator--4958060e-d1e1-4540-b120-f212ae6baee1", "indicator--23b9567d-6ddc-405e-adc6-acdabd3f2380", "indicator--12abdbe1-ac6b-44c4-8933-fa0f522533ba", "indicator--f204b273-0387-4dc3-8690-ff72c92cd80c", "indicator--7cc85c3e-1ef4-472b-bb59-3d15af769048", "indicator--36cc4648-f229-4f46-930a-8c1518519293", "indicator--f2476c85-8c13-4ad2-82ff-62636d33002d", "indicator--a68a31b4-6e67-4841-ad55-8ef801ac7ffb", "indicator--5bcd0756-8f7d-4082-bc22-747b587681e3", "indicator--e3529b8d-0d03-4bda-8ef4-bbbea270afdd", "indicator--ce41fe9e-0507-42a1-99b3-ec6a3ab13780", "indicator--ba06ee1f-e63f-4eef-ac33-9e9f3f85de3c", "indicator--1b77b056-3147-4a2e-9c0d-bc7a1bbcde95", "indicator--4f2c50b5-e712-4027-8ca7-9522de23a4da", "indicator--7cb59610-bde7-4baa-a938-4e7fb44c9bd5", "indicator--551a5bc1-581a-4049-a584-e18c1d5f27c2", "indicator--0958ddef-a93f-437d-9952-60f007ab31c9", "indicator--c185a95b-666f-4369-a613-620dab426bc8", "indicator--fdb6dcaa-fecd-4556-92dc-44599e37da3c", "indicator--32429265-3e3a-4bdd-95a5-c27cccc49637", "indicator--7854888c-2de7-4d33-ba84-2bbe55012893", "indicator--bd8ce524-0d04-45ca-aa14-d7137c4897f1", "indicator--fcf0e6fb-a6c3-45ca-9b19-7a5ca1a9a17b", "indicator--21c9630c-5b49-4cef-8126-fe72696c9976", "indicator--0a51b862-5f12-41dc-9986-ca30779e0b63", "indicator--e588208b-ea10-4ae2-b73b-79fba7bdebf7", "indicator--7d9bdecb-0753-4749-b6a5-3da7d4462ef1", "indicator--ad44547f-bf81-4ee5-9dc4-8f93e7b602f8", "indicator--7bffa617-b3d7-4933-96d5-65968d4ca796", "indicator--335ade4f-7f4a-4fe9-8da4-475b24c1c24c", "indicator--4558df9a-3111-4b42-9d12-cc4ec169a186", "indicator--b7899b80-8586-494a-a83e-05b1641478e6", "indicator--092d921e-8930-472c-9b45-1be5ba1b15f8", "indicator--f6dde2ea-8f85-43dc-ab4d-5b4e0527f6b7", "indicator--e874b75d-9763-4c57-9e3d-37b8982d900d", "indicator--1c3a509e-2d97-4431-8cfc-753c461ba304", "indicator--81a6a802-ed1b-41d7-803d-b58f8aa53db7", "indicator--a4cff496-a022-4785-a1b4-01461c42ba9b", "indicator--b13dff26-a53c-44ab-ba77-ca3416d8a3d4", "indicator--c7f503bc-2571-4a7d-b0fc-ef28c4929a20", "indicator--b66e7432-88cb-4832-90fd-526c71b9d814", "indicator--a034646b-3cad-4120-9922-754f95b0f7ef", "indicator--8f4d3a4d-12e2-4167-8da7-8423634477fb", "indicator--db960ca2-53eb-4dbb-a74a-4d3c295e0dc7", "indicator--dd3fa17c-3b53-4263-8e2b-25b17a4b121e", "indicator--81622834-ced8-40de-b188-2cd8a5763630", "indicator--b66080f9-fa57-4f67-aedf-d52eb5703b03", "indicator--26a6279a-3d7a-483d-8b2d-64ae6e03ec9d", "indicator--6703b4b2-7349-4258-af75-e647d390305e", "indicator--1ccc2e32-3bfb-4520-a4e4-9b3ccae635f0", "indicator--a902ac0c-57b7-4f26-9205-a87592ee1b1a", "indicator--c932f9a4-c87d-4ea3-b3ea-d2bfefbc7ed0", "indicator--d988ca06-4e9f-4e7c-931e-76e11704066f", "indicator--0947885d-d37d-4cb0-b8e3-e3bad0923cb8", "indicator--17464811-9575-4d60-8adb-f3ccbb8ff6ef", "indicator--45ffa69b-028b-48c2-8e34-25b2d282105e", "indicator--76dc327f-1f35-4dd6-ba3c-5dfa72401491", "indicator--a2be01c2-62dd-4490-b571-8f28e794039d", "indicator--58d8b201-79ae-4211-9684-ee319d313977", "indicator--0cf8d8c5-f3fc-4cf5-a069-213d4ac8c6cd", "indicator--98e8881f-e88e-4b8b-a9ce-d2c7e8251683", "indicator--dd36acdb-2748-4981-8ba3-2e9bb2367695", "indicator--e151ed8e-1ecc-4c90-982c-868c22d4e8eb", "indicator--6713f11a-9aba-4447-a7cc-0a8eaf24e4a0", "indicator--4d9be492-c3e0-4ed5-b5a7-e0cdf825d27f", "indicator--f0bea644-36cd-48e7-a655-7a994bb50946", "indicator--76965d48-ee69-4830-855b-26eef667187c", "indicator--5c184cad-a9cd-4b37-9934-d0171a3298e0", "indicator--c34b777f-8fc7-4265-84bb-715dfbf0bfae", "indicator--857bb69b-53fe-4a66-bec4-efad939894d5", "indicator--6c5f093e-df47-4560-8710-a9a3f46e823a", "indicator--5757d088-e020-4509-91a9-d3744842dcf3", "indicator--8ea20545-15ee-41d7-96c8-825d0b0212f8", "indicator--550aeabb-197d-4804-b98b-c6ba67b55854", "indicator--f274a451-0aaf-4520-8631-7bc5bf561b6f", "indicator--628e3fcc-f5e4-427d-97e5-0c3fbf52cf0d", "indicator--885e4de3-a3f0-4b68-bda8-eb0817d4d979", "indicator--ee4fc29b-1597-4410-9522-177e9e101459", "indicator--2dfe3bf2-8f3f-42af-84d8-922ece5d047d", "indicator--e3cd9ec3-6564-4d89-a54e-4bb655479fa4", "indicator--7fd622a9-f1ea-4a10-ad35-fb09545758a8", "indicator--00a6481b-a393-4463-842b-a46b7d5d87a8", "indicator--7364b70a-1754-4799-b200-66e991792697", "indicator--d3aa60b6-fcfe-4746-a20e-7e0cb5382998", "indicator--7c6b5f93-4303-4348-bfcd-f6d0efd9f679", "indicator--a0abf8bf-a966-4f0e-87e7-3f71b90f529b", "indicator--00962bf6-0017-4071-a0d7-21964cbac125", "indicator--1a7f6e16-c31d-4578-8a6c-ba96879e90cf", "indicator--9692c72e-cc01-4a43-9856-ffae8f4992f1", "indicator--5be47d88-cde7-413f-9cbc-de9a3576fba8", "indicator--4f4499c8-ef3e-4954-923a-0200f02cb085", "indicator--75e231c3-5e35-46c8-91b3-5f305135ac8e", "indicator--7be8ea55-77e1-4260-9a06-9f5b25ad95f8", "indicator--ab21d960-e020-40b8-80e0-1f56df7bbc56", "indicator--38199346-02bc-43df-96ed-33ca5f7fdcf3", "indicator--d7561e18-a499-473d-a007-8a610d2bb5eb", "indicator--c3ee1a9c-164c-4c0c-84ce-583fd8ccec8b", "indicator--5147323f-85f7-4eca-86c4-8786f7ee74a8", "indicator--0212f827-6a60-43f1-afc1-e1bbf132334c", "indicator--ea384297-8853-4242-82e1-547a93787d04", "indicator--1f1d9736-44f4-4ebb-acdb-f7de696cb6fb", "indicator--4b30a040-a02c-461f-a373-742224fbd2a8", "indicator--2f011284-852f-4b08-a27f-8faa96d61672", "indicator--d25fc98c-0b2f-4ce3-aaf5-4f1e4deba4d9", "indicator--507f0f37-0afd-4329-a97b-5e534a4fa764", "indicator--3f6d01b0-f5b5-444d-aa23-1606bd5a442c", "indicator--4ca2f6a8-b5f0-4f3b-b1f9-86cece2da88e", "indicator--98e37271-3aa8-4a60-addb-d95f3948c621", "indicator--8eb85c63-0ffe-4237-89c7-75e48150b9f7", "indicator--5f71260b-ed34-41ec-b65a-2eb60c65af58", "indicator--f0490cd7-dc48-4236-acd1-debad8423364", "indicator--6c61445e-2609-4fba-8214-50c03fb0a22b", "indicator--2e4cab9b-7d73-4f08-8039-278805b71573", "indicator--2adaac28-b49a-4189-94da-ec40c46911e7", "indicator--1d9e4f4a-2653-4e0a-b0a7-585dc6d56420", "indicator--769fff74-1d8e-4ad4-91c4-bfd8ea9f80e7", "indicator--d542ed78-f310-4a80-8eab-0ca6eabf217c", "indicator--e92a4433-1119-44e6-a759-9c567cec76d6", "indicator--a96f9acb-fc62-4308-9f31-1f1b97ca45d5", "indicator--4188127f-435d-466e-a048-e61d29d1ddde", "indicator--839f8b13-0bc0-4e77-a9e9-0cc602a8748b", "indicator--ba3f9a26-1c49-49e9-a4c8-c38203fd680a", "indicator--22201f32-a74e-4381-99f4-d64b7f95ca57", "indicator--4614b338-82c7-4264-8724-2ef319f691c1", "indicator--5cfeaa9f-b658-457b-bb04-07367520ebdd", "indicator--1e0be9ee-a7db-447a-a977-8a47c3e33fdf", "indicator--1e6a9fca-200e-4adf-8e53-92b9477dd6f5", "indicator--796f45a8-d5aa-47c1-a9b9-c0264b6d5c51", "indicator--6eb13df9-63fd-47de-aa6e-f8bd506d89a3", "indicator--86994f66-dc27-48f4-a6c1-7ac3ea80eb08", "indicator--ba16c09a-28c4-4628-b8d6-e5188901ce73", "indicator--725491a4-6485-4817-8b1f-efecfa25f675", "indicator--b08c5d6a-0a64-4678-b42a-571f71bd04bf", "indicator--69f70cfc-3a39-4a39-8384-a92535e7befb", "indicator--2f41448c-0bc4-4834-9f38-23904d4cc0b9", "indicator--2becf2d9-3f60-4d2d-be26-1edd13c51a5a", "indicator--ee42cab4-d014-410b-b7a5-62bcf99514c4", "indicator--3359a597-e2f8-4f7b-9422-96142fc149e0", "indicator--5b0c6153-91cd-4a6f-90bd-01e065689c59", "indicator--dd6df477-802b-44a5-9e7f-8c7827ff7bba", "indicator--8880351b-a7f4-4cdf-b585-1424a168f89f", "indicator--079a6eea-0eb6-47b6-89b8-18177bdd9bff", "indicator--0eca52fc-5945-4bac-b8ae-5d01c3389359", "indicator--ac34b2d8-89d5-427f-9f14-306d3800d6fa", "indicator--a6983810-01a2-4dd2-9292-afa8eb650de2", "indicator--d9730799-f592-49f6-b2dc-62d6dbeeff02", "indicator--511d2084-9923-459b-a899-c8095dd87b0b", "indicator--f74d9664-a247-4614-ab16-a518d52eefc9", "indicator--98f98372-f17e-485d-9ae2-5b430643c705", "indicator--9c6496b3-e046-42e2-a4ca-09b6df8cf66b", "indicator--cd74e7ff-ad15-4de2-a284-54a506b5241d", "indicator--0c6b2b1f-3d17-46c7-ab20-9a59ccd21700", "indicator--0ead11f0-950d-4fab-8889-1adad25d0310", "indicator--6cad5802-b123-48a7-85fd-52677278ba50", "indicator--e6cba7ad-3ed8-4d99-bfe7-771290947c84", "indicator--c50f3843-9878-41f5-a866-a58eb498bec1", "indicator--f3bc3405-131c-4af4-9591-e128f9e79f83", "indicator--f6b2f77b-af23-49d7-bd6c-bc487ba4150b", "indicator--202037b1-c973-447c-b084-089e18c54bb3", "indicator--b87b6495-7dd5-4ee5-ae6d-338aac812a98", "indicator--88cd03fb-04ea-4511-b80d-cd765ed0381d", "indicator--cb72dc80-95a7-4fb1-9a47-467fcd7a72e4", "indicator--b61f1b14-cb28-4b8b-ad23-286538bfe600", "indicator--9cf4139a-3b33-47c0-9645-c78af259bdd1", "indicator--352b0dfb-4934-4d5a-93f9-629a2ea43f66", "indicator--1e729e3d-9806-43a2-91f6-f343ef7879b0", "indicator--0265ba84-7d19-4641-a083-7c970f0bec25", "indicator--d6975b97-53b1-4b48-bb5b-8ae754ec81a1", "indicator--9ae22ab6-ad5f-4461-8251-538b4a9ed861", "indicator--277a55cc-5e50-415a-9a65-7d8d4d865d55", "indicator--9e0c2411-9695-46b7-b2a9-d78488fe04bf", "indicator--db3c0a2b-2e65-4b85-abfd-0154fa17df4e", "indicator--402d425e-e22b-4c1d-aab7-e8defef2f11a", "indicator--7ce9dba2-d499-46c3-85d4-cd030dfb8e59", "indicator--40c761fd-6d8a-4060-ad6a-29c3a0b63222", "indicator--ec0c2e63-66a0-4e83-a55b-9dd19ed48a7c", "indicator--e5b70cb3-59ed-4db6-8318-1457a538bd6b", "indicator--b1f0f6d1-7b39-4ee6-9e9d-c0114fe78019", "indicator--75af9d8b-c59e-4c6a-a04b-e534850fc5be", "indicator--7d382b87-d2e1-438c-97d2-c0af78a42d53", "indicator--e2f25959-44c0-4a0c-86be-60009312f1e4", "indicator--6cad54c5-7e76-47d8-aaf9-e01603d9ea07", "indicator--13844101-06d7-4c0a-9551-bdc8e5a458d4", "indicator--0a3c9a79-c365-4596-a11e-8b0e35cfd315", "indicator--9482f018-39a0-4b48-bdaa-732237fcd6c8", "indicator--21efd1f2-110a-4988-9e4a-4b2c01c9860c", "indicator--5e12946c-ae55-47dd-81a3-d77dbf825563", "indicator--3c633758-ee8e-4929-9739-41c569568b5c", "indicator--a8747691-5169-4eaa-b871-d0dd89c3a564", "indicator--93862447-ff4f-4d90-b7bc-06591a38959e", "indicator--3d35d928-eb48-42be-ac20-f289b978b827", "indicator--d1b878e0-b33e-4e9d-aa49-ec6d6e227e70", "indicator--238336fc-f848-47a4-b37c-e0e381f2d8cb", "indicator--82a39f00-cc4f-490d-b8c4-f0cf3fe85890", "indicator--d050434e-faec-42dd-8ac9-5b8e9f959a9d", "indicator--3fbdf18e-c2fd-4b68-b11e-d99ad38c82f4", "indicator--d539dbdd-f840-433b-b7c3-cc2f586cfaa6", "indicator--3a2ed036-4197-4958-ab28-afb2937d11a7", "indicator--8a9fddf0-ee7f-453b-b34e-0c371384ea2e", "indicator--1a7b21c3-4783-40da-8291-0c1863a2e61b", "indicator--508b8645-d19f-4179-b709-57acabec39f1", "indicator--515fbaf9-f6e0-43eb-bd6d-c274b14a2ad0", "indicator--d92615c8-b060-4663-8673-192e14abf02b", "indicator--de7504c0-557f-498e-bb66-1243bbe0eaf2", "indicator--ad811ec3-24a4-4585-8070-cee36509625f", "indicator--51f23ade-070b-4d1c-8a82-e7eb76c06a56", "indicator--56c14b82-27ee-46d5-8813-f33e8f2604b6", "indicator--8e703a10-a466-4bf3-8f79-aee2ee5c50a9", "indicator--bfb4ccf6-f0e4-49c2-ae66-dac57b6738ba", "indicator--111501f8-1e04-4c15-a1f6-b3a4d636a742", "indicator--bec5b591-dccf-4fad-b304-5ec141a836ec", "indicator--f7436b95-301f-4774-ad55-b5124b0b5b99", "indicator--35fe5fad-974b-480a-851e-f9488e474836", "indicator--410b98a0-d020-4b1e-8618-ee0455f68a65", "indicator--b0bfb35e-f43b-474c-8af6-646199d173e6", "indicator--cfcd7d50-9029-487f-8c0a-e55e345f16e3", "indicator--53a7083a-9f1b-4631-819a-cdd0d60044e7", "indicator--4a8ecdfb-f041-4c0f-a35f-addee54fe724", "indicator--e59ac48c-0d62-431d-b830-0452f52609c1", "indicator--2764b0d9-7b0f-4d39-9cca-71dff008bfde", "indicator--dbde609f-ae1c-44a1-a85d-dce159946c85", "indicator--5e2c8f37-85d7-4f45-bbdd-6f136b31c9aa", "indicator--5ebd2f38-5449-4730-b4f5-32001bea748b", "indicator--ebe15652-34b4-402b-aea3-0e4c0de350ff", "indicator--e7f4eb2e-45d2-439b-aaf8-67d841320a02", "indicator--68bbb9ef-2488-47d7-9d7a-ca54fdb1a0ee", "indicator--66ac4849-7494-44b4-9c78-2fed03c9aceb", "indicator--1abc8eb1-831e-4cec-bb11-dfc79af9b4d4", "indicator--ae7fee18-3f36-4bbd-b4e4-5bdd6a4cdbab", "indicator--1e973292-3562-4562-8054-95aea665d616", "indicator--9be32526-05d1-4155-9ed8-1f5f9d2cd850", "indicator--9eed8d2b-48de-4f06-bc59-da9a52d4d19c", "indicator--e6c5ee93-d972-4452-9efe-3aabe3deb7a6", "indicator--c031dfdf-9140-4aeb-8d27-dde0996f9652", "indicator--ec4a5d3e-1458-4666-9c2a-5427c9f15ebf", "indicator--31927c47-871e-4261-ae69-8069119955e6", "indicator--4fea9f72-f82f-49f5-a3e1-f3754e7b256c", "indicator--af29794c-3453-40b0-85cf-480008f236b6", "indicator--ef578bcb-d120-461b-aeb4-a4b6d6b5067a", "indicator--5e587699-a756-44d2-8391-312e297cddd5", "indicator--049cde66-6b3e-465c-a60b-b620736db25d", "indicator--1a2c2443-bbb1-4a87-bbcd-31b54b64f9d8", "indicator--f96a385c-e324-41a5-9adf-9df071de2b2f", "indicator--7a719a9e-dd5a-408d-95ce-723a1ace68bb", "indicator--ccd94f28-2986-4711-9b8b-d51c863d1cd9", "indicator--4c72a444-3593-4cd4-a193-60b29d55cb38", "indicator--36587178-9335-4313-b3e4-eed87c5bf3b4", "indicator--be01315a-b038-4592-9169-5d0df9106714", "indicator--1961ce20-d592-4d5f-be0d-25544646657c", "indicator--a920cc18-a0b7-4834-af18-944508d57390", "indicator--e408562b-0d25-49b7-a0a5-cd0d9abb3414", "indicator--7d35a0c8-7abb-4f62-bc28-5574fcac6643", "indicator--367045bf-3642-4074-91bc-6fc8f60bd0fb", "indicator--6097b0b9-ccd6-49b1-bc2c-2a82cf9924b1", "indicator--67588d2e-84ff-41d1-a1c5-fbead50c5531", "indicator--7744adff-8b02-445a-91a6-59eac03d372e", "indicator--a84bceff-30ad-4432-a0d8-5e899a35bfb7", "indicator--43e7c4c2-3b7e-4bd8-a627-442345860780", "indicator--778ec362-8c37-47d0-b21f-415483bde5cf", "indicator--0849f80a-b22e-408d-a4d7-447dd4b0c9ae", "indicator--7fb33f6b-63f6-4112-9391-3b43cde72133", "indicator--badccd3c-d78f-4b10-aa13-dc0d4d98bf69", "indicator--c6506985-1b68-48cb-b547-c9f17af7c038", "indicator--e556d133-f374-4a59-8fa8-037955eefe1f", "indicator--06893b18-c2a8-4974-a228-369d97f697fb", "indicator--17d29a6e-6b54-47cc-bd90-7b7f28acba1b", "indicator--f3a813dc-455f-4812-8f60-9b66c96aa0eb", "indicator--c1910a2c-bcae-45ae-9b80-218ed9caa4fa", "indicator--d788cca1-bed0-4d55-8f81-e8632b7f544e", "indicator--2bcdc97f-54b0-4646-b9ce-a0f554451e19", "indicator--fa76fe3e-1da7-4743-9155-c332b2cbbaa9", "indicator--8de1f4e5-7247-4ce6-8ba2-e55207edb5fa", "indicator--aa3e7e3c-ff05-4c59-8cbc-b1a87a8af010", "indicator--a8989163-207a-435f-9325-4e244708625c", "indicator--69f5e3e5-56f9-4e5a-97f6-faa16209d860", "indicator--2368ef3c-a4bb-4064-87c6-1fe36e3e5357", "indicator--3141a6e4-edb2-4f0d-b34e-776624f60f69", "indicator--76f6fc8a-74e4-4437-8b50-000b9ec3d1c0", "indicator--c1ef0387-3b21-46d8-a5c6-819c4c7fea8c", "indicator--e9580c9a-2783-4532-a1b7-cf6b9336a9a9", "indicator--14a369cc-7912-4c10-be9d-223f3d4a803f", "indicator--24c3c757-6c03-430c-8ff7-aec46441401d", "indicator--fb0f10e6-cee0-4336-bc74-fac864de33b2", "indicator--2b360fc0-a7b9-4b3a-813e-5ccd3292c2c4", "indicator--02dd496f-26bc-4588-b16a-5ab6904ee1d0", "indicator--f91c6478-3fe6-4e2a-b9a8-57af13c0baec", "indicator--a794da94-1bbc-4df3-85e5-1de4b24436b9", "indicator--a5db72c2-4abf-4527-a276-78b954ad1764", "indicator--444413a7-292f-4024-b152-5aa276f629c8", "indicator--2c3967c9-ee66-47e1-b002-542a27c24682", "indicator--1210fac9-670a-410b-bff1-fcf1d5e5dae0", "indicator--839677e1-f7f0-49a9-855c-69ddf8f76ec2", "indicator--1b47e2dd-119f-4b64-965a-020cb5b846a2", "indicator--a749a1da-3ced-456a-91af-dc7be6e39a3e", "indicator--b1cbb701-cb66-4cce-97c5-42ec22137218", "indicator--ef420fa0-1f7a-4be6-b10f-7b494e39a526", "indicator--14d66870-5e4d-4606-b81c-621490b6dfa4", "indicator--ba09dc9f-377a-4ead-8b98-9f32eaea6fd3", "indicator--441350f7-625b-488f-ba96-59c777207828", "indicator--1e9278e6-cd8e-4ace-bb1a-7b2357ee6182", "indicator--1dfcec4e-9e11-4781-966d-ed12f7ee9ac3", "indicator--5cf4f78e-6915-4e4c-becc-12ab52bbd492", "indicator--08bdf142-7972-4b53-9ff2-071ec7d151c1", "indicator--a99fbe6a-198a-46ca-93ce-d7cc63914e62", "indicator--05d6b5ab-6726-4d28-b06f-27f08368459d", "indicator--738515a4-4ac8-416c-95f2-7720e62f1b01", "indicator--a72c0c17-c4ed-4f62-9178-6fd0f34ec6b6", "indicator--47574e47-5795-4294-a032-d4e96ade2fcf", "indicator--e9c62b2e-17fd-4b0f-93ab-309ef644b31f", "indicator--ef860ee7-a271-4f75-abfe-6b315182b6cf", "indicator--cf0b41ea-b9f1-4b3b-a095-ea240a2da5a2", "indicator--81557c2b-318f-48ef-b3da-d9d19a190fdb", "indicator--3b3612a6-9422-43a1-87ea-223ccf564eb3", "indicator--7e0f27bc-020d-4b1d-8970-d61719eafea4", "indicator--49b4af6f-de76-4b07-8990-06c25700fba0", "indicator--847e2b78-63ab-49a3-9c9e-46cf9e629a5e", "indicator--a852af3f-101b-4eb5-84db-2a221ccd9f01", "indicator--6ae8ec2e-73da-4e43-a04d-6fa73962fb1a", "indicator--c4bb55ec-4866-45bd-995c-272753bdf360", "indicator--a973dff7-2aa6-4e5c-b24e-d4b11c42b1a3", "indicator--8173ab57-d2c7-422b-8044-b6a7433ddb67", "indicator--0a303434-34f1-4a7f-8271-f6ef725b1a1f", "indicator--68f68fef-54e5-4d3d-a8a0-ac826753f7df", "indicator--ad3dd7d8-f358-46c3-8667-d545dc68d984", "indicator--7291a2eb-d0c1-4299-8de6-655b249e5d73", "indicator--bb52d2f3-4491-4f8f-8b9c-edabab10a6ea", "indicator--c1fbc94a-9dfe-42b9-a2df-da355b6f3038", "indicator--fc82e16d-40de-4a82-a449-237a2d5ec01e", "indicator--9042b546-4a30-4490-8b8b-21dc2cb8ef68", "indicator--1838dd66-92c2-4ad3-9b19-9377b5720f90", "indicator--7d638fe6-ead5-4e04-ace2-78f8c92b09ee", "indicator--ab9fec5c-ad75-4b25-879e-70e5a1df1e84", "indicator--c1da4213-959b-4b05-95a9-cdb666ab73a5", "indicator--722ce88a-1ba8-42b8-a28b-a8a1866b2a93", "indicator--0d8d87de-24bc-4214-8f20-62f7e65f1cee", "indicator--7a6ce2bb-cdad-4e2c-94b1-7acc722086fe", "indicator--34656df9-4586-4f19-97ab-28249c670d60", "indicator--555a9dc4-c99b-42b4-be5b-97a3797e3b26", "indicator--354a3f33-b5c6-495f-b522-3a73bb4eb49f", "indicator--35cdac13-2cb9-4ea7-8a49-de6e9f724f7c", "indicator--6ec17c80-22aa-4df2-b32b-f809047edfda", "indicator--0aef7ca6-1070-47ad-a2b9-26fcdb75774d", "indicator--105ebb55-3610-4793-8454-cc428eff27c7", "indicator--cb428e7d-14ad-4a9e-9941-dfa327470301", "indicator--0cf8c6ec-535a-4d6e-9afe-fac4ac9db936", "indicator--052d75c3-9021-4060-8238-617f39eff0fa", "indicator--590ce85d-7eb5-4545-ba98-be134baf41df", "indicator--2cf7bb9d-fcc8-41f7-a48b-a411788f4f04", "indicator--512eab04-dde3-4fab-9155-0d8b053c8600", "indicator--28ad6509-25d0-4c1b-b105-1ee1924005b0", "indicator--c95aa479-5d61-483f-9a82-f70c672c2909", "indicator--10102243-1c10-4869-bedd-a12f2e20a0b3", "indicator--ce14b310-e0e8-43f2-a32c-c4caa6810e4f", "indicator--a2406b26-0677-463b-a9ad-ca7bad939bcb", "indicator--21ee76d0-2345-40fd-b7ea-390ed21a87c6", "indicator--ef57a26e-4571-4d76-8c21-fa877fb5b644", "indicator--eaa7a973-c333-4b31-bdbc-9c13b60c2095", "indicator--81918b81-a7b3-41f0-9271-62f4ac47e033", "indicator--5f38c24b-da2e-4150-87b5-37add0aeeffe", "indicator--8d4cb945-7f93-472c-85aa-c1f4be76b709", "indicator--ac1ee7ea-67c8-4dec-9364-f688358627d6", "indicator--4b3767eb-a82c-4d2c-9c23-28d7f68f31f6", "indicator--0edb9d4d-67d0-4b80-9763-41dce98a64c0", "indicator--f5fe69e8-e632-4154-bea1-1e2730134d71", "indicator--bc7fec3a-705e-467a-8db0-530191a2cacf", "indicator--c3eff90c-a088-4981-af29-55a86f9d00ad", "indicator--069caa9c-03f0-4d2a-96f5-3342772d09a9", "indicator--a2e82c60-e288-460f-9fa6-f66b146ca9b8", "indicator--81bc0fb0-b9f2-432e-9acc-ed460b2d1668", "indicator--5040a39a-25cb-4d3d-929d-b2766c6ce629", "indicator--1eba8bff-eb66-424c-90e6-90a6c2f97e7e", "indicator--7a38c07e-ce4e-49af-8b00-8463d8bd0da5", "indicator--313efc6c-ee8a-4893-a79a-935b92daaa99", "indicator--aa32e84b-12c1-4b28-9039-f35f9538d217", "indicator--10258feb-edb0-4cc1-968c-df7991a36b1a", "indicator--07cb2337-3806-4c96-98c5-0db5055819ec", "indicator--4eaaa1ea-9378-4abf-a694-064bd5645ac0", "indicator--e272c4de-3ed1-4079-8d1e-9b10e6caa29b", "indicator--23be0cdb-caaa-4792-afac-3d36372a8f81", "indicator--cfad36d9-8bac-4875-a652-975944b98228", "indicator--fdbaf7f7-55a7-4984-aa61-cb0cf488a8b2", "indicator--fdf2df7f-67a8-4f0a-bbdc-47ea2f302fce", "indicator--b5929c8e-6b31-41ca-8983-f1f4f5a5aa68", "indicator--0ee7d495-4484-4ef5-b575-0b26379375bd", "indicator--9a30cec9-287b-47ba-a37b-9271e7de5e36", "indicator--cb193077-3e7a-4042-9429-ded390ce8942", "indicator--ef01d220-16b4-4da8-b84f-6886e27c7149", "indicator--85345ca0-4380-440e-914b-ae92a96de364", "indicator--6e6189a9-4f37-4889-98cb-659c7fe05ffb", "indicator--80f5d62f-a44d-4276-85bf-c56ef82ad76b", "indicator--54f559cf-a396-4555-bed0-4be363140562", "indicator--f45537bf-9430-4914-ab17-25dff94b1ecd", "indicator--709aac05-29aa-4d8d-b955-9c47c68507d2", "indicator--2b5305c4-85a0-4748-83a5-40527429b518", "indicator--2beaad2c-3911-40b6-a4e8-f95203b2e5b3", "indicator--2394548b-62b5-4e30-9303-009355700f6a", "indicator--0a3a0952-ff39-4fcc-971e-c3c386e781e1", "indicator--2a0945c3-4ae4-4261-8ed3-3a9941231ac6", "indicator--6a0f7898-beee-4ae4-86fe-3ffb7219a285", "indicator--c390792f-0af7-41c8-9e26-4804f3e0ca5b", "indicator--feb4ad3b-6d69-49e0-bd31-28d83ae4b24f", "indicator--4ac8fb95-acba-4124-9520-627faa813fcf", "indicator--3fe16dd3-0d75-4ea5-934e-cba8580bbadb", "indicator--97ad3bd9-e786-4bd2-a4e4-5f6f7f6d4f8e", "indicator--cbcacfd9-e3ac-4e14-b7c5-053abb715f23", "indicator--adaa2c1d-1709-48c8-8ea8-6e6d4e8aab81", "indicator--7a773a48-939e-4f94-86fa-a9d3fc1a60d8", "indicator--3a1ff9f3-5ae1-478d-878d-4ab3e3001e45", "indicator--b4249446-7057-453c-85bf-11d948a9ddac", "indicator--f4ccd214-5449-417b-aecb-c9c1aa8bdc46", "indicator--1dd9d92d-7a60-4b2c-b447-364ac19b8af3", "indicator--1af7c82c-4348-4e6c-ba77-c7282b8349e3", "indicator--b88f54b0-c273-44c9-986c-efa3f7a14614", "indicator--83231879-83ec-4346-928e-06fec787802e", "indicator--dba6f6f2-bf11-41d7-b3e8-c59e2d2193ff", "indicator--81213862-efc0-44f4-a1d7-6f1f48aa2792", "indicator--575b0717-5cd2-49b0-9882-9d67fee80ed8", "indicator--66ddac4a-9abc-4836-965d-38dba2c0d895", "indicator--28d91471-d34e-41a7-bf20-d807785791fa", "indicator--d588565c-e23e-4029-b03b-4fd3fbd391d3", "indicator--1b4c8ee6-ad64-41ac-bdb4-873cb6567d58", "indicator--89c1a95a-8d9f-4f22-b61c-839f0cf20394", "indicator--f7f2edcf-64a2-40b4-addd-c7723a418284", "indicator--ea022d99-59db-4e78-8347-2141e74f9b54", "indicator--2d149119-f208-405d-86ce-42f0ebb716a2", "indicator--fbfb9d29-497e-4ddb-9638-07ca2964e661", "indicator--f9a2d4ff-a23f-430c-ac3e-fe5bcefe8b01", "indicator--b911f0bd-8943-4566-a244-030dbd2cf8d3", "indicator--b7ae9a90-47cb-46f2-bd30-96edbdf0a2af", "indicator--98023171-b6b7-4339-a5ad-b49159fcc1be", "indicator--eaf1f71f-95ab-456c-af98-5c32fb8a64e3", "indicator--bd7b035f-3dd6-4b5d-8a25-191f807c8227", "indicator--bc8715fb-9222-448e-91ff-c0139752bb16", "indicator--b84dca33-96b7-4afd-b5d3-4f7110b31101", "indicator--c44b46bc-a193-40c4-931c-2d97d7288687", "indicator--086973b5-2034-4d89-a713-193d83460370", "indicator--3ff9bd21-ec30-495e-914d-ace5983da304", "indicator--cc21d64b-6e03-44d8-b1e2-1533e1d6a820", "indicator--fd8725d6-4a02-443d-8a12-a648c5f8e569", "indicator--0ceeedbe-bd15-4cfd-a808-d99161b83cea", "indicator--0ef5af67-1b85-4ce9-a7ce-38cebd1948e2", "indicator--ed8c675b-6560-44e1-b967-cc99801d8aa6", "indicator--08a4cf61-f092-4478-bfa7-0ac4a0a497f2", "indicator--1d7cc8c2-c554-4b39-840f-6316d9f3c1d7", "indicator--9f39a51a-8f52-4ecb-85b2-782d887e4697", "indicator--bd944d63-2e0a-4971-b3c6-ff2cb8dadcc2", "indicator--c02d385b-78e3-4d1e-aad0-5678b813f8f7", "indicator--943df5a6-eca3-4489-85f0-b00a5a4d5a48", "indicator--c71f74cb-4e52-4c52-882c-29a2260e182f", "indicator--28eb083b-f972-4e6f-bbe6-52de76c1e504", "indicator--0deb2a91-86d7-46b8-91c1-f3155dd25814", "indicator--5e72fb81-3dc0-49a4-bbe9-83d9597d8d80", "indicator--be2a99a1-0bf4-40e4-a4eb-959bfde4a4f9", "indicator--9e66f609-fe8f-4211-9007-80bfb2f586a5", "indicator--3ed93ca0-c3e9-4250-a74c-6978d52b9a15", "indicator--53138eb2-8ba9-47e4-a4e8-918ba22fd388", "indicator--c8eab8bf-d7ff-44c5-b50a-4309878cd01b", "indicator--193d4f6a-8574-400f-947b-ec07ad4a3528", "indicator--68e51a6c-3de5-40e3-a24f-0ff9f41924a5", "indicator--9554ece4-7bca-4c29-92df-19782e8ea393", "indicator--f333d67e-b1ef-4251-af91-6a8d1f71a7b7", "indicator--a0e5a341-98ac-4ced-b056-b19fb7a3d24c", "indicator--802f17a0-fd93-4f38-b9bc-56525eed80a2", "indicator--5eb84c60-c762-4956-b79b-bb7d5c468df8", "indicator--bb7d19ac-49fd-4a11-853b-1c0aa6c59145", "indicator--3c660311-8bfb-4e55-b0ea-253b6815a2ed", "indicator--89ee7d3b-9314-4f60-b73d-0a8b2d10c41e", "indicator--28e6690d-bf49-4917-8443-b6237b8de3fb", "indicator--75befcc8-cafc-4188-b0cc-66e28c39ae3f", "indicator--f1f0613a-bc6a-48f6-92b4-48ebfa3c0eb5", "indicator--af2445cc-c62d-4237-a641-25f5fa0eb07e", "indicator--c886f5f6-3402-4ae4-b54b-8b34d74da821", "indicator--b3d639a8-7c1f-47b2-ae58-b2898f920590", "indicator--ab962a67-11f8-43d3-bbda-ecafe6d7a942", "indicator--bb890a0f-fde8-4b5e-a736-7069ddc36a69", "indicator--575284dc-492a-48bf-9cd4-9d362ffad796", "indicator--045f6f68-9b74-4e44-b3df-a8586a642450", "indicator--41534f38-747d-4147-821c-dba621afe492", "indicator--3c1b7af1-0922-4475-be12-cc873ac8030f", "indicator--589d1c4f-38ba-4903-851a-97269724ade2", "indicator--9dcf6f74-378f-41da-90c2-3f029c29ee75", "indicator--f69a9f01-81aa-4c46-9dde-f8b6dde60921", "indicator--fe40b06d-40f1-473d-b8eb-848931f28169", "indicator--98dc7270-09ba-4360-9122-2c99d7f3926e", "indicator--121b32c7-b2b8-45c6-8ec0-1b256e08378f", "indicator--69cf5a4e-9f84-4884-a753-c291831ab619", "indicator--e9987186-276b-4cfb-8175-953358479a4f", "indicator--04f8daa5-4c10-4092-8ce0-2190ca3dbb3d", "indicator--8e6b4bfc-77bd-476c-b9e8-29724a976261", "indicator--db335acc-0e8d-4bfe-a8db-69b75f1178e0", "indicator--b14ed804-8e11-4d1a-b5f3-ff9b43a31c89", "indicator--8cc985e6-277a-4d34-845b-491ab2ab6197", "indicator--1172ded5-eee2-4003-8324-12355217e9ea", "indicator--f010c3c1-009b-43d8-9fad-b446bd166b9a", "indicator--17fcef1e-15dc-4edf-9354-54dbf9b5df57", "indicator--5cbd2b8f-0700-4ba9-b00d-d975e7181e18", "indicator--6f5bd7d5-445c-4d30-8227-a2e11e6e6787", "indicator--f08375f3-91f0-44b2-a55d-fb1ad8cfdfd9", "indicator--47a085e8-5224-47f0-a00b-99553a98612c", "indicator--bc140485-e645-4e79-b8f7-3a8726d54936", "indicator--dc7150a9-e227-466e-9a72-23e32d5e5c34", "indicator--e7a7d1b9-65a6-462e-af79-6cd3c6176051", "indicator--d4b682a9-440e-4838-b827-81eaaaaec924", "indicator--8ce7d8cc-4122-485f-a08e-91b316bfb621", "indicator--8b8e5fff-5af9-4b67-bfb6-1bf5ad05a2af", "indicator--bc8b81c7-a43c-49ad-a6dd-ce7a0ab41f30", "indicator--9f6ca036-edd3-48d8-ab64-42f0c4d8b517", "indicator--9354838b-8eed-4eaa-afaf-0d849b03d35a", "indicator--78e421fe-460a-4321-991e-5b385a9b18b8", "indicator--519e21f9-22a0-4137-9962-1931c84fdb24", "indicator--f11f5aaa-714d-4ae1-acdb-e90a55960184", "indicator--8f3a821f-e5d4-4165-bf41-9631cd47ef9f", "indicator--695e3e7c-2f62-4c4f-98fd-7d2ef77aa8ca", "indicator--c2013e66-a89e-4f04-ab7b-1ae5aeca77e3", "indicator--054df46b-9391-49f3-971d-5bfed58a5475", "indicator--18d18a66-868f-4545-866d-9039d288fdd3", "indicator--f3f7b2d3-545a-49c2-a554-9e3fc4f012e2", "indicator--b1ad5dc8-e503-443d-ae5a-43a02750f008", "indicator--c1a05351-2926-418d-803f-26aee87b2727", "indicator--330c8af7-6d72-4179-8349-e44a0110d392", "indicator--3c0b7dab-1371-43b5-9858-0396135787f4", "indicator--d78fc352-ddaa-49b4-8039-ffb3e953ec96", "indicator--f2b988fb-970a-42bb-889b-8f75ba67a620", "indicator--6648eafa-af70-444c-8114-2e4148963be3", "indicator--0a41123f-0d39-41b3-b367-83b7ef3fcf9f", "indicator--1d34fc65-0ee0-4fe1-b657-1abbb47a23b7", "indicator--dacdb992-f29e-4980-acc5-d99254f77600", "indicator--40a31278-afa8-4e24-b66d-c26c87751561", "indicator--500fcd3a-2926-4dae-a80e-2a21665de9e9", "indicator--bbbd84a0-e00c-47ec-abaa-d071c1452e00", "indicator--433cfe36-49b1-4d2a-bd60-1c2e983c31b8", "indicator--bda8ef57-c134-48ac-b7be-caaf29581dff", "indicator--3d2d7981-cef7-494f-9d61-70290ba2c7a4", "indicator--4c98bcca-bc91-4213-848b-f8ed175ca4da", "indicator--61badc0c-76df-4e26-92b7-240489812f09", "indicator--0604df82-d660-4556-bfbd-2413bc03985d", "indicator--92f1ecbd-0447-4ffa-b9f6-b60474514986", "indicator--12efe732-6ab5-45bc-83b1-9e3ecafe3c12", "indicator--e5e7429d-584a-4277-9926-f34a767274ce", "indicator--77293920-94e4-4e68-a27b-b7211d4e0445", "indicator--1fa05683-7c56-4db2-8b8d-79bb25a6297d", "indicator--1c5e58ff-d06b-446f-8a40-ee33c8bd6ad5", "indicator--9d34fce1-2433-43fb-b9ea-f7c481b5179d", "indicator--48f5be30-2676-41b7-9787-86ffff64613d", "indicator--82cd380e-ff28-4e13-9add-4b03b2f3e068", "indicator--ca4d0434-52e0-443f-839c-48fdec069aa9", "indicator--a1468301-bd0e-4f41-a393-13aa26a85858", "indicator--b5278da5-6b31-4bac-aaec-b46292c21413", "indicator--7cb4adba-3ba9-4f11-b583-50b855e1012a", "indicator--8dff3b95-0ca3-438d-9c9c-a7dd08007d11", "indicator--03fc323c-0c6e-4d90-9ad1-c00755e75c6f", "indicator--820d9502-0a96-4d39-89bc-4979bce48407", "indicator--8f1405ac-a65a-4fb2-9e87-278689e5863b", "indicator--f1eeebdc-b0ea-4dfd-89ef-db913df5b3c3", "indicator--93fac66e-39ad-47c8-9904-95f8fc77e7ee", "indicator--6ceccff7-df29-4f58-954a-49533625e670", "indicator--20a2430b-0f46-43a0-816d-633be4547c7a", "indicator--9090915d-9df1-4f06-985d-9bbcdfa35538", "indicator--7c8bc316-fb14-4a30-9187-d49270d8d71d", "indicator--bd7ea5af-c03f-4dd9-9a1b-b19ec88afc5b", "indicator--56895c8e-fe6d-4873-a621-6d58ca4b10cd", "indicator--56bbe553-6f08-4487-ac1c-a0a20d03c837", "indicator--129311b7-0507-479a-ba21-b5f517b490ac", "indicator--5061c3e7-2824-4437-92f3-be73f5cc6fbf", "indicator--6d8a0dcf-f701-4f54-ad33-81552f32ccda", "indicator--921dddd1-693f-4dd3-90a8-04ca482a7a2c", "indicator--d09181e9-5543-4536-a411-c270e7837fc4", "indicator--a5977a13-7f3c-4b71-a4fb-c2dc1c24c4db", "indicator--a5a4aec3-7eaf-4440-9032-1c76678097d7", "indicator--4bb2d1ed-a371-4c6b-838d-2d1486120dc7", "indicator--52ea6912-0977-49e3-8bc6-d1afdd7a05ee", "indicator--737c98ac-f75a-4e18-8c27-e2e100f28dd3", "indicator--85a4a57d-a840-4947-8f79-566a323a4cff", "indicator--da30ebd7-7f82-4b78-b17e-6a496d8b28ce", "indicator--0485b8fc-4677-44d4-9472-57d2d8b46d9a", "indicator--5ad0d49b-c192-45b7-94d8-5877171fff86", "indicator--6f51d76c-4720-465c-bee2-81882bad6ba2", "indicator--081b404f-91e6-46bf-b09d-82f10b43035b", "indicator--76a15976-305f-42cf-b278-7bc9b3e72c84", "indicator--3333a62d-4506-47fa-80e2-ff3d014b231d", "indicator--708446a6-7e8d-4b5f-8ab1-7ca4751da1ec", "indicator--fb273aaf-ae79-472b-9289-2fcc50a1ba7a", "indicator--cc1f5bef-9183-4df8-ba54-ce0895386c80", "indicator--08b85771-6419-43d5-89cb-c3b2a927689a", "indicator--591bf8e9-1f29-4212-ab84-d0dbef3257cc", "indicator--e2a51374-a209-4497-894f-6b057c63466c", "indicator--42ad41fd-8ad9-493c-9d0c-d4c6c11eff97", "indicator--fad10a7e-3796-4c53-b5c6-135b6da1ce1e", "indicator--6934adf2-6284-41fd-a3b5-2ba52e7b9d74", "indicator--2150e943-f94d-4d27-873c-c7dd08066471", "indicator--32c512da-d9ac-4f4d-b454-03542eff38f2", "indicator--fc3ef8d5-c387-42e8-b067-0e43d68006bb", "indicator--8c34bf35-aade-45b4-b83f-c85650792cbb", "indicator--d70dac1a-c78d-43d8-a47b-30da681b5393", "indicator--5dba88af-a19b-44d5-aa7a-dc641afc634c", "indicator--a12ecefe-d88b-457a-8408-0d3733bbbad4", "indicator--8e9c8394-b6c1-4c5b-b318-d96950f03c38", "indicator--8660cdca-3a74-47f5-b66e-4e5e7e42ff6b", "indicator--329feaf4-f64d-4937-a2ee-88452f48846e", "indicator--d57ba89a-07d9-456a-9072-b597a7758e04", "indicator--06603307-508e-4c17-ade0-dccf8f2f6ace", "indicator--72a56f20-bb3f-45b6-9b53-750f4316a1a7", "indicator--20e22e82-1d11-47a1-ba19-a474a3a60daf", "indicator--47f961b1-aaa1-4f27-93c0-2dbd7129f45c", "indicator--d77a1b84-3931-4efe-b20c-44a4bd239918", "indicator--b0b8746d-bce5-4f5c-b6e6-4881f9734ba9", "indicator--6e8f79a6-0267-4aab-8102-fc11cfd55ea2", "indicator--521e927c-e3b0-4c4f-b3a6-bad2e5960c8d", "indicator--f3ca1c6c-aa08-43e0-992d-20135e4c73a6", "indicator--63e48d73-b134-4c58-8e4a-2a5555291d0c", "indicator--297c5dac-7b0e-4e0c-bb71-6072506f45a3", "indicator--fbe0148d-d924-4255-89f9-f3f54a8acbf8", "indicator--0586e06c-46cc-456f-b2e2-cac7987fafd5", "indicator--00549ab3-3c72-431a-963e-412b79015def", "indicator--10378c5b-9ffe-41a8-8797-c7cfac65e0a1", "indicator--d116ddee-8eb6-40d2-bedb-000c5acf434d", "indicator--cad89aa8-725f-4941-8c9f-dec105886527", "indicator--cf2306f2-ebeb-409b-8adf-4cbbb759a991", "indicator--4c0cfa1c-f540-419b-b1dc-f62ba7e5f11f", "indicator--97764621-47d4-4a1a-a6f8-8d785471e2b6", "indicator--5848881a-e717-4429-a07e-f9e367b42f9d", "indicator--e3f0b763-5426-44eb-b9ab-19ef074f5689", "indicator--ef99fb84-ff7c-4a7c-984f-09968cf03325", "indicator--ee5d95f7-7f08-432f-84ef-f65d160adb2d", "indicator--47a34b6e-644a-4837-8936-fee0f6e5aa10", "indicator--63f53c8a-b8cf-49b7-a4f9-9afc29e1e577", "indicator--95e83b5a-7df4-4806-89b1-591184c463cd", "indicator--2a435009-0fd9-42f3-be27-0dd08648ad10", "indicator--bafc2737-46b5-4118-bf53-fffbc5063aa7", "indicator--32b6a47b-2b6a-4c3a-9be2-ae49179aad2d", "indicator--90367f6b-47b1-4dbc-b9b5-6c382cdd1460", "indicator--bea24ada-f8c0-427e-a040-a773c2133b9a", "indicator--8ffd4d01-f4fd-4197-a38c-6e1bc2e2355e", "indicator--2ae45886-5944-4a57-bdc5-fb33e3e1c9bb", "indicator--b7673b5a-2844-47bd-a178-640a0da28838", "indicator--8f50219c-a9a6-43ba-8d6b-c765fbe7a6e2", "indicator--c59cf072-59a3-4e22-9edb-ee387c517746", "indicator--0d6a48e2-4c07-4ad2-aaea-dbb49c4a2313", "indicator--66d8510b-b653-4580-b4f2-a8d047652c56", "indicator--971ae6de-1d36-49f5-9e27-a12876a2078a", "indicator--b9285d37-d894-4f73-a0c4-d8b3b188ad67", "indicator--59952ac8-8a1a-40e2-b275-57af080b3f5d", "indicator--a998ec68-385f-4164-b12f-eb4be673e7d7", "indicator--fe9c1c7f-c942-4eee-a5f5-956b0b44411f", "indicator--982b3639-07ff-4a7a-8885-d1d9621b5ebe", "indicator--b9e737ec-110d-44cb-a0c1-9310ced0f89f", "indicator--f039f4c8-673a-4464-8932-609a5f259c94", "indicator--b8569844-f62b-465a-96a2-4184ec723f3d", "indicator--a6b9ab46-d5e8-4473-a090-2a5f0f57cc0d", "indicator--674c3a80-820d-4d0f-9608-4caba15b6fed", "indicator--5ef3fe8d-2b19-4b9f-8766-6f3f41338539", "indicator--df16aa30-d13f-409d-886a-08c2cf45a26a", "indicator--bb081a63-7f9a-4e2d-81c7-8182d2c5059e", "indicator--c592cd5d-a2b5-4c37-922a-1438cd5f0f07", "indicator--c0d393ab-4ba8-4244-a521-82c67f2e7ad7", "indicator--a096181e-00d6-4572-8591-a1a50b263463", "indicator--428eba6a-eae0-477f-bc60-3cef983125b1", "indicator--f656145b-52d8-4d7c-baf0-97559e035066", "indicator--910a1160-38ff-4209-ab57-fa63a49cfacc", "indicator--644c3e8b-fdbe-4859-bce9-47b8ef3d8294", "indicator--ac716b2f-bf96-45d3-b97e-82eee8613ac5", "indicator--822880a6-32b6-4578-8d18-50cca9af366a", "indicator--84784173-b165-4ce5-a410-61fd8deb8db8", "indicator--8fd6fde6-cdba-4861-a43c-b1bc228fdf93", "indicator--d9b6fe5b-e38c-44a8-b077-db74bcd7297d", "indicator--6794550d-a134-4ff0-905f-d392852cf981", "indicator--3a3bac1c-bbcf-49ac-b7c2-5ee515c7dbcb", "indicator--14d2771c-026d-44b2-81bf-d02db36a6f54", "indicator--18d8080b-86df-4d6c-971e-44e5cdb158bf", "indicator--373efaee-98dc-496b-8f5b-fba997284063", "indicator--5904ee9a-c39c-4454-b87d-4c88d712981f", "indicator--060560d7-5f43-42de-a9a5-0d8ec097a0da", "indicator--1f83fe97-b99d-435c-bdcb-91400436ce23", "indicator--9aa30e39-72f7-4be6-9b89-1ddd3807a6e5", "indicator--932a02f7-348b-4ded-9e77-442c4feb6974", "indicator--7188e15b-8441-46b7-8ab0-736329522c6f", "indicator--a9fbb546-b4f0-4592-bf9d-9f665f67f2f8", "indicator--8b4e8724-7af9-4641-a65f-1796f3a01458", "indicator--2c9d8da2-9007-4eba-950a-208611498874", "indicator--3b2861f7-b514-4658-9345-0a2d16a299d4", "indicator--ff326b60-c0e0-4045-b82a-12214c23a7db", "indicator--8ba146ca-8847-43b9-a73d-bb326b3d2c8b", "indicator--1df40b8f-cf86-48bc-b94c-7bff91b9de3b", "indicator--13ba58e8-8ca0-4696-a088-b76e37eab54a", "indicator--b35e790c-504e-4bb6-95a6-64971779264e", "indicator--a42929ac-ae76-4fb0-91e2-c7283886fdec", "indicator--5b1bb668-a182-4012-8301-6e9d89bd2dee", "indicator--49b607c7-8182-420d-a788-3b62557ef645", "indicator--35ee668b-724a-4615-b0e9-e3b0b4cd9efb", "indicator--9b40210e-381d-45d0-92ae-937f500c56fa", "indicator--140af5c5-d128-4536-83de-fbd9754413f5", "indicator--765a8179-5a48-407c-ab25-6888c29c407c", "indicator--0877f764-203d-4975-9d75-bc83ee9c9977", "indicator--01fc186c-4e6d-4441-8ebf-35ffdf55025b", "indicator--558a2921-689a-4e98-83a5-f31b0bb6ff3a", "indicator--932b4c91-73a0-40d3-bc31-0d4e8618b981", "indicator--3df4d145-de20-47f5-9f43-2a02ad8ea470", "indicator--670d07e3-ca29-43c6-abab-e5963bac337b", "indicator--a33b5059-9ef7-45f9-be13-3c90d01332aa", "indicator--b0fe6129-4224-4039-b7e4-729f03f7ff98", "indicator--6c296876-abf4-4648-8a1c-d37998758658", "indicator--eb4a8313-660a-4d7b-a57f-7a91ad728841", "indicator--95271b84-45db-451a-b7a5-d8b387e85b0b", "indicator--057fd4e4-1a01-43f9-b03c-a0bb441f268c", "indicator--93ec6789-1dbf-4e45-916f-9e3ac65a6908", "indicator--2836f258-150a-453f-978b-08d3d89dfc43", "indicator--181b0b3b-682e-47ea-9911-83f38232bcc8", "indicator--0947d070-0770-4743-ac47-5047a9d966cd", "indicator--6d383fc9-a0cf-41ad-8a82-6d4d0035c6d1", "indicator--1394ac16-2c4c-4425-ac54-50d81cc4cc9e", "indicator--9fb477f0-f733-46f2-9822-722baf1bb8ba", "indicator--f6846483-00da-4f5a-a292-e7f983c24615", "indicator--b40ef2a3-6215-49fd-9130-1838954e036c", "indicator--38599b1c-d401-4225-bbba-47c6abbf41fe", "indicator--414eaf60-336a-48d7-8373-9f806ba2626d", "indicator--c5f1ad4f-8536-4fc0-880a-04f8015b46ae", "indicator--dde96d16-16aa-47fc-bb5b-16ac2344e61a", "indicator--cb1573c2-0eec-433f-916f-359a2add5191", "indicator--3ae6f264-52ae-47e2-9ae4-9262de700be0", "indicator--e3a5cc47-c060-4d4a-8072-befe3b564b91", "indicator--302c8978-3fd9-4b19-8e93-cd90f866a729", "indicator--0579bee7-a4c8-40f2-bc50-85528665ace3", "indicator--14bd003a-d803-447a-b016-cab18d8cf143", "indicator--88898643-c039-40d5-bb24-19e63dbaaf68", "indicator--4e5aaeec-d3d3-464e-967d-d0fcf5e4cca2", "indicator--c1caa7e7-0c5f-48db-b491-e172990c2f11", "indicator--3ba453ba-1e13-4d7d-b402-dcf149fc65e2", "indicator--c7b0c4c7-c957-4894-acf0-a327b1d786e1", "indicator--a58e4010-3a81-45ca-97b8-130804420687", "indicator--a7a3e8d0-b2be-4bd6-8c29-e637e492d927", "indicator--af2209b7-1e9b-446d-b635-62328e76210d", "indicator--1e7e0c0a-25d4-484b-a455-a52b637d2596", "indicator--c392fff6-fc94-4fa4-bbed-020ea973b21a", "indicator--b3ff5856-7ca2-4dea-a9c4-77c7f7da0d62", "indicator--fe9be529-09a9-44dd-9b18-d7180e3ba511", "indicator--5fb61d4e-6597-4336-949d-eb694fa2d8a4", "indicator--6090c7b1-8dda-440f-a6ab-cda076ecb1f5", "indicator--37b8fcb5-1aa3-49d9-bf6d-35965bfeae6f", "indicator--ffe560e3-1c3b-41af-a377-cba1551a33a8", "indicator--3b98325e-5fd6-4fd9-be90-7141c859fdba", "indicator--f83b0853-6929-44e8-97c3-a86b51573af7", "indicator--c562ffd7-80e0-4f49-a88e-e2bda3478354", "indicator--225bcd05-7a2d-4f5b-991b-7c7aa59e7dec", "indicator--b89d8496-a17f-4123-8073-ed3cfdcf4a36", "indicator--f5776739-abeb-42f7-a056-3ff91071bc92", "indicator--99cd906d-fd6f-4994-a58e-d36ac93228fd", "indicator--bb0530a6-0faa-4e14-949a-12c59e0b08d5", "indicator--feb9750e-0cc8-44c0-b6ca-0822396cadfb", "indicator--ca3716d5-e9df-429c-af2a-a2ac4d240061", "indicator--0c14448b-cc69-4f9b-b37f-fc685b6e2d90", "indicator--e1b20899-74ed-450d-b8df-933c2372c595", "indicator--db3f4ad0-01ab-4910-9c61-437bdda845cf", "indicator--736fbf74-47fe-481f-a352-72e6ccea42e2", "indicator--9db9444e-3b2b-474a-a1d2-78d966cccf66", "indicator--e1e150a0-9a52-47ae-8d5a-fee004d534c0", "indicator--117b3bdb-3053-4bcd-b966-963739cb38be", "indicator--92be4370-4971-4ddb-8238-ea545094c2ac", "indicator--32f36abd-b9ab-42f2-8f6c-3e98ac50372e", "indicator--1ad4ac4f-ae60-4554-a10f-048d23fa4a52", "indicator--eef4fade-6142-4788-bf20-2fa285de2beb", "indicator--8d4e7d72-2205-4a5f-880f-e7954ce8799f", "indicator--974b2dba-2c76-4e3d-a924-5eded8b4b122", "indicator--18cb61a5-5ab8-47d1-9654-e46b08dbc5f8", "indicator--9111dcb2-4520-40d3-9167-e88a3b52ba21", "indicator--0669e895-d804-416b-af61-0f1382e6947d", "indicator--58c1d886-c637-4cf2-9e4e-4d8911660e4a", "indicator--bfd91e47-8bab-4bae-8119-738a81043ed9", "indicator--619ec359-38ef-4b46-9b81-6ab502c4e2ce", "indicator--6fa8519f-61e6-4748-a6f4-1dbf480d8db0", "indicator--8cb88882-5aa0-468f-a595-6664d5215ea4", "indicator--f7c779cd-13d2-4556-a64f-c0bafe12a744", "indicator--528c5030-6a81-4794-9347-c59cc79eaff0", "indicator--e106f28c-4eae-402b-a6b8-1b0f3089e43c", "indicator--58d2d214-63dd-4702-a690-e6d43d31739c", "indicator--90ba77bf-6072-495f-9c77-beb4bb9e7aaf", "indicator--31c85709-01e5-4299-a03e-d3052221cc41", "indicator--8250bbb1-13e0-4d92-bf9e-16ca0e9a17c7", "indicator--a7fe7386-e4e0-4023-94ca-2dc30c5d7d64", "indicator--b012faf2-a121-4bc1-a1ad-41ae4110070d", "indicator--84152cd6-bf8a-4ca9-9785-5f08c867f214", "indicator--93d0caa5-17d6-447d-b92c-907d72aa9a57", "indicator--59f759bb-7929-4044-bcf5-9746d2131aef", "indicator--384eca7e-e06b-4d49-98f7-1e7b4e5b17b7", "indicator--8da23bac-199a-4dbc-9687-c11fb2f1905b", "indicator--b24fb2be-60d5-4082-917a-f50373713a85", "indicator--0f36507c-1bd3-4bb7-ac32-cc5368335fcc", "indicator--391faadd-66ba-485e-88e3-06f5572b04f4", "indicator--5229af1b-9a06-43fe-91df-4ba7357ea3ed", "indicator--2bbb8674-d6b4-4456-a7e1-7bec6138e615", "indicator--afb8b1b0-0677-4997-a638-46ccaff4634f", "indicator--5a1f7cfb-283f-4a74-9ec2-9feaa9b5baad", "indicator--ccbcfb19-fb55-4240-a045-7349c109f3fb", "indicator--72cddcc4-9aca-4485-a42b-99f5ba0fc890", "indicator--5f879f3c-b3d5-4039-b4e9-c01b7bbae68e", "indicator--ba09afbe-79fa-4a92-99ed-bab78ac96db3", "indicator--b9c911fc-7947-4bac-aca3-446b4a0183d2", "indicator--81c57164-ae00-43ed-b171-07da8060369e", "indicator--b09414b6-99e7-4402-b8ed-cde55448862b", "indicator--387e5840-6ccf-4b10-b45c-f4f7ff902748", "indicator--5f2b3249-6a89-43a7-bb55-879ab6eee429", "indicator--d79004e5-6f00-4d59-a735-a393efcc6f0f", "indicator--ada0ac61-5ebc-40d5-a267-ff6591db0ab2", "indicator--da302a93-be72-4108-8ac0-1a0be9a0f94d", "indicator--2829c6de-b6a4-4ea1-9c90-56b4173140ad", "indicator--552a4f36-7093-4cf0-be5b-80c9258a7d10", "indicator--61087874-f63b-49f9-aa9e-d1f47c5f9c2a", "indicator--cc52896c-dda3-4182-982d-3de819f3ba58", "indicator--33177a42-1553-4968-8d87-0c442c2980d9", "indicator--86d5f2a5-d428-4ec1-a38f-6a0e13d8037e", "indicator--6bd3362c-3f5c-4767-a657-8e461a855c84", "indicator--7a3d8e13-d8a5-4544-ac89-e67bed156d51", "indicator--1f6bdf73-a2cb-499e-a027-6e51ae989864", "indicator--ab590474-ebb8-40f0-ad83-049a8dc82751", "indicator--b2b006ab-fb9f-45b6-acbb-1a650f535387", "indicator--c531deb7-5a56-4c31-9183-299979e2b39c", "indicator--844ec925-8187-474a-afe5-c75d69e11043", "indicator--8b7f864a-d75f-48dd-987f-06b4449b676c", "indicator--2b17179b-2c18-4407-938f-abc92ef8821b", "indicator--c9f90153-a57e-4dd7-9bd4-421535d01555", "indicator--95fc08e6-da6f-49f7-b41f-f1cea991886f", "indicator--53c9a5a8-c419-4edc-b2e7-1cb0318ef6b7", "indicator--f7542c96-b2fb-434c-bf16-d667d9628a49", "indicator--09ae9f97-f498-4455-94af-92a304127769", "indicator--d456e50b-cef0-4b27-bd26-ba2c263f0a13", "indicator--8eff7298-281d-45ad-b44f-3f233c19ed16", "indicator--201168f0-a068-4248-8ceb-d590491e2476", "indicator--2a6174fc-ef30-4562-ab97-311fd74b24f9", "indicator--08a7ffec-f927-4ced-8206-eebfe9a671cc", "indicator--65d6a15f-af4d-4772-97ef-2c0f89331cae", "indicator--ff9d56ad-8da2-4f84-8ca8-453779cc4bab", "indicator--d4e15923-c56a-4867-96da-29e93565e3a9", "indicator--45ffa319-b71d-4924-9c51-8b24775df691", "indicator--4af9b970-5cfd-43ac-a0a7-f022c79ca775", "indicator--d0c3a028-1c71-4736-a8b8-06a4efd12163", "indicator--dac9820e-a61c-4466-ae24-51171c8a84af", "indicator--63dd1935-2e7b-49c3-995e-a8ad15eff0fc", "indicator--03137d94-7006-4646-8e6a-e4b1a2057b26", "indicator--e5d01791-1f59-4eb8-a29c-427e11ac5b99", "indicator--a6db1483-e254-42ba-9cfd-1f8d7625beb9", "indicator--4171c199-a930-48ee-adb7-f817cb06fd2e", "indicator--aea6dd05-eb30-4280-92d7-0aa0593d0e77", "indicator--92582768-f4a9-45ba-958d-843accf76cd1", "indicator--2934dab2-1321-49cb-86a6-4c24fb9f0107", "indicator--2e46ae87-303f-4d89-a092-a81cd38fcb70", "indicator--065865d2-f85e-422b-bf54-385cf5c389a1", "indicator--86316bf6-1868-4acc-9cb5-4016e40c083d", "indicator--a588f2f5-a26d-4180-b4db-21cf9f4cf930", "indicator--66054076-a507-43da-b044-9c78c4818758", "indicator--597f3d6a-b5e6-4b7d-a87e-2b5bdb97ceea", "indicator--0bf78819-23b9-47b6-9fd4-77832279b6e7", "indicator--8f0cbd8b-b71e-4958-b2c7-ad63c3746822", "indicator--be62df9e-e90c-4883-8109-a34f38cdc9fa", "indicator--f1a4a9c6-8cda-4fa8-a0e4-91d7bd3736a6", "indicator--dbb361a0-fe2a-49cf-8270-4ceb0649a8f0", "indicator--8d0cd899-4e09-4696-8993-a40dd2c397c0", "indicator--b33af6be-1beb-4dce-8173-78533b322b2f", "indicator--589a3534-7bde-42ae-9c62-e565305ef8e7", "indicator--97e2d66c-0336-4053-9bfe-134c863ab7f3", "indicator--37f539f9-6b47-4369-901f-24af5ca54ba5", "indicator--fa80a5c1-e961-436a-a31a-aff7ff5e4a06", "indicator--826bd736-cbbc-40b0-a93e-d56e157e0c41", "indicator--d53a383f-9d6d-424b-9a03-5a27a07ad313", "indicator--d4750765-2da7-487d-a84e-4d094af2a8ae", "indicator--073c83f6-f9f2-491f-af89-a304b65f0a72", "indicator--e6c26997-c322-4e2e-8b3e-e69fcc2f32ee", "indicator--9a100d4e-e94f-4c29-83ef-3fba132a5d1f", "indicator--57ff43fe-dcef-46a0-856a-9d8ccc92c061", "indicator--52fa2bb2-2501-46b6-abef-652f3762fcff", "indicator--ae29f0e8-eb35-4077-a218-a6c95b6db58a", "indicator--10d77214-f481-4f6c-825e-c76f8378f94a", "indicator--b170785b-d83b-4c74-83ab-57307ade648b", "indicator--f71e2dcd-d8af-40a7-b2be-48c746cc7107", "indicator--a0c9ab84-ca59-4eba-8e3a-b20228e56e05", "indicator--79ea820c-3174-4035-bbdc-eaeb5ab7356a", "indicator--b9c3eef8-edd2-4390-a9f8-9d4512841a55", "indicator--354ad139-642e-4af2-9541-f2dfeb7db030", "indicator--19eb5645-c9a4-4612-bb76-8e11584b0bae", "indicator--9f90cb96-b0b5-42c5-ae74-1d68a4934b91", "indicator--fd505ea4-6424-410c-8bff-982fa64042b1", "indicator--532138fd-70fd-4030-bbe3-c03e16dd5e52", "indicator--297569ea-3419-4a2b-8181-90db493da87f", "indicator--312efbc2-7ffe-4e4d-ba66-5ca5e192f6b2", "indicator--bf23aa08-437f-487a-83be-91f80fd8a21f", "indicator--8c5116ae-ef4b-4d94-a66c-64b3791ecd6e", "indicator--35efec3a-4d5a-4602-a8b3-8f243a307ded", "indicator--e7e37e67-f2b3-47a5-9249-622acfde5f13", "indicator--73ba3980-f307-4f85-9ff5-e2012530bbf5", "indicator--33e14cbe-ac7c-4265-9f48-c674bbd149c0", "indicator--b484e88a-3596-4024-9876-299c6513e03a", "indicator--481eca99-5d59-4079-b8bc-a9d94c71df72", "indicator--2fce2d13-a87a-4cf8-84ce-bf968d869d83", "indicator--eed95f85-ce8b-44b8-b86f-e05542ee2a47", "indicator--1545c5bf-7096-410c-bab7-239d30a4d809", "indicator--19b6920a-5362-48e8-a473-8dea48cac788", "indicator--3a364f0d-efbb-4c09-a6f9-73045d37aae4", "indicator--aa9cb5a4-9e4c-49bb-afe3-1de53994075f", "indicator--3d6647c4-e83d-4d18-be81-45c2067962e5", "indicator--02559ec7-c4d4-4925-9961-cdaff7fe55c1", "indicator--ab1283a4-8fce-4a3e-8e7a-f75d774094f6", "indicator--994c23f9-2029-41f8-a7f1-e68d154fd703", "indicator--2a356cda-316a-407a-8dcb-3ed566ee709d", "indicator--3e37aa28-5512-4c3f-a875-9d894dca1f02", "indicator--9fd665e2-62c3-4c1c-9599-979bed35c4a4", "indicator--b30a76ea-d461-4b40-babc-29fb8c60d064", "indicator--be9864b7-5d10-48b9-8c57-4ab15ae51f41", "indicator--a6e18284-bcc7-4ab7-a1c7-4b7f6d2f87d5", "indicator--8353dfd8-6ce0-456c-a6a8-39585f4dca86", "indicator--748ed6fb-5108-4cbc-8625-5680cfd4527e", "indicator--d165df74-320f-4742-bb81-fdd9e41a446a", "indicator--ae68acc7-6a60-4327-8a01-daa50f654510", "indicator--b72391f7-6399-4537-975f-9bb23050530d", "indicator--2596d93d-c8ab-483c-9736-094c781b29df", "indicator--af183941-11e5-4de8-97ec-9ce8a8ab565c", "indicator--8db6f4ec-8b98-4d9b-b6da-584a477ccd39", "indicator--76971e8c-72fe-4194-8d4f-1020a159b739", "indicator--a8e71931-98be-404e-80a8-64dfb93e6526", "indicator--db0ec937-e813-49b5-bb98-9d8bd3717d40", "indicator--e1567e7d-a595-482f-aede-0ac45d0a9681", "indicator--740ae26e-c9d5-40d4-b97e-be7744c6ede1", "indicator--0d7f4197-11be-4deb-bdd5-43b2ecdfe237", "indicator--51623c2e-3695-4c58-9efc-824cebb6191d", "indicator--f7219ee3-ec70-4b9f-8d6f-dc6d8de3559a", "indicator--acb493f4-0bfc-4feb-a72a-cf6a58181fa7", "indicator--f7096193-391a-4efc-8675-ada86d07e241", "indicator--84da3999-1a94-4600-9973-eddbf9638dab", "indicator--d29c1ddd-a5d1-4a14-8ad4-b610b41f3656", "indicator--48b37916-9241-4955-8365-5a6a1b706803", "indicator--19ca8257-ecf1-4078-b991-8096d256d8f4", "indicator--519b2219-f133-4923-83f7-dc77e5a2da25", "indicator--74e77c3e-0649-40a9-9afb-d21b7655ebb4", "indicator--7581721c-fb78-4152-94cf-5d96a118b5c2", "indicator--56feb4e3-279f-4d3a-885d-6290db1145ab", "indicator--53e3e7de-10ec-4211-9c31-a3ee984a15f4", "indicator--df79b6d5-8da1-4ad4-8a52-1d5bdc28e53b", "indicator--50417cb5-9408-426b-b2dc-d45335054ce8", "indicator--3e7293ae-f91a-4653-a92d-8dd7fb38fe7f", "indicator--30574a04-be9a-481f-9111-edca093e96cc", "indicator--d07671a0-e969-4f9b-8828-0ac5cee5d3b9", "indicator--92f36090-05ab-4beb-9769-59c0fbf34019", "indicator--4338c1f5-b30f-4703-af66-f2fd1cd49b54", "indicator--3126a45a-5668-49a2-a978-89606bd341c9", "indicator--238268d1-f7c5-44fc-aec9-ac4907f56250", "indicator--e64d6fba-3ccc-4dd3-a932-2b5f2082381f", "indicator--faf2ebdd-b8c8-4033-939c-b6ffd5c5c604", "indicator--502e7cbd-a5aa-473b-8334-5fbf860e9721", "indicator--b0514641-9b0e-4869-85f8-3cddc0c64e55", "indicator--bd6b12ad-88f3-4e18-af51-a8da64b17bfd", "indicator--bf08780a-44c5-42b2-b47e-2ef59d30ad69", "indicator--7b525498-4b60-49d4-bd05-e8ff3efc00b1", "indicator--1a56775e-654e-4751-a196-ad5fe190dd3e", "indicator--d50cfa49-98c3-4d79-8b2f-5f56de6d832c", "indicator--c127b53e-98c7-47a2-8232-59e5933cf7eb", "indicator--83c11288-f026-4d62-a274-8a98325a1a61", "indicator--b26f5a8f-0fbc-4388-87ff-3d0eb6f70421", "indicator--578d8a2c-5f27-4103-81de-18ef13cd20cc", "indicator--7a789b46-30a9-4a95-8b5b-9f841cd9b2b6", "indicator--62ddcf4f-a947-4bad-b5ba-cc3e79d2622b", "indicator--b47f9f41-e33f-468b-8178-267ad85c9a76", "indicator--ba9aed3e-b2ff-47ec-a10e-cbf1138dd26c", "indicator--a85041a1-2b86-421b-bac1-be9c9e81d834", "indicator--64c1d46f-180e-499b-8a08-539756356058", "indicator--1d1dda91-b208-4e44-bf11-a9fd0dda3ffb", "indicator--0d880b9e-8fd3-441e-b195-dd29bbf28ece", "indicator--f2f7eb7f-e9ae-4c86-912f-b873780d26e2", "indicator--9a170cbe-cfc0-4296-9ed7-b75a1b961c17", "indicator--cbb4d5ff-822d-4fad-9584-539b3f743db2", "indicator--e0ba8b1f-7aac-4bca-b9bf-6b2103368cfe", "indicator--82f67d11-b3c0-447c-b06e-acd3363bb27e", "indicator--dfadbb7f-cf1c-4feb-8d4c-87a58d12baa6", "indicator--cf2b20a6-a613-47a3-8c4a-fa090fe55f72", "indicator--51c1791d-2ff0-4cd5-ac51-3b71ad34f1b1", "indicator--0036a293-e940-47dd-9c25-a342e81027c3", "indicator--a26db227-0e68-46cb-95bf-f28c40790729", "indicator--ff816422-cca9-40c4-9a00-b81160c65217", "indicator--da778b31-70aa-4b4a-bda8-a72ad2745438", "indicator--ca0301d6-da86-4c68-a376-4b3fb50782c2", "indicator--11c282eb-e690-47de-937f-68872c66d825", "indicator--23b5f2ca-60b6-46d0-91aa-c096a024f171", "indicator--e4e40faa-9f8e-42ce-9d38-4389e7114b83", "indicator--b5348eed-3884-46e6-8874-ede4b752f088", "indicator--0dcfbcbd-f6a7-4d98-9aef-9c4d5c9b645d", "indicator--20c93889-0c49-4211-baa8-7a8ee80c8ec1", "indicator--2a85628e-d891-41fb-adb1-4239393e6185", "indicator--6f9af532-a755-4504-b0f6-924605d7997c", "indicator--273a03f2-bd51-436b-a8c8-8af05c95bd87", "indicator--5b66c5e0-07d8-444a-8861-b1144fe9a3a8", "indicator--11d97bc2-78e7-493f-8580-62f5b3f244e6", "indicator--13bfb2a5-48dd-4f2b-8fef-6428ade66392", "indicator--31e1771b-4f90-45fa-aefb-952c6494f83d", "indicator--ac0cf958-3fcc-4884-a708-87a4f9c8acc8", "indicator--befcb208-b4a4-452d-a7a5-70407fcbffc5", "indicator--3ccaa8aa-ec5a-4ea8-881b-dac7341d0d61", "indicator--b6e8fa47-b3dc-4f4f-8afe-21cd429c3001", "indicator--a59db3f3-6dfc-4f91-9324-3857337af7fa", "indicator--e691bdb1-3603-41ea-939d-1500ac37e4c8", "indicator--7da3911d-8109-47a8-a3c9-53ffa47d4c3f", "indicator--53dffd08-37e7-418f-b238-c250bd5561a6", "indicator--60f8f1c5-884b-4716-b23b-0d49f4b3ee0b", "indicator--090c8e84-510e-45df-b324-4f7309d0789a", "indicator--e244180a-9591-432f-9f3a-7ca343ede8fd", "indicator--59e8d1e8-5d7d-4cce-8ebc-cb84e41def85", "indicator--3c328c80-b35f-43fa-b804-fc5ce0468f3f", "indicator--11974e28-cd00-46f3-8270-fb854ab42bfb", "indicator--b028f35a-d86b-4dbf-b7dd-7023211223e0", "indicator--16e52df3-f6f7-4003-80bd-f0a68562990d", "indicator--67abfc6c-710b-4bf8-9df5-52fec1dcdc00", "indicator--b34ec4ff-f521-44a4-87c7-1fe35c73987e", "indicator--d85ff6cc-81a0-433e-8afb-1e89a525c78a", "indicator--1463b129-11fb-444f-b7ab-50e70ca57d79", "indicator--e793e01c-bf76-48ec-bdab-865530569f8a", "indicator--183bb83e-9f4e-4e25-943c-615ed3d5e8a6", "indicator--884a96d4-b289-4629-9c69-382353a2041b", "indicator--8fc1cfb7-44a8-45ab-ad54-832e50edef02", "indicator--5902d8be-47da-4ddc-8511-e9459405597c", "indicator--07a7c180-9466-4999-ac53-662364216d5e", "indicator--9bb3440e-7d0a-436c-9834-7fac5b183493", "indicator--0fa19f26-aa73-4a57-b516-1379bd4b2af6", "indicator--db990d22-9541-42a0-a9e8-ae7eaf65b628", "indicator--79c97c62-0c1c-4330-a66e-7dceeb9ab569", "indicator--5b4bf4e7-24f6-4956-9db3-d4b21479562b", "indicator--69f392e4-d31a-4804-8f15-b2a277dc310a", "indicator--20ae730f-43d2-40bc-b538-80c82ae3d0ce", "indicator--2972571a-e1c1-46dc-a8f2-282e068aad86", "indicator--efa3df74-afdf-4044-b309-6fb68475f225", "indicator--fa0bf4d8-c7ee-431c-bae0-cd5d81f83b8a", "indicator--7628360d-d6f2-440e-8afb-c4be124adcb4", "indicator--5c6148eb-6d3d-4e93-b9f6-475c768bf2f8", "indicator--f937a875-7bbb-434a-9ec6-60eb183b2c20", "indicator--02d1b49e-2999-471f-a208-956bd67322b2", "indicator--d4b8eeba-e730-466f-956e-c8e15d9517ba", "indicator--46777bd2-8ad2-4338-a67a-e0e9e6311dd8", "indicator--2959b021-4204-4bec-b7fd-80bf39d24dde", "indicator--11cf6b8c-facc-4b79-a737-4dec29fc15b2", "indicator--52c82f59-6453-4fac-aee7-bfd6c5d79c76", "indicator--76fe6dbf-fb76-42f8-bd78-f29a495daa08", "indicator--cc2f04b6-5c7b-4414-a680-7d10a08800c2", "indicator--48b6e426-19af-4c35-8884-fe020d36969a", "indicator--ebc86a24-284b-4319-a4f6-dc564f401b9f", "indicator--fbbbe3ee-2fdf-45ec-a152-8472763af156", "indicator--410a9de3-ac68-493a-af6f-b03b1ed30119", "indicator--bed7582a-f4a7-4806-981c-f85c53740dd2", "indicator--e62c20ae-1cd9-492a-9e0d-ae3aaae0896b", "indicator--a34f7951-2aa5-4beb-ae8e-d0ebbec12a5c", "indicator--9f645000-4481-4c20-929e-76b38b666571", "indicator--752fb0fe-6d33-474c-b319-4eab5abaa2e4", "indicator--9e467ee8-753c-4e4a-87e1-046df3723148", "indicator--8cd41076-d3c1-4fdf-b666-7e9ddfb210b8", "indicator--3c726cfb-7183-4a2a-a446-778bec364df3", "indicator--e1825dde-d42b-463b-9e20-72c79c9105ea", "indicator--e97cf263-2a1a-4e84-b37e-22f8ff47b7ff", "indicator--c0207e10-3353-4773-bf5e-f83cfa10d349", "indicator--6bf0a747-961a-4c0d-a3b7-df067d326226", "indicator--34a2c728-b754-4530-a627-995b973fc920", "indicator--274cfb9f-aefa-455a-8307-4d5245e38430", "indicator--695b2832-281e-460b-8cf2-2061297aaac8", "indicator--d1e88ce4-6ca0-4b32-9f94-06437158d2cc", "indicator--a68207ba-ee66-4587-b39f-ba6091e2d5d2", "indicator--3b8073f8-b6b4-4bd1-b1a3-2d2f8161b1a5", "indicator--6f74389f-e8c7-445c-9c8e-3cb706b04251", "indicator--9091da93-2b8d-4451-b40a-191a97e4ab1c", "indicator--97018940-1958-4038-a38b-74143d1603e7", "indicator--b329ddc3-0aee-493e-b23f-318cb8096fcb", "indicator--e8a385ba-8a12-4764-9f05-f6bf6228c8cc", "indicator--379acb8e-4abc-463d-a93f-3fbe9006abae", "indicator--cad4cf8f-6466-4c7a-9610-df1569347cb5", "indicator--9b56bcf8-f6f4-4f83-9dd9-831d8e00d0b1", "indicator--562df095-6eff-4eb7-bd39-d0bc9ea3f2de", "indicator--251da683-5dc7-4496-ae74-58d8a92194b8", "indicator--93209ce2-bff5-49c8-a8cd-261370463e37", "indicator--34fea5bc-a4ec-4663-824c-42b839331cb2", "indicator--10b61c17-1c89-4f9c-9e42-fbdc3b8fe5e1", "indicator--22f883f3-e4f5-47a0-8d12-353cf2438e2c", "indicator--0007b5d9-c2bf-4660-836e-f83a0991afc3", "indicator--e46e1116-71ef-482c-9fcb-628b2b2ee230", "indicator--761dd915-65e8-4623-932d-71f6866b921e", "indicator--27308131-eca3-4a7c-b1a4-b4e2df81c005", "indicator--51585911-11be-4522-84ca-c18807efd3b7", "indicator--78d0d837-fb8a-4ba6-982d-66aa2343a89c", "indicator--4e8bc257-03f7-4f18-91ca-28b66e79687b", "indicator--bdfc7cb9-c382-4675-ac74-37cc73298db7", "indicator--fa6b14b1-3aea-44ea-b8da-98cf5bd5a1c6", "indicator--87832859-d893-4fd1-8364-5b7dec3fdae1", "indicator--2255ba5a-dc3b-4279-89e9-62dc00d420a3", "indicator--e39e0269-e8f2-4de3-b03a-06ef3544c76e", "indicator--f5f3123b-d8e0-4858-bc1f-4676215a55f1", "indicator--6754ead4-5d5e-4f39-806b-54a8399300e7", "indicator--7dbf92cf-260c-40aa-9a9f-00ebebfc0040", "indicator--4d0dd03b-2e92-448c-a957-d04bbf6024ed", "indicator--5605bcb2-547a-4d91-bc95-83f23f926b3f", "indicator--150765fe-e317-413e-b6c2-cf9d4daa03cb", "indicator--ba31b895-d6e8-4bc9-921d-7ac93d2368f4", "indicator--200f4454-b4cc-459a-b147-ee91d415f943", "indicator--7629185c-ca74-4250-9295-5c8c168e3491", "indicator--e1c3db5e-ad7b-46ad-8a51-271e9db1761f", "indicator--f30c083e-ea70-4353-8df1-d0be838d5d13", "indicator--1028a7e2-7d18-496d-9582-d3e9a988288e", "indicator--4939a7a5-33e7-439a-85f5-7c4bea231036", "indicator--e5c042d2-7787-44af-887e-87692736a460", "indicator--24ee3d8e-62a6-48d3-8a37-f612ef48a573", "indicator--7c7b5201-0e99-4486-aae8-220a474afe87", "indicator--c9effbba-3e63-4eb5-bcbf-450cfd6b35fa", "indicator--f77276a6-a594-476b-ac2e-2de72a8bb476", "indicator--d76f429c-e8e2-411f-a5f5-26501b073342", "indicator--a19d0d65-f1eb-4f55-b75c-b012afea22ec", "indicator--bc5b0e3c-0592-4ef8-875c-dc915e39686a", "indicator--cb72f2c2-9633-4184-a734-b5613656ced2", "indicator--27a1e611-daff-488a-b758-789f2c6fcf6b", "indicator--6f0ce903-366a-488a-bb13-4e437fbddeb0", "indicator--4e6c1d70-2622-4eaf-b778-e05acdfba7e4", "indicator--98a9e4f7-1f33-4277-ac35-d36f2315abd9", "indicator--f61b4aca-9872-434a-a8b5-23db9746a0c4", "indicator--68fe513d-77c8-4ed3-93a1-f04a91e93224", "indicator--8b14884d-98bd-4a58-8ebd-41de0f576229", "indicator--c79c72d2-41b9-4410-aac5-761761ac0ec2", "indicator--4407dd01-e8c8-4101-a1c7-70edc129ced6", "indicator--1a7caae1-5587-40a4-8bf5-58cd7b1c181a", "indicator--1015b2e5-4b29-4157-a158-83817894d5b5", "indicator--26f5955d-99eb-4b5f-bcba-61b76889ef04", "indicator--ded3c6ca-25bd-4021-b0b8-64acd2833b8a", "indicator--e9a3dbe3-414d-4994-99ac-3336a09140ee", "indicator--6452e5fe-d3cb-4980-bd20-2e9eae81329a", "indicator--a56528ce-c2a8-468d-8af8-78cb5d9f9f04", "indicator--4264c2e0-4ef1-4205-8b5d-127796b7dbe2", "indicator--9f446f6d-9c3a-4c4c-925d-6dc7b22015d3", "indicator--1f1d5502-cf44-48ba-83d3-e228d871cc86", "indicator--00888735-5e93-4c7d-bd41-44a23616a274", "indicator--0073bbf1-83f7-490c-880d-1f1bb2177ddd", "indicator--f2155a0b-1ae1-4b95-a5cc-6b42755cf853", "indicator--b4d5062f-4d17-46eb-b0e7-a15a16ea3cf8", "indicator--68620d6c-3d67-405f-9d8c-9db59d3b40af", "indicator--0e6f9e68-d3a6-45f0-88f1-2194cd398047", "indicator--f580a1a6-fc3c-441e-94c1-9726bae37232", "indicator--a59a9da5-75c0-4e94-8f7f-098a8c434ba2", "indicator--c9a047e7-1500-4cfa-8d9c-3bc321063823", "indicator--ea435f53-1c4b-4a29-a1d0-229fcddddbab", "indicator--169126ba-6b89-4508-b802-f755b262f78d", "indicator--4ce2077d-c5eb-4f48-80dd-19175f1240df", "indicator--ae64c1ec-0d98-4521-8af9-1557b52e299e", "indicator--ae539e1b-5c98-43bf-aa65-164110b2a25c", "indicator--076ec1c3-8178-4f5f-b4f2-49cb16777345", "indicator--a7e04ca4-64eb-48d0-9e28-beb48a627709", "indicator--6e81376e-b010-4dc4-84f8-06f8a73d052e", "indicator--b9844b4f-da8e-4d92-9853-3f47cdfae75c", "indicator--029e559e-e58b-4e85-bb7c-0b05e7e97657", "indicator--10267c1c-174d-4f5b-8b69-ec3a33a10d38", "indicator--4e00e903-9455-41c6-91c5-38471bd10dc6", "indicator--70c29132-9f77-48e9-9116-bb3973251112", "indicator--8d8674ea-ff24-4083-ad40-220f91a90544", "indicator--72d7ac46-2ab6-4b96-b652-e9b45287db46", "indicator--e346a673-26a3-4eb4-8917-b256ce09535a", "indicator--2cefc10f-ea8f-4b4a-99cb-2272f42dbb93", "indicator--dede5f43-c9cc-49aa-9b95-8dea43b7c03f", "indicator--756e77c9-ab7e-4409-85d3-9dec61ddd5c4", "indicator--bc1b65e2-8932-407d-b6f2-1343be7acfd6", "indicator--fde7a423-69b3-4fab-8d0d-0ae215d86d58", "indicator--a2f60cd4-6b16-49ec-966a-57a0464892fa", "indicator--7d7e678e-9b75-45a5-a81e-c9ce46ac7ce1", "indicator--51e46a38-19b9-420f-831d-41468b3c54cf", "indicator--44a79cde-5d2b-4bce-abfb-c4b9d6245a69", "indicator--3c8cfb77-8ac7-493d-abb3-22b56a23dc12", "indicator--145ed30a-ea41-4052-bf72-a3b55ddddfd6", "indicator--836ff774-36ff-4149-9e9a-4fe0f0f779b4", "indicator--47a1d5f2-716c-48a1-aaa3-43e608177fbf", "indicator--f955d365-9516-4de8-b295-4c861f79f00a", "indicator--f8a62f48-ec78-499e-9edf-c429787ea39f", "indicator--33bf5b64-e7a5-42dc-8dc5-759c4d5c5913", "indicator--9169ed5c-cf33-417d-bd5a-0afd8209506d", "indicator--a9d98dfd-0960-4651-ba84-c6ffe1dd27b1", "indicator--3a558fee-4694-445f-9a55-184ec17e5202", "indicator--0acaa947-a88c-4aa1-b19b-00f90609a055", "indicator--16003335-95f3-41bb-a8cb-89e4dfc697d1", "indicator--dfdfb702-9296-42a6-baa9-de0250723ef9", "indicator--1266a90f-68fa-4652-b630-b9b76c6d532f", "indicator--9d262dbd-55c2-495e-bf9a-fb94bd4a9ac6", "indicator--91947fa7-8fb0-48ac-861f-7dd2a8266e1c", "indicator--a6d80280-85ef-4567-be87-3f1e77d91cf1", "indicator--df8978a3-81c0-4591-b3e2-4d9dfbe4d962", "indicator--73299771-6aa3-4905-bc15-cda11fbcf848", "indicator--6d84c8a8-92ef-4cf4-9bcd-ced563170137", "indicator--0013a302-9135-4e0d-b379-97e25f8bff36", "indicator--be90e1f2-4f72-4af4-a4fb-f9e124088805", "indicator--2f7982ba-c538-40dc-b6aa-6ad37c129ec5", "indicator--f75cf3a5-ad02-4621-93b0-3a3452b0961d", "indicator--623a0212-95e1-498b-a876-fdc38de6261a", "indicator--9b8fc6ef-aa94-4aef-81e5-665b14fef310", "indicator--b57d98a5-f1a4-4bba-8d0a-f70f1aaee76c", "indicator--257eb7d5-b04e-4df0-8dbc-81307bee3e06", "indicator--c9010576-f764-4b47-9c42-6fc3edbd7c13", "indicator--380d71ed-ef80-4e44-b6d4-8ab35fac396a", "indicator--c7156f29-e611-4a2d-b600-ea4d64ef4738", "indicator--be73b19c-b741-4012-a9f6-0916adb35a5d", "indicator--0497ed3e-344f-4087-b705-953e8de884c0", "indicator--cfaf7f13-3d7e-4174-aa25-f1d8eeef9cba", "indicator--f3cbd94a-13e1-4595-8a06-fe97761f390a", "indicator--8ac3b6a6-2aba-4388-a880-7e61552d3dcf", "indicator--5ec548d1-545c-4821-ac3d-bcef4e489391", "indicator--60e7a418-e3ab-4f1a-9a55-71cfb5efc8ff", "indicator--92614b8e-c786-4c7e-8076-d4a0fb17aab0", "indicator--305d8662-99e2-4d63-ba69-abc50f2593e7", "indicator--6d5458e8-5f1e-463e-8e17-ffaf7647d14d", "indicator--15ecbbf1-7f31-4f7e-95f4-2e75775c2424", "indicator--ccd527f4-3e72-4c94-b050-fc9c42a80a00", "indicator--e4877ef5-df4d-449b-bc57-f2aefd5b3061", "indicator--2b7b50ad-8aa7-4791-98e0-296ab362d4ee", "indicator--528107d3-ab3c-48d3-95cb-c1a8ba115399", "indicator--f666f85e-30d4-4a2f-8e91-9d4a5ff7f288", "indicator--900a3c98-01a4-4dfd-a7e5-cebe8cf01a54", "indicator--8bbb07e0-64ec-4613-9d7c-7e53295370b4", "indicator--4bfab487-2cb3-430a-8979-20c0699edb16", "indicator--a814bc03-2404-48b7-b2a4-7b3f1e5aacd5", "indicator--3337552b-5e63-48c8-9232-ea546eb26404", "indicator--66181ee7-c149-48e4-a57e-5be44a9b7cb1", "indicator--6f8da610-bb95-4b03-bf6b-8a0ec23a22b4", "indicator--862b4d3e-d982-4281-92ed-9f697787efbf", "indicator--904784a9-fa8c-4144-9119-0de0660770fc", "indicator--157625a4-4321-49f0-bca7-ea92852894fe", "indicator--a4695dff-ae41-4d1f-9b68-17502fecfc51", "indicator--4306a71d-6c59-4cf7-8caf-8532a4773daa", "indicator--3b2f06d0-485f-4870-b1f5-7c416d8b67bc", "indicator--aa2f35aa-ae24-4c0f-b808-4a9ad0082b49", "indicator--be960804-b437-4bf1-9540-f121dd5ace99", "indicator--9390170a-09b7-43c2-a132-b0f165e04849", "indicator--a8baec51-ee2a-4521-a31d-4b03036d697a", "indicator--f23ffe41-40d2-4676-8d7f-a9f86e880fc3", "indicator--f61aa81d-30d7-4725-abb4-74a86990efb2", "indicator--3c321365-7a7a-4f63-bd7e-8b1648353f60", "indicator--89438140-0f7f-4264-a450-30d9eb3ecd74", "indicator--e41186ac-4301-4d6e-98a3-609cb98129fa", "indicator--c3277373-af00-4be1-bac2-61461a7bf4ab", "indicator--fdb0f700-39ed-40d4-bfba-5b2608f5471e", "indicator--30fc877d-8b04-4448-948b-f41e84a8e8ed", "indicator--5229d0d1-7489-40ec-a64b-84f9de8930b6", "indicator--117d44e6-7456-46ee-a3af-81872f0536f2", "indicator--09c27057-18fa-4e93-a561-14dfaf763cfd", "indicator--df6afc33-acaf-4976-9a40-906a99e25bc4", "indicator--e9bbdcab-3fbf-4f00-b915-ed59850684ac", "indicator--08de251a-7669-466f-86f8-44611ead803f", "indicator--16d62e6e-7806-40cb-9dde-0ebf160ee49a", "indicator--5c6ffe3b-20be-43c8-b469-cc4d8bb6f45a", "indicator--b81a6b8e-6627-46b0-9ae3-b7ef39ad7483", "indicator--aeaf708a-30e6-4b7a-a698-1fd797b72d14", "indicator--69e1cb29-713b-41c8-ab29-b8f3bed59714", "indicator--1d23bb26-b257-4dd8-a669-3b31f025aa00", "indicator--91282735-ad76-4251-a4b1-280ef229eacc", "indicator--08c657d4-59fe-4358-a893-704fe702c606", "indicator--2c92033b-de3e-4a4f-aa76-c2f396358222", "indicator--d0ad2908-680d-462a-beb8-fb45e3255c65", "indicator--7e8d22ae-c887-4cf1-b50c-e542d29cfd5b", "indicator--8c2d2bef-c58f-448b-9f7f-6eb26e7b7a47", "indicator--e822cabb-e8af-427d-9e77-46286929bfb4", "indicator--93965874-0e7d-4d0a-9491-447c977fbc55", "indicator--6224a8b4-f531-421f-92db-e626d942bc52", "indicator--cc62283c-e6fb-42a9-b7e8-bfd44ca86183", "indicator--d593e5a0-c92e-4571-aff6-109dfc1ea574", "indicator--7faff005-67b5-4a55-b163-c23ae1eaaeb6", "indicator--92536ab3-4a6c-410f-b0f3-3a29e1f15a8e", "indicator--d820ab3a-7e12-427f-bb1a-855d5fa4a01e", "indicator--4e2a410e-9f91-44a9-b14a-3fbf8ef02c9a", "indicator--4c13ed74-bd58-435b-afea-2d2414822722", "indicator--f503912a-53b7-47e9-8eca-2035ffeb5a43", "indicator--0b492396-57e6-4199-84a5-5ccf600beacd", "indicator--00294759-3343-4f85-9a99-158368f7efbb", "indicator--7bab4bc3-c60c-4e37-9c3b-5cbe8e2f1be3", "indicator--cfd7f5f2-cdb4-4bee-ada7-ce789a64dda8", "indicator--691c3fee-bdef-4fe5-b3f8-59c1e92defec", "indicator--a9935d2f-1ffd-4d44-81d8-b3844e7bf92c", "indicator--b98751e2-8af3-40ad-a6fe-f5e709c78ab1", "indicator--6b2d19ef-2f56-45c7-9ecf-64d9ac5435f1", "indicator--b8b59c72-7e9b-4e98-886f-3fb6190308eb", "indicator--8d1f3623-d678-4583-9503-08325ad735d1", "indicator--edd294e5-d4f3-4a03-968e-a11ca26c1384", "indicator--edeccc7c-08a8-4929-b400-7749db46c7b4", "indicator--535d6d38-4c2d-4e3a-813e-699ce307852c", "indicator--f646828e-7f8b-4019-88d2-8a1428bf48d1", "indicator--c5115bbf-d746-42ec-8846-8e706393f2fe", "indicator--1600d189-8f67-45f1-b80f-ea58c9b69385", "indicator--d7c68ca6-ced1-42d7-8575-6ee4e70eff7e", "indicator--0f20722b-5879-4bbc-b85b-7c5da3da1481", "indicator--e0ee789b-03fe-4dd9-93c3-684faf56cdde", "indicator--32e1d03d-4c08-4227-84ce-92a4f65e0125", "indicator--0b796b35-9081-4fe1-8c85-9286482cd280", "indicator--dbdacf28-cf43-4f49-b44a-857ae5b5fe37", "indicator--b4edc93a-84f5-4bbc-a042-1530940c04f8", "indicator--c3757836-a708-46fc-afd7-224d9dea1b5c", "indicator--1943af44-38ab-4783-92d7-02bac7d03ed7", "indicator--e6c71757-de27-47ab-b935-9b63a9ef15d2", "indicator--49df29cd-1a58-4b45-8846-35a4779b8971", "indicator--3b54d354-efac-4292-8236-13ef22616aa0", "indicator--d36c7a48-6dec-42d2-88f7-d26b59bfd39d", "indicator--eca2f75c-55e1-401f-a096-f707a635962d", "indicator--4bcbc2d9-a6b2-4ee7-8c69-419628940a3c", "indicator--93020823-ad7f-4a49-bae6-0dd0efc45117", "indicator--135ab763-3c8d-432b-9656-610c2c04209a", "indicator--3283bb20-2e81-4c71-9789-8d05144b1ab0", "indicator--f02afc59-d731-454b-8a97-a37234656a52", "indicator--2411a015-00a8-46f1-b38b-085cd7281b32", "indicator--e2c92148-8647-405b-b4d9-32a86ef0ceb6", "indicator--5ca3cd01-9a9e-438f-be1d-1f2a0ff791aa", "indicator--701a42ae-303a-4f73-a7d0-00323846dc5c", "indicator--6bdbf0da-e879-4ae4-863f-6a61de54940e", "indicator--98e24d92-9a45-4fdc-8423-908ed967fe28", "indicator--b6a65651-058e-48d4-8e06-08d9d8602b2d", "indicator--b7501de5-71d8-49bb-a3f7-609f95c7a2e9", "indicator--e77fcb8d-9a84-4ebc-b81d-3d485de253c2", "indicator--1ca64124-a9b4-4d50-bd59-6a6b912d8f21", "indicator--99d47798-73a8-407d-a346-f68e73a3b281", "indicator--bfb9f430-8680-4adc-8896-a3799d69207d", "indicator--5193fa35-1e9d-4ae2-9301-89d4df451860", "indicator--4ee0a3a0-919e-4a8a-b807-305d660bc5e9", "indicator--18987b88-d696-461d-a13b-f9d64be275f4", "indicator--3cdb64b8-8a06-4e16-9b1f-cd139eb8b64a", "indicator--012d55ad-12bc-412c-b4f2-95e07f70844b", "indicator--d21eba49-e3b9-4870-853c-60059d7bb901", "indicator--0f28978f-77ae-48bd-9778-47b389f3c069", "indicator--5fd9ab30-d928-441e-83a7-6ed3628e8a9e", "indicator--975713f5-9cc4-4472-87df-e69ebdf86867", "indicator--815902c0-fe8c-408b-a71e-1b327d8f241d", "indicator--dccbad26-5787-47f6-a2d3-8dd1061f5653", "indicator--aeb28250-0cfa-460e-a945-8122f6d8ff16", "indicator--74bc2848-0e06-4c3d-8acd-20f6c41de4e6", "indicator--a1c79a76-7a65-4861-b3e7-e5ec1c02e553", "indicator--0200ef7d-8fff-4d2a-8753-8ba5ac613f38", "indicator--96dbdb78-814a-491d-975a-2732eee61ee4", "indicator--ef8cc1a2-19a1-465e-b920-a2b427754187", "indicator--f31bf682-8ad1-49d5-8ea0-47fbae397672", "indicator--42fe4b2b-8946-466e-816b-67f9d4f01a0e", "indicator--7d04ad0e-4404-436a-b40c-bcf901b39672", "indicator--cd97d5fc-6b94-4960-a0bb-3d8a351e5550", "indicator--5fa7a7d9-1476-44f9-acf5-0a91597b808b", "indicator--ad36609e-bbe0-45f8-b8a6-9a37f819fc3f", "indicator--cd6e328f-8844-42e0-918f-b3fb77e96729", "indicator--4f69a13f-3385-40af-8382-5fef1e1c71be", "indicator--eeadb3d6-3325-4a92-8a64-b8c040a1b57f", "indicator--a76197a1-1cfa-46fb-a145-f2e9bbcf9ffc", "indicator--47e76c45-fed9-4d9a-9246-a647b22ea7cf", "indicator--b727fbd1-3f57-41df-a7d4-f759318603f2", "indicator--270e438a-cfb3-49d5-b7af-2da2d3bcf316", "indicator--69708fdb-4ab1-48f1-b43d-8d2673b9a026", "indicator--3987e674-8928-4b6c-9168-498f7c3cc9d7", "indicator--3d014d46-891d-4e1f-8228-ffcb97b4163e", "indicator--b9a06130-4d01-423a-a7b4-972e38dadac6", "indicator--2eefb9dc-e62f-4d1c-ba07-cf6ff2c5fe33", "indicator--2d11ad6d-de14-4a1f-a36c-7e1847f2d2b6", "indicator--40488a84-e8f3-406e-b35b-3f0ab48c1c42", "indicator--dba1e8f3-4e17-4c8a-82b2-a939f61bdeb8", "indicator--7d23097a-a0d4-4229-a3b3-63bbdc92c52c", "indicator--5c53a6b0-a090-45e1-b94d-b8b427b8526a", "indicator--d5a990df-f687-4802-b248-7a0ed2068595", "indicator--0fc4d6df-c7f0-4678-b6e8-8e88e92db065", "indicator--49337f0d-cbde-45e2-a837-c9d1f12a39c3", "indicator--fd37e8b9-3a56-45d3-a3dc-72bb0e79f259", "indicator--3997cd3e-bbd6-48bd-971f-f065e1a0e161", "indicator--6600bfbf-5899-4534-ba0b-4489e3839951", "indicator--6143d921-9a58-44d3-80ac-d533a5456b69", "indicator--29b49bd7-b56f-4622-a04d-0aa9035f993f", "indicator--50d50fde-62d1-42e2-af7b-56500afdccfe", "indicator--f6d21b44-bb55-4054-90eb-2e04d4a27840", "indicator--16906aed-bba1-4d5a-bbbb-e1e77431a31a", "indicator--fa96ff0a-45c6-4f1f-bc29-f2d92752d1f4", "indicator--0931da7c-2632-4d4a-8081-b3469a0f9f97", "indicator--57d92b84-533d-4dd6-bec9-e14b6ebb25ce", "indicator--76879c4c-2cff-416c-9a52-466ad1063363", "indicator--21f04e0f-54c8-4485-aaa4-e01b46f99279", "indicator--e4e12e71-9017-4e0d-9221-9b26e4e88a55", "indicator--a9499499-479e-490e-93e9-02cfa18bc32b", "indicator--701e288c-3748-4adc-bab4-639f9621f8b8", "indicator--931d31f1-5bad-4afd-a7e0-13f98d4bfa03", "indicator--6d52dd43-078b-4301-8bdc-05590da20c8a", "indicator--5322c59b-c147-4a5c-bd13-f4c097f5856f", "indicator--117b21f5-594a-4fe9-a21f-d725024bfc48", "indicator--211af721-9ecb-4433-a673-3923bd6ae11b", "indicator--eeb577ae-fa43-4ca5-bb37-db2a83c7ff91", "indicator--a60bf644-169e-45f7-88be-4a2e1c53ee84", "indicator--473ac75a-b7ab-40d1-a40b-59937e310bc1", "indicator--66257b16-2bc9-4173-835b-d646b07aafe7", "indicator--40754d30-3e65-4573-8580-deda2c8a09b0", "indicator--f716f8eb-41a0-4e0e-898b-7e10c2d7ff21", "indicator--a7965f71-26a3-4370-a0d0-f499c00602c2", "indicator--66e37eb4-b907-4f1c-b36e-75d82230a8c0", "indicator--b12de276-5d89-479f-9f93-16531535eb34", "indicator--6e767b59-3901-4b49-a796-fb61eae7e42c", "indicator--7b93c950-5a24-48f0-ae79-5f1811ad5a75", "indicator--a5e61a81-39c5-4bb6-8826-9faa23ce7b1a", "indicator--e26ed995-39b9-4210-b82d-702b46546a7a", "indicator--068661d6-b92e-4f7d-b5e8-75e396ef4ea5", "indicator--8565fe0b-155c-4eaf-84c4-24a4a5f71071", "indicator--526e892b-c50e-419a-ad2b-9f806a85b6e7", "indicator--d65de826-5282-4f5d-a28c-3d17d8ce8587", "indicator--c2412b70-c92e-491d-9509-4e91b6016fa5", "indicator--9bf2b9ca-a3ce-4e84-a82b-fb336b7ac633", "indicator--230368fc-15bb-421e-8ec5-dc0a0b0342da", "indicator--e1eaf936-687a-4858-aebf-1af94ad7af2d", "indicator--7435ada0-3248-47f1-82c2-baaf3b3df659", "indicator--24c7d02a-bba2-46e5-b6ba-c9f3a42c474d", "indicator--6289b35b-868f-479f-ad77-59936c5c3920", "indicator--a3b14968-6dc4-4e0c-927f-6665eca87267", "indicator--5f670b2e-4d44-4091-baf4-b36fc3772ba3", "indicator--6c38bba0-58de-4317-9573-f8e0dc4b023b", "indicator--a3ee41b1-638b-4392-b422-cbbb59930431", "indicator--b5939f5d-9c52-4582-ab4b-1f76d9b25fb5", "indicator--7aa10ff0-f0df-4a89-abb4-ab9768814b7f", "indicator--136919e2-ffc4-41ff-8af8-40e051fedea9", "indicator--187ad7bc-ce92-4cfd-9049-2ffc9cb847f4", "indicator--0fd73a00-4897-4963-b411-dcfdfbe78430", "indicator--f6bdfba8-410a-4a88-ad53-950ef5278756", "indicator--518b3c7a-e671-49a0-a0a9-9229ef5040d3", "indicator--bccae2b0-9de2-4e19-81ce-bec1b82e1cb2", "indicator--fadeb6ed-435e-49b1-89c3-7d60af39b059", "indicator--0ef97b8a-8f84-4f75-8ccf-6a8e09f7bdd6", "indicator--5c788e5e-3b99-4905-96a0-00f3e8d4cc48", "indicator--f78e6ebb-82cb-4aef-93e7-c7575662a23c", "indicator--e7d5d6e4-910e-4d1b-a90f-07d2893a993f", "indicator--1c5107ba-606e-47ae-8551-b7ff359b9586", "indicator--d23e1150-b496-47cf-8a63-65264cc1f19c", "indicator--2928a19c-e1b8-4958-8672-00c6c8c446e1", "indicator--0434a64e-e29e-4cdc-999d-9456b87ef69a", "indicator--1d44d54c-ac38-49f2-aa20-b38644a19e8d", "indicator--b6a0bc20-1cbb-461f-b92e-d3c4fc7d55a3", "indicator--5ca6d6ab-ad09-4989-927d-dc95b46a2a62", "indicator--2a50d7f7-9dfc-4afc-a1d8-91a785260161", "indicator--b1faca48-db57-4caf-856a-88d05e6352ed", "indicator--8c442947-44d0-4c37-81a9-0ef98f4a3246", "indicator--8deaf001-f689-435e-9554-153e1ae8a291", "indicator--ec318945-b07f-46f6-8af5-7a2f494a4531", "indicator--5bfdc56b-c5e5-4e37-a780-e9c0864ab54f", "indicator--35d4532f-1f88-4894-a169-5cc5105e05a6", "indicator--76c97448-fe73-4636-bc58-6d1eb6e69f52", "indicator--166a1cfd-21ca-4d36-a476-1477d0c81c15", "indicator--4539a6c2-909f-4c59-9829-369a7f435d94", "indicator--0c2886c6-4fa0-4ece-9756-416280b11993", "indicator--00642f62-38f9-4ac9-b23b-8989fdf1c400", "indicator--562f4e38-f32c-4359-9788-35dfa9f71296", "indicator--277b4d87-ca40-4be1-8fd0-566adbe3c318", "indicator--22446ad0-9139-4626-ae95-229dd7c33639", "indicator--ab644e59-ccf0-4ef9-9ae0-082783f6a6a4", "indicator--7934f153-b4d4-47e5-85cf-748fe6d9eccc", "indicator--f591f42c-4d5f-4e1c-a90f-0ef4a94257c4", "indicator--e44fe467-399a-44ce-80ab-3a6d68123441", "indicator--482ad1df-d762-4f34-84d7-935569e135e9", "indicator--047f044e-bb85-487e-b47e-c00d794f44b5", "indicator--348b592e-9ea1-4607-b501-d898779c1deb", "indicator--c29dbf23-915d-49da-8a51-e6179c6d0fdd", "indicator--233ad42d-886e-4aac-966e-0596b56df4fe", "indicator--0cdddfb0-2985-4eba-afb8-0e3bad38afec", "indicator--2d9301c7-3d4e-4dac-9df3-9318ce4cca0c", "indicator--e8f1151f-0242-4c94-8b42-eaea506aeefb", "indicator--c75a76d4-15e2-42de-b0ac-18f98e33fb6e", "indicator--77266f05-492b-429b-9d3d-41aec857625e", "indicator--44ab43bb-fa74-4b14-aa85-fb8404e8db18", "indicator--05c80c0c-f969-49e2-800a-9c379d7b8068", "indicator--dd6f2b03-3351-4aee-a710-a18516003a0e", "indicator--f1703ead-4dd0-4f2d-bbd5-175bef40632d", "indicator--83936540-e277-470c-8e1e-b43f751750a8", "indicator--f9b78f8f-ee65-4d1d-a712-da91eb5f48ab", "indicator--a529a0e1-a0f6-4e20-9691-52fc3b8f81e1", "indicator--43f60558-8623-4494-8186-d9bf1989944f", "indicator--e74cafef-d08c-4d90-82c4-3ba3e671b319", "indicator--3df217ea-8280-4c9a-a0ff-b130cfa9fa9b", "indicator--021747ca-20ad-45bf-9ef0-dcb4eeee0754", "indicator--35833a11-3d89-4af7-bd0c-18f0a5c64b68", "indicator--6778dd3f-177f-4300-b580-12de0c7adab8", "indicator--e81891d2-5872-43e2-8294-e47973bec695", "indicator--903856ed-de72-41df-9c51-97e7b856afef", "indicator--f5109ec0-d3ef-49f5-811c-f516610b0043", "indicator--38f37dd4-3a6f-45c0-9d86-5378cd867bd5", "indicator--da51349b-79bc-48f1-bce1-f55f6cac98c9", "indicator--214a1a8d-5515-4761-ba8c-378afd1fa903", "indicator--818a344d-2681-43a6-8b5d-d2df668835c3", "indicator--9c6b7ce2-4524-403b-b9c2-13b8d6c9b1d2", "indicator--4118d203-f63f-403c-8298-48349bd8fcec", "indicator--f0f96355-91c0-4f69-8033-6b466883b27e", "indicator--d6087b1a-2051-4583-9a1c-5fffabba872a", "indicator--c2145442-5a5a-434b-903e-45d20c9e0d36", "indicator--110ba7c7-b68a-4407-b05c-ffe7e09c5627", "indicator--745bb7ab-bc41-4dc9-aca2-92147012592d", "indicator--97e40d45-82a5-4233-8f17-9bbfd73981b6", "indicator--a0cce8db-e38c-4bc4-8ebd-6de1c3d1f14d", "indicator--ba48badd-3190-41d8-b8d8-381302a5e0c1", "indicator--4654bf31-ad6a-4fea-8c0d-9ce20e1c1607", "indicator--1901eb1d-2368-4017-8a75-20d6ab5da9b7", "indicator--6745ff2b-e604-4f5a-b678-56c27c299f3a", "indicator--377e7921-7e5a-4424-9a76-8b7ac494f4f7", "indicator--2ba08ca1-0429-4bfc-baf9-aba8830f9ee9", "indicator--388dd31c-0d34-499f-bdba-31b846925535", "indicator--b2e59bb6-38ed-44e2-8762-61bf8cbd4525", "indicator--9ca0a1dd-519d-499a-a4a9-c4b354373aa3", "indicator--2ab00890-212c-49e1-a8d2-fe13ba5f7a0f", "indicator--e0347616-87ed-44c6-b473-1d21996361dd", "indicator--933e7729-e5f5-4f2a-bdea-3fde25163670", "indicator--20c9b83f-cb53-4770-ab64-306ffb97eae6", "indicator--a70e87b4-c47d-4944-a737-b747c7816089", "indicator--db685b97-5b5b-42d4-bf6f-6cde43e5c01a", "indicator--e6c91138-a944-4429-bbbe-fa4960d2380f", "indicator--e6d6da13-6564-46ad-8cf0-ecd927879f7e", "indicator--a95382f1-1f4e-498c-a4ef-bfdcccb1f7d0", "indicator--5cd6181b-9d53-4e6c-90b4-450ddce7c42c", "indicator--03a1a403-bfae-4861-b25b-864c046a2084", "indicator--ac5ba68a-9b4b-4e0c-8098-b34f57082a68", "indicator--50c2e899-82de-4ab2-8a9a-5d750b2cd6ad", "indicator--3de8ca04-dc35-4e86-b12f-a9c5254d846f", "indicator--b58d2372-1326-43ac-8b3a-9975c2594f9f", "indicator--d0368a71-3b65-45a1-abc8-0f134f9ec3f8", "indicator--ab67ea4a-751d-4bad-9661-bb9aa3462c3a", "indicator--13af0b97-8a82-4195-bacb-4fe66f52756e", "indicator--965217c3-4ee4-4528-92cc-20e396e3c684", "indicator--2b53fa8c-559f-4e74-bb55-20c4714baaeb", "indicator--61c90925-fdd3-4932-83e1-7e23a4ba5d73", "indicator--e3976382-cc3c-472b-aba5-e582e92d4b5c", "indicator--328e4f82-9e48-42a0-9a3e-d390a4f876e4", "indicator--a7719359-fc09-489a-81ee-713c05469393", "indicator--f13d1291-4d2d-42c4-b340-e02e9c30b668", "indicator--b0de84f8-e8ca-4a96-9c25-6ddc810a281c", "indicator--09d50c40-eee6-4c76-b821-4e3e582012f2", "indicator--cd6d6c41-bd20-492a-8645-04200dd141ed", "indicator--ee097a55-41a9-4e4d-ad43-c38c87b162f8", "indicator--c0080e64-1e40-43b7-bf33-06dfbe3ff297", "indicator--2ce097c2-7a9d-43ae-b5ed-c2db842bf43b", "indicator--93f4bad9-6ccd-4996-ad1b-e740602c6c32", "indicator--55119499-d4b1-4561-b27e-bfe25720be0b", "indicator--54658e5a-b07a-40fa-8abd-e3a7b9910c80", "indicator--a01c79d3-48f2-43a6-872b-f08752bf9df6", "indicator--89a39e7f-7df2-43bf-9648-ddb092171b42", "indicator--df97c0d6-875c-45b8-9f96-f55a0ffb581a", "indicator--e3e0ef7e-4c78-415a-860d-0dd6c9323ab9", "indicator--53619263-3977-4dfb-894c-a492173ab33d", "indicator--9a6f02de-0b0a-4a35-be02-110b051f723d", "indicator--a4fed483-1715-409d-b40f-8cf334ba7600", "indicator--463632e0-f7ca-4133-9178-21d71d96e636", "indicator--5b4e7ed3-f3cd-4c47-82bb-3691c35c4f57", "indicator--1fd97702-f072-4a2a-a833-4941078cff39", "indicator--400c3fbd-7dfd-4a13-9340-d3bc4fb94911", "indicator--aff78721-5ba2-42e2-95b8-d4273fda3dac", "indicator--5c823c67-0ff5-42e7-86ad-a6cc92d23821", "indicator--30e1089e-66a1-4601-9535-8683bba76314", "indicator--b63fafb8-76b1-4937-bf26-01644260263c", "indicator--f27bb7a5-741d-40d2-938e-ba1dfc9e9bda", "indicator--cde80a58-6e9f-4209-9f84-ac885553b5d8", "indicator--95ef2700-019b-4901-8415-e397f8945e9f", "indicator--010d4674-79a1-497f-ac7c-0dcc7dde6a42", "indicator--8004e8a1-ccae-4e42-af9c-cbaf3cd51a43", "indicator--64b49b15-4819-442a-840d-2081b05d23d7", "indicator--0146e437-1389-40a6-abac-032c673ccefa", "indicator--db1e3a09-68b6-4e1f-aeb5-85e922ece347", "indicator--06c2cb05-ebed-4947-8df1-69fef414c1e0", "indicator--f4bca409-113e-4451-afe4-bdcbbae40aeb", "indicator--ff23c2f6-b992-498c-a08b-1046528624fd", "indicator--a1da4d75-0f9e-44ac-a8ab-05c4a9c99677", "indicator--1fba0499-79a8-4a29-826c-69f226d0b2c5", "indicator--83e49542-0e63-42a5-9e6d-950bdfafc892", "indicator--8ae11cb2-48ea-46d7-b56a-c1d21ce5c1c8", "indicator--aa3202d7-65d1-48b4-8685-34bff9ca0552", "indicator--028ada87-0435-4208-9f87-f2681b1f50a7", "indicator--ce26c9a2-c5f7-4a75-9e91-5f2ce28ac901", "indicator--7cb5491e-d8ba-4973-ab14-7b59b8def73c", "indicator--fca54d88-0146-4f00-8394-9552b1da09fe", "indicator--ba1ab045-e1d1-46e7-87d6-3d052919400b", "indicator--910fcb94-7d37-4be6-af41-c23fec880896", "indicator--dfefddf5-95ac-4bd6-bf35-bd05bd80922c", "indicator--0c89ae91-7245-4975-8753-64b78412fbbc", "indicator--43dddf2d-5480-4bd6-83e5-477ada942349", "indicator--c1b7a9c2-5858-4b66-b12a-69d8baf213e1", "indicator--0538322e-98fa-49f0-999f-b1ed3f464ef1", "indicator--c2eee2d1-2c62-4c39-948b-257d9c2c63ac", "indicator--f319e741-230a-48c5-9a6e-6bff427f3ec6", "indicator--7af8b04f-1eb7-48f1-b2af-1a0030213670", "indicator--12e00b9e-e0ef-41a0-bce6-ac5c2d7bce45", "indicator--f2d4c619-90db-4a05-a822-d8e471ae38f5", "indicator--1e3e77c8-a740-419d-a402-29a937dedab7", "indicator--2e6b0696-0043-44d6-b150-cb3de0e41bf6", "indicator--b9d5d684-d4ae-4a6e-bc9b-7b811e9dea0a", "indicator--17bdb6d0-7155-47b5-ada2-24d33735218c", "indicator--fd937aa7-10a3-4314-bb67-17587af09058", "indicator--24bf460e-00eb-41c6-bd3f-e3633c013440", "indicator--d63ab729-b2a6-42a9-b646-1a3f47358b72", "indicator--81098296-caac-4b22-aeb2-d556b335cc85", "indicator--bde21334-750a-4dae-802b-69dfff261349", "indicator--08ad0737-a962-4acd-bc0b-5aefcab36cfc", "indicator--31c37f16-c9b7-449e-8018-f56981a6a5cf", "indicator--57fadfcf-9126-4067-972b-a554bd9d77ba", "indicator--a086279b-c527-48e2-ba72-f4e64309521f", "indicator--cc2bee88-ae0a-4a7e-9fde-707e46934498", "indicator--e2d5d8ba-bca6-4649-8a92-d2c4f913edf6", "indicator--bad63db2-513b-4efc-9917-eeede6eea216", "indicator--e93b10d7-7172-437f-9301-8578f39e1dc5", "indicator--9a01151c-5046-4be9-b36f-cd5030c285ae", "indicator--8327ac9b-b36c-4cde-b79d-92cfbca180cd", "indicator--a4930883-07a6-4b68-8b30-4e668fa55d6e", "indicator--9a1f1a43-c13e-45c2-8448-edad6d783208", "indicator--1e2f17b5-1260-41e9-9085-229dd8dab716", "indicator--9b39763f-0082-4922-b163-2f51e5bf7f48", "indicator--5d52fbbb-0dce-466a-bbc1-92e0f7162704", "indicator--463ead0a-73a3-4b48-80f4-04acd5d765b4", "indicator--adc76e01-902e-49fc-8e41-11d77a57fed5", "indicator--2f5a418e-01be-4018-8187-bb166f5089b2", "indicator--abd15d67-38fd-4305-9033-e9ba7113fcf2", "indicator--a350b6f3-e0d6-4473-b0ea-adcc1c72a262", "indicator--8340c74e-bcee-4532-bff4-e3760227f88e", "indicator--7354960d-723a-42aa-b739-63fe247fa5d1", "indicator--1498acb4-5b78-4e29-9dc9-85af45b27657", "indicator--809b9165-b3bc-4484-8a37-d8accb1b4c00", "indicator--89b8a0e7-8100-469d-b72e-fad215fe61c5", "indicator--2c130190-bde9-483a-87c2-2bc009137926", "indicator--34b6c404-6a95-4d82-90db-68f4e3f0b943", "indicator--15ac2319-0d30-4f7b-b363-e93e5418bc55", "indicator--833945ac-0bc9-4b34-88a3-48e0b0699e91", "indicator--92c50855-4233-4a89-b44f-0066019cc972", "indicator--a81bb7ea-9463-41d5-b24a-c0fe02e1178f", "indicator--3a8e23a9-0623-400d-8ef5-1ad78a494f48", "indicator--d01aa74e-5703-4f8e-95d6-8310537d5ca3", "indicator--9dc2e7aa-21d1-4247-b66f-f85752b5d082", "indicator--b7e6556b-3f46-4925-a1d7-b57b42e87edf", "indicator--90dadb8e-93e4-4367-8a27-b42fefcbc030", "indicator--874b56f9-2f46-4b5a-bf06-60b0e1c4278e", "indicator--cd33bdaf-d795-475f-8d4b-fae4d9d7a22b", "indicator--99a13969-7a9d-4bae-9dbd-811cf3eb73a4", "indicator--80f6550f-46b0-479b-80d8-7d2d0cb55106", "indicator--1fe92832-508d-4069-841e-fe0062e2271e", "indicator--86d04554-1eaf-48eb-957d-7f258b54de11", "indicator--73800da8-37db-409a-b89d-e28b72c7712d", "indicator--b7fdb684-1c0c-47fc-83fe-206261923e7f", "indicator--f5462d81-2858-45cc-b077-2bfac2443d1f", "indicator--c7083431-b33b-42c2-b8f6-6169349e55cf", "indicator--18582bf5-ae26-4dcf-ae8a-bfa512f13dfa", "indicator--a20851d1-d609-4199-8eb5-7aabde97ae1f", "indicator--1e6d1978-9c13-4333-9513-74aca1000fb0", "indicator--6b2e5560-4508-46fb-aa8b-5a4fb0a7fdb2", "indicator--530f69b6-f5ea-4129-b0a2-21d37e397456", "indicator--42f6dedd-dddb-4708-85e3-be082cb0c987", "indicator--edcce019-f596-408b-8fea-9ef2214ef990", "indicator--efb6a3cd-27ee-49b5-b76b-67cae714392f", "indicator--4cf38a49-cdc3-4142-bbe5-b2456e3fb204", "indicator--af1d0180-51af-45e9-aa98-03dcca9a9adc", "indicator--f2c280c4-48d1-4a4b-8b5d-4c046708abbc", "indicator--75913380-3411-4f66-abc0-07b2237f94c0", "indicator--e303c77a-5eb5-4fc5-8953-9c75ea4a351f", "indicator--87e77783-2510-49f0-9533-0adb78e0231d", "indicator--6c2811d8-0df7-4491-b2a0-dce564a9f7d6", "indicator--379ae7f8-ed66-475a-b8fa-9df2febae7d5", "indicator--ddfc6463-5a71-410a-9d9a-f2f00b509ed9", "indicator--289ceef0-f329-451f-a356-e7a3fcdc8093", "indicator--8208bac5-d1d7-4e65-8391-91d74daa6b5b", "indicator--43ef8bea-96ad-48f4-b675-f405e0c26c4d", "indicator--18d11194-a472-432c-aec8-e16607c872f9", "indicator--fb0f4b58-804a-4d2a-9336-c36baf2b6359", "indicator--4f363193-94dd-4a3c-8f17-52912ba1f23e", "indicator--24c449b0-f1a4-48c0-aa61-5e524a5a4fc0", "indicator--39dd336b-eaf8-41e9-9d4e-e120de6d4e18", "indicator--4fe489ce-601a-4bd4-b56d-f297e1c2fde6", "indicator--bff3b0a0-3055-4731-ba02-4fd71a41f82e", "indicator--c846cec7-42b7-4d83-b735-ed9d452f514f", "indicator--0cf11893-4595-49a5-bc8c-a836e85b2a92", "indicator--5eed7750-7168-41aa-b781-e275b2527c06", "indicator--5269e49f-0d80-4bf8-a958-b3ae9f5c3e8f", "indicator--09c0c883-3023-4907-85e9-ec9bccaa3325", "indicator--75dad04b-df57-49ec-9279-97e0e1a6bb2d", "indicator--931fd01e-8270-413d-bb66-bf3f2e73b0ad", "indicator--228dc60a-82d7-445a-bb19-4714b36b5fa7", "indicator--441c393e-9b3f-4a6d-a0fb-85f7eb63087f", "indicator--ca20264d-18a7-4996-a24c-399316ec8a30", "indicator--d24ac713-3ff5-4d96-8f54-57c877ae61b5", "indicator--f9880729-e743-4a1d-972b-c402901352dc", "indicator--fd84537e-e1ac-4a47-afa5-097ba5921d82", "indicator--29acf62f-01a4-4165-8312-ee1bd349e6f4", "indicator--461cefe5-2bcf-4d83-8d5d-9da384b4dc53", "indicator--a8a7c0b1-b165-4290-aa54-92b4b71a03b1", "indicator--cd0257fe-161e-4d76-aa5d-2e01d025a15c", "indicator--8be67c28-1813-4280-98f0-91b49cbf7bb0", "indicator--b8228a48-34d7-4ce3-987c-170f25ee53a6", "indicator--08e85088-3c69-43ea-bc0d-9ac4df847557", "indicator--bc13314e-8ae2-4c1d-ad0b-1fbdd6903bab", "indicator--5271928a-fd2b-4d78-b652-998c92bd1a06", "indicator--f90cfe4c-6fca-4517-baf8-881c1f70469d", "indicator--f802074e-d3b6-44f5-9a48-1b2d77db7cb2", "indicator--85ad471e-6831-46d9-b0c1-9e9f37838332", "indicator--23ee3f72-1c6c-46d1-bfa2-32c9908f5eec", "indicator--ad1877be-6580-4de7-8a11-91c5036b9544", "indicator--a452ba44-79de-4e13-bb43-abcacf2342ff", "indicator--a44b82dc-cc5b-48d6-a468-601da9b8d722", "indicator--337bd22f-4a32-4b28-85e1-fbc668bf409f", "indicator--22743020-e015-4b41-94af-bce5c95f965f", "indicator--327d6b53-c3f5-4302-be70-18a161b08d95", "indicator--554bf617-2292-4fd0-9100-92d1f82a92bb", "indicator--4ba9ac21-84f2-43b8-9863-09f61bc71045", "indicator--abe893e9-0063-4fd5-affb-793c424a428d", "indicator--29132c7b-ec9e-47b6-aa22-b52c1bbdd141", "indicator--f7286ab1-4054-449d-bd2f-a26a57a6b654", "indicator--a7ceabed-c31a-4eab-82b5-40eb8c5a1ef7", "indicator--db4ab3dc-c2fe-4251-ad77-af91c8c6b076", "indicator--0cc413f7-ed77-47f7-befe-ff15320f30a8", "indicator--0043c3e5-0101-4cbd-ab34-c9273e47e2da", "indicator--7f829ab5-2a04-4311-9701-d3a9fd83f905", "indicator--1c3e67c3-70fd-4f40-a86e-a26293731881", "indicator--e791177c-bf0e-470b-8e8d-d824fefd07fa", "indicator--91277016-cb95-43e1-89f0-a97869991ce8", "indicator--6a0f36fc-bf0a-45c7-acc3-0f6b5e13b757", "indicator--7243bfb5-7dbe-4010-a66e-be2b023f54a9", "indicator--8dd57fba-1730-4ee7-adfc-690e0dceb140", "indicator--86f4fef0-bae9-4f94-97ee-fa1b50eec5af", "indicator--e737eb63-376f-4759-8f63-ef5c9dfd5e4b", "indicator--b39f90f3-624d-45d1-b823-f441c43b8ab8", "indicator--efde4837-ceb1-489d-bfe2-d6f391fca95d", "indicator--a0c61aa2-000d-4c7f-ae8a-aea26517d2f5", "indicator--9ca09b4b-b821-49f7-9674-a6593b9e5893", "indicator--3f2da4f1-a451-4559-aef2-6ae89dc4b719", "indicator--f90b5e35-341a-4279-a0a5-a77cdbf80b22", "indicator--babe8209-40c6-40b4-87ff-5e42868eb6f7", "indicator--870b6eab-a688-4206-88b4-6433071d4640", "indicator--cf1b8076-1394-49d6-887f-e19726a5c765", "indicator--d4995778-cea4-4c7c-9461-1f64b6855610", "indicator--2f4c38b8-39cf-4a8a-ab3a-e7dc07fa5b42", "indicator--adf46a58-1372-4646-b792-6b6a339c1b9b", "indicator--a6a7be58-d94a-443e-9a3b-1c79f201559c", "indicator--b046452f-4926-4b5b-9f92-50342bf88a80", "indicator--1428793f-f7a6-458f-b0ea-6d6a8a410007", "indicator--dbde68bd-676c-4339-92d4-3e1631fa2654", "indicator--968a6857-3fc8-4e81-b8e0-26891788f43d", "indicator--c15a82b4-e1f2-4e09-8d90-9a76ca3b95da", "indicator--48fb4eb9-ffa0-4af3-b075-bcbeb98891ce", "indicator--921979aa-f4bb-4867-abe2-c9940aef47cc", "indicator--6ae2b826-1516-47b1-8325-4ed187e4b3dd", "indicator--b3096171-52a5-4ab4-8a7d-621c4c4e2c76", "indicator--743c04ac-3b14-4d12-bed8-8c82bc389eb3", "indicator--219dc4d0-3552-4a03-91bd-c75cc34e8bcd", "indicator--f0eba23b-58f5-49c2-b9f2-3749b6c4e437", "indicator--259c0b9e-22c9-4e20-9712-859dfdad18f9", "indicator--fcd46efd-0a77-425d-84a5-515ad7650388", "indicator--8a057204-aad9-41da-8b0f-c466fbf8de52", "indicator--3d4676d1-f722-465b-8f74-7910a6c24d14", "indicator--8429da8d-a595-46bc-b5fe-fcea8eacc5af", "indicator--6416be57-6c06-489c-a41f-e9656c953b23", "indicator--09953036-6186-4a8e-adce-cd9b049c7401", "indicator--0f14d178-2cee-46c3-acc2-c6155ec941a0", "indicator--784cacd1-4de9-4b0e-9efc-e573b75eeaa6", "indicator--3acfd3ba-cf8b-4e19-93e6-2d4023a47922", "indicator--708f4ecb-7c1a-4973-9616-9e374b6dda95", "indicator--4c42ca31-b6f0-4078-8723-48e0ea521837", "indicator--8ed4dfd0-a4bb-428f-ae31-f7707de4b9e7", "indicator--953f2ffd-9972-4441-94af-914862676834", "indicator--193dd7c8-b756-4012-bfa6-8d207d0ed977", "indicator--9af816d6-feea-4341-ad30-b99327c03c98", "indicator--1ccc634d-e88a-42ec-a105-c180d898e2c6", "indicator--e1c2569d-7f96-4dab-925c-f9ae93c9fe5a", "indicator--58a8967b-2007-473f-ae1d-f714e439b550", "indicator--265615c4-7edb-4ad8-b1ca-160516c56479", "indicator--5a89e88c-9a16-49fe-b3ce-6ac0e7696413", "indicator--994b46b1-7cc4-4390-b4c7-f3c70eeaf006", "indicator--cc0e557d-9e2a-4179-9db9-9a8e5619fb46", "indicator--1cb96aad-6f0d-4621-bd5e-23da1b9e22ae", "indicator--184f922a-45f5-4380-be7b-8d031bfb0de1", "indicator--e4781016-f413-4f2a-b6d4-849d35df8407", "indicator--1ce03615-b1c8-4f28-b1d2-f896d6314fd6", "indicator--6003ff8c-16a3-4465-b4c7-c07d34c29961", "indicator--058878fc-8472-4d16-bae0-48669f9f11f1", "indicator--cb528416-d679-4b5e-b8c0-11811b7d6baa", "indicator--5a45e92c-751f-4302-bc5c-b204488b16ce", "indicator--4b30abe6-3c6f-47d6-85da-a30eda271e05", "indicator--67ba95a3-94a6-4158-9067-aa7741b1efb3", "indicator--b4b348fe-e527-4d56-8199-06c033aaa4ab", "indicator--fb7635b5-b149-422d-8c2c-17b30f020b0a", "indicator--e6433d71-0508-4f44-baab-3f0c350d5baf", "indicator--a525d953-5b8b-4a33-9a19-5fee87d6d026", "indicator--5cfb2e18-88b3-4ab5-85ab-9806d03a1f71", "indicator--5d3fb7b0-f5f0-4fb4-be4f-ad76dbcaa003", "indicator--d14e426e-de5d-4c95-a3ff-edff0e24ecf0", "indicator--cc78e9e8-45e6-481e-ba90-b67b08631fd3", "indicator--e772adb3-56f7-4c73-af37-6c5bdb2945e6", "indicator--ce476daf-399f-4272-9055-fe5d6d245153", "indicator--a68b9859-33ad-4cd1-be1d-c04b78ada2c3", "indicator--0cee2682-3b0e-41f1-b7f3-e9193f71bc90", "indicator--5e9b60bb-ffe3-4397-a4f0-7411794e9f2f", "indicator--e6339250-acfc-4ffe-b667-771ce7a428c4", "indicator--7bbbff48-4cd5-4108-9fee-e53e991158d6", "indicator--b09bb690-efaa-4d8b-b349-7702cecb693f", "indicator--d09728e0-7720-46b3-a764-00eaaebecd9e", "indicator--5862f27b-2919-4cc4-9f17-77c3176cb23f", "indicator--7155e77e-b0e8-431b-9392-0be702149686", "indicator--d2167a95-2b1d-4eae-ba26-0107dacfa1bf", "indicator--a2e3156b-1b4f-42bd-9144-947721fba7e2", "indicator--beb5d849-89d9-4b5e-b41c-2cef30f1c598", "indicator--f8195f1a-a8ed-4dea-9b46-65b56542d3d1", "indicator--d87a4b32-48a8-4efb-9f8f-8e8dde0cd2bd", "indicator--08bc3d4e-5636-4468-b4df-972f6020b54e", "indicator--0d302bb6-69d1-490b-a4c5-fd7cdfbe75e5", "indicator--c6adca00-acfa-4306-bffc-2ece486ba56d", "indicator--48430996-cf44-4689-a0e1-a0f61b1db32f", "indicator--3d700bd5-3c8b-4665-bf8f-c3a9d04589c5", "indicator--288c3fa7-8358-420f-9fb3-53d68ef9997c", "indicator--47067f1f-43b6-4da3-bd18-9cf1cc5d279e", "indicator--de4b752e-920c-4be5-8df2-d2812574e7a6", "indicator--c7ac5f8f-1bfe-4344-a74d-61c0f9a76a3f", "indicator--76352ecd-b70e-4f5c-a670-a2fc2470ebb4", "indicator--12819dce-6758-47db-af76-5dcb9318bf5c", "indicator--18e21f15-87d8-4fa7-9923-61533de3c422", "indicator--7e4b2073-1dd7-40b9-88fb-04f7babc01be", "indicator--b2c31dae-a7ad-49d5-9280-c72361425982", "indicator--f33ca6e8-375f-4585-b374-6f39ff8c5190", "indicator--c72eed60-5152-4280-b713-e974f50ad16d", "indicator--4fbebcd2-63ca-415b-ba04-f99b13a86f05", "indicator--0e592196-13d0-49c8-92c2-e9143743378e", "indicator--8f42b2b8-d494-4a30-8bc8-840e7e9d1fa7", "indicator--8abdae62-61f0-4880-9715-5b6a045b97e9", "indicator--b62e6233-f2bf-4a0c-b973-e5affdf80126", "indicator--af7b5b74-a294-4c0a-96da-552eccd826b6", "indicator--b1f283e2-8969-4d94-b994-df221a404416", "indicator--2716c4ba-fea6-48ec-a5c0-d272dc9093ed", "indicator--1a1a1d31-b953-4afa-9d8b-0d9b7f9e8264", "indicator--19a2fc42-4cc0-47ea-aba8-91ae102b83f0", "indicator--eb258d85-0727-44b6-a27c-5f4aa2e60e7c", "indicator--9ff6bc68-7cc7-46e5-8f64-3b418a60d236", "indicator--c598636b-909c-4706-82bd-f343963d7009", "indicator--a5d52984-2733-4486-ad2e-ad5f13d23521", "indicator--896d25ce-cb70-4701-b954-135d998e9712", "indicator--813b6057-a6ae-4a56-9431-27748856d2fd", "indicator--df0382c2-a2e9-44f6-9eea-a0d79f80f1aa", "indicator--d7b2695e-79ce-400b-bdc0-7bff032dac77", "indicator--f17f9816-6b8e-4a21-b8fe-7a421fe8a3b4", "indicator--26bfdd98-3c00-4cc8-8282-8e214e3d18a9", "indicator--46a392ff-9981-4dfa-9698-e74492944022", "indicator--adb98d99-8a76-48ac-a35b-742a0b976f50", "indicator--cdb1bee6-2a23-4067-853d-22582877b80f", "indicator--873a6818-7e72-4a77-9d7a-27397aa05abf", "indicator--cd06669a-73ad-48a7-b504-981c1a624ee2", "indicator--6411e4ba-3fc4-45e7-846d-6834aab38cbb", "indicator--03a1f48a-03df-49c8-a75d-7b1d01c8316b", "indicator--0fe17aae-9547-4991-955e-8a19bed2f359", "indicator--35f36a37-69d7-4a5d-87a1-15dca853803b", "indicator--7a96c7aa-6b3f-428c-804c-1520f7ba37ec", "indicator--ec8bdf5a-baa0-4b84-9f2c-9a526d3c1165", "indicator--2f96690a-4b4a-40b7-bc29-6c6d1f0adea0", "indicator--1eda6d5a-02c9-4aa8-a299-3363aea514bb", "indicator--6db5f8f9-917d-4bc3-9882-c2e2a67caa6d", "indicator--f5e118fe-9597-4c4d-95b0-398a0cedf02f", "indicator--f5b9abbe-97b1-43cf-9c31-79841d152165", "indicator--8dfac94d-0bb5-40ca-b0fd-5bc3d306e6da", "indicator--6ae3b563-f132-4259-96f3-29ee8bab2873", "indicator--5a296a7c-1794-4e62-ad85-cb85619fe3c8", "indicator--f26b8828-5101-41a5-992f-e72cfdd73303", "indicator--65d51c09-900e-4969-8b71-febee0c7970b", "indicator--5ce6623d-d295-4736-9900-6b7083fff330", "indicator--50d8123b-4b9d-496c-89bc-36a6ed7cf79f", "indicator--de1d7233-3a6a-4b1f-863c-b59d7b46f952", "indicator--1aa058b3-cf59-4347-8b1b-e4811624772d", "indicator--f982a7a2-e4c4-428b-b6c5-dd4d1a7815d7", "indicator--0b948a3a-83b4-4777-a00f-3775c5cb27f8", "indicator--c767de58-571e-489d-9a2b-ef118979f78c", "indicator--28696c78-2f7c-4c47-b004-fc86a93a4be6", "indicator--9c0c530f-b0cc-49a1-860a-12c6fa3a8973", "indicator--8dc5cc1f-b7b2-47e8-8bca-2cbb96874d2b", "indicator--95c74081-0219-4ba1-84fb-f47c6b33e1da", "indicator--b11fa46e-ddf7-433c-925e-f891e8a7410a", "indicator--c7b0734b-3bf5-40c7-bf28-077b59a96e09", "indicator--e743aeeb-c5f0-4294-83d7-7855404f478a", "indicator--c8c92362-89c5-40e5-a66f-811a8244dbad", "indicator--d1508da9-dad0-49cd-81a2-5444698b42cb", "indicator--a15abb78-9cb4-45f7-ab98-428d4d17f4a0", "indicator--10f32e65-bf4b-4aa8-a33f-d0d7e90fc412", "indicator--21f65d2e-9d59-432c-8b32-101901d2a080", "indicator--d432bcdc-a782-42e1-8ae0-361bb94e1e8c", "indicator--ddaa7b06-7260-46d8-bfed-c2c002076487", "indicator--794ce7fb-556e-4bd8-bc76-2ae3638627ef", "indicator--2608415f-6c65-4d57-9d4e-98e8082646b4", "indicator--2b8d252e-5dad-4460-b90b-935d5032148b", "indicator--df04f595-f435-4bf8-97ab-a0de8b799bb3", "indicator--13819f29-c968-486c-ad75-6485cee13a08", "indicator--8114f361-ba69-45d0-a007-02390106aae9", "indicator--8b3bc8b7-1860-4465-be8a-e54d3ccd405c", "indicator--2a6a9f6c-48be-4243-b4ae-cbaf238a0a34", "indicator--521dc613-ddee-4274-822e-65bd39004e0a", "indicator--481c9ef3-2d7b-4a2a-937f-03fdd9504cb5", "indicator--f9e1abe3-56e4-4c32-90dd-514b9fd4db6f", "indicator--c688e4a0-f987-4f0c-a86d-7045a8b445f4", "indicator--c93edc97-582d-41b0-a99c-7b0c24c93c8f", "indicator--f3581072-980e-43eb-a5ef-514034fb12e3", "indicator--0a8b8170-25fa-4248-bbe3-93b6051510b5", "indicator--d89e54e6-6053-4b25-a098-47ce496f338f", "indicator--b9913499-9dee-454f-86ba-7c5337041c03", "indicator--6fb55d9c-35e0-4bad-9086-263631f6682c", "indicator--5bae83c4-1624-4b82-b0a9-1a3ce7c14ad4", "indicator--f6bf4af3-2a71-449d-8e9f-8d7b83ad51b1", "indicator--2dd8c8f9-9de6-40a7-a687-40c6f24c460f", "indicator--67e46f8a-4ccd-4c11-b2f6-8fb2ee448e58", "indicator--777a2cb9-87fe-4417-ba1b-844640a75e17", "indicator--d872dcd0-faf5-46ee-8b40-b3876fbe3937", "indicator--08ca9306-24d7-4a23-a5ef-d9a4384462db", "indicator--592fefd9-525e-4bda-b79b-ee9495e99741", "indicator--e318fea1-80e2-4556-8474-8429c8bcab30", "indicator--14405e82-ef42-4629-890c-f4cf89ae825a", "indicator--862066f1-307c-4578-a22c-b045501c8fed", "indicator--4277958c-4b94-4f91-9d37-61d881a752e3", "indicator--c8cb605f-651f-466d-a5e1-a313098f6c26", "indicator--36a829ca-aabb-4620-8457-20b25f50f949", "indicator--724e6464-3112-4e1e-8413-af8d877d0589", "indicator--a89caf99-1c6c-45ac-9b2f-848baa5c3c7d", "indicator--e478119f-0c5c-477e-bbc9-ac1b7534d4d4", "indicator--3b990c08-2a15-4adc-99f6-e4952ecf68f7", "indicator--4141ab86-6552-4305-bd86-a4f036d79bdc", "indicator--b4910afd-1f8b-4b7f-8cae-65eb2ac12a4a", "indicator--1c4cf1cf-818a-488a-993f-2447ab325fd0", "indicator--bd0d2c50-058f-4d13-87cf-887ad9f8d0fb", "indicator--decaaafe-f36e-4bc1-9f3a-c75c39594175", "indicator--b97c20e4-248e-4310-aeb0-b077a375c2fb", "indicator--970b8375-7e75-4dcb-95a4-5ab39adb1195", "indicator--225da4f5-de07-4071-8762-e0793a14b870", "indicator--30589b47-07d3-4507-9843-94a808866d14", "indicator--d5ab615f-b760-4184-9f00-87b25e71d1ac", "indicator--c772e101-2013-45ec-98bd-399d235628d2", "indicator--5a2fdc15-f3fa-4730-8b65-d4bfae76f386", "indicator--88e4e8cf-8cb0-4d1a-9fb3-8f02e1ed537d", "indicator--ec5741f0-a571-403a-92d8-7a2d64d5a0a5", "indicator--1a7a79af-5d85-4459-b31c-45828e20bdf2", "indicator--a48c4816-9615-42e3-a841-5503f52a3b22", "indicator--f1f59d43-57a6-48f0-b734-3a73b519d397", "indicator--4c64540e-cadc-4e7e-9223-5c62b9bb6e93", "indicator--f5d41339-8dce-4da0-b1d3-d718642b6e1f", "indicator--d3d13e17-2502-492b-976f-f827fe496cf1", "indicator--3a83b650-fe63-4e30-9072-e18a17f6b753", "indicator--2338c406-baae-4a17-a3d0-52b5dff4105e", "indicator--10d97111-95a0-4269-a036-09e63f496f3e", "indicator--74629ecb-ffd9-4efd-a0c1-decd4a9797ff", "indicator--e2fe4cd5-227f-407c-b0eb-2742efef6a5c", "indicator--a82a43fd-cfdf-4899-b995-a19e79bcb81c", "indicator--83b53569-fcfd-4770-b2cd-103f4036d90e", "indicator--e515b4f6-bf5a-44f2-9c3f-c927a9afe9ff", "indicator--648ff1e8-ce2a-4152-bdd6-9503c43f006b", "indicator--de09dbd5-85dc-444c-9229-8d6d5bd0d4f1", "indicator--7669f306-72ba-4506-af5b-59a5e4826753", "indicator--9fdc7d52-4088-418d-a338-a6dad10c2a3f", "indicator--8d9eca67-3757-4074-9941-e6f318c6efe6", "indicator--c07c61b9-db33-4a59-8a6e-ddc021f5f00c", "indicator--90e8bb6f-33a6-4b8a-b7f2-caea3a798bb1", "indicator--41abc55c-201b-43da-a48b-c4834fb37478", "indicator--4d568894-7ed8-413c-bc33-fb3ad17243e6", "indicator--9102e69a-0ab2-455c-8f8a-ba32ed692580", "indicator--e524d716-9231-4f00-940c-13871ce86fd5", "indicator--7dfd22ca-31d7-4b9a-82b2-546bdf037f83", "indicator--a7cfee18-0301-485d-bc0d-7b268bee1af2", "indicator--384011bf-789a-4719-bfb4-e24d350b82f3", "indicator--3dee2c93-5d51-42c4-b68c-c6bde73651a1", "indicator--2947f9aa-757e-4a76-acdd-6793a2543fde", "indicator--0e205bcd-d041-4c44-8d14-e9cac40ce5b3", "indicator--58a5ce70-4bac-4eb8-b620-e162866a7c36", "indicator--25a584db-5bc0-4890-90dc-cd4db22e897d", "indicator--b56e65a6-7036-49d2-8a54-9a3a5b3a4ae5", "indicator--86950e77-2488-4c57-b79a-d611e5206991", "indicator--837ccfcd-5fd1-4f7b-ac81-5974e07c65ae", "indicator--5e4f09b0-c63a-4f98-be86-ee75a71d6496", "indicator--33ac4ff4-3451-4298-89ad-fed7fb6992e0", "indicator--ee4035ce-acf6-4f52-be13-3aacd1076e30", "indicator--9372320d-48b4-4b47-9b36-689855f5b625", "indicator--e482a7b0-af02-4624-b51c-2f7aab222cc9", "indicator--0f7fb563-87de-4e55-8342-fffdf48921f1", "indicator--523847db-b6e0-4d60-8800-818db5ee83dc", "indicator--9e695b41-c7d3-4269-8749-237efcf97338", "indicator--9db2ce6a-6265-4189-9393-2fe5ff13df1c", "indicator--1f78bf54-7480-435b-8054-12155c05e343", "indicator--4d4791f2-a327-4865-8de8-d84ef4e5f35f", "indicator--63044c3b-6c0e-4e35-aa2b-55b84c07ef2d", "indicator--03b84b55-54fb-4d84-ad04-e1fa8abb00d8", "indicator--1ba089b5-5049-4a6e-9e4b-5a215716d4a4", "indicator--dbe50425-d6c9-40d5-97e5-bd8d6445acb2", "indicator--96bea9d8-2bef-4a65-ba22-b5530347d811", "indicator--1e049947-3bc2-426c-a425-6f7cd7d695c7", "indicator--da42b07f-ffcb-4b9c-82a5-02ad0824688c", "indicator--d3bd17e9-6d2f-4e19-96d1-b2c09b700c3d", "indicator--ece1937b-2df8-4459-847b-0bc30bf51ac3", "indicator--4430e357-fc1b-437b-bdf8-58531ddf9676", "indicator--6dde777e-a759-436b-ab49-5ff42c6f93cf", "indicator--2c82c8b3-e4e8-4558-9e5f-deaba8d33a83", "indicator--1fa4e6bf-b36e-498d-ba0e-20a61c22eaf7", "indicator--8f5ac978-f7ad-4c09-a1e6-dc107e40e1d6", "indicator--2ed68fd1-adab-45a1-8bbb-e589eb6ffd14", "indicator--f8124373-fee0-420e-80a7-790cd9db85cd", "indicator--5d899873-a1bd-4c9d-a3cf-dbda24b5b8bc", "indicator--533dad28-8706-43de-a434-a6b7ca6b7f62", "indicator--4df52926-0809-4ad9-8cf2-a1d8e1924231", "indicator--221d0959-c20c-4939-b64c-df4ac627e5f2", "indicator--a90f5eb0-8018-4722-888d-b98599cd4d15", "indicator--7390adae-93df-477e-b7d2-d95d0be41707", "indicator--60859541-226b-484a-8fdb-9794536c599b", "indicator--32e39044-cb08-4744-88fa-e5ade5b981b4", "indicator--2ec6449c-6bbe-48a4-ba56-1a69be791100", "indicator--7bd3016f-8400-4f41-aada-b990932d46a8", "indicator--ff0eb62f-17e1-45f1-b3eb-1219531c7bd5", "indicator--ff21f357-17fc-48b4-bec9-e602b07ad5a8", "indicator--e8b228c6-d4d6-40f7-88d2-52b8808c85a6", "indicator--2f8ed09f-7303-46f3-9ae3-4e3c95bf7e79", "indicator--f4e068f5-650a-486e-b15e-067b3dadc832", "indicator--5ea595c2-b825-45a5-be05-49e8e9477305", "indicator--f865f5b9-3ea6-44fd-8a70-b2c5801c85ac", "indicator--e105d7c7-c360-473e-8a98-16dbfc5cd3a5", "indicator--0e0b0308-1e32-45b3-80cc-8f20ae617671", "indicator--f0118095-ac62-4d89-a046-f4f770f0e997", "indicator--d88379bc-75af-4c2d-8074-88a0a797ae79", "indicator--b8c31c1f-3836-4d63-88dd-0aa31fc214a5", "indicator--89ea081b-795c-490c-b43d-4192549aefcc", "indicator--4f14ff4b-734c-4fc2-8261-c3319a88f7ed", "indicator--c9d9d98c-c6ee-425e-8eb2-90b7476bae4a", "indicator--7057785b-d235-4ca7-9595-9a0c171b0b15", "indicator--97d2a48c-2536-4270-bf8d-03446e47375c", "indicator--02feb97d-178b-4e5e-8615-11b212b75c87", "indicator--99cdb6a7-6190-463e-9e29-18abf3cb3975", "indicator--897d495a-6d23-4816-9e46-71321d3d2b7b", "indicator--5cd96079-5999-4e31-a60e-de2df52f9e55", "indicator--db6d0356-1513-4712-ac91-0b07f3e4b80d", "indicator--4c3e7f2a-c25e-4932-bcc1-affad829a712", "indicator--194bc658-ce84-4af9-85b5-e085f31afcf8", "indicator--f92d5b35-c692-4411-9f95-599ee9db2915", "indicator--848bc9d7-569d-43b8-91e1-f0487996a722", "indicator--317cea4d-737a-4e0c-b3b4-5929b0342814", "indicator--a113f383-6ebb-4168-8b78-dc7cee47d2d6", "indicator--388560c4-64ae-4b68-9002-6867f8f594f1", "indicator--e11a42db-a598-4899-aa63-693073433fe8", "indicator--75881821-489e-4c41-a3dd-58935ad2cd90", "indicator--b2825e58-3882-41f9-8efd-b43b47f21187", "indicator--b1e26b55-e6e7-4b16-b06e-f9ddc0fdac1c", "indicator--ed55eecb-bc6e-4951-9541-eac9e3970bbb", "indicator--8747de34-a4d6-4db7-8121-e55baf469b72", "indicator--dcaa9c90-5a84-463a-8341-45e86912334f", "indicator--75d37207-c23d-4764-89e7-a9f3608ceffe", "indicator--d4302fdd-f3a3-4781-af5d-c88791e2c650", "indicator--059e8bbd-20f2-4838-9f02-a22bdf3c71d9", "indicator--81fb82c3-99e5-4903-9411-df9ef0f52c7c", "indicator--61ec25fa-2a01-4397-9edd-a341166c83c6", "indicator--fdb92013-285b-4369-8fff-10fa744a636d", "indicator--b14ea55c-fa93-4b3c-9f05-f4eb38eead7d", "indicator--c7aa620e-1013-44d9-af33-67bb1253f4be", "indicator--11e3f9ad-12f4-4ab3-810d-4c85b562e5b4", "indicator--e190f79f-f39d-4bbe-8f63-4e3eca6767f4", "indicator--80fa582b-8fd0-47af-af74-11c810684f6b", "indicator--43959dd3-bab6-48c8-94b8-52173ba7caf4", "indicator--9258af37-3530-401e-bb6a-748776d4f7fd", "indicator--48fbbc50-7636-4e27-b209-7f8f28858375", "indicator--a54efc74-17aa-4169-96ad-9d68ae6896c2", "indicator--52bf777b-0cc1-4323-9533-22415a848adb", "indicator--ce762460-ad73-4e7a-b674-04d222fb9852", "indicator--71067e92-30fb-411b-b42b-4ac81fe125e7", "indicator--4f37193e-c3ff-4c20-b818-795e0254582c", "indicator--ae804a44-0644-4127-8001-1f7f6f7498be", "indicator--afd0145e-1024-464c-80c5-822ebaee0442", "indicator--64adbd5a-ab27-403c-9fde-828f04bf5fbc", "indicator--a4a945d9-58f1-4d3f-a8a9-a0d1f98947d9", "indicator--c56e6b9b-503a-4ccf-8b1a-28b6836cd615", "indicator--586d8382-168c-4248-9dc2-1a6f704ca417", "indicator--7a2946d1-9200-4295-b588-a23abadf154b", "indicator--e62a0458-1544-4c39-8e94-dadb7fde5301", "indicator--bc5f8ed6-8730-43e7-bb0a-14fbf6e480d7", "indicator--7d9d86de-d940-45bf-9a70-4099f7e779a5", "indicator--ee4feb3f-3c5c-4376-9d1b-fd16245baa38", "indicator--f0238901-7a0b-4c51-80d0-c9a1781ba753", "indicator--839da48c-583f-46c7-adc7-64c424ef4f74", "indicator--3d1f2db9-ac6b-4c56-9fe1-71c7b627ada3", "indicator--5457699f-6b32-40ad-a774-2d99e7535545", "indicator--003ae064-6d63-4b97-9b3c-82b0964bf129", "indicator--ec1265cf-5402-4e8a-b270-6decdc84e06d", "indicator--e75d124b-58ad-4c31-bf05-c3d27d05382e", "indicator--68b411f9-a2fd-4ae4-b2ce-a4836ef64344", "indicator--59886951-a435-4b7c-9e06-1fb84db35188", "indicator--bca7b058-588e-4e39-8c0d-c1a3fdb2c2d6", "indicator--28bf87ae-0a2f-4972-a615-bcf52dfadf91", "indicator--69ab5c38-49ad-4c81-b3fc-e4cbb8b7e24c", "indicator--83415ee5-26a6-4038-9cff-9e8a400b72f2", "indicator--45432a3c-1a94-4f1e-a703-3f743aa5ab7f", "indicator--169c396d-42cf-4a21-9f17-296f5e6b68eb", "indicator--851cf9bb-c1a1-42b0-88a3-711c2554dc1b", "indicator--4fc8efd9-7afc-4c98-8cdd-c3d1a6642ef0", "indicator--cb09b1fe-2da0-4ddc-a314-6b8116dd8771", "indicator--652547fd-0889-4950-b403-5cee294585e4", "indicator--7c945fb6-3f79-4128-a119-031c095d4a1a", "indicator--00c5ac2c-b013-4eb3-917d-84070c0f3811", "indicator--4fd1054e-4bb3-4c37-be1d-56a633f1b89c", "indicator--3223f3a7-1499-4951-b3b5-d1fd9e4084f0", "indicator--cb1c80b7-697a-4029-a29c-28159809fd41", "indicator--22758e94-32be-4ee1-ad31-9b611b66a69e", "indicator--5fd4dde9-ec48-41c3-a143-95d09dc5e6bd", "indicator--e293cd38-294a-4c8b-9aa9-613bd35c964d", "indicator--289053c4-4a83-4920-b9d6-582ce13018d4", "indicator--eb6d08ac-4827-459f-a142-5b642a0e8131", "indicator--e1f81059-d917-4935-b52d-2f5fcd4f8016", "indicator--48e169f3-f6a2-4419-8806-11bcdb742332", "indicator--1255a81a-ebcb-43bc-8299-53687fd65931", "indicator--5af47159-24c4-4846-a5e6-cb9be0d41a43", "indicator--de8f3aa3-e4b4-4625-93c4-04e101b15703", "indicator--33daa086-6229-44ae-ae47-a1a514fa5fe4", "indicator--ec18d42b-c2bf-45e8-b003-acfb70375227", "indicator--2afe505a-ebb3-4f8e-9984-70050f92aa01", "indicator--a661af3a-8c07-4ea2-9adb-65aefa0dd1d8", "indicator--ec76b93e-fec2-49d9-a0df-874b406395b8", "indicator--615418dc-1ff0-4078-8f29-d9ba8a5b897f", "indicator--532ed7fe-9d0b-4efa-a20f-093a2d72ba64", "indicator--da0cd579-779a-471a-b679-54cbb5261d00", "indicator--ad99b36a-f4ae-4805-9ab3-51d60f810baf", "indicator--48b738d2-7dc6-429d-b51d-3d9ffbea192c", "indicator--c6996a3b-51fb-4d29-abe7-cf2e25898ff9", "indicator--ad306525-ace8-4ebb-b2c1-5085186ddd19", "indicator--0cbd0e4a-7a82-4c94-8680-1fc13d04c5b1", "indicator--6d01ad67-3109-4911-84ee-e5f8215f47fe", "indicator--62e6ccd7-60be-4904-9c6c-4a572e792af7", "indicator--2a48ec2e-57b4-4860-aa39-4f4e0dc610a6", "indicator--6b2e26b9-a1fa-4749-bfa9-03fab28ce819", "indicator--36a8bde1-3fbd-4139-8b10-78b63d999245", "indicator--9cd7a24a-8dc2-4184-a91e-a3bc14f0f7da", "indicator--1878032b-c3f5-4eb4-acf0-8045273d22e9", "indicator--d10af584-3178-4c4c-ba4d-eebbe4608187", "indicator--b7457ec3-08ba-4b6f-b6fa-f76e8dd78b85", "indicator--c866b4b0-c338-44ce-be28-dfa6e59a9e3b", "indicator--69ef184f-5611-4da9-b295-b420ea2fdb7a", "indicator--b862ba99-cd9f-4f69-afa1-b3355014a276", "indicator--e41702ea-479b-4d66-aaa4-1d4f39097385", "indicator--c127c2f5-49a7-4152-a397-9d7416e4395b", "indicator--d3ae6ffb-7d65-465f-8206-b0a1ad51f95c", "indicator--a7a11ac1-306d-4ab3-bc4f-13921a5a46f0", "indicator--0012e887-3fd4-4839-8704-a5209dee330e", "indicator--43346e77-92e4-4337-b3f0-1a72edcb4379", "indicator--38125d22-5608-452f-9cd4-4e96ceb883c5", "indicator--d52566f9-7b25-49b4-92ec-9f787b8b999d", "indicator--5a94cb83-dee9-499b-af41-017ef12231d3", "indicator--ccec4c55-2b10-49d1-9beb-f12aad831244", "indicator--f65420f6-d9af-4616-95cf-1a8ba33e6aa5", "indicator--8dee1a32-bb76-47fd-80ee-11e2ea64664e", "indicator--72e05996-fe2b-497b-80fe-c0a7680cec63", "indicator--f95537c1-332b-420f-a784-227c33a7d6e0", "indicator--d7d86194-0203-4229-b3f1-cf64f2338956", "indicator--bb0319fd-b5a9-4744-b9dc-78f4df63ada0", "indicator--da35cc20-16aa-4edf-a0f4-1fa44b5a0558", "indicator--b961e59c-13b5-4634-aa4f-76c7618bf577", "indicator--9d3c4e36-24a9-4333-a544-3221110cf1af", "indicator--296c2e98-fc3f-41f9-9e5c-3732698fa27f", "indicator--190311c0-b9b3-4750-97fb-7f5a98c5fdad", "indicator--99b23327-f7ab-4e24-bd08-4b269e5bf5f0", "indicator--b8f0354b-6095-4715-bf4e-2122527440e8", "indicator--699e3026-1650-4370-92b5-b3bf5bcb9f83", "indicator--73c8b965-1f6a-4d3c-8f92-9700fb5923c3", "indicator--e53edf3c-4f84-40c2-b57f-9976fbfb7e32", "indicator--fa7e6a33-d5f4-42ac-b9e0-95b2768f6750", "indicator--7ecae596-4cd2-4769-9518-e8358084183d", "indicator--c44414e4-1814-4737-bda4-2a36bcc70545", "indicator--8d7f87fb-5efa-4d62-b224-ef4d2f7655d2", "indicator--96aa9001-d47a-4d0c-bbe6-2b90b1825b8f", "indicator--a2baea9b-638c-47fa-9ae6-d205c8fe378a", "indicator--c247bb59-1864-4834-9b1a-152c8ccee464", "indicator--c1eef394-d37c-4929-a6ca-208c75154342", "indicator--77487b17-08a2-40ee-bb97-51cf53d29fb2", "indicator--e5de181c-79dd-41eb-bffa-52534af3cf75", "indicator--358c5c1e-6c85-4401-8e44-78eae2525519", "indicator--5869a277-ccd0-4b61-b8fc-0cfcaa70d357", "indicator--a37b804d-c9df-4a32-86d7-8ad1c816b3d4", "indicator--7a237a85-4d48-498d-8c90-725d28942807", "indicator--cb9b98e7-ec6b-4ad9-8fd8-16c387a0794c", "indicator--eeeff690-d396-457f-b9c4-ddbab1ffa245", "indicator--0ae89b3b-e3f8-4bb6-9857-e0acadc87db9", "indicator--e57360df-63a5-42d2-9d35-9b359cca93e5", "indicator--b54b3f76-f91e-482d-801f-7f706b208e21", "indicator--ea32608c-ae8e-4667-a42d-7492056300d5", "indicator--595d05dc-9353-4979-b366-6e5aafa6a8a1", "indicator--c6a40a0f-1adc-406e-a436-82e20c7188ea", "indicator--9034bc33-ce58-4f77-b0bc-20f5de9451a0", "indicator--d5f33408-e95a-4124-8e22-27920321135b", "indicator--af631995-f96b-4913-b4f2-6ea26f191724", "indicator--eef829b6-8758-4fca-8430-4036b32c5ba7", "indicator--08957615-d801-4be5-8bc6-ebac4d698e02", "indicator--58933f53-b4f2-4862-8f37-64b3ed4608b3", "indicator--d45fc5a8-12f1-4dd8-8d8f-843e3eaab6ef", "indicator--8ec1e811-436a-4394-8c6a-f5ad71eab629", "indicator--7ee8a2e7-6ee0-4d01-b6e5-e5197f18769b", "indicator--25285dbb-441f-4ecf-8421-5b2603d40c79", "indicator--f9f17506-ad7f-4fda-8c2a-796c8c482a67", "indicator--e69bb45a-610e-45e2-a604-dee952a8dc39", "indicator--8da6f9fc-c3eb-4649-b2d3-354d7297082a", "indicator--241b5b5f-0562-4fae-a806-23eca37b4dc2", "indicator--bcbc5391-a5cc-4d6a-abc5-659c13871065", "indicator--29eb10ee-4845-40ac-93b9-3098cf28d739", "indicator--d25c165e-8cba-497c-892c-ca767d5026a6", "indicator--53708ee4-e5f3-40d9-897e-bf2dbd67b1f2", "indicator--44b2d506-16ad-4362-83ae-324246eeecbf", "indicator--12430e5d-bb14-455f-b6a0-62fc77abe204", "indicator--a7e2ce53-585c-4e96-bc21-4d9a1d76d892", "indicator--2062fa55-d14b-45d3-967c-903718e733ec", "indicator--5af33f8a-1dd9-4a9c-ab1b-01c6d7bbe7b3", "indicator--9dfe43bf-24d9-438b-bf4c-38806c13c5bd", "indicator--9cb13500-50c5-4546-8ddb-c13aecf46142", "indicator--24fc1bc4-57f4-41df-8150-3e4bf7866344", "indicator--209ca0e8-6cb5-447a-ae0b-226fc20d6f95", "indicator--de8e2e2e-ecb4-4eeb-9f74-9e48f796e715", "indicator--faf913d5-2b81-4814-b62e-e0213acf2a3a", "indicator--6a158b93-0531-4649-b610-86e901184f62", "indicator--9e14c0c1-7694-4b12-b6dc-135af5926b9a", "indicator--55a596e8-8137-4838-a080-a9944855c66b", "indicator--1f53420f-71b0-49bc-acf0-f97898000f65", "indicator--4a7619c3-0b1b-442d-bbfd-bf96ace9b1ad", "indicator--c0f26053-2fa1-4f62-a6f5-81699c786adb", "indicator--72923e24-ce73-4ddd-a2de-4f3e7e2bc144", "indicator--b5393046-b17b-49af-b5ee-f29eb7bd0894", "indicator--e11f63fd-38a3-4168-b9a5-981b715ab891", "indicator--fdc3b417-d427-40cc-b3ff-52765d840352", "indicator--91e6903a-13ae-46ac-9541-9723da046af9", "indicator--0bf3c575-6ddf-431c-bf50-2e7672138afb", "indicator--2a0f2f2b-15cc-42b6-ab1c-d7ae397a2cd4", "indicator--cde9c9db-5c6c-43d9-9f60-d062e3eae5cc", "indicator--13c3718d-6557-4486-8bc7-777d6e23943b", "indicator--96c25927-1152-4118-9dc8-adacbe9cacee", "indicator--f466887c-76fd-49b1-b41c-98a85bded880", "indicator--f887ea4f-2ee1-4fb4-a641-5360f007d65a", "indicator--093350d6-5f2a-474f-9657-86fdfe31cc2f", "indicator--99604ee9-a2c3-40a3-b5cb-2cf5fbd80def", "indicator--1fbadd32-2d3a-4631-8206-2aedd7450c52", "indicator--3daf4006-87b5-4f20-bfe0-e89765c3a33a", "indicator--115d6675-8809-487e-aa1d-250a9526209f", "indicator--dbc48245-ff83-46ea-8c16-da374a9992da", "indicator--e798f319-410d-474b-b77e-a7b2d8a8d0fe", "indicator--f59e4b70-d563-43dd-9da2-049c747decae", "indicator--eb96332d-7da3-4528-9fcd-03d1b94fcc65", "indicator--914a342d-7059-4cce-85ce-d10af1a8c71a", "indicator--96be1443-4b02-4663-8842-6ff525bad1bf", "indicator--5503841a-20be-44f5-a85d-aa99271243a4", "indicator--74bf1de0-2d8b-43e4-b418-ffbc6e786f23", "indicator--e7655edb-baaa-4ba8-b435-21123f93868a", "indicator--0078877a-dd56-4296-aa2e-0bb174ae52d1", "indicator--75c3e77c-26a0-402d-857c-44cc60344b1e", "indicator--40bf6583-163c-4ae1-b7ec-87c37a6493f3", "indicator--0914fdab-61a5-4cc1-8791-f4966156e0c1", "indicator--6beef74b-4678-452f-8341-26049d558e9e", "indicator--a7477003-9e7f-4577-846e-0135fea2cc84", "indicator--efe6ada2-4b92-451e-9482-a923ebac8165", "indicator--a195085f-d36a-4746-b8d1-b4aeb06e3961", "indicator--eef8cd2c-a409-46c2-9cc8-dd4ba7aeb1e1", "indicator--17fc5d16-aa42-42b5-ac64-729a2df6fc47", "indicator--88d05297-b06b-4fe8-b6e4-2bbc35a80061", "indicator--14d38d22-91ee-414b-a4ef-f82507fb0cef", "indicator--12f5c791-a927-41bf-afc6-88a97cad1b1a", "indicator--10fbed82-452e-4e1f-a3e8-7bd34a467f6c", "indicator--631d23c4-3a16-43bc-8010-b7f61cf7116e", "indicator--5a34744f-d01e-414f-a3e8-b8038e7e6d9e", "indicator--88cb6df5-d96c-41a6-a2a4-2d6db4ac7b3c", "indicator--461dbd77-df2a-4c35-8c64-8bd9b2576b01", "indicator--52e63383-d0c8-4787-94cc-a098830b8206", "indicator--d36e69de-8d81-44ff-a23e-d662a6ce51e9", "indicator--6758d9da-0165-42da-bd09-88a85fe02983", "indicator--1fe980d4-389f-47d4-95c6-ab2e56ea352a", "indicator--5cf8e77a-1087-4c26-bfdc-bd4dbc38da27", "indicator--794a5528-c3a6-4b4b-9436-e77356fa2411", "indicator--3ffb3dc3-d07a-40d0-aaf3-4fb24cc5ede6", "indicator--05211324-2c81-4333-b148-aecf9602e1b8", "indicator--74bebdf4-b09a-4a8c-a631-f3992af49683", "indicator--a22e365f-6028-4614-8b4a-b5fd407eaebe", "indicator--bcf03a8b-4c90-4919-8c59-50b8054b57ce", "indicator--9d5f048a-6e5c-4de9-a5bf-b919a1f58cea", "indicator--ffd787c2-1f55-4d79-9d77-44ea84ce0e22", "indicator--f0fdb595-4742-4a89-8b0d-6d05ef980932", "indicator--4f255913-42a0-4ab1-b1b6-c24e3849a3e3", "indicator--80ccc54d-d1cb-4dff-8964-3d369e058557", "indicator--b50ccd26-b5bf-4509-a019-6a29ebfdd1a3", "indicator--e3e84fb9-3e75-4659-9ef1-5584042e21bd", "indicator--1d4448ba-05c6-490d-a100-4ab1b2596788", "indicator--4e347aec-08d0-4b89-a3d0-666b31dba594", "indicator--1efe1ef3-136d-4964-9ad4-c15a05a3ffb7", "indicator--b43c40aa-8cdf-40f7-8a25-e78ba93d81fa", "indicator--42ab1116-2b3c-493a-9e69-15b6da90f481", "indicator--d57ca51e-0bb1-4685-beed-9f75e273ec19", "indicator--029881f8-ca49-4efd-a87c-5ee3d462c0a6", "indicator--28fd6ff8-87f0-46b1-ac54-e07ea5e908b0", "indicator--b8419cea-fabf-41e6-93dd-ae25c2f1b993", "indicator--b1ef8676-d320-4d99-9755-074720ea510d", "indicator--f8e9b77f-4d71-4154-8d9a-cf20159e89c1", "indicator--cb1834c1-8f09-466f-aa55-935acb379d6d", "indicator--783c0195-35b1-4d7c-ac6d-a17b32ebb284", "indicator--2b599fc3-95de-4c09-a549-bf5f663b06e0", "indicator--5a3a72d2-c72e-4861-a26f-cdd222c319ab", "indicator--4517fa5c-a0b9-4c3b-b178-4f5ef5bfbac1", "indicator--b8b18139-fdbd-4dde-9de6-244b2ddbd72c", "indicator--307f928a-0089-4bf2-a6d2-ba7e0a4a720f", "indicator--d3df25ab-5505-4dd5-a5c3-339ab62319c9", "indicator--b4573e88-b233-478e-af58-10f03b4007c5", "indicator--e241b97d-f6f1-4206-88a4-f6c6ae5e1e5b", "indicator--1b9e3b51-2732-4e12-9334-ed2d3360f868", "indicator--4493a6cd-f5c7-4820-85fc-00501d0299c1", "indicator--7be472f5-b70c-4ae7-bead-2e9f6a0593ea", "indicator--6c49726b-cc46-4533-96af-c1b0db99dd15", "indicator--3da43478-37d9-4afd-b75f-bd3c7f0daf74", "indicator--fcaee98e-b3eb-4be1-91c6-6392664db55c", "indicator--6089c9a1-212f-41ca-9a74-308604674076", "indicator--9c54418b-1962-4200-b9a0-8594ce5375a1", "indicator--12c7f7d7-b8c7-44f1-a956-da9f0ed95f18", "indicator--452e55f6-8b4d-4bb7-acd9-486840f5a13f", "indicator--b042e901-f36b-4ea6-b591-4df40acaed9c", "indicator--7d1ed98e-85c3-4c00-979b-17acaff6aa0a", "indicator--77b045dd-8b91-42e1-a7f0-b8a4be0c1ce9", "indicator--c83d56df-b355-4b4f-b1d6-4a2eaa369032", "indicator--056c7b6d-9876-4543-b540-ca49e3cf03da", "indicator--c878643b-6996-4278-a848-c0f0c1746b02", "indicator--c52f86bb-7d67-4996-89db-3740cfce17e9", "indicator--022ea75f-287d-49ce-ac27-d49e889510fa", "indicator--c2763d0c-0c12-43ce-8323-ec5e16814bd1", "indicator--8fdcd0a9-046b-4245-a015-e42dc80614d1", "indicator--4425ed95-b367-45f2-838a-a92d3b632b80", "indicator--55e873f4-3281-4b88-bb71-dba3ef383c45", "indicator--09ee69fa-502f-48da-bf6a-3c62695ff17e", "indicator--8da0c9d1-0231-49e6-9bce-379bdf3ec368", "indicator--d9d5ccaf-02cd-454f-9100-0f54e0926f5b", "indicator--b64c0f09-e4c2-4fac-9649-ac8702c178f6", "indicator--a8de2a47-ec1d-4f50-b0d2-193648d0e04b", "indicator--eeaba3e8-346c-4325-a020-fe263e7d5843", "indicator--bbb38494-45fb-41b1-91b4-545d540fdb50", "indicator--f8088419-84ee-41ea-8674-b374bff0502b", "indicator--ff7a6025-91e2-4dad-9327-37135cc02e7e", "indicator--af219fcd-4695-4087-9bae-a670c12f9156", "indicator--80e5ad4b-de8d-48ed-acba-f29f34a72670", "indicator--0bd06d12-d157-4dfe-ace9-da9d7578a890", "indicator--03a900d4-7cb9-42bf-ade6-7e8fd3cac642", "indicator--b00bbd8a-61e7-47ed-ba07-f9639cba1482", "indicator--74c4591c-ef6b-410a-a97a-f7920fd73d81", "indicator--2796963b-499d-4ca3-adbe-d0fe79372da0", "indicator--b28e255c-a051-4649-ad1c-13fe9fb5b9ba", "indicator--b0b0e871-1618-48d9-a609-aad33ae842a1", "indicator--654f465c-52cd-4ef6-b259-435643e22108", "indicator--1039ef67-56a7-4aef-b2c7-188b6b04917d", "indicator--1a624bdc-25ff-4ad8-8c0c-80f4afb7bee2", "indicator--45857c35-a0f6-40a2-925e-2d1207512460", "indicator--0e7f99c3-e4c2-4020-9b2b-8fb04365dd08", "indicator--b3a33d2b-af41-4853-91d8-2986481d43f0", "indicator--d8906f48-2801-4bcd-be71-e27b7e92f2dc", "indicator--70b94288-1454-486a-a1b8-0906be101132", "indicator--3654ce1b-7195-4fac-b8cc-520a9f347a5d", "indicator--775d2535-2053-4bdf-8f73-b0bfb2bb9b39", "indicator--940518c8-051e-4456-a889-d9070af3fa3b", "indicator--a1d0b420-3b74-4bcb-b1e4-5f06254edfec", "indicator--a2ccccb5-2db7-4c77-b138-305ef5d7bc28", "indicator--24f29e0f-a77b-4894-94b5-be9c9eaee334", "indicator--9c0121ac-08e1-4535-9a71-dad787cc32c7", "indicator--d06d33ae-a549-433e-b739-e16356882ed2", "indicator--14b37b10-0481-4806-951d-775a77f35c70", "indicator--fe28c58d-b6c0-4f28-9e5e-23f622fd9e8e", "indicator--6e2b3e13-1229-4621-a718-b898905fb3b2", "indicator--5d462107-e352-4e79-945c-e792174d05ce", "indicator--12e77300-4a98-414e-b5b1-7d54491f6599", "indicator--53d4c19e-c716-48dd-a8d0-6bb1ec157ebf", "indicator--cc8f85d5-f43a-4796-aa05-8dfcd5f51397", "indicator--d3253609-ad88-4fd4-8a6a-6f585de8c6a3", "indicator--667cd083-5a3f-4fa5-a54e-09b3781d9e52", "indicator--705f661c-343e-4752-af06-18739700397a", "indicator--c2c423bc-0eac-4012-9293-9465be760393", "indicator--42d65699-34b6-46d2-9f77-5f36df12a9ab", "indicator--502c4004-5a95-4f4d-b722-5e42284a709c", "indicator--0157e47c-5fe1-48a4-ba90-88f1e2e12e3e", "indicator--f12fecb5-1dc3-4d74-9f09-8f02b95316d2", "indicator--e9883b92-8e40-4948-bd1d-4dbce7af61a9", "indicator--014491ac-9d35-4acb-a9ca-9c0ef51cdc0d", "indicator--7beb7432-2dab-469f-adc1-99c1b663830d", "indicator--6a5ad5cf-5bf3-4949-acfb-9d51612847bb", "indicator--7535ceda-d173-462a-a716-f54cefc21ddd", "indicator--28dcd7c6-a3c1-4b1e-a254-5e3a53ec5d14", "indicator--bdc31b3e-1cb4-4e5b-97ac-8df5af10ad6c", "indicator--f943e000-ef25-495f-9c6b-fbb1ad0b6adb", "indicator--d27c6a26-57a5-480e-89dd-e115b388755d", "indicator--17636bf2-c046-4999-9fdd-b0645291e379", "indicator--9e513743-b9cd-4468-98ab-114022e12bf2", "indicator--6bd45799-1725-4a47-ab8f-d62e2ce287bd", "indicator--703e8e51-aa70-422f-82c1-5e95c5fbc6d4", "indicator--b644acdd-8e27-4263-9b42-b58eacd26f64", "indicator--56b27898-600d-4497-9b65-a6d9126d28db", "indicator--bd4472bf-a87c-45fa-bec7-3f7ece25a078", "indicator--843fb7e5-c46a-40ac-8f9d-a206fc03bcd1", "indicator--1526b77c-94e9-4d8a-a303-ae6edea55f48", "indicator--c8a23156-9e66-4627-ad77-9cbe9907ff05", "indicator--c56db013-1a5a-42fb-b2ae-39db4d521bd0", "indicator--b4371bb7-415c-4d0c-b6f4-22906947df1c", "indicator--af251c68-d8ba-46ce-b9d7-b254ad1f760d", "indicator--5aff122e-2bb9-4127-8a80-61b7af31bf4d", "indicator--516b1ce6-11ba-484a-a647-2d5ee07a9d04", "indicator--d82ef9cf-e222-4f7b-a077-10f378f6641c", "indicator--97a44570-906d-47a8-aea4-9bff6629e2b8", "indicator--981f1a56-e238-43a1-9901-1664a1dbf194", "indicator--f0576c46-211e-4741-a03f-27ed9431e084", "indicator--4848d06b-bfa9-4dd2-b37a-6a4d058d8e67", "indicator--81c66f11-8da7-4d5c-9873-f42ba4c434d0", "indicator--74ebf62e-e0ca-4eed-978e-8a3c95b5e2d2", "indicator--f4b52268-aa52-4710-b2cc-d7bab45422c3", "indicator--e53a27c0-9371-445c-b0f5-55eaa065edd3", "indicator--aa4f0f39-d1f5-4b2b-820e-e627e189942b", "indicator--01070ac0-5cda-44e7-8b2e-c80e3144d415", "indicator--5bbbddc5-6f63-4974-bf70-62e0210034eb", "indicator--04135777-0a04-41fb-81f8-0f3c92e0b096", "indicator--96dc5c15-86a3-497d-a06c-c66d5a24c696", "indicator--75b861e2-f63f-45c8-a1d1-2d6eb1dcf6a2", "indicator--9fc5f246-482b-4c0b-b87b-d0ca03ba90e1", "indicator--45684a05-b2b2-43d8-9aa0-e5aa0ce7e212", "indicator--bd28dd3b-421a-41ee-a265-c4cdaa7a8a0d", "indicator--5fd09832-c816-4f6d-a65f-d053010a5d97", "indicator--b06d637f-ea0c-4880-8f16-bf314b9e0ce3", "indicator--f24997b8-2b15-4188-a4bd-33b5f418180b", "indicator--632ccf23-a8f2-4452-bd1f-1cf2d1da39eb", "indicator--6ede826b-25d7-47c6-af85-b5a05e5f1c56", "indicator--7656a9fb-3bea-4205-8b60-8280579ed705", "indicator--9d0d441f-89a3-4660-855e-0074fa975fc8", "indicator--5d082058-43a0-4d37-822e-93121291dd95", "indicator--ef8a19a4-1654-40b8-83c8-f106aaeac562", "indicator--f0716343-5d41-4875-a7ca-d8fb7b6c9590", "indicator--93f62453-c36e-4c24-b778-0d0ef7785f2a", "indicator--c3af3b7d-65d5-48ab-96de-e6d38b153f24", "indicator--19635a61-837b-4763-8ac3-ceecdf0e46f6", "indicator--b38c8f17-3d21-414d-91e1-13cb762708e1", "indicator--5078b0f0-f4a6-4889-9e1d-d3c9898eec9e", "indicator--bed17823-f1a6-4e6d-8c55-3aa5e7a9de89", "indicator--f881a94f-9b63-44c0-9e3e-6582fbd86a13", "indicator--6cfc1b38-f93b-443c-9d21-c4ee8fcb0aa8", "indicator--12734d8e-3140-4cee-97fb-3fbb90c2454b", "indicator--f3310665-89e0-4593-9cb7-11fee7397d85", "indicator--72f75b42-6f29-4e9b-9128-4ed49f22d5a7", "indicator--350268d3-64d6-4853-a07d-3f1114405347", "indicator--98cdc5da-6e04-4cb0-bcb0-ae514bcddc25", "indicator--36b1e4bc-54aa-4676-a35d-e235e02bd388", "indicator--8cad302d-e474-4db4-97a6-9ab5711e1efb", "indicator--c71c39a2-ede7-4499-9ca3-bbc1ce79b2ca", "indicator--869718d3-dc8c-42be-b1c9-3083632a312b", "indicator--9fc97b4c-ac00-4327-89ce-4060495602a9", "indicator--34fc5fd8-a422-44d7-bc23-ff999e8739c7", "indicator--d306a8e7-21c2-4e4c-ae71-ea3c894e11a0", "indicator--510d870f-8fe2-492a-88f6-87cd7ecf33ef", "indicator--8b532ea7-1ea0-42c3-b2a9-f5c1bcf3304a", "indicator--5f7ba4fc-20cd-4eca-ad00-e796f75b611c", "indicator--003428fb-5378-4293-bbde-6b5a9acffbcd", "indicator--57bd8e0d-1e7d-408a-b416-bb1f51f0ff3d", "indicator--22164fe6-3e5f-4838-bc28-e04dd48a85f0", "indicator--e34df9b0-b0ea-4151-8657-588c9872d916", "indicator--807f1223-6223-437f-985f-32d588f57271", "indicator--c84851d3-5fa7-4f54-a5ed-9f7c3d0ebe56", "indicator--bac85bc0-5ef9-40bc-8348-05f648e41ba9", "indicator--1f0387d6-536c-48c1-b631-34d73c9c4672", "indicator--dbab5b19-83a0-44ea-bd6b-7d313ac18158", "indicator--6967ab2b-4d71-41d9-b914-d1a1bb6d1eaf", "indicator--bf77ebbf-9b23-4ce5-9027-5214ff53c410", "indicator--f2f2646d-69f9-4ffd-9fc0-892dde638c19", "indicator--bb05a01a-148e-4d70-b477-aceb83182aee", "indicator--45637765-061a-45ea-92d5-4694287ccb3b", "indicator--30852a7f-5824-41f5-bebf-38377ddb9512", "indicator--5da64b37-faa5-4951-815c-c3245bd1bdbb", "indicator--e9f96def-8305-4e8a-adf5-cb2232e40d19", "indicator--c4877222-a2a6-4832-96db-5976e9a14962", "indicator--9d2c237b-4b19-420c-889c-d223abc5dfc6", "indicator--39a3da43-3518-429b-8bd5-886c6eb7efcd", "indicator--fee590ec-8f3e-4162-97f7-3d0d0ce8efef", "indicator--428a57e7-c57e-46f8-a937-5a9ddeff09da", "indicator--a02493c4-55f7-4828-9474-b10b8dce4bcc", "indicator--db57a841-46b8-41fe-9cd9-13ab5abad034", "indicator--82920bf2-ae93-4d85-8b18-5dd82e3fe63b", "indicator--be4328b1-a7ae-406b-b64c-fe8da9b60aa1", "indicator--09d88deb-cc01-42e3-bdfe-c00424524510", "indicator--3f6ee303-01b8-47f1-bf8d-bfed44c46969", "indicator--4c6c3fb4-f4da-4c99-ae07-44cb675050ec", "indicator--6549f49e-2b27-4dc7-be27-88b052156964", "indicator--a83c83d1-1cc6-4f70-93dd-62a696ae0485", "indicator--48cb42bc-50c6-446c-8da1-be7872857fdd", "indicator--afe65663-5eb2-4956-884e-5fa6cf9dfcbd", "indicator--ca9a1c77-8484-4d9b-95f2-8717b6af0e22", "indicator--faaca470-7677-4c5c-a36c-94c0a5aa0e36", "indicator--d4d1e240-40bc-42a2-9117-6d4eaf6008eb", "indicator--d837cfc3-ece2-4e67-80a2-b0fba98da393", "indicator--3dbd65cd-a9a5-418b-ab48-fd0daf096b1b", "indicator--ea1a4564-d97b-418a-a6e6-f1d9b06fdbea", "indicator--9d6bf8db-4655-47bc-93f3-fd63784b1f0f", "indicator--554fcc93-7a1a-48b4-878a-0e5e66f4e696", "indicator--f3b93e2b-3c8c-41d9-88d5-e474b1d596a9", "indicator--16695da4-c4d3-43bc-849d-656cd19a3737", "indicator--a83fa1be-a6e6-443d-9897-ae5bc50cc5c8", "indicator--9c90dfc3-f4cb-49c0-a974-089963af5fe6", "indicator--269d88fc-8ef3-4d33-9eb5-2ac6d08477a9", "indicator--5dc85cf8-a5b9-4619-8305-b0d6d83f7035", "indicator--d1f99648-8524-48a1-b4ec-354b17bdaa40", "indicator--430b4c98-12f3-4b76-8808-f876d715a511", "indicator--e24cf5a0-67db-4f3b-946c-b1c8de9d3e55", "indicator--6e0a1c16-2176-401e-a867-a41b78ffceba", "indicator--ec5ef755-a23f-44b6-a886-52f0b937e873", "indicator--219754a3-70ab-48b2-bfbb-496a6bff4d17", "indicator--c50b134c-713b-4a94-8ecf-8fc46bb8a772", "indicator--65e73ac1-a235-42f6-97fa-de89921ec91a", "indicator--667910eb-017a-4d74-848a-95dc000cfad5", "indicator--330bfcd8-690a-49c6-814a-120b9e983f7f", "indicator--094037a9-0673-4ba7-ad7f-5f1326463c20", "indicator--f9c76509-7a5d-4af9-b55c-c678d7e9dd3d", "indicator--4bc17380-0ddd-4c1e-9474-5483a3aa0753", "indicator--8923bc97-110c-43d7-8242-18d5e5a21f45", "indicator--d9738c7e-2d2c-4649-ab93-bfad5b42f4be", "indicator--487ef649-798c-4a3e-8454-ea2a46268207", "indicator--5509fb69-ae8c-4101-920f-19cd39a3b899", "indicator--a0cec8ab-a0e8-46a7-b4fd-930fcc4b0895", "indicator--df50ef4f-9efa-49dd-8c8e-1e65d06bd135", "indicator--0461253c-255b-43f1-80ec-aac838966da2", "indicator--e9b2601d-b219-4166-951d-a4b0711ed063", "indicator--9bef2e70-996b-4f58-9e5d-2ffbbb603a54", "indicator--c8b16bef-775a-4f41-a377-4331760f0873", "indicator--69ec26e5-046c-491d-ab9d-c6b4a382228b", "indicator--1089bf22-2c73-4291-8763-046e508164d0", "indicator--31404747-08e2-43f0-885e-7b3118c99c0d", "indicator--2a02f94f-c139-4169-85e4-703ed1b68588", "indicator--e6b9bc87-96fc-497e-9ef5-70be78c5706c", "indicator--c0b01763-e7d1-4372-97d4-5740e837e57f", "indicator--16a29a5a-7f04-4330-8ba4-331c6ea93ec5", "indicator--1250fe49-23bc-453a-a7c6-cff39051d862", "indicator--dd83b618-e865-4834-b449-7227b1d4231f", "indicator--9f315eda-9a3b-408b-871b-ae04f662d394", "indicator--b1dd4c60-02cb-4cfb-96ed-2b79238fe8f2", "indicator--3b44671b-ea0b-4f57-bfba-3033e003897e", "indicator--11f52760-e7f2-43ba-bd20-8539ead519ae", "indicator--6f8b9aaf-f30b-46cf-ab67-9972e1f13786", "indicator--5846455f-3dad-49d9-a8e5-0a573b9351fe", "indicator--f6421a1e-7c88-4dca-85c7-1e71fafa5a02", "indicator--3cf362af-8f21-4e5f-a082-ee96739d6433", "indicator--0542a8a8-2013-4150-817c-f56692a85ffb", "indicator--ab4aaabc-f9f3-4b31-b236-6cdfe90289d0", "indicator--72f3254a-a9ef-4ea2-973f-c9a076591d6b", "indicator--d1a01836-9cb6-47b4-a995-fe286095e3ba", "indicator--0e1ddacf-675d-48d5-a694-8c5cd3d1b85a", "indicator--5d966bd8-0d16-49d0-b1eb-f95d292a061a", "indicator--7e17628b-2a4b-4ac0-af7e-46b71f3e9ff1", "indicator--8888b113-912e-42f0-b159-988690b9478e", "indicator--b7a0fbcc-2af0-4778-af73-b093b51be695", "indicator--f785560a-ad5f-4031-a5a0-67f769ae08c1", "indicator--adad3cc6-fe5e-47aa-87a6-eb99cee52851", "indicator--ab148d2d-1a3e-42b3-9d40-9e1a848d0af4", "indicator--58019690-944b-4ca7-82b1-537825a5e672", "indicator--28e1eaa3-0b13-49d8-849b-10622ac769b3", "indicator--6e43fb0d-7523-4e63-9862-18db86272c09", "indicator--7dd14b05-3058-480f-b373-c991d5a567d1", "indicator--0506f67d-6f43-4259-b108-10a989f849d5", "indicator--7882a3ee-6656-40ec-b77a-40eaa1d4b00e", "indicator--a0890f4f-fc76-457c-adec-7b20ced6eff3", "indicator--b8658f36-4cba-4fd9-afaa-708f27662c91", "indicator--28ddad06-2ab7-47d2-8226-7374065f32e3", "indicator--a68041ff-28e3-4bf0-9039-2f4885e4ac04", "indicator--27c241fc-6552-4259-8d99-1f525dc26b25", "indicator--44f1fee1-3166-4437-a230-794bf2ae5554", "indicator--72b7e81c-8bfb-47f6-a758-0e17450ba8fe", "indicator--ed0efa1c-2437-40c2-92cd-dbbf6461f472", "indicator--a05e3a68-2cba-438b-b717-b4535e42708e", "indicator--d8f26403-c583-417a-a9ff-20bb679785bc", "indicator--3b69b432-ae52-4ad9-955b-e9b0d7432fe4", "indicator--da8d2672-e94e-4d6a-a020-3f53ed72685f", "indicator--8bb01157-0539-4b82-9d87-4f3dafaa9e10", "indicator--80e3c171-db8f-429d-b89a-ef2b8a9fff34", "indicator--cbc0d087-f490-4d69-9df7-ccb54295c51b", "indicator--75ed4c6e-5d21-4d4a-ba3b-9c9960b2c03f", "indicator--7e2d2250-e320-4916-b10f-97b757c6aa95", "indicator--0f626a80-4d87-492c-a2df-54894c4e6785", "indicator--deb21b23-3765-4dc4-8d62-465077465c7f", "indicator--351aac08-f437-4ea2-95ad-0a1fcff95f45", "indicator--2f57c601-de35-4031-96ca-d846ebf2e3f0", "indicator--272bc59e-9395-4941-9601-16965d8ddbe6", "indicator--0c069c50-f2b7-4666-a7ac-5dbe56f22fca", "indicator--4da897c1-590f-437b-bd7f-63f0e183bbbd", "indicator--3c012580-dbfb-42be-ac66-283ff7b7eaf1", "indicator--7fc77d4e-28cb-4149-a56d-e05e599ecfe5", "indicator--c90b6b2f-a12c-43de-ae51-925ae093371a", "indicator--c0d9f20b-9589-48b7-a2d1-0f0667195e84", "indicator--accc3247-5a20-4162-9134-75cc4f4934ed", "indicator--b25e0efb-26ef-445f-ab4c-4216fad781f7", "indicator--a3cc9713-58eb-4637-959e-9a27b4c73acb", "indicator--13cc939f-b9b7-4cb4-9502-4a90f51d2401", "indicator--c58a9fc3-5f29-42c6-a5c0-d3f76daa33d0", "indicator--b8ad6597-dab8-4871-acaa-c0b2e5842564", "indicator--39b466aa-7e62-414e-812b-7ce0a141a3ae", "indicator--239a2319-8a3f-442e-a788-2049eb3573e2", "indicator--8ec573fb-0439-49a4-8987-5320e35e8cc0", "indicator--aad38c7c-4d00-4ae3-b20b-6e630325f4ca", "indicator--5c60590b-55df-4b73-90ec-2faa38dd2058", "indicator--4d3a0971-c3a1-4b18-96af-d2ae7c943c4e", "indicator--d61d2dec-ea17-42ac-8dd9-89c3b7068e40", "indicator--fda425a2-7363-4f72-97cc-7175fcc65e9a", "indicator--bc26fe76-5956-44a4-925d-c61a08948fe2", "indicator--6b7414d6-f24b-47f7-a05f-9fa608148e9d", "indicator--546fff04-1e3c-47ed-afe4-1d7a3375dd30", "indicator--f349aad0-045a-4fae-904d-671682a365dd", "indicator--9b57a451-307d-4f50-955f-7c362faac20e", "indicator--00fb4273-50f1-4f5c-ba42-b902cd0a0817", "indicator--3a450890-c223-4c55-9f35-b15437721955", "indicator--bc0ecb84-ef80-4ebf-83a4-e393ef4d270b", "indicator--974fe430-9db7-4dd5-a476-a8d79b9319c2", "indicator--30149991-01b0-42de-a655-5361c1139197", "indicator--7e311a8e-d8b2-41f6-b62f-e9cc59c423e5", "indicator--7cf7bfc5-7e80-4ee7-9e6a-bed1507815af", "indicator--96fefc7a-6a2d-4a83-9c29-305fcd821bcd", "indicator--7323eaeb-0291-41ab-8cfe-918aa26e262f", "indicator--2ba834b4-15c3-4bca-a466-4a9d992b52be", "indicator--811b08ea-cc45-4bf7-95f5-344f5fe5c46d", "indicator--4ea9cf0b-3b0d-4c2e-a677-f58a9a265f18", "indicator--93dde6fd-bbcd-4f51-a2c5-01abae65bcaa", "indicator--257bf02b-5ab1-4430-a378-ab9dc8d60e10", "indicator--c20f5a3b-1087-49c6-a621-c2ef1ed0c9dd", "indicator--e5b314cf-9dba-432c-b15d-2cea2570a1d0", "indicator--b27c1b05-d328-4105-80d6-546d7b5c06c1", "indicator--44f1853b-345b-459f-8b88-1f5d21bb4d08", "indicator--eac81251-8f90-4132-9069-a15f2d2976c2", "indicator--afa5fce4-4cd4-41ac-bc96-8eb70f46092c", "indicator--bb6e74e3-f1b2-474c-a253-1bb259dbd1b1", "indicator--8826c0e2-5958-45e0-8c39-3efa8583893b", "indicator--483324c5-4986-4775-81e8-abed203272d6", "indicator--677e2590-8784-45e1-84e0-568be0b15b0f", "indicator--53bec46e-c691-4d90-81b2-e1ce9807e139", "indicator--ce5802a6-35b9-417f-891b-1d0aea891aaf", "indicator--bdddee96-849d-458e-b708-79f2617ae41d", "indicator--c207112a-3439-4631-8cb5-7070c165ca74", "indicator--df6b352e-7270-4a85-bc06-3f5de79bd062", "indicator--c859334f-d3db-44f5-9626-0736d4471879", "indicator--cb2ba10b-eeb5-4cdd-a536-0fdc7ca9a6eb", "indicator--440ced1c-78ad-48ec-8cd0-a8071ca5be03", "indicator--662ba2a2-169d-4170-b431-8ace0a669644", "indicator--6ddd7283-9070-4cd0-a95f-b0da70293ad2", "indicator--27375fa3-1f64-4386-ba3b-04b9dff4a633", "indicator--42d9dfe0-ad50-4251-89e6-f01083331301", "indicator--6151737a-856c-4bab-9bf3-a2791be5c19c", "indicator--725a8080-73dd-4261-b8e6-30aea611da86", "indicator--87e81bc6-a44d-445b-8f9f-1a575bd32b16", "indicator--91277efc-f4f7-4c5f-a98b-50300338e06d", "indicator--dd61288e-2c16-40df-8698-ff217994a0aa", "indicator--826bb132-62d3-45a0-8a84-1c25ca8a30e9", "indicator--2d693772-043a-40ab-a865-36b100263a07", "indicator--697b0035-2d80-45c6-a8e6-fdf091f4b28d", "indicator--e19074be-6003-4722-8cf3-1d7b4869df11", "indicator--e9c60ec4-3880-4616-8120-400c7edf3cc2", "indicator--b86fe1fa-7af1-48fd-9818-d05d755c5366", "indicator--5531d863-1a42-48d4-9780-75ae5c51cfe9", "indicator--6a4de2e7-6e82-4e71-9a6b-20e53c2a4928", "indicator--6fbd99c3-0705-4cf9-9dd0-d3570be47811", "indicator--65d4dae5-e84b-4e23-8aa7-519338a73443", "indicator--a5b88cd4-d74c-4cb0-af1a-fae4f73c43f4", "indicator--6255f452-2e56-4216-a954-473d6c67aca5", "indicator--2b57fbba-b73f-4ff5-b10b-a77f5bfc36ca", "indicator--54f2554b-1171-4219-8719-cd66301c8595", "indicator--f3bdc66a-ab2f-4006-82ab-4fdde7f6704c", "indicator--142bf3ae-fd69-4884-9121-322661000162", "indicator--848dec18-4359-4864-ac7f-67c649a7a8ff", "indicator--9a2253a3-3f17-499a-a603-fdaef514c6cf", "indicator--f334a3a2-624f-4cda-94ac-2811f703c8de", "indicator--49087427-1897-450a-b6c3-45e7c65e47d9", "indicator--27dfdea4-5ec2-48c2-ad0f-49c5434dcf0b", "indicator--d3b6b689-ac29-4117-9ef6-d41db8686377", "indicator--f49a33a2-aeb7-4f6e-9ffe-beed7106ec06", "indicator--462a469a-7225-4241-87a8-48a16537b14b", "indicator--d3936372-2ee5-4eb9-9f16-aab60ae75a9e", "indicator--291424d0-be3e-409a-aa9f-a349620558ba", "indicator--a6d9fdb6-20f8-425f-85e6-59e26b19db0a", "indicator--00c08a06-ff9a-493c-93d3-5e218c009fcb", "indicator--9ffc1888-14b9-4a76-bdf2-2e581e96bb80", "indicator--9cdc9acb-b667-4213-a093-7f423c817458", "indicator--e9c09225-058e-4841-9b04-c35e8ad6f77c", "indicator--8c3653eb-694e-4767-8647-f9648703287b", "indicator--ab878a07-846b-4da6-8a52-8db0acded4ee", "indicator--b733ffe0-a7f2-49f6-98ab-71f5439149b5", "indicator--4283a879-f245-4a59-921a-0a08d8244858", "indicator--f8b452fc-dc3e-4d25-95f5-9d6e311785c8", "indicator--8e1a4979-8b0b-4593-b1fa-4e02932c63db", "indicator--dd2909f4-7016-472f-9e24-9e59c9427155", "indicator--f2c1aaab-4450-4263-88cf-8177d8312451", "indicator--71a82454-71f5-4851-8073-c5dcf752f58d", "indicator--1a4b8d95-267e-4e87-a943-9133d222000a", "indicator--35c020b1-e355-4cee-817a-45705bd269f0", "indicator--6a5cb9be-f7eb-4376-8a3b-cb13a7d35b01", "indicator--52e24fbc-8c1c-45c2-90d0-34c79b7b40b5", "indicator--20ea4996-fd16-44f8-bee6-e12f76302c82", "indicator--4a14daac-285e-487d-94a7-864abe864c79", "indicator--21a6e0f0-591f-4f3e-a5cc-b73606960fda", "indicator--ffbfe3a5-dc84-4f12-9e6c-c95e64ea8d7d", "indicator--ad19800a-d9c5-4dbf-a255-4d5a1d468e7a", "indicator--a40526b2-c6fd-4247-9c2e-e07b2db35989", "indicator--bdd6164d-c7d8-4993-a859-50493d040802", "indicator--b388f6d8-dba6-4bea-9f5c-8c80768edd4a", "indicator--74b6600f-5833-41d0-8288-ad31da5c3371", "indicator--909ec2bc-573c-4a03-83e3-e83ba4873462", "indicator--7e801acf-304c-4697-813c-e33b7aa0f575", "indicator--b0696f26-af86-4973-8273-f0c22d185e5e", "indicator--293340de-2cae-4644-9f6e-db2e07e13fd4", "indicator--e0157cd8-89dc-4669-933b-aa2c6f155506", "indicator--8ae26523-8d3a-4071-a466-e631055ee4a9", "indicator--dcff8dfa-25cd-4a76-805f-7d82b34b44de", "indicator--0429b267-b83b-4065-a783-9cea1c3b6677", "indicator--e6b67611-75d6-415a-8a47-e004a7874f4b", "indicator--211a5546-f83d-4c0e-bf56-0883777208fe", "indicator--2f67fadb-d317-4fb2-846a-a05e0857f49c", "indicator--17e29820-b1bd-4859-92f1-9c43c3a043cd", "indicator--81045aef-49c6-4df9-aea7-2b96c7a0cb7f", "indicator--9b0b0a07-3b2f-4e30-bc9c-fd61fc73af45", "indicator--628710b0-0ec7-411f-82e7-58d27e9c7988", "indicator--4ca9ef75-f17d-4702-9cdc-b39d257bdf21", "indicator--32e4ea12-fd93-4243-9314-40472a3b1661", "indicator--d680a140-2565-4275-85c1-76afb31ee8a7", "indicator--6a43f29a-b102-41a8-b6ed-13a5a6c99d9d", "indicator--7ebe2ff2-30cc-48d2-b253-4e65484cff06", "indicator--3afb19af-39af-480c-a87a-d0668c3ba4e3", "indicator--021a1d85-75bc-41c3-b5bd-40aa190122e1", "indicator--96a33a90-956f-475f-afa0-01d3e2f68562", "indicator--f0ed8dfd-f825-4ab5-86cf-54217ca3df30", "indicator--28f4531f-ea92-4d4f-a08b-b3a2e6c190ff", "indicator--6d5847fb-1278-428d-abb3-730e84a301e0", "indicator--e6f5656a-26df-471b-a2d1-e63fedb80771", "indicator--b0472b67-ad73-4a71-aaed-0f3f3cba9dfa", "indicator--2e16cf4a-d0c3-412f-a826-d9235f0615f0", "indicator--0fb2445c-f752-4335-9486-e46ffe81a0b5", "indicator--855e0714-a854-4c81-8727-422925266d81", "indicator--e6786866-c4c5-416a-804c-1bd6391a6743", "indicator--b110a55c-53d5-4783-8bdf-7f849a2903d0", "indicator--d90a78d3-7486-414b-8d8b-84970124adab", "indicator--6365b05d-5b22-4e4b-8374-fc64d4de215e", "indicator--f848c7c1-77b4-4e1f-847f-98471717d5a7", "indicator--1bac755e-099d-4421-848f-ff4da47f3b13", "indicator--35b9d37e-19ca-4862-821e-479728a712e8", "indicator--d50c7498-caf3-4649-89f2-7cb39e3f6a3f", "indicator--8b1dde8d-718e-4cc2-99c0-c611ae5dd438", "indicator--941db2e7-5dda-4709-95b2-3e5ed115a9b0", "indicator--3ba80d9a-abbe-4c3e-b685-ecb5b9d5e09a", "indicator--b6026b61-e95f-4363-b04f-0c8a47e25aa5", "indicator--d854660e-3ccb-4237-867d-68c44a49cdc9", "indicator--408b5674-1c4c-4184-927c-96f8a105068e", "indicator--88678a34-123e-429e-9094-ac39211e8d5d", "indicator--456ddf73-22b5-456a-908e-4ebe197070a0", "indicator--079fd9ba-18aa-4cbd-963b-711d5cefa745", "indicator--31c60f56-517c-4d69-b6eb-6bc8fb7e851b", "indicator--5d2bb8f5-87f4-48c1-8a8c-7be6dea195d0", "indicator--7d38323f-d10e-40b5-afc5-7486625847bc", "indicator--aee9778f-9ffb-4dd7-97cf-b1b15b5a952c", "indicator--f0e17dde-3b6f-4213-8867-0e0bff6ecc43", "indicator--01afb121-6ec5-4639-9467-26d02553a4b7", "indicator--b33be070-c26e-45e4-8dd3-3532e5c60998", "indicator--07d106e4-fc66-4d95-ae5b-a08be0c167c5", "indicator--35a41a8d-7d9b-4d10-bdb0-7db1a4d62a9d", "indicator--2a3b1f49-7a0a-4c15-9d19-8a7f30b677cb", "indicator--eb8bb492-7bbf-43ca-b724-90f17247f22d", "indicator--65184439-a0fb-4b44-898f-646ccb7568e9", "indicator--a23bd6fa-b629-47b8-b7ba-3c1cc0db8025", "indicator--7c7ade7c-00c5-4927-9b5e-d0e913eb7a76", "indicator--c349621b-3d4f-4306-ba99-5db9ad9a5ea6", "indicator--db9f7958-d4e1-4c35-9bca-b9e4c54f4cf4", "indicator--b27af19f-0762-4757-9c62-e045c0f591cb", "indicator--41e614e5-18f5-4407-83a2-b241b9162cf8", "indicator--9fd7f3b8-e6a6-40fa-8909-a2582bda43da", "indicator--2ab2d795-8e80-4b9e-86d0-814f2c22178d", "indicator--e2ea13ca-ea73-40ed-bd17-c3bbcbfc7b12", "indicator--3deb5cf6-8f63-4210-8dbd-43c56724d5e1", "indicator--b07a300d-fb9d-49e4-8465-908c4d19efea", "indicator--5b142fd8-d656-4387-ba4f-1317ffed5131", "indicator--0703ba0a-2107-41be-9d2e-71bbdfdc1805", "indicator--fe19a054-3210-43f1-bfa7-16e1c0a9d47a", "indicator--0e26ccb0-1859-4ed9-a967-c4dfcbfa9fc2", "indicator--8d26c57e-6ddf-447f-a219-048c4ff4c05e", "indicator--4d3dba7f-4e8e-4744-ba75-328ad1bab6ad", "indicator--b2228ec8-5cc5-41e2-83d2-ebf8c1cc917e", "indicator--c9b52c38-8893-4803-8bde-8e185f859806", "indicator--93ee9ef1-a70b-4b16-badb-4f950ddc2f75", "indicator--c05734e0-9e68-4f0a-8a4b-06ac1b03eefd", "indicator--70ead6bb-b164-42ec-a507-1defc89cc647", "indicator--182a822e-0f6c-4bf1-b1e0-1d18539fbe15", "indicator--8b899e4c-81e8-4bac-abcf-1bff5a1867b3", "indicator--b1d467c0-6e87-4586-baab-82e438187755", "indicator--d027f997-fec0-4359-a4ef-b9ea4e1b5ef8", "indicator--9d19488f-439a-4b69-a223-c2e18935535e", "indicator--b9c965fc-56e1-47d7-93be-a99221f00161", "indicator--99f5f329-6119-40c1-b809-a1ea810f7d14", "indicator--b8c22f6c-c168-42fe-8fa3-be8c4f97fdab", "indicator--6ebfef7f-4e1f-4f4b-9c9b-c0a3c2a45f31", "indicator--a6e8d27b-64b7-4be2-af2f-8b9b45246bd9", "indicator--212ab5e3-dccd-4198-b969-b6b5305bd86a", "indicator--be329879-ea28-473c-9e3e-34a4d2b5c09c", "indicator--f97e4916-2999-46c6-ae2d-2832bacfbcab", "indicator--91a260a2-789d-498b-96ba-1d2a051ada86", "indicator--d6f4e0c9-2a11-43c4-b0b6-971eee76de1a", "indicator--a9beaf78-7af8-4b7f-bc13-0fbc726c64db", "indicator--6de08a5e-5cdd-40a8-a942-ea281b2a68ca", "indicator--ab4399f8-34ae-465e-9229-4564567089fd", "indicator--5ab579b8-200e-479f-865f-bd2f54be7bce", "indicator--b98662d6-6162-4aa8-baec-69582e792b3a", "indicator--5dadb97c-1c3b-4e10-b6fc-acdb3ba91a55", "indicator--eeed7a1e-d366-44c1-9999-46ff4485dd60", "indicator--4bc72a6e-07e0-43f7-9c36-eb73ea5fcda4", "indicator--8f273756-0494-4ee6-b367-390ae1c1cf5f", "indicator--715fe6f3-870c-4faa-8cf9-5b73d0529ce2", "indicator--d26e3140-ab64-434e-b2b7-eb37595a9491", "indicator--66887063-46af-4d1e-b1a4-540878efbb81", "indicator--75de010b-6517-4fad-9b0a-c0a0ef16d216", "indicator--a5628946-5754-4d53-944d-221127ac18df", "indicator--315ff756-7918-40a3-80df-6257e5997dad", "indicator--3d86a1c7-ca88-4631-82fe-0208aa357faf", "indicator--5e2ea837-b845-42f7-91c7-9a4f2540fcdb", "indicator--d895f0a3-275c-4b6e-a4a1-3660db06f951", "indicator--ebad6640-739e-44c0-bcce-83530e797da9", "indicator--935a353c-b9b4-4282-9120-021f214b4c53", "indicator--b55a8c16-3fd6-4ac1-8ac1-f94ce1bde7e7", "indicator--85880465-739e-41a7-8ddd-78bc440d709d", "indicator--ed92219c-0f17-4a7c-8da9-9d5b14c896cd", "indicator--ec07e324-23da-4a41-b18b-f05836a1d50e", "indicator--f6dd1a42-3856-49e8-b128-ea49513ff310", "indicator--f4643fd1-7287-4351-8585-5061ef98e3ea", "indicator--19d9ed2c-150f-405a-aaec-ce39314e3fd6", "indicator--d70d6679-d9e3-4258-9756-d86d01e6ccbe", "indicator--cba9d601-b2e9-4e66-afa0-c3a8604e3af3", "indicator--9805f0c9-ee06-4496-b52e-9425e899b7a7", "indicator--64df72a2-20b5-4193-8b0f-2b32fde876af", "indicator--8799067e-3fb9-449d-a15a-2f6aaf39a9b1", "indicator--9b404d2e-f6da-48b9-bb6d-0397bbdfe085", "indicator--09b42dce-e448-4d6f-a123-3809465c631b", "indicator--f505b4e4-6878-48d3-b28f-711df6f89169", "indicator--daa4f5e7-7d1b-4714-a37a-7a4480a90651", "indicator--eaf11311-de62-4f85-acf3-2d9207bfbd32", "indicator--7bbdeca4-e51a-48d5-9977-6897370b34ce", "indicator--06ddb0c1-46c3-43ca-b7b0-07fef5f6234c", "indicator--e1c5a4f4-0f55-4c72-8f01-2e5797856789", "indicator--92d2093d-9905-4f00-b70a-5777b88058e0", "indicator--2ed4e157-cdef-4913-92cb-f381a9ef4b95", "indicator--c568a2d7-cf1f-401e-8293-020ed316c0c1", "indicator--52c81f39-ad2c-4adb-b5fd-e0071f2875d1", "indicator--3f3aeeb9-cbbe-4115-8f09-e73535e0a71d", "indicator--62128fde-054d-4fa6-894f-125f0124612e", "indicator--bf9bc922-4a5b-4037-83f3-e4f933ffb36d", "indicator--87f6164e-7aa0-4f83-8c1a-4f502a71eb94", "indicator--eef9a747-2850-4bd9-bb69-ebffa48b5c99", "indicator--08690c21-e568-4957-b880-f9a4c7886e95", "indicator--ea5531e4-6e54-41d1-8ff0-412041cdcd0a", "indicator--102d0c64-bd51-42e3-bc7e-3bea6ad13c74", "indicator--628ef7f5-bead-4f25-b9d8-d8c5fcec6b6f", "indicator--04cbfca5-6320-46e3-bb63-8ba891b7abfd", "indicator--a361e5d4-ffa8-4718-9e29-f54a40b9ae44", "indicator--535393a3-2026-424f-b0da-afc838dd69c2", "indicator--5d517a7b-e47c-4af9-94cb-5445dc21c6d6", "indicator--96ed3e8d-e9b4-44da-b1c3-1346666e8151", "indicator--6d13ffb0-ffa0-42c5-83c1-b204ba2587e0", "indicator--af96326b-4ded-4faf-aaa2-88ead9c6a2b6", "indicator--41cc4e73-b2d5-4573-94ec-1ac59b67c78b", "indicator--bb8a6d0b-a791-4b63-83b6-abb0a0477668", "indicator--13570bc7-ad05-4e16-ae76-8cff258f7496", "indicator--b3fe11cb-22a6-4ed5-b56a-8d6c6088a81e", "indicator--de821d44-19c8-42f8-97e4-5206ca566110", "indicator--4246aa6b-aac2-4ed3-8bf1-be6b50a21002", "indicator--329df87b-831f-44fe-8bbb-8e4b86ea9183", "indicator--3ce36b18-9d00-47c3-b8cc-8af82f0a6b11", "indicator--df8311c5-c420-4abb-bcd3-8c2acec53bca", "indicator--4809eb1f-e6b2-48f4-a74b-a196415cfb73", "indicator--8be1a7ed-20f5-44c1-a9a9-de8071ff08a6", "indicator--08f04af8-1a97-43d4-8d41-f3b47f9d95ee", "indicator--a840c14e-50d7-4dc9-bf3a-09288d894a70", "indicator--1792b87f-db4e-4331-b18e-ab792e0e5a82", "indicator--05a42488-f88d-450c-8dfa-6fb0dc7b8575", "indicator--f515097b-5d92-41d7-87a5-c7a3b391938a", "indicator--28a956f8-ae7d-4f54-b0a9-4be1e70c0ed5", "indicator--e4e695f9-4b3e-46cc-bf13-8cf6820cc3d8", "indicator--89770df4-ba8e-463c-b454-7b988f098c07", "indicator--c7bb6567-d2e8-43f2-a3de-b3d12c756bb2", "indicator--8429064e-0771-4fe7-abcc-dbb110100be6", "indicator--17727f7a-2e18-4a07-938a-b80d9bcbb6d6", "indicator--980854ef-4b6b-4737-9671-bbdb84aa77c8", "indicator--395d72ba-6d52-4e85-8864-b74262273a71", "indicator--c63061a4-c81b-421d-b4cd-1e79fd2e3d76", "indicator--7d38a8b2-e7ed-421e-a723-189c0536b81c", "indicator--2d4cd7ca-12a7-445d-b8dc-5f373ade21fb", "indicator--e159eda9-4900-4c24-a4d4-08ffd0bc27c5", "indicator--c267a2e2-7e5c-4b89-9a8a-ac656ae0ced5", "indicator--6fbe9068-cd08-4a3c-a6fb-38b26e51f1c0", "indicator--bebde01b-34e4-4e9c-91ad-aa0ecb056555", "indicator--44614194-02ec-4519-b300-bb63430c88a8", "indicator--a11ae33c-6714-436c-bb2c-918a7b8cc0c6", "indicator--34745c70-5d2d-41e6-9855-7524f463f4af", "indicator--d8e12c72-b72f-490e-b7e6-7734d42c81eb", "indicator--b5d05bfe-b2e2-49b5-a3d8-35806d8e8cac", "indicator--536012f5-dc7d-4455-8d8b-b497f737773b", "indicator--06bb511b-530f-4cf7-bf59-32b7ad9a99c4", "indicator--59bb1e59-c469-4075-b474-bc0c57ec1daf", "indicator--3f0174d2-ad48-4d06-8869-c065c22bc40a", "indicator--044adaeb-7582-41d1-9708-ba3672b15076", "indicator--5eecf67d-efbf-49a4-91e7-42c7c6b151a8", "indicator--4b645212-748f-402a-a530-2cd4b4810249", "indicator--488b9403-8615-440e-93bf-0f4bbea0d4f2", "indicator--d9205e6b-14b3-48bb-8860-19a378d89176", "indicator--1874c799-a25d-47c3-8c93-de778437ddcf", "indicator--ace4f2df-e178-4cd3-91a2-100121e49f34", "indicator--76934820-0bcf-49a0-9a5b-e4cd37b2d5a9", "indicator--169317ba-70e7-4dd1-9e10-012586cbad06", "indicator--db957770-dfe1-4c02-b9fc-670a83c53400", "indicator--2f6fe6f7-91b5-4309-bbc6-59c27f36ef77", "indicator--b413d456-fecc-4fd4-9606-9045752818dd", "indicator--ba8a4495-7eb9-47c5-ba75-aec055ab1f9b", "indicator--88fe6cd8-58a0-478b-8c50-39e7f68b9f9a", "indicator--bae39b4a-3748-44bd-a2a9-6037ae686fc9", "indicator--7fd09999-6e7c-468a-aba0-aec716f7df1e", "indicator--76c2aacf-397e-4320-b854-9b808e15ecf4", "indicator--03acb387-8348-451f-b74d-9336b5129c14", "indicator--b65c75de-b30b-4528-82ea-f74f54807fe9", "indicator--d39bab69-760f-48be-b507-105b8658941e", "indicator--6bd81a8a-87cc-41de-b176-a7767817d7d6", "indicator--147afbd8-9a20-4456-9c7f-fa0b68b61f55", "indicator--1150c837-5228-48bb-84df-b4696118904a", "indicator--894e3790-2510-4b7b-a6e6-d91966b26ab4", "indicator--5fb9fba3-7bde-4e68-bf69-030e6e1f8805", "indicator--8340893c-d1d9-4a0d-a3bb-f11ebcbee8e9", "indicator--fc4fec0c-a76b-49c8-bbc4-94200b8ef614", "indicator--96c969c1-4d9a-430b-b88c-709c969e848e", "indicator--9496226d-be1e-4f3f-ae7f-43a300ce1459", "indicator--f4c55768-d953-4e21-b907-c2096e45ec21", "indicator--cd340c11-5820-46ba-9618-56d0b3225a9f", "indicator--12ced3c1-3b99-4012-bb86-15e5087d0e56", "indicator--6158da16-82e6-4760-81c5-a20fbf8ee942", "indicator--0d5e0f52-acdc-4958-afde-19bef67e6060", "indicator--def75523-d1c1-492d-9c5b-836fde757941", "indicator--73e964ff-3a2b-4ae6-9f4d-9bad10360c52", "indicator--5866b843-1514-446c-b949-f20525eb10bf", "indicator--13dc56f0-ae7e-49c1-abf4-b4c800bd0c6b", "indicator--18dfc3a3-ab94-4938-90b5-916b41b2d1b5", "indicator--f77a0951-b94b-43ff-87c1-71b780748911", "indicator--b3d55ed0-d56a-4d24-aac1-d3983f03a1ac", "indicator--f61aebb2-7fae-4b54-83d4-efbdd4fde870", "indicator--9662c47c-f133-4544-a4d8-6f9bbb12387f", "indicator--d2fffdd6-80a1-4d72-a94f-1d0eb9f08fea", "indicator--86689914-b5a3-49df-a8e2-96c58696d43a", "indicator--54825c59-3f3e-4f2b-96c8-3092d8333d25", "indicator--ba1ff195-5796-413d-908d-9d847989322d", "indicator--14d0adc2-ca19-43bf-9563-1cb701cd010a", "indicator--5a10b24e-c0ea-4e94-9337-7adf2a5bd443", "indicator--59292a43-894c-457f-9f2a-89bdac13c8f3", "indicator--30eecece-005d-487e-b841-738e726ba2a3", "indicator--3a6d5fce-458b-4e25-8498-76a316efffcb", "indicator--28047081-947a-4210-b67e-06536dbb55d2", "indicator--4499bc9b-75c8-4a7d-85c6-d2545b8603ed", "indicator--4682abba-f12e-49bb-8be3-172bba76796c", "indicator--5b32470f-55a0-4cbb-9d72-641193e57efa", "indicator--8a759c7c-8cec-4d5c-9c42-aab71a20ebac", "indicator--6b9912b5-2022-40ba-9b21-fafb95805674", "indicator--8cfd610d-5f9d-4c72-9862-823e110f21ed", "indicator--30dbe68c-0e37-45d3-9627-39002fa6620a", "indicator--e4c25f88-4339-4368-829f-481c9338d145", "indicator--7bf6ac74-dc08-476e-b452-22a347bcd044", "indicator--b2194dad-870d-4b77-a24f-86329211e9c0", "indicator--9b13b93b-d1ac-4e92-904a-d56ee3740771", "indicator--7c6d0af7-1d43-4549-8ed0-7f8fdf736558", "indicator--033c2a8c-3078-48df-b96d-585f3dc0a678", "indicator--06cbb09c-6e0d-490f-b087-904e48e7c4ea", "indicator--849675e1-c44d-4d40-96fd-4b8204beed0a", "indicator--6bfbc4d0-f778-446a-8437-32a08903577e", "indicator--22de1aa7-cdcd-42a7-9c80-b39cdc23c803", "indicator--e999e3a1-6d3f-4ce1-a295-5e798854cc59", "indicator--3fdf5169-3186-45cc-9605-edadc880e9b6", "indicator--66f8b0e4-d0ce-4c2e-8360-b541a2dcc65e", "indicator--593716e7-0ffe-436c-a6b5-677b9f5f9621", "indicator--fc351471-c4d3-4238-b614-6676c2a2764f", "indicator--9bfeaf7b-08e1-40bf-aa97-61e36ac62b15", "indicator--52fd53a9-e06e-4330-99ce-b7f68f92f57a", "indicator--bebb5a3a-0e74-48e4-a524-4334fb420846", "indicator--3fa21836-ea79-4a03-acce-23e09f4b3e9c", "indicator--ae4efc90-c169-4d64-99b5-6820bedfb88c", "indicator--41462603-5154-4086-9da9-c267d08f9895", "indicator--74cff57c-ede6-4940-ae07-24719cec9f1d", "indicator--a79b17bf-d3a1-402d-bb36-9bf82c9c1038", "indicator--df9e04df-1cc4-4fa2-807a-472f74680e58", "indicator--07c60053-4955-4ee1-a1c5-5822e1cd25bd", "indicator--4b212c36-5dc6-48cf-b071-98535777f4dc", "indicator--50052be3-abb8-4d98-8b18-983dfe898909", "indicator--5b5ab59f-4f77-4f4a-bf42-752794f96297", "indicator--8bc1ae79-fb2b-4dc1-8ce8-dd3502a899d8", "indicator--bb7800c5-ff1a-49af-a769-316e620b18d2", "indicator--0a816c7c-0462-42d5-a420-5de4fa5e0e87", "indicator--9279896e-228d-4e72-9f17-8cba42717dc4", "indicator--3987a0f7-7f63-4397-b1c8-dabb73859407", "indicator--26391b27-94a9-4e50-bd8c-5aabfccbcd1a", "indicator--4797579c-0b06-47e2-86b7-9d849324376c", "indicator--36f0a43a-c813-4646-a6b6-6f4600c3da21", "indicator--c39f72fc-9fdc-4d09-844b-f4fd3e941d7f", "indicator--d0c77d6f-300b-43e5-aa8c-2633eee97d86", "indicator--d92c8de2-2cf1-499a-9809-71aefb53ee74", "indicator--5e7ac503-dc74-4356-82c4-3f1745edb9c0", "indicator--fc07006c-ff4e-4723-83a2-6f8439e17477", "indicator--54fa5200-660e-4763-8ace-f4ba5f24d42d", "indicator--3a8dc669-d167-4749-96a4-424e7e64d6d7", "indicator--fefa536e-d805-41c7-9726-a3339b03f94a", "indicator--4e1f6267-1115-4755-a030-99f437ae423e", "indicator--d00e6906-e0c2-4318-9424-7929f18b7116", "indicator--d1ca7d19-441a-47f2-ad36-cbfde7483dac", "indicator--de98e982-47a2-48ad-b75d-dd9b173bd8c3", "indicator--94a103d8-621b-4a90-a167-0e895464f328", "indicator--6e8ec324-029c-4b46-88db-67a51fffe728", "indicator--26a3286e-12ce-4c30-a703-f897e1c3e2bd", "indicator--19085306-8596-44bb-9106-ea19f2c787d1", "indicator--eeb6e0e4-0f34-4ae9-98de-867191c427b5", "indicator--51171cb5-9b1f-46bd-912f-014d835089fb", "indicator--1b92ad90-83b0-4986-84c1-1f73074e5871", "indicator--9933405b-dc2e-4fd6-bce4-1b296f9b3a55", "indicator--d09c8562-d6b6-44fd-848f-04b2bb22a63d", "indicator--f2b9ed5a-f876-472d-b4af-2ec205d97551", "indicator--95ccbe2c-b1eb-4b02-ba40-5055c973028a", "indicator--2b025781-d193-4250-8bea-c88aae42e616", "indicator--60688522-81d8-4fc4-a36a-a9cf9c6e97d3", "indicator--edab2d0c-ccd2-4370-b230-575ece2ee552", "indicator--1742cb3d-434c-4263-90e6-d3bc0631ab25", "indicator--8e74e700-c24f-46b8-8467-4d909b4d67e2", "indicator--d535ee2c-c770-487b-bcb0-168911e11f86", "indicator--39492537-8a52-4a07-9fc4-cc7d6f1c659c", "indicator--1b13ca2a-efe9-4b2b-b0d1-37db177d8b8f", "indicator--aed76362-36f4-4b80-886c-98e2576dcdd5", "indicator--8eaac01c-2529-4769-9397-1bdbf1d1a5b9", "indicator--37842a0e-32b7-4179-aad9-e92ae12efb5b", "indicator--3c2d26cd-fe9b-427b-936c-e7326b1ff024", "indicator--34c097aa-a222-4008-847c-5e187882ef41", "indicator--0d5d63a9-f8f6-41b5-a73c-fc6ec5149c1f", "indicator--aaf214f6-0fb4-4a0e-bba9-d0b52a4855b6", "indicator--bfbb7e53-38e4-4dd7-9bb7-ae40fe9c6b6b", "indicator--7faae674-3430-40be-bbcd-5083bc55e212", "indicator--e5af861d-a360-4fdc-84ba-91ee473af01d", "indicator--306d4416-7714-4493-8870-b4360406dcd1", "indicator--fef1c435-ba63-47b0-8e2e-aa448a12324b", "indicator--12fd1ccc-d2e6-4a7d-94a6-6b64e78b1beb", "indicator--14eaad76-bf2b-484a-adf5-5c9fed997f0c", "indicator--7b32f8b5-9073-4ff9-98f5-75992ca0c2ce", "indicator--020eb12e-8ce5-4b6c-8e84-3b8f0145f3af", "indicator--edbe6294-0f07-499c-a313-3bd16fb9cd9b", "indicator--f531bf30-4acd-43d8-aa27-bbc2a848c971", "indicator--efe15040-4d29-4799-b17f-35ea3a98ba1b", "indicator--6cf339dc-ef8f-47cb-b456-b18bc8f2572f", "indicator--3983e46a-2b98-4482-a7c3-242d2010d946", "indicator--2a266b3b-8c52-4205-80cc-bacf3e7ab777", "indicator--3b4fcce2-db3e-47cc-82ef-4df7e68c6b90", "indicator--250ecd25-d502-4c2f-a4eb-24ec1903c37e", "indicator--5452f7d5-639e-4b23-8946-0df2c3977392", "indicator--dafdcac7-59d8-4588-ba8f-1876b3c3fda3", "indicator--dd48ae2e-48a6-4162-807d-ec828a7bcaab", "indicator--e1ef6a16-0500-4a5e-8cc0-a748d58b728b", "indicator--10251051-5a5e-4615-8ee4-c7cedff36dc3", "indicator--04d3100a-dd25-41b4-a6be-c3c0e1cd186a", "indicator--b67946f2-1955-42cb-94f4-6a8f21070f38", "indicator--ae680b54-fd2a-4002-b6cd-8702599918aa", "indicator--06db5f1b-72e6-4d45-abc8-8df281b5bb43", "indicator--f70d26a4-52ff-49ac-b323-ff2f3a31edc8", "indicator--1f51073a-2888-4fa1-b3f1-ac27802f2e51", "indicator--e6bf1f7c-db90-4e14-a89a-e88f7cb236d4", "indicator--ae4cd7fc-0140-465c-a2b3-78fe239ba418", "indicator--073601aa-6b94-4b7f-8417-13106952fa31", "indicator--c6741b9b-f3a6-4a70-b549-9da4b5714e81", "indicator--7c1774a8-93bb-4e24-9278-7874c8fe6238", "indicator--10a653c8-ae7c-4bec-81a6-5a7e4551bf3b", "indicator--c12dd0c2-fc15-45a4-88c2-4c7c58ba3627", "indicator--cf82c27c-8263-41fb-b133-ecf87a7470fe", "indicator--6e75c853-4cde-4b05-9412-c9e582f3be4e", "indicator--7698ff46-31ed-4e47-a697-8cedf3505d59", "indicator--cc3668d9-072b-408f-b673-f1c6796a732e", "indicator--da49755c-3659-4b31-af5d-ebb2bfa3e0da", "indicator--f8b00df0-332f-4d92-9e16-9f6b147ef99a", "indicator--466931af-698b-4a70-85f6-0b9c7ae6ae98", "indicator--49bf2de7-de9b-40d7-a80d-c48860f754af", "indicator--de5cb91d-bbb6-47cf-9789-d7fe2617df1f", "indicator--b2b5c1a9-436d-4fd4-ad08-bf59f9322c19", "indicator--6a434c1e-cb24-43bf-abe9-1b258569cea3", "indicator--d0e32aeb-0da4-4b0b-8ec1-2ddbdeb87c6c", "indicator--72f0ff3a-df16-4e98-b362-d390f9d17a40", "indicator--808919df-326d-450d-8e85-9c6959c1925a", "indicator--5f9bbe43-37ca-4a9e-9ec1-1ff9ef43ccd2", "indicator--5343e109-ad16-46bf-aaf4-b4a4dc6b405a", "indicator--ca5739aa-8539-49dd-bfa7-ec992ed090ee", "indicator--b8856dfd-c303-4747-afed-f39202c28cba", "indicator--581e1025-31af-47c2-b812-63a9e8b5fd5e", "indicator--a58b099b-c811-4f6d-a473-151e10174de6", "indicator--0a3cf707-9309-4a7a-b8af-63e88d605a21", "indicator--928964c0-bf70-41a4-a232-67f63e870a75", "indicator--9cd5ee4e-4046-4b93-9187-d21b2add2fa9", "indicator--b0d486df-5e81-48b9-af1e-d8df88d408aa", "indicator--28fa46af-4209-4d65-b797-6b36629e4f6f", "indicator--c6e4f9f5-9034-4d97-ac4c-88c6199949af", "indicator--85e54ccc-067f-4ffe-8139-f402445e0b74", "indicator--72ea8d93-03f1-47c1-bbcd-2366d0c619b7", "indicator--26b28583-5a77-444e-8bbb-d73ae21b3908", "indicator--07696498-3492-4d76-9708-5e7875c20dab", "indicator--8c91bfcc-ba1b-452e-8960-aa27d752f074", "indicator--df717980-1989-48c3-b143-9703710b56d1", "indicator--7028ad64-fa48-4cb0-b246-60bb0318ac90", "indicator--ce7adcbd-5375-4d38-9e25-29e42857c688", "indicator--657c9a90-cdf8-4e8c-bd21-145c3486f6be", "indicator--573b467c-77d1-4a27-a003-d4c3bc0a2bc0", "indicator--39dc0f4d-23b5-402d-b186-aa3bc2fb89b1", "indicator--b2b73a22-4eed-4096-bc11-00d5042bbacb", "indicator--c69af04e-2cd7-434b-b1a4-7de36dc60088", "indicator--99bc0a28-25c0-4e42-8938-7c884d9dfa08", "indicator--fdce696d-ec86-40ee-8d83-572661707f7a", "indicator--670a62c1-6770-4bb7-a506-cf9697bb2e50", "indicator--d346f6f6-ea03-4105-92ba-6ef13dd1b384", "indicator--7a2d63e6-7a92-4730-b283-7416bceaa948", "indicator--edc40192-7d80-498d-9fd6-77aa495968f8", "indicator--ea84d541-19b7-4612-9510-692803b34a4d", "indicator--0a84f83b-3069-43d6-912c-285b7b46aff9", "indicator--2a149ead-7093-4f11-b3bc-12716b609082", "indicator--054f97ff-ac40-475f-8d6e-c8b50ac8e132", "indicator--7c1fa8e3-5736-4145-83dc-e85c4b06ae34", "indicator--eb2cfce4-85ad-4daf-9b67-b50c9248557b", "indicator--47022acd-a48b-4a5c-97c4-64765c2d261f", "indicator--54516cea-f98b-43ce-b79a-c91e83a305b3", "indicator--94e1d828-90a2-430f-9826-d93f60a9dc6c", "indicator--74a954db-4bde-40d2-820e-15b1a48c5533", "indicator--a8831976-daae-449f-acd5-a041b8a65a67", "indicator--a9a1735a-e992-4399-9095-68223638ad21", "indicator--87bfa135-c2ce-4f54-b90d-ccbc79762fcf", "indicator--036342e7-6f4d-49f8-9724-1844634fbf85", "indicator--9f9673af-3efa-48c8-922b-6bffc9b6647a", "indicator--c421c6be-3f76-459f-a56a-0cfdd43eacad", "indicator--105304a1-b8f2-41a5-89b8-31f8a660d111", "indicator--4493d19a-8daf-49b6-8fc9-660a9b4d96f9", "indicator--f6f0de4c-f0d5-4e40-a8ac-d4d9d9019ac5", "indicator--6238ff45-5730-4f4d-92bb-a7e31373f18d", "indicator--09c4a639-8b55-457b-88fb-244043723923", "indicator--3d27bc5f-c93f-4e57-95f1-5c99e0f092ff", "indicator--fbb7402a-7706-4b02-9d8f-4521ea2bc232", "indicator--30b9a73c-dd47-4efa-97fa-7f53a7ef8d29", "indicator--4c79d2a3-1d66-4cf9-85ec-9bf87a1a604d", "indicator--83204b77-c8e5-4d41-abb0-8962bc803225", "indicator--7d190cd9-01a3-4dec-ae56-91aa0bb269c4", "indicator--a4f80329-0562-4fe8-a3c1-500a696cf754", "indicator--25ada2a4-2ab5-42ef-90cf-943a09f789e1", "indicator--5cd9cd7b-f701-4299-8101-aba6a88a63d6", "indicator--1c97c8cf-627e-49ad-92d9-212f2e15c16f", "indicator--ad06215d-a27c-447a-8a9d-e29365684420", "indicator--d7f70d96-c450-4fc5-b5d1-7d2b8576c02c", "indicator--449e094c-5fb5-4109-abe9-98a1b431ec67", "indicator--ebe4339f-17c2-4866-bb8b-e36b0517b491", "indicator--d357d622-06a9-484d-a7a4-8fdc32d5235f", "indicator--010331ae-6c5f-43af-bb49-4cfae9e81998", "indicator--552a8a65-813e-4769-869f-5f2aa2b8e8e3", "indicator--b8812759-df87-4847-9049-6907c0034305", "indicator--8ce7b924-3e8c-49ef-90a7-bc6e3a2c0b7f", "indicator--bd379f0e-40ed-42fc-99fd-66faf0ee5e83", "indicator--00c477d2-d0e6-4d2f-a3d8-c6b62b25c98f", "indicator--6ab63138-900f-4d98-994d-763a7831b9f6", "indicator--293330e2-75a2-4b31-a64d-e34d6553e2ee", "indicator--b05b857e-6e46-4ed6-a9c5-646a152bb840", "indicator--da9a7a9d-34bd-4698-8530-592df1714410", "indicator--a7643829-efdd-4104-a911-4d336a5fb77c", "indicator--26aaa588-7e9f-4b8a-ad07-a7d4bd0519a3", "indicator--17b68232-6ca9-462a-bb53-7170d6af9000", "indicator--ab512df6-a5a6-440c-afa1-49d8c44e4e04", "indicator--3e7d24a2-83c1-4de9-9b77-59290bc2009b", "indicator--7e2a92b6-f645-47c4-84de-0a0f40f2d2ee", "indicator--018d97ba-786f-45d1-b0ee-4af1ecf2047f", "indicator--6791a08f-a54e-46d4-b167-a7080302f1c2", "indicator--7c4a4dbf-c5f0-44f8-b12d-f4ba6907a788", "indicator--89442058-4ece-4f39-9561-d5951e4c1d53", "indicator--007e6939-cecc-4c71-be97-424a18a3702d", "indicator--78231398-0621-4ee3-9785-f0a26c2754b3", "indicator--af498cad-f12b-402d-9f95-25c346b42324", "indicator--f43ec0d4-b773-418e-b284-f603b5abf1c4", "indicator--15e336a8-20a8-4674-9bbe-15afa3eeeb4c", "indicator--1ab4b098-c6e2-47da-a9e0-7fd2ac6c69f4", "indicator--c53ef535-808b-4415-a8f6-137e75074f1c", "indicator--43f92bde-263f-44a5-a405-f41cf2361513", "indicator--99b73169-c24e-428a-a5da-a4675e13b5bb", "indicator--8085453f-31b2-45a4-9ef3-1ded8721498c", "indicator--937ad051-1517-4189-a37e-204ef5925cc0", "indicator--2a3078a2-1abf-43c9-b550-6032fc9146aa", "indicator--e2d48db9-69e8-4262-9646-14d073156c25", "indicator--2e9eaad3-1761-4a3b-83ca-e2778a5ed8e8", "indicator--ed4945f9-6f6f-4dc3-bdac-5e11504042ef", "indicator--4fbade9c-19c1-4bc5-b653-973fa222474c", "indicator--62f3587b-3217-4597-86fc-628a6130529a", "indicator--b67a7c9d-2ee6-488a-adf4-f80e577ac38a", "indicator--79c52035-3366-4d86-8da4-3a9b5d9baa47", "indicator--8fc1fcf1-4629-48fa-b5a7-75950e56ec20", "indicator--a4432fd4-f534-45ab-bd13-eeee7ab3dd49", "indicator--b6b5bb87-ac05-45ba-bade-0810ea645a0c", "indicator--970695d8-caad-4822-a31e-20ad5961ab12", "indicator--84d40f0a-ce02-4fc4-a04b-59b7f05970d8", "indicator--512bc907-1f75-4c58-aaf8-203e2a8cc11e", "indicator--c28711e2-2772-43fd-bb7d-723c7a2f6a73", "indicator--04a967f3-418a-4275-a9db-0580a05f8668", "indicator--c41b290f-7661-4740-90b0-056cb0777005", "indicator--61d2e0b4-21a9-41dc-af8b-3a1c0727985a", "indicator--95f23b17-8171-4008-98ee-dd9c5c732ad0", "indicator--c114351f-8d1e-4730-9375-2f8e689711ed", "indicator--0ccbbf55-144a-40d3-a887-537d7db1824e", "indicator--3a0972ff-b7b0-4b38-9c9a-40c8633a1ad9", "indicator--1e44f87e-f6ae-4050-97a7-1ad50748768d", "indicator--4ef9c716-fe49-4af3-a4ae-cf7b983bd50e", "indicator--a540e348-8572-457e-abd4-411aa123c771", "indicator--f2a1eab0-943c-4dad-aa4f-756425ca5514", "indicator--807c4999-1949-4cc7-b8ac-87eb810e79a3", "indicator--102b142a-ab1e-41d2-bf46-6c87520bd3f4", "indicator--275eae85-2605-4c6b-8393-540b832ed819", "indicator--0db74fc0-eed1-4ffd-b6de-034b260606b3", "indicator--2fd53950-758a-4dad-be41-4edc7a0b3e4b", "indicator--16930988-b2c2-4c7f-9791-3408b15d1f9d", "indicator--dbf8dea7-ffd9-4493-9fb3-a85e97de7152", "indicator--21d21dcc-169f-4ede-9087-2c571bde5322", "indicator--0b3eb194-205c-4b69-904c-26a49f59ff8f", "indicator--5bc9daa4-5524-4cf1-ba97-969884111009", "indicator--4eba2a76-cd98-435c-9796-1da78a008da5", "indicator--83e44e40-258d-450f-94dd-c8ba951610fd", "indicator--b12f4c69-5155-4af9-b904-fd7300762e06", "indicator--beb751cb-25ef-4878-8767-84b95c05b33b", "indicator--69e2a09d-39d3-46aa-9003-c5b924a88ba1", "indicator--bad14225-c597-4b52-aeab-967f884ce25c", "indicator--4afc012e-5cc2-4c10-9f23-ca842604df85", "indicator--e276d406-5292-4d86-b181-dbb03d24b84b", "indicator--f5853d36-8816-4c6f-b3df-90753903c53d", "indicator--f15a9082-4ca9-4046-9bd6-0b553325a6fd", "indicator--372f7f95-d67f-466c-9cfb-98eb26d3f1f1", "indicator--4f7a353a-278a-43ef-a559-93507938eb26", "indicator--958c18b9-43dd-404a-a24b-7e5dd44d3c03", "indicator--61f8afc0-9489-473b-b3aa-f51b41066156", "indicator--2ed25bd7-6b1a-4289-85b3-34f4e6989491", "indicator--5d3a87b7-06ad-4659-9d3b-f9bd5d254fc5", "indicator--4f49012c-d1cb-4d00-ae77-98239dfd9179", "indicator--1a231ea5-eb5f-4d43-9f99-424936c657c0", "indicator--4beec575-9c10-4666-8d99-45919c574d97", "indicator--cd69b8d0-b175-4174-acfe-8e85360febde", "indicator--688a1847-adfc-44c8-9ee4-975a4cf713fb", "indicator--29a61031-db36-49fb-ad5a-f3a89cfba041", "indicator--4c8745e0-695e-4fef-96df-b6ba7b05807d", "indicator--68a25c26-f1d4-402a-93b7-a8beb731828b", "indicator--77878cca-3340-40d5-9915-f074eb3f7c3b", "indicator--d1b45d6d-7090-4d54-8664-9516ca58c67d", "indicator--3d37700a-99ff-47e1-857d-778129247bed", "indicator--7df0329e-6aa6-47e9-9311-9b492dc4ea6f", "indicator--c118e68e-244c-4ba0-979a-11dcbe3dddc2", "indicator--9b8c8c62-4782-46b3-83ec-dfbf54af272f", "indicator--2f35c4e4-0386-4330-9dcb-32697fc1ec38", "indicator--d9c70f64-5f57-42fb-8d01-51f9e83ebbdd", "indicator--bba7cb95-2d45-4905-912a-b912b4ca0637", "indicator--cbb70f47-b5f6-4a91-889e-043eda3e1d5f", "indicator--1cbd2554-f6d2-4f43-9dd5-f99d1ec882a0", "indicator--37b2ea71-1f7d-4e28-8520-e4d6a30b709c", "indicator--6aca45b3-13e6-425d-b4d2-e6ad910d96dc", "indicator--b64d50ba-abdd-454f-a567-2063f8da346a", "indicator--aaaa94dd-a792-4eb6-b987-a41abb2d6a0e", "indicator--e0a21f8e-3d41-40b2-be3a-44e98c4a59ba", "indicator--7aec1fb4-a0a2-415e-a490-f04fce114274", "indicator--8ef6d670-82bf-4942-a0d0-c7e5214d1265", "indicator--a97381c5-5bb4-475f-83d3-5e3348f5ef6e", "indicator--7734ca26-702c-4932-8ada-9a954c103068", "indicator--d8eb8f82-fd33-416f-bdba-c24d7b072caa", "indicator--a6d2c2e9-d93f-4ddc-938c-c67676edcab0", "indicator--6cc1599b-c2f8-47eb-b324-48498f46177a", "indicator--5f410e0e-3868-4d01-9af4-48ea02265137", "indicator--49dcb430-7e40-400b-bebd-3fefe21f0cc9", "indicator--08f8b1ac-a594-4398-a902-9eb033e1bd34", "indicator--e61687ae-6a16-420e-af5d-0675029739de", "indicator--74760bb0-0683-4346-b0d6-c0634750d915", "indicator--40be9c18-0387-4692-8c8c-5a5fa52ead5f", "indicator--3ddab629-6483-4831-8afc-9d1df4be9e65", "indicator--1015095c-05fa-4314-9f48-2f4e5a0bf8ca", "indicator--fcff9f3b-b81e-4a3c-b251-0281ddd61fad", "indicator--0b0bfee0-2416-433d-89d3-0626a802e6e7", "indicator--bd6e410e-0b7a-4517-81d8-43fe5ff9cc17", "indicator--02222552-644c-4e7e-ab8a-88c557f938d3", "indicator--d9c5e3bf-ccd3-488b-86d3-266a57979031", "indicator--a442643e-0216-49b2-8d78-eade6b48c7f2", "indicator--36cc1dfd-bd68-4e59-9b2e-9d744c385eae", "indicator--1c7c59f6-8bfc-422d-92f3-b764251f838a", "indicator--303824ba-7d0f-449d-b69b-32933a7083ce", "indicator--1f5b3bff-9c40-4c62-a4a8-f3672bfc8b2b", "indicator--17bf03d4-0705-4242-a6c6-8854d50690ba", "indicator--fa3700c9-b231-4d31-82ab-4d01ee4726ef", "indicator--98134b56-9f05-41e0-a61f-22ecded03edc", "indicator--56b141f2-9a3b-49fe-8cc7-a65974e1145c", "indicator--276c8b25-66de-4c31-be30-d2b2556e2da3", "indicator--1b6ba88d-936e-4214-98ee-f0cbb0ecad7d", "indicator--d016a99b-5cac-45d3-aa28-a4fe4ee5093c", "indicator--23e1eee8-cafd-4c1d-b443-f506419ecc5c", "indicator--51e6574c-bcd3-4ffa-ad2a-577fc321e259", "indicator--b19f0331-9d7c-4f0d-ae8a-a75c5f19db2a", "indicator--f629b97f-f550-4173-86e9-e7ee7794fc33", "indicator--7974115c-17ff-4d60-b3cb-a207a37d560a", "indicator--a57a2abc-8741-4032-ba04-8b9d09b171ec", "indicator--07ac63e8-432a-4d1f-9013-f3b89c87526b", "indicator--c5dd87e7-ec82-458e-a6da-482b397895ce", "indicator--a44c66f0-69fa-4ff2-b2dd-7df3777afbc4", "indicator--b984ecb7-be12-46b2-a42c-556c74b981f2", "indicator--d1c8d082-51be-4ba7-9976-d245cfe0df6a", "indicator--f4c7e213-fe06-4716-9be7-e1fc3087af60", "indicator--2c49bde1-7450-48f5-8d81-624df47aba80", "indicator--f9f6e1ba-99b4-48ad-8249-2cfa4ecab462", "indicator--021254da-47d4-49da-888b-cc9a55201426", "indicator--59eef4d4-e2cc-4507-bd40-99ab7805469c", "indicator--74cde0e7-47ab-4c78-aff6-bbc083f67f0f", "indicator--0b5583d2-362e-432c-8e00-3fe9b5edb93e", "indicator--21e90c93-d312-4816-98ac-ad97445a560e", "indicator--8e679add-f6ae-4e95-8837-a1b5d74bf0e7", "indicator--068fc46c-6d2a-4c56-bea6-5d76f03b7bd8", "indicator--e579ba07-f933-4360-bde6-bd33fa7aebae", "indicator--23bfea17-2963-4c0a-b3d2-a2e893436676", "indicator--de47f76a-5755-47ee-afd0-25046bd9fae9", "indicator--dcfed325-2f3d-4ce6-ae9b-575cb950c650", "indicator--db93c783-6bba-4188-b0c1-f60588f5001f", "indicator--a8f6cb2d-75c9-411f-92cf-932e431d2517", "indicator--99f0c7e2-5919-4001-af2d-233cf5ff1219", "indicator--1ee4836b-4a0a-424c-b054-b933c3ea32ca", "indicator--e656f3b4-e104-41be-94b8-33443611614c", "indicator--fe672aa5-19ee-497a-afae-e5733572e39b", "indicator--5b524843-4e56-4e1d-a07f-ce880a42a7b9", "indicator--791ac01c-9d62-439f-a600-4d968e0cd896", "indicator--616228bb-21b6-4c3f-ad2c-dccf229e733b", "indicator--8202aa05-1302-48f9-9b36-c4848be4a55a", "indicator--03cfc963-f722-43fe-8a7c-3a411831d754", "indicator--05f07eeb-9f03-4d61-8560-25053cee4768", "indicator--3d237b36-a0ba-4bbf-8c08-50e53cd14927", "indicator--5fdd7699-75e4-4715-b652-cdf1ce6ffd18", "indicator--203f0f20-7646-411c-878d-4e142044a103", "indicator--93543329-52f9-4ed1-bebe-b8628f487a37", "indicator--6dfb6404-7c83-46ae-92fa-8ec8f8886604", "indicator--f3601822-dd59-4777-9fb2-c902dfe43c8f", "indicator--c07cb401-15c2-460a-980c-06d75b87236b", "indicator--56a453c1-34ad-4aa5-826f-6ac405ccfd55", "indicator--6e31ad86-bfc4-4be9-90a2-2609efbc49a9", "indicator--a658165e-4989-453b-a097-05e82af07f08", "indicator--45d273a4-415d-4a42-9c6d-3ee258045639", "indicator--df799ac4-4aca-49d8-898c-ca85f44af3d1", "indicator--35f92192-ea7c-4ef9-a148-957f9bf5e8c8", "indicator--7c98aa44-1809-4c71-9830-77eec0b8db11", "indicator--e6a21d02-f6ad-4214-a2d3-c3b1227b0927", "relationship--6160d31b-c02f-48c1-97e6-c66c93a9bde4", "indicator--36be7531-8391-4c34-aa0d-c5466b08baf6", "indicator--067fbeea-4332-483e-9dcd-8d18645e97b1", "indicator--36802900-4d27-4679-b6b6-5bbed92a21ad", "indicator--a95b7a47-69c6-4811-ab9b-6b42925cba65", "indicator--04be40d0-4688-4757-ac22-7b347f524c44", "indicator--012cd7bc-2f2a-48f3-bc50-79659015dda9", "indicator--e1a973e9-648c-4331-8bc9-46140ad4689c", "indicator--501ea93d-a5f4-41b1-bb39-97352f59917f", "indicator--f07c2c5c-1a61-4fdf-b190-14c8713f22cf", "indicator--09dde160-d2c1-49d7-b5e9-38fd8e4d8760", "indicator--11057d74-0e26-4bbd-bb99-97426aa84f2d", "indicator--d60a3e2c-a8d5-4339-a479-69b23b7f5f41", "indicator--5c52c7ea-1ae7-4981-bc72-f76c219e64be", "indicator--61431ec4-fbdc-47f8-a5d9-9fc29cf0f167", "indicator--e608850f-637e-4375-a2a9-59f1212c7777", "indicator--87a08525-8e40-4d35-bd82-b7675f6f2697", "indicator--0c2efc27-203b-4cc2-8bd9-cbf8b7647c72", "indicator--113ff353-c010-4eb1-ad99-9edcc45a48f6", "indicator--07f5ab94-59d9-4eeb-8564-6098b1cda49e", "indicator--fa08d607-4e28-4643-960b-75626b6096a7", "indicator--a7efd7f7-d6ca-4689-b426-80d67916ce38", "indicator--dc64dbf5-7b1c-483c-abd6-48e92316f3cd", "indicator--9318f22c-66b9-4a40-b819-6504bc496351", "indicator--df52765e-6c68-45f7-9825-b964d1c9b373", "indicator--35c59528-4663-4b4b-8a07-471f9d8d514f", "indicator--3c545c1e-93dc-430d-8daf-a454ebfe4d9b", "indicator--a0058629-df80-4f04-ae5e-a27233532d7b", "indicator--3fa2f81c-d871-401e-8473-ce8f3f1203d6", "indicator--7dd6ebb2-36ac-42cd-84b4-f0635c03594c", "indicator--d4d0ddae-93ba-4da5-9781-806ae4a2f08d", "indicator--c794176f-a1c4-4c23-a64a-4007024acaf4", "indicator--c49493f9-c1b9-4d50-8235-392c220868b7", "indicator--17ea6a6f-8ad5-4507-82f0-cb12e94dda39", "indicator--e18bb21e-9c18-49a7-ae8b-4085caf4f2a6", "indicator--a7898838-c2f5-4af6-8727-7c7b9ae0dee3", "indicator--ee3bbb73-99b8-45e9-9ef6-4717cdcf0842", "indicator--c0b4e53e-a97e-46aa-b492-67a0b2a222c2", "indicator--6e5a5182-571e-4030-83dc-7006cf601053", "indicator--f754e620-8b86-4b12-a8a6-84396cbfd8d6", "indicator--0d328262-11bb-4940-b38f-7ddbf5488861", "indicator--49233344-d8b3-4ddb-8809-7c687db90c77", "indicator--06b6ae40-e6f5-4ee8-9052-4572eca5ce07", "indicator--d2fb7ea9-ae0f-4579-a912-65ed75694b6e", "indicator--d713352f-d0a6-4c37-8f44-309601b7a4ea", "indicator--ce4db2a9-8601-4619-b302-10c7f778da18", "indicator--fe2ca530-586b-47aa-91e9-a05a6a45978b", "indicator--77919be3-73ad-4c46-bf49-b38fd0ea7787", "indicator--eccbb472-4fa4-4ca5-a3ad-7c3d0bdca3be", "indicator--770b1155-4d30-41e7-b425-8ae91bf5f344", "indicator--636856cb-501a-4255-bee6-0818b284d1cd", "indicator--0aa63518-bca0-44eb-8aa6-af8a466f1e0d", "indicator--69dea3cf-b030-466e-8db2-f52c776cfac0", "indicator--f5cf947b-50e7-4d97-a6d5-5888a4402faa", "indicator--56b1c67c-6571-4156-a828-b732d5c20850", "indicator--e74fadf2-988b-4ca6-80ce-90879a87ac57", "indicator--caf87eeb-65cb-4d2d-8bdc-b247bf81540d", "indicator--f859efd9-24a5-49df-b25b-949a99f0c1a9", "indicator--63a3854e-1566-4410-8ddc-432989acb63d", "indicator--b981b128-f393-4b71-85e0-0c17ccf97291", "indicator--fb9b5bf6-aac4-42ff-97d0-e284d5c75376", "indicator--bb97c500-e007-41ad-bda7-3b89134c4a6e", "indicator--968c2005-e27a-49f9-807a-e747bc146e24", "indicator--31417c0c-7c5b-4b30-b57c-4b0e8cff364e", "indicator--0a842e7d-405a-40ae-9bbc-11f72ef18092", "indicator--8524c32d-7123-48c1-adef-00e3aa6d446d", "indicator--6071c018-add0-4740-bf44-e353b2d284cb", "indicator--25f4e2bc-41af-4066-a70e-49f141621589", "indicator--98d86a3b-d91a-499f-b8b0-68fccf299786", "indicator--b1dfe404-e0a9-4428-85c7-8cce4d6dbd25", "indicator--f4ce6dbf-ed5b-4ff8-8ffb-526bd70e35be", "indicator--1d3f4723-78f5-4683-a73d-18a011989a3f", "indicator--8f8217d3-e72b-40f3-a779-ea3a6fe34c2d", "indicator--4db1b12e-1822-45e9-b401-8500ea1ab388", "indicator--9fbfee9b-cbdb-4f1b-bc4c-d6a0d5c5f6e4", "indicator--cceddca4-d33b-4cf5-bf7c-dc670ddabb61", "indicator--b2bc08ab-1165-4523-83f3-ae47dbf52d1b", "indicator--049921bd-e40e-4e3e-adef-e26361663e59", "indicator--36bba651-1aa5-4dcc-a4b8-3cd3b763fe32", "indicator--494e9ed2-a7e9-4e03-888d-07107fa5820b", "indicator--1baa5c9d-ea95-451a-9147-8c7788335be2", "indicator--9f1a7d89-7387-46d4-97af-4d69aa6c7fff", "indicator--6137116c-fc91-4b6f-8afa-118a730902a7", "indicator--4b721117-546f-4218-b7f2-73f06e0028e8", "indicator--d7112784-f034-4087-9039-d2dfab82aed4", "indicator--fd8e317f-180f-46d4-b1d7-18be068068c7", "indicator--eb076f4c-89c2-4cf9-a294-8f6df06778e8", "indicator--9b0e2b1c-50e8-4c74-8a12-4bffd5d14726", "indicator--339f0963-fa34-44c9-86fa-8b805c284595", "indicator--a4ad1a48-e32d-4ae3-a9ed-a060f8e879a7", "indicator--96fd4a83-36dd-48e0-a638-7eec356a1dd8", "indicator--244132f8-add2-40f6-ba41-a0fb53afcba4", "indicator--9e2e4675-abf1-4791-bb56-fdc885d704e1", "indicator--aa6feaf4-3965-423a-805a-b5a07b911346", "indicator--410409f0-ee88-43f9-a801-a5adf5a0b4c4", "indicator--da1bc3fb-913b-451f-be59-840e8116b406", "indicator--4743fc1a-d7e7-428c-8281-3907ad9cf20f", "indicator--8594185c-02a8-4ad4-9e5c-6c6a27d640a3", "indicator--dc856357-4cfe-4962-a7c7-3a8f494504ce", "indicator--dea9e5ce-333f-42ef-8c32-fe39e1f08d76", "indicator--8273cbbf-026c-4e2b-87f3-4a69364d1ac1", "indicator--71cf52d2-934f-4db6-9c8d-12e27bcee1d6", "indicator--38dcca4b-16c6-42e0-ba1d-699eb9bef952", "indicator--03159e30-5522-41b4-aff2-3d05f3ea9412", "indicator--242daeeb-493e-4598-a6bb-32b617df4685", "indicator--a94c1570-92b6-4671-8ad1-982d2a9a09ae", "indicator--4fba1dab-a688-4eac-b81f-2c37244e3e23", "indicator--d8b22807-302b-4089-a196-b53c984dc824", "indicator--a02013a7-4fd3-427e-8212-5edb522fbd48", "indicator--4bb5763c-f26e-40d6-b58a-ca65790af990", "indicator--53bd0a37-debc-402b-ba33-c3f24023486b", "indicator--67104db8-33a8-4c2f-923a-219519c31df6", "indicator--e2d79e49-0636-489e-8802-fa4a5d209b74", "indicator--92dbafe4-3e20-46e1-b52d-9c4a441bd8fc", "indicator--e96b48fa-915b-4cdb-aee4-9252237ab685", "indicator--d9ea6805-9327-419a-8961-543003325b06", "indicator--ee088518-6b73-4d37-814d-f7d5ea4d05bb", "indicator--fd7ffbdd-a9f4-441d-8882-08f1190f8c97", "indicator--9f653ce0-04b3-4e49-b7d5-13cd85221210", "indicator--2bccc8ae-1550-4de6-ae17-f34c21107a85", "indicator--b09129bc-b586-4a19-922d-6fcd18511387", "indicator--3f023b94-547a-40ef-bd92-bb9f70f1ed6c", "indicator--b90e842a-b1a5-49d8-817d-43cacf1d41ea", "indicator--5ab7532b-795e-4818-a05e-adfd9a02637b", "indicator--3a662475-f65b-4a66-a50e-3c3ec6781335", "indicator--aafd48d2-d4dd-4d93-89c4-1e8cf27b2c42", "indicator--46ac1b52-347d-479c-9b44-d2af11b93c6c", "indicator--d7957555-8b1f-44f2-8a5e-bcbcb5d7e3f1", "indicator--b2a43eba-b51f-4292-9848-843d0823129d", "indicator--d00b838a-a5dc-4606-a4b3-688cc0a67f16", "indicator--84f0e32e-dd19-4650-a136-d3611fcaa260", "indicator--d97a5cbc-edff-4af6-aa3f-942cfa76ad3c", "indicator--7bb8e420-55df-4834-b974-36e6f77ca7c9", "indicator--414af28f-b5a6-42d4-b3d0-bb9a6c5f472d", "indicator--a1341015-944e-4199-a78a-bb57b0210e04", "indicator--14d741eb-cd0d-4555-9334-1afc98ae1014", "indicator--aa23efd0-7823-419c-ae53-e999659393c8", "indicator--b5e095d4-d2ef-436b-955c-89f99231943c", "indicator--842d7657-d322-432a-b642-f899916f879b", "indicator--3ddf21bf-88da-495a-a6bf-e1e4c9caf28d", "indicator--91f8deb3-7dee-42ca-8e65-29b1b8ce5bb4", "indicator--51b8a3dd-07f6-4bf2-bb1f-5c86f2f8df2c", "indicator--d1601cbd-74ea-41f4-b757-b9044d0c0924", "indicator--f3a67617-a5fd-457c-9aee-ec56d2701bef", "indicator--03a6f025-4a6c-4340-9858-8c7b6b58fe5f", "indicator--bab2ecbd-cd95-4506-9dbf-f40e1e8cc1f8", "indicator--4ed587ae-cd93-4864-a487-cb3a437d45db", "indicator--4f151077-a36a-4d7c-90bf-dc193dad36d2", "indicator--2156f9e0-74e1-46a0-a368-72f96eb8992f", "indicator--9e31f62f-1007-4f3c-806a-c3eed09ee4c1", "indicator--5326ee5f-b6f0-4200-b0e0-6238c1f21816", "indicator--39520666-6057-4c5d-8ea7-86bd43a8dbf5", "indicator--2e9ac180-ff1e-42bd-92c7-2c4c399c893a", "indicator--a7c4a18f-a796-4d10-9285-5dbc8a98e4ee", "indicator--acb3dad8-01cb-48ff-a1e4-a35ab7453436", "indicator--15706bd2-0bc6-483e-97cb-ecab0a1ed3fb", "indicator--2682afb6-a6fc-4a75-982c-5faec62e444d", "indicator--6c30e4fd-65e6-4897-99c7-923173f96ee2", "indicator--24ee12e2-54c3-440a-953d-0964fa631bb3", "indicator--c7e2b849-22f7-43b4-a960-4de1f363f5ee", "indicator--0775d7c1-1663-409c-9ca2-bfdfb18a216f", "indicator--1f320fcc-6012-43b6-95e0-afcd74fa1c64", "indicator--16e95965-c88f-4e1a-8e50-1eb6ea0bc038", "indicator--e671bdf2-3299-437f-a2a3-a8b4e0aa76cb", "indicator--83b0212c-c6fd-4625-92ba-2490858caddd", "indicator--b5c23ab0-5537-436c-8784-25a341ce200c", "indicator--8256b6a0-fb6c-410f-86c7-faf7a7c50dec", "indicator--9a0968ec-3f86-4449-bb55-8e1c05637607", "indicator--ce30fd83-cdb6-43b8-9539-63bc426bf567", "indicator--4bc74b40-65cf-4842-9115-73808d6a8d16", "indicator--2577eebd-7a4f-4e40-82a7-56f6fe50605c", "indicator--e3f63608-6d26-424e-8a25-9146094ad5a0", "indicator--0f78464d-9e4d-4ea8-aeba-f53bf10f30b2", "indicator--6fed3a29-5eed-4c26-a170-bf04902aa087", "indicator--540f4bdb-3f3d-40ef-95fc-d4d21c70df22", "indicator--e48019c1-e9a2-47b5-9c35-a733a750d0bb", "indicator--c9023e83-bb54-4754-9c11-7ff97d19cb76", "indicator--cc9acd8e-688b-4f63-a147-193cf41c6687", "indicator--e178e9fb-7142-4348-9e50-faf91334b826", "indicator--fb3c2e57-26e9-42eb-baa0-a5346b9020a6", "indicator--16a4dc18-82b3-4216-a69b-c22a4e7a1d24", "indicator--126587c7-51b8-421f-bfcf-916e5dbb07c1", "indicator--b1277d93-89c7-4e3b-841e-e1d43308020b", "indicator--65b13d76-c78b-4384-8f31-0d698bc55ddd", "indicator--20f2f828-b5b7-4a80-b48c-00f849c3e82b", "indicator--22f16ed6-9b2b-4bb3-9097-a8f7e8913e82", "indicator--f41aca84-aad8-4b04-9231-1bf3f42ce3ec", "indicator--1bf54fa8-f322-4d54-a2e0-155fce5a5a16", "indicator--d7d7540c-f76d-4cb8-9196-7ab35d561dfd", "indicator--fa1d7574-69a7-4786-be69-e50fd6c20236", "indicator--903fbc43-01ce-4da9-b0ac-07e15555c1bb", "indicator--6bc420d1-dbae-433a-ac54-0d74b76d539a", "indicator--a1acdafa-5b03-40bb-b71a-764ccac7b121", "indicator--98c9a778-f2d4-456d-8544-d2289ef1087d", "indicator--81f7b85f-d421-4d6c-9855-c1703fb6bd21", "indicator--d29316d8-896e-4605-bcb2-b40d4b06ddcd", "indicator--8173d548-48bb-4868-9450-f6aa0143a405", "indicator--70a2e090-984e-4dd7-bf34-5c0e3ee4df04", "indicator--79b45bf9-2da2-4d8e-ac8f-80658418206e", "indicator--ec22915a-84fa-43de-811b-df975149b8f1", "indicator--ff498d4f-f1c3-4057-8b17-cc423f8b1e4a", "indicator--f08cc956-a1ed-4700-a30a-766ddf002148", "indicator--7085211d-b655-47ba-9b17-1ad929fd6db4", "indicator--df2cbd11-4119-49a1-a0fd-c0b429418080", "indicator--2cb236f8-7a61-4adb-8de8-e201224601ed", "indicator--475cb57b-baec-4f31-b331-aa8fcb9df2d4", "indicator--da3e1d77-3144-422c-b808-973056e51d17", "indicator--8c110c3d-7ee4-4449-9bdd-89bf15e6cbf5", "indicator--304eca0f-9ee5-4ef7-80ff-6968220da041", "indicator--e3f3bae1-0f7b-4012-8cc5-09ac4fd7b5bd", "indicator--03e60422-ca48-4071-a562-a374764ed981", "indicator--bb285054-1f13-4f4e-b28b-53a7d466c0ad", "indicator--40b7c668-40dc-4b21-aa92-39b8b9e369ac", "indicator--207c38ab-ae90-4577-a28c-61fa6998de95", "indicator--8c5c06ca-d4c4-4551-b01a-36511323c0a0", "indicator--7d1f6991-32d3-433f-855a-4fba52108547", "indicator--cbb8c0f3-3805-4e6c-a167-5c75373b8b25", "indicator--f20707b0-8cbe-4d04-96b3-79eb389d410a", "indicator--dd2c5c7e-3b1f-4497-adb7-c4fc9ef474ab", "indicator--e26c16fa-0c6d-4fe7-9824-71f94aaaf594", "indicator--325945f6-58d3-479d-817c-9a85099e5ca0", "indicator--5c049c19-0b54-40f6-b653-c660076decb0", "indicator--f6e52770-6454-4213-b621-c2b80f97036a", "indicator--d32209b8-01fc-4ec2-aaf8-bf17454c0d1f", "indicator--42049262-6e12-4fcc-bdfb-b027763db392", "indicator--7dd99db3-0cef-4bd6-83c9-8928558ba22e", "indicator--5b52fd25-5d10-41d3-bd83-82a477fe7d56", "indicator--0fca40b8-e9a7-4284-90e7-914c4eb0fd58", "indicator--546f3da6-6646-477a-8945-624df4f5c3a1", "indicator--fba88ce7-b12a-4a21-b433-80eab62b679a", "indicator--b5e78bb9-e2b8-43dd-88d6-48dc463ead87", "indicator--d975f72a-2eb9-43f3-b2b0-d9c45e241f5d", "indicator--bc9c8d78-88e3-4cff-888e-1d668e0bbebd", "indicator--ab3832f7-1129-4486-b5ab-cf3c89674519", "indicator--87c60a92-20e6-459c-bd3d-034a9b3cf92f", "indicator--0aa9b1fa-ba64-49b7-8020-7a45ff0a02e4", "indicator--fbe7ad41-bc0f-4efc-b4ba-87ba6aa054dd", "indicator--7651613f-b242-4293-8e96-b3d58e7d57e6", "indicator--af7c97e0-126e-43ff-872a-e1964f5e91d2", "indicator--41de8090-b608-40ae-8650-a8150e25adaf", "indicator--b4465aea-1c03-4500-83e7-732eedfb3ac9", "indicator--c08e69d6-7cb2-4fc0-95b3-7442751c12cd", "indicator--d78a7787-b146-4059-9aba-e26cd090980b", "indicator--94040289-dfd7-4e63-ac84-628020ebfd5c", "indicator--7f53ae9e-ecaf-4080-9dab-7dda4a0ad0e7", "indicator--3bb3a3b1-41e0-4bd6-bff7-970af79c4b79", "indicator--a3d0662a-62a6-4f64-9c7c-58faec4826b6", "indicator--4eacf9b4-879c-4965-bfc0-9822feab9d53", "indicator--786b4be1-e283-4540-9b07-e4986771b2e5", "indicator--7468260b-3ba8-4864-b35a-4c8803542353", "indicator--a577fd56-9447-451d-ae99-a47c8f44a2c6", "indicator--c993ae67-5f67-4a41-8b75-93fcbf4c6f4f", "indicator--95b17c15-7f1b-4f3a-991b-cdfc4d3683be", "indicator--8e3b41b5-3f34-4166-8177-cf10ae4bc9ca", "indicator--9d062056-f102-45ea-9fe0-a7de242d8f47", "indicator--d974817e-673a-44bd-8381-addc9aca2e08", "indicator--41adb2d0-0a5a-4372-8750-dd163b7a98d7", "indicator--91035136-4b5b-4d05-9e45-94fefaafe37c", "indicator--1f0b2861-f9e2-4441-b33d-71aea989b7c7", "indicator--2bad73a9-22bb-4237-ad80-036400cb9a7c", "indicator--d9b6bc11-d9b9-4165-959d-7062292750ee", "indicator--6166e6b3-9cc3-44d0-a90f-daaad5f80cff", "indicator--1088d0ac-7bc4-446c-bf6f-21299224a58d", "indicator--ad22c878-7f69-4c92-bf13-cf41f92328d2", "indicator--97ff3ab5-671d-408c-bdcd-af1c2ff8b7a2", "indicator--8e5ad424-8a9a-46c7-8e7d-c2dac60e4208", "indicator--5d2b1faa-4dc1-4f15-be10-ee1739702aa3", "indicator--2a9ff7f2-a5c5-47bf-88d9-f938b4f540f2", "indicator--b81116ff-c4e9-4f01-8227-3db4ad6b1123", "indicator--4af6b76b-f7e4-413b-95f2-bb7f67941c07", "indicator--d20aba40-4778-429d-a008-dba3e31b001b", "indicator--0ee2d5a9-03d3-482f-84a6-18b3d5310117", "indicator--cb083c64-c3fb-48f8-8077-863199f6ffc5", "indicator--ab560c64-72c6-4ae5-9b59-f81563199f86", "indicator--e41b6b85-7fa9-4a75-9989-cf9a7b054849", "indicator--8e67df18-2c87-4401-a64d-c0b6706c3b70", "indicator--9fdc5ec2-e265-4fe1-a91a-a5c85494452c", "indicator--a9b52d34-62eb-43dd-9d83-4621d76dc654", "indicator--1da9dbd5-32e6-4edc-98ab-022822269e86", "indicator--f04b89ba-f7c3-4244-b03a-92ce02dcdff1", "indicator--51ed9ed4-3d4b-431d-8c4e-9634271300ff", "indicator--10df5f1a-3523-41a8-97f5-118c21bba73d", "indicator--69d93809-cba1-49e8-949d-046d840bace0", "indicator--36448e13-029f-408d-83da-ebce30038e3d", "indicator--a4ddfbb3-41b5-4414-a77d-e3595fabc231", "indicator--7ef27221-d180-4268-9fe0-d99aa42707c1", "indicator--8fae0a0d-a540-4378-872b-ba2d2952301a", "indicator--c8e551e6-b351-4879-908e-eea639aeb08d", "indicator--70d88114-3ba8-4a3c-9690-96cbacf319fd", "indicator--2d727d34-3cd3-4af3-ab80-023717284559", "indicator--1d6858cb-c741-4746-8f29-594027f6c51a", "indicator--d5a30986-9aba-43bf-90ef-74494aa5515a", "indicator--239793cf-6c32-4028-ab5b-8270aa4fa2ad", "indicator--3fc31e47-afad-4fd6-b120-39929fc22955", "indicator--019a00d0-f5f8-46d8-8280-6517d5641eae", "indicator--e213f9d9-dd04-4d82-b537-eb1f72ce9aec", "indicator--ad5e956f-9fb1-4180-a812-b1e4420b1f22", "indicator--14938509-77f2-4966-8371-7e4290dda802", "indicator--3a096237-c5d4-4ee7-a4ff-4952127ffd38", "indicator--bbced617-0030-47ce-be0c-20cc8329680b", "indicator--226115d1-4f4e-44e1-be6a-411f29dcbc8d", "indicator--6beb0dd3-9149-4616-b473-d3acac0638d5", "indicator--dde25ce6-2849-460c-8622-3241533183f4", "indicator--ae65a572-bcad-4c4e-8c2a-38aa5bd0ae16", "indicator--c7d68557-e35b-4eba-bef5-078d3b39d1c2", "indicator--c5c85a89-5e1a-429b-b137-5f5a80a4e6d7", "indicator--600698ab-731d-4875-873d-f8ad48ff10c0", "indicator--978c8623-b704-4fae-bced-6715ae2bdf06", "indicator--d09d390d-9d56-4bc3-8124-b29106e493e2", "indicator--bf672b60-b39c-4644-85ad-574c3001a5dc", "indicator--61357996-ac29-4f87-bbce-832e9d6c08b1", "indicator--46f41d5c-0598-406c-b461-a83940fba88e", "indicator--3211f008-70a5-42b3-a6e7-39c100d4e8e9", "indicator--24f109ee-73a2-4aa1-9d0b-537d566315ed", "indicator--f3bab4e4-fba7-4d93-81f3-63034df58011", "indicator--549ea6d3-8adb-4809-93a9-c1562064c2f8", "indicator--5b61730e-7be8-4475-9547-710f0bb9ad30", "indicator--733845b4-a519-44c3-a77c-f13a24b9c0c1", "indicator--361ca626-f462-4d7b-a782-69cdd52a92b6", "indicator--42def57c-7ad6-4f7c-b421-38bc4fb14935", "indicator--a5fc7195-b6b2-47bf-a667-ce0204cbc920", "indicator--19fcabdd-0a21-42b0-bf0b-4ed2b2f7cb75", "indicator--05a47ecf-4d49-4c6f-b045-5bd056b0cc09", "indicator--657f11e6-552d-430c-9597-b7162100a9c5", "indicator--c9560b13-4a25-4a57-8a3a-c915f22566b4", "indicator--9912361b-b4e7-4ece-b89f-08b72ee7f6d8", "indicator--3e6d1976-9e32-40bf-a556-2112fc0c351a", "indicator--6fa3f0e8-8932-4de6-90b9-981f5b84d1b1", "indicator--f7dcba10-4f33-44ac-933d-f8d3ce5b17b4", "indicator--9cb281c1-c46d-403f-b34d-e73f52b512bc", "indicator--f880773c-52ab-4d95-adae-867af808c7fe", "indicator--429563e6-90b2-4452-b940-154f94c46273", "indicator--ecd0c26e-c4e2-44f8-81ec-39e73e1719d6", "indicator--b7d60ffb-758f-47d2-b77a-13caed6084c6", "indicator--86848176-eb26-4472-aff5-d9ce97107638", "indicator--8be715ed-a30a-4cdc-beeb-917d30653857", "indicator--7d784646-922d-42bb-b31c-a8c0ef65de67", "indicator--2bd2880c-2bc4-44b4-b6a1-f5a7646da868", "indicator--c53da20f-1e54-4d62-a23e-33f4db90ac21", "indicator--bdc6a366-f31d-42e2-bac2-a4fcea2b50dd", "indicator--29415993-64d2-47fb-a90d-ea3f5aedb4c9", "indicator--110b0748-7653-4155-b2a6-e0e1d8605e5e", "indicator--51908568-eba7-47a8-b3e1-4ecdb1c1cbec", "indicator--5b813e8d-7cee-4c86-b542-9d5c51e89451", "indicator--867f5da5-4ef3-4abe-8f24-ec532f88ec95", "indicator--8ea76d66-8bc4-4602-8e28-26df04e5db79", "indicator--23a44de3-befb-4379-b19f-66f8076e7052", "indicator--facf6430-f909-4fa6-aa23-cc9e1f4fc2cb", "indicator--8b9c279f-a0ce-4945-8a2e-6189e77499f8", "indicator--9cb8a2ff-343a-4a70-8c3b-33830ee3b925", "indicator--d6318269-b475-4504-83bd-46b8ec206e88", "indicator--ceca5022-fd88-4244-a39a-4dac5404679a", "indicator--16d82ff8-abbb-4bf6-93c0-1407944ef3aa", "indicator--98b2724e-6083-4edc-9e88-a14992ecac81", "indicator--39b71f50-354c-4012-8e1c-704a988776dc", "indicator--c379595a-0cff-4559-a27a-17fd59ac73e2", "indicator--e20d714a-7d03-41b1-bec2-30914ae6ae6b", "indicator--9d716fd3-7a2c-458b-991d-68e3c3a2692c", "indicator--2e03c258-91d4-4615-bfdb-05633ea5a511", "indicator--09586819-6306-47c2-8649-8bd42570bde2", "indicator--61c8abc3-9dea-4987-b8d7-6e48c0c582c7", "indicator--64e50014-993c-486a-90b8-cea53a52fca3", "indicator--64a1d8e4-9fd3-4eb7-b499-046ff89252c4", "indicator--16360c74-ed05-4529-9d3d-25ee88754069", "indicator--78966406-54c9-4835-8d53-a20ca3d4764f", "indicator--62bb6775-b736-4d43-b49c-8c1d734a3f12", "indicator--04ce3dc7-c77c-43fa-981a-8a4a74df0e10", "indicator--81c66c2f-0f2a-4b1a-872b-4c466e9bb802", "indicator--1d44986c-83da-48d8-9d07-8f2d789f12aa", "indicator--bdb8ed17-c0f1-4a57-808e-98e4b8f58711", "indicator--221e796b-19ab-4e48-af10-448f536d2dc8", "indicator--a023fb0b-38ca-45fc-8693-021195628825", "indicator--002646e9-3086-4a91-bb99-bd86f443096b", "indicator--3304870d-6fbb-4ca4-a5c5-d1d31e9d1641", "indicator--032dcb20-db45-4ecd-aa8b-b64b6961f44b", "indicator--6dc672ac-332c-4b9d-8024-2fa3257df1b5", "indicator--f2627941-3fce-4591-a94f-0ee97f8e081e", "indicator--3f133cce-9d9b-406f-b174-bc4c98bfed0c", "indicator--22e6182b-b7a8-42a3-9aae-3398d4099c93", "indicator--89595ee4-7767-4328-ad0b-b8c2b9315a08", "indicator--aba89f56-faeb-452f-adfd-a7e41af1f562", "indicator--4f0f799a-a17c-49ef-82bd-d26a89394ecc", "indicator--26f5cd43-7d2a-4326-be4b-c02872a4ea72", "indicator--5a70667c-d93f-4232-9f45-cfa1d29987de", "indicator--62c8392c-feb3-42b7-8fa1-1798dbdc7811", "indicator--e453e454-0a6d-4e08-a43a-d23ebf765c1e", "indicator--6d2a96d2-9554-4133-b884-f07b03f6b27f", "indicator--215a42c3-70c7-4fbc-ab84-848b3c17cd7c", "indicator--746b8db8-e4c1-442c-82ad-159769de24df", "indicator--e07943fd-b530-4d73-9baa-91349840c760", "indicator--4054353f-16b6-46e0-b627-1c238bdfc873", "indicator--8edb8d40-3128-4e20-8642-07d6ce5c8c17", "indicator--9ee06fd0-a07f-448b-ad7e-7b641b6a621f", "indicator--3c629f81-34b7-4f27-97c2-485043ec7326", "indicator--6b5bc920-c222-4db2-8fac-8b72a59d8863", "indicator--9a10f472-a3d7-4db6-bb98-164e5eb7123a", "indicator--e570956a-51c6-4563-b953-68db25ad6fcb", "indicator--fe5daeae-e9c3-4b3b-a4fb-907872c436a6", "indicator--610d938a-57ab-4a2e-b2a7-edde1ca0e376", "indicator--74f6be4d-fabc-4046-8ea3-c9c121902474", "indicator--5d2a6525-57e0-4572-92f2-46caba1176b7", "indicator--7a69bc6c-2de1-492b-aedf-1fb7126f0b27", "indicator--81f1da94-10e3-41a7-9e36-beed5e00edde", "indicator--5b67ea83-6f2f-4ec9-bc66-6b297ccbb9b4", "indicator--fa2f6e77-2842-4f5f-b740-f2dae6097bd1", "indicator--f9049180-84ee-43d7-a2aa-aeafc15143b1", "indicator--9c4c08fd-0d4b-40fe-8bc2-8372c225206c", "indicator--65e1adbb-bfef-45cd-8358-c15981e2c3f3", "indicator--02a4117b-cb7e-44a5-90a9-a88c916c0c8f", "indicator--ac995b51-a0a6-48e9-879a-530b2ab0810c", "indicator--e8241a5f-b2ff-4d6f-b5a4-1bc4a3985aed", "indicator--a0171172-369b-4c24-abb2-befb011c35a2", "indicator--d12e21d6-d3de-4b43-9a0b-0ac4d653b3f4", "indicator--05f8269d-4a4c-4c03-a4f5-8bc02b93ad6f", "indicator--b33bf3ee-47f9-450f-8088-dccec16b2559", "indicator--7ea243df-8b8b-4945-97db-ff3199953339", "indicator--0974bbbf-5505-48f3-a28d-14ae097d07e4", "indicator--6cff5db9-83d4-431f-bda8-d1becf90c25d", "indicator--0ae5cf27-9d74-411d-8809-ea9c9b4eeff2", "indicator--c3692940-6ea3-459a-ae4c-2759f2abce5d", "indicator--7b744589-55bd-485c-b9d1-b06af8dc1acf", "indicator--ae226376-a448-44cd-ad54-40d09317c20d", "indicator--67946460-54dd-4626-9930-7a285f9d3c3e", "indicator--85b7e038-d4b7-4017-bb97-e63382460c87", "indicator--36e0cce0-6439-4388-9d19-63f759211e30", "indicator--faca355e-c505-41a7-844a-5c7d84f19b95", "indicator--b8ceed1a-2adc-4e98-b873-fe5a5db9c61f", "indicator--fb26f43f-3a25-4c4b-b415-538da1b9710d", "indicator--2c06466d-be52-47aa-9f93-ec3cd363800b", "indicator--6085217f-32a4-469c-b21a-87b38ca9be9e", "indicator--78318955-3f0c-421c-bc66-4ba6bbb14ca7", "indicator--8fb686a0-4b3e-464a-8583-95765ec10cff", "indicator--575cb229-5cb6-4adf-aff6-1953ca0512e9", "indicator--f46b9df6-a3f4-494d-aca4-5b9538ec139a", "indicator--2fb3f78f-c67d-40b1-8fd3-0d3e12e674c4", "indicator--e210adef-3993-4c7e-a9a4-c0ea9e36b1a8", "indicator--46a68d77-0b3a-4f0c-b639-cf98d646fbd2", "indicator--bd52a9d3-4459-4d7a-b4e9-213aa14ce56b", "indicator--64b2343c-dd29-4edc-a6c5-ec9d17d70c50", "indicator--3dc31d8e-1b16-492b-a14c-d60ac66f4247", "indicator--ab400b66-c067-46a9-a259-93b80493a02c", "indicator--51a853ab-f937-47df-9c1e-05823c6db6d8", "indicator--e3080e0c-2794-40a0-b383-e293ceaefd71", "indicator--3f4ad354-e86d-4023-a7aa-b437f2fd4640", "indicator--4f9da53d-4cbd-414d-9e30-98bffb795413", "indicator--848b2f93-91a4-4f2d-98bd-5559940a6b74", "indicator--4b896f99-8935-41c1-9489-3f7186c2ac4d", "indicator--a96cea2d-0c25-4534-b32f-19a25f73c576", "indicator--5cee772d-297c-40bf-84be-86716490c39f", "indicator--8f0ead01-effd-4d3f-acd2-a73c7c65926b", "indicator--00d9da8a-f2f8-49e8-bba2-b1f50645be41", "indicator--42417978-5518-4505-afc1-ae19dbdd2b44", "indicator--a7c6445e-90b8-4d79-a1cf-ce7c5f5e1cf3", "indicator--0d1ea067-2537-4b4a-907b-222d7c55d7d0", "indicator--1c36c38d-79b5-426d-9407-d09101d08ef5", "indicator--63b6cec7-6843-427f-aff3-3ccdf940c30b", "indicator--00b6774c-8dfd-4aba-9695-12beacfdc5e0", "indicator--95a1f93b-aa1c-489e-a74c-c15df48c6cba", "indicator--89bb6c5e-cdde-4f78-8fec-f1231f728d32", "indicator--34b902e4-5a3d-45c9-b179-c322887bdeb8", "indicator--de71562a-d6ce-43da-91c6-8b464d789a5a", "indicator--c7257055-93e7-46f1-821d-48f4b2a9a6fd", "indicator--975c377f-8670-4d57-b195-46fe3e83b524", "indicator--f854ae8f-b07b-43db-a1f1-310714036f2d", "indicator--df01f9ff-ef44-4000-94ac-037c471df298", "indicator--de1c4f88-84ae-4b2d-895a-e874787ab8ba", "indicator--df3b2654-7e2b-4540-935a-c4e0e0e528e6", "indicator--7a2b78f8-44b6-49c5-ab39-b8692b5b3727", "indicator--54cbea2c-90ec-473f-9262-49b9c546be27", "indicator--1b2e0baf-d063-4320-8276-7dfd2855eced", "indicator--6593913a-8ad6-456a-b7d5-0541d83de08d", "indicator--da25700a-54a0-4697-ba96-c61e5944fe02", "indicator--464e1cfd-be82-476d-b35b-f083dee46251", "indicator--46a581dc-07b4-446e-ba64-f2aa8ccfc3b1", "indicator--b4d4a351-ae0d-4766-8786-da04270118d4", "indicator--b628945b-bb46-4ad4-9219-7c03eba1570c", "indicator--cb4ae77f-3210-48f1-b690-db868bd8b75c", "indicator--8bfda2a7-6eaf-4223-8edd-b5913f124848", "indicator--40537cdf-13bd-40bb-b2a5-f3e9b9f60877", "indicator--5ed388be-b657-4e37-a46f-d5910fd0103c", "indicator--88b566b0-8dfb-4b80-97eb-220a38e32f35", "indicator--8735a8cc-c339-4f70-8cdc-468bb0c1d7f9", "indicator--f362c4de-ec15-42ec-8b6a-950767877a10", "indicator--a35f351c-7f97-493a-8c72-54c90abcc76e", "indicator--41c03a9e-1b97-4b06-8f0e-994f97a5f783", "indicator--5638fbb4-22df-4f7a-943f-f44ab26d086e", "indicator--1f91ced3-0fe0-49d5-8526-a90965253ec9", "indicator--2fe4fef5-5290-47e0-afd7-faee949dd7ed", "indicator--820f601b-4b19-4336-8ade-5d7c4c2e2ed7", "indicator--69fc1485-1641-4219-a4ad-168cc1adb2d4", "indicator--dc0d1602-fdd4-43df-b9ff-e24880a6780d", "indicator--2140ad91-002e-4c8a-88ee-ebbdc4a35c5f", "indicator--9c8ad279-5d41-49d2-af18-41b31367378e", "indicator--e36c7f7a-446c-4677-a031-c090bdeaad9c", "indicator--3a803812-2aca-4e02-8d2a-0ae99601a5f9", "indicator--373d4b15-67c7-47c2-9db1-140ddcaced8c", "indicator--55c8b861-5932-4928-9a5b-c61ae0e23acb", "indicator--c23f044f-0974-4b4b-8b4a-d214932f1e13", "indicator--4a705de4-4dde-4d22-ad16-96b04918acea", "indicator--53d8f2d2-b7d6-4526-b2d0-af75f2137de2", "indicator--13d1ae7e-8d34-43e3-9523-2e346ec35d16", "indicator--7a0d4090-e1b4-4168-b062-649822e56d47", "indicator--1e7c35af-1681-4d88-8008-6218c4bce164", "indicator--e0f5b3c0-4cd8-4ce0-ace0-fc41960f6a98", "indicator--2f396cb7-1f6d-4360-82ab-27fcc89707f6", "indicator--7662fbcb-8591-4197-babf-8e98d4b91c54", "indicator--b2edb081-9ced-4bfd-9c09-2e0e0d4163c1", "indicator--abf95a7e-9ce2-4e56-8ae0-da2e08debbe6", "indicator--6fcdf479-6885-462f-837a-965dfcc1f81f", "indicator--c5c7e592-3f46-413a-a66d-7e727d5bc2e0", "indicator--b80f797d-6661-46ab-9a4c-5e874ffea118", "indicator--63474451-0d5e-4a40-a99b-7d18fa791947", "indicator--60448e88-2afd-4b1c-b717-fe8dc66b5880", "indicator--0635c1d4-66cc-4b81-a77f-d561e4efe2a3", "indicator--48a8469d-2632-43cc-b13e-df4e581c927c", "indicator--64ab1fa5-85c6-4ef8-be40-ce03b3d0ce78", "indicator--ad5bb956-6ce1-41d9-ae69-c6dcbe08af94", "indicator--cbc5216f-6681-4331-905b-c73ade3d36a2", "indicator--d350b5d1-f14c-405e-94eb-fbae4eed078e", "indicator--df54bf42-a0d3-4c20-897b-b99836169665", "indicator--7556fc4e-4c3c-4392-b67b-0f4d6e29841c", "indicator--9035d55a-6fd3-478b-9c38-c08d1e4541f1", "indicator--77a64b93-619b-445a-92f4-6b1185f97bee", "indicator--0ba1e907-0f3c-485f-b69d-5c058f4e993a", "indicator--79a032b6-47f5-463e-b214-255c611093eb", "indicator--1f9f61fa-8107-4240-b030-5828725289f2", "indicator--3d41d9f3-8f7a-49a3-b799-6d7021a65011", "indicator--f038608a-12a6-4875-bfb3-12e1aabeb766", "indicator--6914b0aa-4fb7-4bdd-ad9e-264cd4b72bb3", "indicator--527ec976-ebca-4fe3-ac50-fe7989122309", "indicator--277d3614-ae03-46d9-9370-108eebe27f90", "indicator--012f3292-a45c-44b6-a58f-067958a05053", "indicator--c628b491-744c-493e-a7a3-250782d9bd93", "indicator--dd1a4ee7-e39a-4c9e-8a08-6cf5ba9ec738", "indicator--83c0f3f0-162a-4274-9e90-db9c2be80b1d", "indicator--25499501-0364-40a3-8d98-cc5376b08e66", "indicator--5489073e-aad3-4102-a614-1d1c97a57e9f", "indicator--0441d928-e7bf-47ec-acbf-e127606f0171", "indicator--f028f728-f9fd-4742-aada-bf25e2403ecb", "indicator--b2016bf2-2d60-4200-87a8-cdafed8aaf2a", "indicator--5cbe92cd-90a1-4dcc-9253-b677827ea988", "indicator--4ba81278-6a66-40de-9314-4bb8d4a1b103", "indicator--5529eef2-1736-44b5-b63b-40bd925b2497", "indicator--56cc8206-1523-4eec-af56-1bb6a30be17d", "indicator--5b3c5a59-12ae-4c27-8492-258dbebab2b2", "indicator--28c4d18a-1bfa-4774-a29b-30f749c1605e", "indicator--1ed7bec4-4da8-47b7-a83e-fe888cba6b19", "indicator--84b00d9f-564d-444a-b6dc-54a9302705f5", "indicator--8c0ffa63-3c33-4461-8459-f1692cd94dd5", "indicator--189b667f-f862-44b2-bf3b-c88f5a3c027d", "indicator--c53789f9-c87a-47e2-90cc-b79c49fd9b3d", "indicator--231e4188-e8af-4762-b5f3-9f1bbea983f4", "indicator--8a9a2d75-12c2-4fe5-af2c-6e6ac5d8c010", "indicator--f8edfefd-727c-4850-9515-1743af8e8c6c", "indicator--ef0f5934-0971-4173-b79e-de243bc0c0a2", "indicator--d4aa48e7-aa32-402b-9813-fee945e0a94c", "indicator--292d20de-b551-4b85-b266-79babfc2f8b2", "indicator--acc75c93-7159-422d-9cf4-4eb19fe4c7ab", "indicator--5f8bbe44-e18d-4c78-a2f0-ee7684715e4c", "indicator--943a56cd-7ce5-4dad-a5dd-66e0b4498f1b", "indicator--9a18511f-07fa-4bb0-b0ef-49021a1cb98b", "indicator--0a373fbe-3123-4220-a817-1ec196fa8512", "indicator--c2113841-1e1d-4185-a17c-23fe8e6672c8", "indicator--fb452977-3970-496c-b46a-7b29fec84809", "indicator--2fa09584-ae93-470a-a838-e44e081b608e", "indicator--412f6e87-452f-455d-a684-5f2ccf5aa2c6", "indicator--7cd11fcd-ca74-4f82-88da-bae59c06d902", "indicator--b84380fc-84ab-4726-bf80-249531e0d4db", "indicator--2031d01c-c89b-4055-8101-f55505b150f9", "indicator--94df6b2c-4fe5-4b14-b38b-70471b771ef2", "indicator--de545a9b-35b9-4138-80b8-64be8ad9d71b", "indicator--d709ae2b-b604-403d-b1d7-6ffe302452ad", "indicator--cda71b25-8141-4614-a625-cff04f938038", "indicator--8d5fd7ee-79d2-4375-a386-5b1029fbfe6f", "indicator--8d610473-a22d-4cdc-ba07-387d2b6bba86", "indicator--00d97094-d82a-4fb3-9cec-9f7353acf95f", "indicator--492cae5c-ca3d-4b0a-88bb-f623012d227b", "indicator--14c7a77d-aef9-4a95-86d0-ba09e4e652c7", "indicator--5d2e1d6e-2ea3-47a1-8997-d1ce0b6f4bf4", "indicator--50099109-7e72-42bc-93b1-399e3a0857bc", "indicator--655e9d3e-4566-4457-a6aa-ca501378ea32", "indicator--29b8dff8-c1e3-4135-b017-818a6308c101", "indicator--cf974c5b-9d89-4852-a133-b302cb5b5971", "indicator--e8bf0a00-c950-4d2a-8bbf-8e5486556cf8", "indicator--1266bd96-eefd-4a12-ad52-f42ba8515b77", "indicator--35c69159-e4f6-4b53-869c-5b2b195220d2", "indicator--ea224e76-d9d9-4701-8b24-f14f02b2d153", "indicator--ced8dcaf-1891-4076-925c-1da32ba464a4", "indicator--0472af8d-1116-4a44-9893-736f2a957b39", "indicator--7d771794-bc3c-4f52-ac9f-a1db142c8fcf", "indicator--eae993d4-8c68-459b-b716-522347c7041f", "indicator--3a970069-da0e-4acf-b62d-ff7a8d35b9f2", "indicator--77227cfa-935b-470d-8e93-1b4ba7b2ee87", "indicator--a9d57b49-cc43-4f5e-b8fa-398819d8be79", "indicator--7b39c2cb-9e51-4efe-bd4d-50f5ab83bd16", "indicator--cc7bfe5e-3dab-421f-b628-4d7cb3b42f73", "indicator--6a54f408-b9de-4ec2-ab86-3945e4983e46", "indicator--d673071a-fc5f-463a-88cc-20a517271c2c", "indicator--3f065fa3-a176-42e0-9ad7-50943dd7c618", "indicator--d0cc6f22-42de-4fbb-9f11-3fb9b82622e2", "indicator--4a291881-c6b1-4094-9669-b4617f4f640a", "indicator--59b3466a-9142-468c-8d6a-c336bb763ea2", "indicator--ded8040c-6407-4a91-b43c-904043c15a24", "indicator--0201c91a-841d-4b2b-96ef-582c98109658", "indicator--5d2cef1b-94a1-4e4e-ba3a-19018fc2e787", "indicator--90cebfc7-2500-4ed8-aea2-8e01d14169ba", "indicator--c2a4fccc-ee4e-47d3-9d22-ec87df222acd", "indicator--ed3d7ef2-5e82-44e7-888a-61003c4ea198", "indicator--abf75a9a-fc07-4dc6-b539-0c6f31cf097a", "indicator--172ee7bb-3e02-449c-9126-2e2c4e4696e2", "indicator--0d8d99e7-e1bc-4319-ad36-a48eb62f5c7d", "indicator--e261b028-0bc0-4d4d-b867-5cd24943f477", "indicator--be4b1fc0-3f78-4165-9912-ae9f3bc313f8", "indicator--d2846caa-c769-4441-a873-0865a772abb1", "indicator--2782cb74-3374-40a6-a871-e452d4aad907", "indicator--acda6c2f-1042-4912-8958-d6042303aee1", "indicator--10febdf6-bb88-449a-a494-9c2bcd179d08", "indicator--0fe6f5da-9cb9-4191-aaff-173d41492e1e", "indicator--28a1eaca-4094-4c4e-bd8b-72e17c38465e", "indicator--06331203-b9d9-4fa8-876f-624f9f9c94f4", "indicator--01b94bf5-a2c7-4368-a68e-aee4a1bbfa1f", "indicator--a38ee569-bf4b-426d-8d57-f5af298f60e5", "indicator--68d70eb3-dc4d-49d4-bd4d-5f2f35118fd0", "indicator--86ef8b5b-4cbf-4393-8c21-70da1510fbd9", "indicator--cc209f58-4933-4d9a-809b-c35dcadcae79", "indicator--64f8063d-9860-41e7-b46b-e2d22a8c4e62", "indicator--6fb9cb90-b693-4ba4-a062-f00265ed12c9", "indicator--57b2e59e-8690-49f8-a3df-6ad0c40abbeb", "indicator--4c379fa9-c0bb-44ee-8940-df6adcb57ded", "indicator--165c528a-a954-4479-9fb2-cb18e0702309", "indicator--b2450cf3-21e7-4adf-93c4-5f007cbbdb6b", "indicator--20fc79e1-ed68-4379-819e-42de8de8ccef", "indicator--6e6f775c-c6e1-4397-9b9a-82f93eeb49b6", "indicator--c04e393e-5768-48f8-a1e6-05352fdd6179", "indicator--21d1bc86-3499-4a25-a04a-2908a6c347ad", "indicator--313a4921-fa89-4d32-980c-d6623b6e1f68", "indicator--592f9580-c1a8-42cb-9523-b0e7fb8f314b", "indicator--d0643bc8-786c-4c3d-bcdb-aba0f2d5ab9b", "indicator--ad38dfd2-c0c0-4bcd-8e09-b7a6325d696d", "indicator--0020d618-62b4-41a3-870b-b5f0e4aedc3c", "indicator--e4a9aeb5-53ec-4c42-843d-881385ba62f3", "indicator--a09e9029-a3e4-476f-9680-14c2300d97ce", "indicator--bbdc185c-4423-47af-879d-714645d0f67a", "indicator--25a646b3-8f5d-4bec-93f4-744e9f8774cc", "indicator--3b09babc-1852-4893-8a7a-36140f29f339", "indicator--39356062-2102-417a-b489-6033912803fb", "indicator--6295a544-2740-4c01-8e38-7c47fa2cb9bd", "indicator--730a233f-fec5-46a3-a707-81c26c101f46", "indicator--a9f708e9-1a39-4297-940d-6e9c8373b63a", "indicator--3523775f-840e-48c8-ad70-04bc455f6209", "indicator--e4542366-44d1-418e-a630-863c8d0f5e76", "indicator--412903f2-34f1-4222-af9a-3372a336daeb", "indicator--48a3c6d9-e09e-4f13-bb73-b5b864565b9e", "indicator--49d70eb2-1ebb-4919-b8a9-b27c89b67d51", "indicator--ff5db483-2ede-495d-826c-feb978bd56dd", "indicator--ba5ef4d7-2939-41fe-b2c1-365051b6a0af", "indicator--bb33e135-95d5-4ccb-8e4d-da020b5e2b34", "indicator--ea74371a-8b8f-4f48-8007-564749d41fc4", "indicator--a2705ed1-76b4-4226-9736-f695e036fc02", "indicator--b9dbe572-64c6-4e8c-a371-6338265b9fe2", "indicator--f374c37e-31f8-448f-84ec-a6be66c0e57c", "indicator--1ba8aa0b-ab25-4fa7-96c3-070ce4d86dc5", "indicator--38176c56-4f19-4258-8cf9-3bec21f8f71e", "indicator--13dafe3c-7c75-4a09-ad46-8a46b44b9ee6", "indicator--db9dc1c4-50df-4c20-9b7f-9c0970a316f6", "indicator--b294388f-083b-489f-b325-01287956cb4f", "indicator--284c2631-2365-45c7-883e-550668c3566c", "indicator--9f259901-e24c-46e4-83d9-a293cabf254f", "indicator--06067af2-488a-4d04-b342-abe046d471b0", "indicator--0bd9dc2a-52ec-4c31-978b-1dd347da099b", "indicator--74cd66b3-c461-4a24-9d55-6213a2635564", "indicator--ddb81b0e-d492-4818-9ee2-055d02d9fdfb", "indicator--4f57d744-22b1-4be3-b6c1-abd8e6d450b2", "indicator--2974c7a0-0bd1-41b8-9362-a2db6c3cda58", "indicator--156593ee-4ecc-411f-93b6-fcdb233756c0", "indicator--b54cab05-9e5d-451e-92aa-64b276aa3009", "indicator--ce8001d0-239b-4a41-980c-146b1b7caf88", "indicator--5158bd3f-0de2-40f3-b6bf-5d525150bfda", "indicator--49b63797-275e-461f-8c69-8d0946a5ccad", "indicator--0764b525-14b5-46b0-a561-19cf78c5bc95", "indicator--8eedbff6-3b0e-4e0f-bdb2-4b48d106ef31", "indicator--57d102dd-a414-416a-885c-569e9454b2f4", "indicator--83797e68-4fe4-4ea9-a84a-b73a6c0a49fb", "indicator--a105bd06-85ce-4f97-9f31-b86dcfbfd38b", "indicator--8396533a-a2e8-4180-b0a0-ddc65cc8fb4c", "indicator--d2145775-322b-489e-a312-2651185ca8d7", "indicator--3eb6166b-cf19-467e-9881-8d9c5659de74", "indicator--6440db90-e3b4-48f7-8857-81a278ffb694", "indicator--aff35e86-bcb9-4f9a-ad0f-9311f8d96e80", "indicator--16c895e1-c7bb-4395-9fa7-b7654180e12e", "indicator--d1760e7d-37c0-4639-b6de-f3053af2fdd0", "indicator--9f3a0073-388d-42c3-8591-060985e4a313", "indicator--440fe4e3-d362-488f-9695-18bc7d002e16", "indicator--b75e904e-55ad-4625-b19f-86fa859c1ae0", "indicator--29573aec-0724-4a92-8680-8c8c22254f74", "indicator--75771f25-ec2c-428f-b52e-f69e7d3a71be", "indicator--3c8d0518-f91b-4092-a944-ef21aafab65c", "indicator--e5fa0e53-faa5-4479-993b-f2f86dc94c8e", "indicator--cfcb0e86-8613-4975-86f7-5c6debe4913b", "indicator--4075cbff-f543-4921-b36d-01d0a692b140", "indicator--0323f637-4c8c-4db7-b251-e4ded73b31ac", "indicator--472162d9-a20c-4c20-a596-7d94265c8b58", "indicator--c3177fb4-20c3-4c02-9a58-60253e508c59", "indicator--d6880fd4-463d-4dd8-bc5f-d1794a2f3548", "indicator--16f2e4af-c19b-45f6-9b4b-f97ad9396473", "indicator--09df49f2-99ff-4140-ab67-27fe346acf43", "indicator--919dd40a-0ba6-45c2-ad28-ba76e9141c46", "indicator--e422a9b7-4e1e-4154-8baf-d1bbe49f2fbf", "indicator--fd6600d2-5985-4a6b-a016-755fde561486", "indicator--e03f3f87-4047-482a-9db3-899a30fd3600", "indicator--ee65acae-ec1e-462b-920a-985fb7c39e2c", "indicator--c5e5c979-c768-43d4-bfde-d4a97080ef87", "indicator--c1e5ce9c-04fe-4145-a3a4-e24db1da6f54", "indicator--cd8b6318-0390-4c72-a094-be261dad5885", "indicator--5a09ffe3-cb22-4a7c-988f-ddb94ef5a859", "indicator--4954b7bf-36dc-4de8-a2b7-3a0f840c4780", "indicator--0060d7be-ecd7-4fa0-8c5e-b541b28d174c", "indicator--6f751580-2e5d-4d4c-a77d-a8beaa007551", "indicator--4fc25ebb-54ab-49b6-b63f-4b9594371572", "indicator--6fba674e-f759-4113-8417-08e8198f74ca", "indicator--1f17a44b-e56d-448f-9e08-3e62fab7020e", "indicator--29c58dce-2af6-402f-a3bc-9747ecaeb0ff", "indicator--6d437773-be69-4877-abd5-4c78d95512f5", "indicator--cc74574d-bca1-41b8-a1e4-fa7476355d2b", "indicator--6780ae53-5843-47e4-a7cb-4791c9f817bd", "indicator--5d22c1ab-22b1-4da9-b00f-92328ff15588", "indicator--b32b8c23-bfa8-4c77-96b4-a282bcc25386", "indicator--20383105-1f15-4b39-9682-7b4630705853", "indicator--4b133d85-f086-41aa-bf48-504236e797dc", "indicator--e0473cfc-317b-4dbf-be07-edd38edab6a7", "indicator--5e7cbe26-890a-4916-b6ce-a28dc0632f7b", "indicator--38056865-3da9-46ca-a569-973f8f12af53", "indicator--07275767-73d0-4b17-9787-19a7260812ea", "indicator--2cc40a85-fdd7-4723-b92b-8e64396c8713", "indicator--e11c4b14-b057-4c9a-ba67-2f610a54dc2c", "indicator--b769c184-1300-4cd5-9718-e15e18ac9817", "indicator--976f82d9-c827-4f93-a8e5-4c7b8954c83d", "indicator--f75434bd-a598-4acc-8894-6132be8fa392", "indicator--d18b8e75-f961-4f7e-8ecf-5d73519e6bde", "indicator--8e7ef968-3362-4a07-b6dd-07fdf048e337", "indicator--3d81fb0a-fde4-4678-9041-e104d4929e32", "indicator--593cbf35-7f04-4835-852d-175a01f15809", "indicator--f4646191-e53d-436b-bb78-add35221cb5c", "indicator--8437b969-3287-4abf-8262-57248b496045", "indicator--8b421588-aaa3-49a9-90f5-95aa644744f2", "indicator--1aaed888-decf-4f42-be52-aaefdbb6d0dc", "indicator--c1cb968e-e59b-4846-b366-96a34baa3bdb", "indicator--c01cc31e-d754-470e-9fed-b6f8264516ab", "indicator--4de69db5-6f97-47e1-b9b4-124c8cf37b20", "indicator--22f7228d-aa8d-47e9-912f-127fefdba66a", "indicator--61a2f607-6d7e-4668-913d-b6ebee79891c", "indicator--ec91476a-152b-48db-916a-ca93524ce712", "indicator--a93c0bdd-04c1-4464-ab96-183cdba3a86d", "indicator--6fd33130-f55a-48b4-bca4-10a56ac9ffa3", "indicator--8ec1bb31-ae41-41a5-9f2a-27c81fc89914", "indicator--8d3a2882-66ca-4a6e-9946-d95ff41aa689", "indicator--81141cae-56b1-4519-ad3c-c82b4ccee4e3", "indicator--c09b544b-b2d1-4d9b-a499-cc58e985c8cb", "indicator--5d26816d-b880-4a91-858d-123f94fbf48c", "indicator--4b3668fe-2a9b-477a-9d72-354da25d3ea1", "indicator--62d0bdc8-7c3a-4377-ba22-c2dacdbbc50e", "indicator--f396f798-727f-41f0-bd77-38a273c2d462", "indicator--75b15abe-ad1f-4083-8fa3-42fb64e63567", "indicator--134192c9-8644-4507-9485-855c601557ee", "indicator--bc4d4e3a-5239-46a6-ac1c-b792dd486ac1", "indicator--5401401e-fa62-4bdd-bd73-9073d716d237", "indicator--1139bd50-ca78-4ed7-9b38-9fc18b638893", "relationship--4253d3cb-f719-4e0d-88c1-16698b9c8ba7", "indicator--bd59a32d-53ea-4d0a-9c6f-4c38a1422ae6", "indicator--9786fe81-a676-4d83-a7d2-779075f7ba99", "indicator--3579ba71-03e4-495a-a61b-d698023eefbc", "indicator--e78c1125-e4fc-4ca2-9412-8887fd13c9c6", "indicator--1182e22b-b8e0-4940-a1c9-5f3dad8ae4a8", "indicator--a546579b-3ca7-4468-b773-6b27b304f30d", "indicator--99b7e8a9-b6d1-4571-a8eb-fc84d42b76c2", "indicator--0e88c903-7353-4467-9c47-6f823a77946a", "indicator--3b630bfb-f7a7-405f-96ea-62d8c5439b18", "indicator--0ca0a3e2-9582-456f-9bde-0350a488f630", "indicator--b3ed06cf-23c5-4705-b0d4-f04ec9ba762c", "indicator--0bd728f4-5765-48d8-82cc-e17bcdf578f0", "indicator--dd60b079-f0fa-4f8d-8075-f17829393f8d", "indicator--57c5c9a7-aa75-485b-8469-704cdec2975a", "indicator--5cac42f5-3f3d-45d0-8909-90c73bb4cc29", "indicator--481cf20a-89b1-42dc-a60e-cf2876cba1db", "indicator--60689b45-0090-419a-abaf-6bef353fb7d5", "indicator--d630a74c-cbc2-493f-a5d7-4ce82b22f22c", "indicator--c50f2c26-e08e-4444-9836-f36dae5d586d", "indicator--45bc6993-d5bc-4be1-b581-bbcfae527db9", "indicator--b4381bb0-c10a-442e-9ea2-91c5213bc1f8", "indicator--87d78802-5419-415c-b10a-0fa6fa968b03", "indicator--0b91dd87-7d3e-49f3-998c-37fffbb1f640", "indicator--f834cc88-47b2-4e5f-ae32-a395dea6d74a", "indicator--17dc0c9d-1b54-43c5-8ab3-3fa39ea0e25c", "indicator--217217a1-638c-40a3-bc3c-4456ee7d1112", "indicator--ad7bfb40-7330-40e5-b5bb-8d5a162f7d20", "indicator--8ded5004-1876-4bb9-9013-ef7891cb9218", "indicator--1220f10c-16a2-4ba1-9401-8913677cf143", "indicator--22fe8793-459f-4c9d-a803-b996946a515e", "indicator--afee29d2-fa7b-4020-88b1-5aaba5b543e2", "indicator--0071819b-8a9c-4d26-a0b5-5f84d4566aa5", "indicator--c1b189d8-ebed-45f3-9b81-f8f2956173ee", "indicator--b8579ed9-7c78-45c2-9ed6-294da5deb7d4", "indicator--6b7242ec-96a6-484c-8be6-126f75c1012b", "indicator--a0b5eece-df35-401b-8d2b-1af7248c383f", "indicator--45f9e888-ea12-4fc1-a004-2ac161f084eb", "indicator--9f8e322f-3849-49d5-878d-d65735a76b6d", "indicator--76580e64-4502-4bb7-85cb-75424766fd19", "indicator--7f0e4bf4-fc7d-4d94-b18a-66901a585c5a", "indicator--7a51a0a7-4747-44b0-83f2-b832e6d7c820", "indicator--045f5dfb-f565-4dd3-aab4-9e71a3d73efc", "indicator--c3d4ee53-42ce-4843-b63a-3be271592cf2", "indicator--9d16dbdf-96c1-4729-9974-cde792c3ccfc", "indicator--7ccd2eee-778a-4c02-b83a-91f8be46a5d9", "indicator--e595a223-18f3-4d05-83a8-32d6487a6120", "indicator--31316596-b407-46e2-ad9b-e95b11fe6846", "indicator--8abd778e-aaa7-4fdb-afee-39b18ae94ff7", "indicator--4f417878-4b6d-4a61-a7ef-b9b7988159cb", "indicator--9bc6f9e5-0207-4e60-819c-4c8ca238fea5", "indicator--7ad17be8-622f-44c0-9dc9-45e7c3e64f39", "indicator--da9e4347-c3f8-450c-a549-6f9487353f12", "indicator--3515e6ab-54a4-46b4-b31b-36924dd100ea", "indicator--fbd0f67c-6b48-487b-b279-e5c256cb0059", "indicator--f5c82d62-3681-4df0-9426-bd768b3ff6b6", "indicator--82e0927e-22e2-425e-87ef-29a52f6bd69c", "indicator--4d0f2b37-9cf0-4ad9-8819-57a51d4bbf7a", "indicator--250d504e-794f-45fc-a0ff-2c98dd3f8736", "indicator--57335471-701e-4f49-8877-b69a1020efdc", "indicator--4710cd75-48bd-48fa-872b-0cdbf32b77d4", "indicator--cc33f5ef-fec6-455e-ac8b-7afedf31560a", "indicator--0e04d003-342c-4404-85e9-2cba893bef1e", "indicator--e4091faf-465b-4481-a95a-fdc7c2ec62b5", "indicator--2f4cb0f3-f7a5-46a5-a072-37b19246dab2", "indicator--f6d68bdb-48e3-443b-ae4b-8285fddc19a9", "indicator--407a096e-4589-40ec-a65e-fd722a183846", "indicator--c1e45ff0-28ed-467b-9145-e9775be28bc0", "indicator--cb8b7aad-f639-4428-a2ba-eee6d9c19008", "indicator--8a42ab58-ef5c-4d87-8390-5b61d520042e", "indicator--74e7aa75-399d-4dcc-bd09-4eb1ab5de4ac", "indicator--402a7f2e-f05c-4785-aba8-36e347eb3a04", "indicator--e47e7969-0c62-4f25-960b-f9fab36229d6", "indicator--d8570b56-830c-4354-8be0-b2ae4c8200ba", "indicator--e2663fa9-f604-49f0-9c65-870fae6eaefd", "indicator--98104941-db6f-4b95-8314-75eb2bf92715", "indicator--51ce9754-3051-4779-97b6-74099baee67e", "indicator--be265e58-264f-467c-8f72-11a7227a2d5b", "indicator--860b998b-0743-4282-ba9d-15286bbaca6b", "indicator--8cbcc788-cd2c-443f-8844-2851ff55616b", "indicator--0578ce9a-6095-41c2-8984-0ce1a75ad54a", "indicator--0d9b0fa6-cc36-4d71-bf71-fd18acac2619", "indicator--45a7acd2-c79f-46c4-9403-25a4436ce73b", "indicator--94d6f1a7-dbc5-48ec-a941-bd8733d5e69a", "indicator--befa0abd-83a5-4989-952b-bf5d778684bf", "indicator--3a407d13-f46d-4910-8cb5-d6d82cc19e61", "indicator--b269dab5-dac4-4e74-93a5-76f567d32d1b", "indicator--0a12499c-de2f-4184-a495-2a7f5ddbbb3c", "indicator--1a3e0679-b8a0-4f35-aed1-c095be5da5b9", "indicator--e76dfd58-b336-4556-8eb0-a233bc639a86", "indicator--198df5e9-b701-48a7-ae20-53ae1722c407", "indicator--71e963c3-a8dd-4ff1-8623-d9972bcaabb0", "indicator--1ba49863-d153-4ab9-8960-dbcd2c33d237", "indicator--25a41be0-51c5-40c2-a446-dc3cbf38e0a7", "indicator--09a54e6b-f1ea-4f8a-945c-010c7c6dfcca", "indicator--a662a070-43f6-44e4-ac67-8a1b6754a209", "indicator--304b71ea-53be-4fef-af7c-5ac706fa9a0b", "indicator--1a984876-a8f0-48a8-8e9f-8cdbe189b33f", "indicator--6a531663-8dc6-4446-ae4e-46626fc9b4bd", "indicator--117ebd97-3c9d-4d6b-a28a-c76a07a432ef", "indicator--962c5087-3485-4818-b35b-6855ce834c94", "indicator--0aebad13-4ff2-4dc3-81d3-85117d718e2c", "indicator--6892705a-9ce9-44e5-8aa0-2e6a18cfb4af", "indicator--2db14721-3faa-49b8-a790-52c0f3c41f4b", "indicator--9ed0e3ed-efeb-42a8-ba08-c7fff5eb1985", "indicator--3199c9ea-f662-48a6-a67f-16ceee46a406", "indicator--cb2b6d93-c5ea-4bb4-bdb5-8791c3e87794", "indicator--c0b82774-92d6-420a-b8c4-5977c2bf60db", "indicator--712af0f0-f98e-4918-a474-80db1fc62a83", "indicator--aef274c0-b0a5-4b7e-9479-13b1932d09c2", "indicator--6b4cba87-d1b8-425e-836c-132952fe3fbb", "indicator--7c96d75d-f218-4e4d-992c-59cead34a21c", "indicator--71035d04-5fe8-4053-96ee-20650d5a8be1", "indicator--44e95b26-eb9b-4fe7-b70e-deb4de19500b", "indicator--2fce7afe-f59f-4d6f-8006-735d0160ce48", "indicator--c5ac81a6-e721-48d8-83ef-1778e9175de4", "indicator--b735c393-4a5e-41f6-a3ad-e221ebd32d6c", "indicator--b6fb27ff-e56a-4d69-88c9-427728114120", "indicator--ba59a7d3-6f52-4fe7-9db7-697074457d1e", "indicator--8dd229a0-6e44-4d52-905f-2a16e8ae6aa5", "indicator--6bdae3cf-2a54-4f49-b4b3-a2bdf07c9354", "indicator--9b4a2e0f-60e6-4ae2-bb3b-54145a2615cf", "indicator--2d0a0359-a842-4214-ab51-2db9ab52b5bb", "indicator--6f4b920e-37e4-4698-878c-29b943663c27", "indicator--68d7b07d-0fff-44ab-b19c-a84e53e9629b", "indicator--1c4b2d12-f792-4eb5-b483-b21667dc6d3e", "indicator--4a5cd25b-8920-4d40-b7f7-a9778a39dc76", "indicator--ed9f50f2-684f-4f9b-83b7-9679c3415406", "indicator--fb19e112-b041-4811-a612-ebd72ab6f1f7", "indicator--249fd5d8-bcde-4797-b718-80879eb6c1e3", "indicator--ea1cdf9c-4121-48d1-8b8e-b988dd6e86aa", "indicator--92bb41b1-6b1b-4f4d-9795-87157aab7fd0", "indicator--42289520-463e-47eb-99b3-7459e38f90d3", "indicator--3b58a208-d442-4c67-9e63-db5c7f9f6e0d", "indicator--f3401471-86b4-487d-9b96-9c1c6cda5a59", "indicator--674d91dc-fde3-4cd3-bbf0-907b1cdb0f2f", "indicator--bda43753-2522-4172-a83e-ac2f31cf1f18", "indicator--37456864-28f4-47b6-a5a7-03256876e198", "indicator--1bbb5c8e-f726-49bf-92f7-7c815b75bb13", "indicator--94de74ac-7ecd-4f8a-821c-abe62176c1e5", "indicator--89de8fb3-60b6-4a0c-9db6-b3f5c3f3ed2f", "indicator--1bccac4e-a1cb-47d5-9759-819bf742ec14", "indicator--860ce77a-835e-497b-a887-36f27b0c5d15", "indicator--4b22927d-c3ac-4caf-9e6b-a059e6497f8a", "indicator--97178dc3-6a5d-4973-bcb7-bf36490f7682", "indicator--bfd6dc5b-8322-471c-beeb-a7694e67cd43", "indicator--76f4647e-25dd-4bb2-8e4a-ea19c4f774dc", "indicator--28274e73-6a7e-4a7a-b16f-d731f2ecab6e", "indicator--94f452d8-2a47-4883-8703-5b0ac865b9d4", "indicator--be1e0b8e-b341-4155-b0f3-f3adcc98c7c7", "indicator--57f61a67-8a83-40ef-9584-59512f1f4442", "indicator--256b492a-ebbf-4e41-9c9c-13f3a093fc04", "indicator--1dd7ad0e-f697-46e0-ac90-e4a3f0384f24", "indicator--9dadcdc4-1285-4f70-aeb8-5b3f9ce243f0", "indicator--a20ca5da-c0ec-4075-8ed7-11ec80446df7", "indicator--c66eb9cb-a7a8-4884-a039-863d387ac5b3", "indicator--96d936d7-72fb-456c-94c0-d3afcece4128", "indicator--7fe0cbf0-3cb5-4c55-b8dc-834d1c68fd3f", "indicator--fa2f29eb-b258-4fec-94fd-6dd16a263e05", "indicator--3e43be8d-89ec-4e31-a2e2-b94c2c0bd2b0", "indicator--e74bc673-9997-427e-886d-caffa5e8b65a", "indicator--326f1599-37b0-488b-a0b2-99e8c290dec8", "indicator--38efe12c-3e03-40a4-9d24-a5a101914f54", "indicator--7c2c100b-74db-46b8-8c57-3c274caa3537", "indicator--cfcd80e1-09ce-4abd-8607-bedccf8c9774", "indicator--5d0e42d5-da71-42b6-a6ce-e29846812af1", "indicator--f608a177-7fd5-46f0-bd51-d830ce000592", "indicator--80bcd577-40ee-4214-8a91-6d400e85bf56", "indicator--0da3f3b5-4a88-4c47-9ed8-a83f528fc789", "indicator--fa091dee-518c-4b6a-a41d-1b17f251e94c", "indicator--78a209ce-8ed8-44eb-a58f-9f8889d0c96b", "indicator--ba7d76ad-ab33-4465-adcd-4f577c8439f6", "indicator--eaf13197-3bac-48db-b627-0f7760edeb58", "indicator--0695fac8-5a96-453b-bfd0-79cfc7b543d8", "indicator--e89e8281-867a-4f08-a5ee-23c6f7bd1170", "indicator--b3561f36-958d-492f-85c6-361c3b9d13e6", "indicator--a4c8e028-cae7-4e6d-88eb-2669df5ba8ec", "indicator--4c252b06-abf9-4eb7-b273-671ca3170e89", "indicator--2f96568d-90b3-4d98-8cc4-091c199a4201", "indicator--6bc3cca8-d2b7-4f5d-af43-96695757c62d", "indicator--843881af-cdc0-45dd-bdec-eecd707730ee", "indicator--5b48cadd-934e-4e6b-8361-11616ad36eb8", "indicator--9c83e095-8acf-4c71-98d7-eabcba56d958", "indicator--bf587bc5-b801-47fc-bb3f-ceb670de0e5e", "indicator--102e4ce6-98aa-4087-a797-3cb13875a064", "indicator--59936890-b73d-4d26-9cdd-c55fb25c2ecb", "indicator--bc02bf72-4679-4340-b614-cd5e4d1e73cb", "indicator--9e44480b-7c4a-43be-a9e1-89fbb1355a50", "indicator--7e714e4c-bfe3-4754-ba76-f3de0b432834", "indicator--147ec4c3-f428-4d3b-aaa5-43812a1b7225", "indicator--96fdf8f5-da4a-497d-a95f-d4da58e311cc", "indicator--7df483ef-c222-412b-a849-e7f8db99d18c", "indicator--dbf1a8c1-7bce-4f69-bfdd-62615671ab27", "indicator--134891ab-f13b-41fc-9157-8040b677273d", "indicator--ba3eb0cd-da5d-46e4-b043-8ede2d4d9e8d", "indicator--7228a06c-a195-48ea-be16-99f0cb602e21", "indicator--efa38153-5e24-4ea5-be3b-b96e0cdb8878", "indicator--29c38a53-413f-4ece-a9fc-5876da6111d6", "indicator--71c9ece1-0748-4ecd-a9b0-cdeb268c69bf", "indicator--420ac3aa-25d3-4c3e-914f-0247e681c359", "indicator--c49c8259-2bb0-418e-b31d-68ccb17e77f1", "indicator--724d5d57-a6a2-404e-af56-4b46ee65f9af", "indicator--6af3997d-9b72-49f3-85c1-a6a5f975003d", "indicator--9e7380f4-8595-4437-b86e-45d2b8c85b35", "indicator--1ba11eb5-3010-400b-92bc-04795347434c", "indicator--69996a02-ed82-4693-baf7-46aa184c4221", "indicator--668cea79-c2b9-4c13-b43c-264bd5baa581", "indicator--cefd732c-a491-4cd6-9b7c-38f5fd268436", "indicator--0f0069bd-82ab-40b1-b715-f33aadb5e17a", "indicator--56ce371a-da29-4363-96f6-aa57e834e86b", "indicator--bd5d4666-1488-486f-ada4-07c717d6da23", "indicator--db2368cc-1c00-4534-9389-cbd07848a44f", "indicator--4a3310ca-66bf-4864-a01b-ec87e15e9c44", "indicator--fb71dee8-5017-43a8-a8c3-bd1614035587", "indicator--804c6d9b-a4b3-4f82-b176-8b376c304d74", "indicator--c6e68c87-74dc-4203-bb25-764899bdf95d", "indicator--d44edeb9-36d3-4aa6-acb9-f2533e542f65", "indicator--b701c13a-291a-4b71-87f3-d3ec87c802e3", "indicator--68f8ffc4-e681-4ae1-b318-a53bde7a59dc", "indicator--b3397e30-4fbd-42e3-ac0a-7bae767728fa", "indicator--a4f67d43-33f9-459e-a175-1cc4fffc8b30", "indicator--67e83e14-d467-4a3f-b26a-340c289b3f63", "indicator--a6caf8d5-158e-4072-8b2b-a2d2ab9338c3", "indicator--c3d6e68e-8135-44ba-acee-c1a7b8fe17e8", "indicator--a78d3435-8d88-4a06-838c-7f96d2d7cb15", "indicator--2343ac26-f0d1-4375-bba6-c64aca4001db", "indicator--7cfd55ad-9a7b-4f6a-a487-caef60c6d6f3", "indicator--1f9b2d00-7808-466e-82e2-9df11b2eeb77", "indicator--70b32ad7-4ad1-4653-a49e-a55a2693448d", "indicator--6b9d9db6-7bba-4ee4-b747-c46bd014819b", "indicator--61478127-e7ea-41bc-8fdc-67b75f4a6d93", "indicator--41226d4e-08eb-4591-9229-7fb563bd1e4d", "indicator--480b574c-71ed-4952-b80a-468345d648dd", "indicator--52de6b25-b403-41bb-8501-3b7eaadfbec4", "indicator--965bd3a5-77b4-4bf9-bb83-d22639c644a0", "indicator--d29c2503-955e-4dca-8983-7f7e10ba27d0", "indicator--148829a2-a750-4d67-ac14-e8551252e739", "indicator--50802bb2-e899-4b0e-b6dc-0017a0e1d1bb", "indicator--201ebf2c-db08-44dd-a5ca-860f5c1b5bbc", "indicator--d76432d5-57ff-45e6-b7ad-e749b8f2ddfb", "indicator--b11ba3e4-dcc8-4f0a-82e0-0663188532fa", "indicator--7157de13-8c42-4600-8059-af1ad4de90e0", "indicator--17db0129-6ae4-430a-a92b-7800c92f1033", "indicator--a248c5ae-2b6b-4420-996e-d6a2164a4850", "indicator--f0db3784-cb9c-49c0-8832-8fb1eea6fd9f", "indicator--7902221d-9a82-4476-a7dc-539f80a34d53", "indicator--383a98a8-3bc4-404d-b8c3-3a905d8ae30c", "indicator--42bd5603-5623-43a5-bbdb-9c6c3729c2b7", "indicator--d499adf0-2718-4f33-b01d-e17a9ddc3c39", "indicator--eacaa6bb-12ef-4df1-a5cc-4c55520eddf3", "indicator--b966f374-30e9-4b2a-af58-ed0e17228beb", "indicator--e0407ac1-394d-48dd-8ed1-bca35c882dcc", "indicator--9f73bbb0-78d2-43f2-b925-661f15c9351d", "indicator--c0341206-692c-4d77-9be2-3a73a153838a", "indicator--46256cfe-2076-4ebb-9699-0cb5cef601a0", "indicator--9ec520ed-cf18-4208-be08-67d7ecabe8bd", "indicator--314b9066-b592-48ac-8bbf-ea370bda1e15", "indicator--6a36cda3-71df-426b-8d5b-3346e4965606", "indicator--a6dd8341-ea07-456c-9c17-6b8c9ee9eeba", "indicator--244e1bc2-cca5-44d9-980a-a7194a310598", "indicator--eccb8e33-07a3-4740-87eb-332f21b9f1e4", "indicator--f5b58ffc-57e4-44e0-b617-678a29961991", "indicator--11a66095-736f-4578-91db-83701d99d69c", "indicator--60759b84-3bba-4592-8690-4d10caf4e473", "indicator--f5c6d40a-68f1-4ea7-9846-2fa49ee58917", "indicator--9eeee9a5-0349-485f-89b9-7619c7beca81", "indicator--a15d202e-12b3-4ea2-b21c-cd4bffa931cc", "indicator--0eef6348-2398-4bea-89db-ce3810e5c078", "indicator--6eaa1cac-c69b-432a-94cc-3e98989d84ca", "indicator--5a030957-678a-448c-b638-ca163061e772", "indicator--184105fd-fa3c-40c4-950c-208b49912676", "indicator--6146d517-558a-4bf0-b422-43298ab75cf9", "indicator--03d0ec86-3904-426a-aa05-eda7b5686997", "indicator--d9ad15fa-99c7-4e19-95bc-fb5aecc3b91e", "indicator--0a0f49c9-05d8-4147-a975-35bcfd3f473a", "indicator--f7fe439a-4283-4dcf-8afb-095f72c81360", "indicator--9e51156f-e563-4046-b75d-15ad719590cc", "indicator--321045c4-39e3-4517-bc98-78dd3d3dd896", "indicator--66c9541b-6bf4-4f27-8179-540199161d11", "indicator--8e20abd3-3aed-460f-ac9e-fe6470869b8e", "indicator--2fe3b470-bead-4060-af0c-2ed96143faf0", "indicator--f7575d98-9468-4ff6-88c1-eaeeaf9d1ff6", "indicator--66d22cb9-99fd-48ca-8607-bacb23f05e87", "indicator--ae13c43a-35c7-4996-82db-af95a3e308fa", "indicator--6b53dd37-87b2-4d00-ac7c-3d358ca3603f", "indicator--347df87e-c725-492f-9b4c-69dda2c85f8f", "indicator--9b1e3269-b6de-45b5-88dd-ad2dfa2adfa8", "indicator--b070cd7a-6e0b-4489-93a4-13a82dac6ad7", "indicator--65176f3a-e3cf-4493-b378-e400c532ecb4", "indicator--cb3ccb50-f5fd-457d-9f23-e92e916506b6", "indicator--af458063-3e1a-40a6-bfe4-aa083f03acbb", "indicator--302a533b-b331-4e82-9078-e29c20d5159a", "indicator--1dd57f02-b534-4aa9-a615-52f0ff0045b1", "indicator--13aae48a-3dac-4320-955e-8bf7c6f8a2af", "indicator--8f8d07d9-88f3-49b9-a22a-7d108735db8b", "indicator--71fdee86-2adf-46eb-ac11-3d1e0e202f5d", "indicator--9ff682b4-b83b-404f-b6b7-ed46da59947d", "indicator--e9280446-d09a-40c2-bd4b-b7a8907939a5", "indicator--60355292-cb63-4f8e-a395-8c1a43cce2b8", "indicator--662670b9-ff05-4bf0-b044-6517ce4459ae", "indicator--8a02b5fa-ac6c-44d3-a520-18d19e6cc205", "indicator--d7ccc709-9ca3-4ed7-9862-a7afc988ff3f", "indicator--79bf6985-d0dd-4e12-8aa4-6a3e937b45cb", "indicator--c6bce7f7-b3b3-4dd5-b658-e8f7eb4bdead", "indicator--b04bbf52-e50d-4100-b232-d3fbfad7647c", "indicator--9cf39ec1-d78a-4328-8414-c93e2a2684e4", "indicator--232c58cf-acf7-4a70-8c3e-e9b37e2cb9ec", "indicator--af8de687-59bb-4d22-b515-27e1212fee5c", "indicator--80299970-f38c-48ef-aa00-9a2a65ccba25", "indicator--20b5122d-060d-47b0-b293-a70327a04c9e", "indicator--c070e39b-45fb-4fb0-927e-9615c9da3c8e", "indicator--49db1159-171c-4409-be86-0555322e749a", "indicator--99d52665-2e80-4909-86f4-e7bb7b34455b", "indicator--f94633d2-e834-4f0a-94af-cabaef0ad373", "indicator--bbddf2f4-9b7a-405f-9c8d-3a9a8a3c1484", "indicator--163131ef-fce7-41fe-9d10-654e294108a1", "indicator--eae59413-623a-40b3-b406-c6c03d19a83d", "indicator--000d8374-e80f-4711-8293-d16cc19f2494", "indicator--83cc7a65-c11b-4845-a70b-2eb04b655399", "indicator--dca8dc5b-5289-4e54-be29-f7e7338bc5f9", "indicator--7db50457-2b9f-4270-958a-5b559ec5c7a4", "indicator--2c957c9f-3fcf-4f75-8a3c-6dd67e715bd7", "indicator--d3803823-d9e2-4961-b5e0-f2d59b5c358f", "indicator--acd3752c-26ce-4914-aa61-af6ca6632c67", "indicator--bd550455-262b-4e19-8928-b8171af93616", "indicator--ddfa6ddf-c321-4314-adb6-fb67c506ca7a", "indicator--d0e6066f-c550-4bff-ad95-ef3cd82ade65", "indicator--fbbfe448-bc19-4711-9792-ae0e99627fac", "indicator--8b150086-d032-4f88-a1d0-35e831e9fbb6", "indicator--dc3d1118-391a-4438-9862-eb39816b4b63", "indicator--72e8969c-915c-425d-b802-57b9c04f216c", "indicator--42fd4552-0753-4d52-82ca-15b2f8a13f8b", "indicator--c6993f75-7965-4c11-b309-767802317797", "indicator--a41c4cdc-6f31-4adc-8fd6-c156713ecda3", "indicator--c3fbe10c-cf02-42c6-8019-32f086a88b8a", "indicator--3dac5ad3-6cba-4cd2-ac69-1c3d3d638411", "indicator--69e533d0-f60e-40fe-9957-786da77a86b0", "indicator--cbfa2e69-fbe3-4987-bf91-00a498b46233", "indicator--27711077-30a9-42d2-a719-bd763ada3961", "indicator--806d3bc7-8d2a-4527-a795-15ef9aa2bbdc", "indicator--ea6197c6-5521-42a2-9441-6cb602f4803f", "indicator--bd4a4fcc-57de-4bdd-b1e3-ea1b5b0b1654", "indicator--c8e97b7b-dd1e-48be-a91a-e79e044a6ca1", "indicator--2b1d1369-7f95-4e8c-ad49-8147ef269b0c", "indicator--a93e98ae-f0c0-4a72-ab8d-b76901391393", "indicator--4c345ab6-2002-4515-b9bb-aaa72363cf3a", "indicator--3718dd0b-4d78-481d-ac88-f20eb06e4e21", "indicator--b1dda524-32dc-4de6-ae40-e5da3739321e", "indicator--d2608617-5b8c-4d15-899f-29a6a8ee56f3", "indicator--7859efde-6eff-485a-bb5b-9166181dce1a", "indicator--3b2e1b7e-c77a-48eb-937a-89a1bc78bf56", "indicator--f29990b0-ba7f-4500-a07f-5d258f1cc8cc", "indicator--1b0b18eb-892f-4ae7-8579-454d72482fc9", "indicator--5a1c6072-d057-4450-9aac-f317f68323ef", "indicator--07d4b893-1eb5-47b9-a81a-73b6288ec80d", "indicator--33acd617-cb09-48d0-8d1b-8e8ab426ad44", "indicator--7548ed90-5688-46c9-93d2-d5b89c88c072", "indicator--85dbea1a-13f9-4a94-9425-6759a903a484", "indicator--5c53875e-ea5c-4610-a867-ad818a77080f", "indicator--13edecff-f0cf-445b-b907-d52b2658ca5a", "indicator--eae20088-aaa8-4505-98b8-a1072ef90cbe", "indicator--e7037fd6-7f44-43ed-823e-950c02beadcf", "indicator--98770f8c-4d3d-446b-8f6e-f718a07a4b62", "indicator--ca386b52-4939-4c79-bc11-3d23645b502c", "indicator--dc3bda22-4543-42b7-95a3-7cf6a9f5a58e", "indicator--497ecda9-ef59-4cb4-bf10-b6fa19ad1fbe", "indicator--d6bebb69-04ed-4c35-b448-08987f597236", "indicator--56d9edb4-266d-48d6-b205-3108eda313cb", "indicator--6549302c-aeb6-4279-8fe3-2126584a29e5", "indicator--bd40b781-be4e-434b-af7d-332f63dfd58c", "indicator--2d2652d1-b274-4335-9852-69b4eb1d604f", "indicator--6967cfe1-f5b0-4d67-a380-f08ef38ac8cf", "indicator--f91aca9f-b713-465d-bd75-ef51ec29525f", "indicator--844ccb30-d8f8-4ef2-b76c-e429c21a0431", "indicator--69475020-370b-4d19-a7d5-51a1d56378c7", "indicator--36e9d644-611b-4d0b-9809-0722678dfcd5", "indicator--d71ab231-1f65-4c7c-9eb3-dbc266f494e4", "indicator--734c1bac-fd51-4052-ae41-3c9b7c521ca2", "indicator--28f4a737-0fad-4afa-9e03-f655242e2dc6", "indicator--864095f2-ed7b-4cf3-9fd7-c8b7050df8c4", "indicator--13634b80-9d35-485a-a621-c6790ecc2a94", "indicator--28dd469d-4b01-42a5-83a2-ee0e5189e3b9", "indicator--e90d4f84-22c1-466f-9b3d-3c7ea3a72bc5", "indicator--6677987f-f7ad-4d57-82e8-906af1ac62c6", "indicator--94e35fbe-3bac-483d-928e-7af543d58441", "indicator--efa0e1ca-8a44-435f-b638-fcfdf4263b4b", "indicator--cdf50342-d54e-4ebe-bbd0-3baf40069760", "indicator--923d9908-b636-4d5c-8e62-222cfb470faa", "indicator--bf27fa61-5efc-4e4e-83fc-065511bca137", "indicator--7f6b4098-c767-4fdb-89ba-cbc029e321b9", "indicator--1eba7882-99f1-4a2b-88e4-9b7a657b632f", "indicator--10948b9f-77a3-4379-b213-2da825625952", "indicator--34beb7ff-0eb4-4422-8cb6-abe9df9d7c12", "indicator--73506cec-c792-42ab-bb07-49cb83bad346", "indicator--125b309a-2f33-4c41-9e05-6f94dd36edf8", "indicator--1c961804-ed49-4a50-9d94-77eb467ed649", "indicator--6add0680-131a-4cdd-af4c-36f5843883c3", "indicator--06dc93d2-1c95-4b10-a15f-bbcbfdbb9e9b", "indicator--d8b8b00d-ea06-4143-9e36-9a2fd084f267", "indicator--8bbb5fe5-888b-4929-8a01-e3f009585228", "indicator--6246edd6-5d75-44da-b086-1cc1bc704175", "indicator--58bf6590-6b7a-4bd9-907c-aefa07a051fe", "indicator--b4d12e29-1e09-46f9-96d4-7c644fe87ed6", "indicator--b29b2ce8-f3c6-4dd5-8fb4-5acc71054fc8", "indicator--cbc32c90-cc56-4481-8c88-f91c54abedef", "indicator--45104e29-beb6-4c66-9fbf-8756f56bfbc0", "indicator--4ea2f77f-8037-43ce-b81b-8e9b7711445a", "indicator--e3345a1f-77f3-4f04-9e62-912ab6eadc26", "indicator--22314cfb-7b92-46a2-83bf-f16fea471d9b", "indicator--874754ad-8a1e-4f16-a03d-71f0d7897fd8", "indicator--3713cda4-c964-4af5-87ee-878dd525651e", "indicator--3c88acff-1d5f-4c80-a601-56ee4e698a12", "indicator--8c85e21b-58c7-4faf-be11-cb44f6ad9374", "indicator--f0dd42b6-c211-4e14-99f4-8f48e0e9259a", "indicator--dfa7ec96-d005-400e-bb9d-7853247a7883", "indicator--4ac5f233-2ec6-4677-9148-5ab4739eed78", "indicator--d227a3c0-5053-474d-a204-0b82f043b9e6", "indicator--7c1e66b7-77c6-42d2-a83c-fd4223a79106", "indicator--16db7aa9-bbb1-4d51-aa5d-f8d439a38133", "indicator--e804ced6-33e8-4824-a700-e7dad1288056", "indicator--cb419d3b-1235-4b9e-ba78-bef694f716bf", "indicator--ccbc4155-df4e-4d13-8d13-b3b7c4432652", "indicator--6ba5d752-c1a5-446e-99a7-651aecdbc083", "indicator--35d4f770-aca0-421f-89fc-a65a7b74bb4c", "indicator--3b8635c7-b2e5-4452-ab3c-0652fd11b34a", "indicator--2d2383d8-4c33-4f50-a0d7-1b4bbcede9ae", "indicator--9fa3e099-460c-403f-a422-81c511eb26e8", "indicator--dfb986d0-cfc4-4597-bed0-8d2a178cd6f2", "indicator--5d81e6b6-baf1-41e8-ba20-71455098c9e8", "indicator--347aca86-b330-48cd-bbf2-101bef75b148", "indicator--85f9b488-df3a-47ee-b716-bc98a18df6af", "indicator--65553e1e-750b-4f08-ac38-a0f873593a6c", "indicator--e8dbc90b-a09b-4392-852d-112777fff220", "indicator--16dab15c-709f-47ea-80b8-8734657c6495", "indicator--d4becc9f-a618-4ab8-9524-d0f61ccc0cd1", "indicator--06c9f837-dfe7-41df-8a82-a33b6b58f1fe", "indicator--887eb999-c004-4eb4-bf2c-86cec3ddc75c", "indicator--8075d196-7ece-4768-8351-53c66cef9626", "indicator--4520663f-8e14-47f7-b315-e47d1ede12a9", "indicator--40e666b2-93d9-4447-bb59-134a6f3e2101", "indicator--70c4e6e4-bc52-478a-a4cd-695bc21a59d3", "indicator--ad5542ac-7d49-4aaf-b423-9bdd102dc41f", "indicator--e0695d4a-e5ea-4989-be6d-8af8c076e5eb", "indicator--4d226c26-c5ac-4bf6-af13-06f8d83b22b7", "indicator--43b18a78-47bc-4ffd-8807-8042c6edde2f", "indicator--b45e7ef1-0386-4805-911f-20675801ac03", "indicator--e5815d57-133c-4443-ae72-d14d25f73ae9", "indicator--5da5343c-9d5e-4dd6-9ecd-0cb1bb532571", "indicator--fcfea59f-8b32-43ed-9559-0cd18a1bcad2", "indicator--92b853b5-a491-4ffd-a139-4a6ebe4002c7", "indicator--0ab9badf-4b81-4dff-a461-a4cfeea7071f", "indicator--1ca0d7e0-2b3a-4cf7-91ce-21f44a885c45", "indicator--e6975d38-3b46-40e9-be2c-bdf1e567d63f", "indicator--bae295cb-8536-45de-8ac5-5b379a5798ee", "indicator--c5e71234-0e9a-431e-b9cb-81746bfb55ca", "indicator--cc378b79-342b-4511-b066-6845d24851d5", "indicator--e22ce76a-28f8-4d3e-b527-8d51130c8bb9", "indicator--afaafb9e-bf3c-4acb-9692-11c9e248fdf3", "indicator--8dfc111f-48b1-4c7a-bd2e-f3b7ea7e9e0c", "indicator--cef7a7f5-390a-4a25-acf5-a683257c18fd", "indicator--946b80b9-d2f4-4bc2-985b-760cade5d23c", "indicator--7ee06321-e0f0-4ef1-ae29-4a22b04df0a7", "indicator--d026c8cc-ae1b-46b6-b972-17765255900c", "indicator--c413eba7-77c6-43ec-b580-7e81304d936b", "indicator--fe4f4b0f-04a6-47ea-b3d6-5c147766c994", "indicator--c16c71a8-15f4-4dfe-9e0e-fa7049ddebd4", "indicator--bc7be09d-3317-4c75-bc56-991331fdaea2", "indicator--201b4ccc-ea08-418b-a27f-1879098ed721", "indicator--ee6caee1-28c0-41d3-8b8f-158f2c022a81", "indicator--ad5f0035-840d-479f-8f5f-4d6b571c8d2e", "indicator--58ed7d18-2979-44e8-a44a-594e3ac3ad6f", "indicator--542e86ca-26b3-4bd3-a811-4cdef09a78fc", "indicator--aa6c6e40-e99e-45ae-ba64-883f22dd2fa3", "indicator--fc8b11d2-be1f-41fe-a586-22064b4e7c19", "indicator--1fec362c-09a7-481a-bc0b-b2b72fafdf97", "indicator--f2dd614e-4f00-4757-b97d-7c9e0961dbba", "indicator--8a771d4d-3e5d-4814-b345-a3736b538319", "indicator--d39d257a-34b9-40c3-8958-92754b7f5983", "indicator--940fb7f9-42f2-4cfd-93b5-f90e0a560efc", "indicator--48a2f809-b831-47e1-af36-80c5fc8f3e28", "indicator--dcb579ce-46a6-4d47-bd0f-cda6986daed3", "indicator--8aeeaebc-cecc-4f63-a76c-26c4f4dba86c", "indicator--9dd389b6-6126-464a-9ca1-8eac109ed92d", "indicator--f8c0036f-b5ee-422f-8e7b-8c30a71ecc6c", "indicator--11b38de3-4629-49e8-99c8-6cfaac5e2cda", "indicator--0d146b09-f24c-4d60-becb-1eb304aa8e29", "indicator--774d4bb5-f42f-46b0-84be-a695d04f1c01", "indicator--61d1b756-31d1-49b8-b524-6844b967ee04", "indicator--c3b623eb-85b6-4017-9427-282d75233eec", "indicator--c79317a5-dfac-4767-a203-c9cac18ef922", "indicator--7a3c03a9-b81f-4437-b5fb-8d362b6ce289", "indicator--caac1adf-2023-4dea-9d2e-effa576f4281", "indicator--802f28f8-5800-4f7f-ad34-19bdb654473b", "indicator--9c6499af-b85f-4708-9057-5d8e1f7219b7", "indicator--ae8fdf7a-a310-4dd6-824c-3b2022cb4254", "indicator--6b1512ba-005a-422a-a8cb-33c13bf58246", "indicator--711e3b14-8f92-4148-afb9-d6e53561bb2e", "indicator--00012cbf-0986-4085-ab37-0c36ec4a322d", "indicator--a74ab554-4f8f-446c-82e9-849b40e8b520", "indicator--e3d5d60a-8156-40db-9be4-21bd15f94df1", "indicator--ec87db43-a369-4c3f-9b67-b28bbc4083a1", "indicator--d164e610-cd39-428d-bfd6-cf5740060a3a", "indicator--78820b83-460c-4e72-9c06-f245271076a1", "indicator--5396de01-2c95-4955-ba4d-2d87da44a5e7", "indicator--f2ff263e-d79a-40af-9845-69f03af50200", "indicator--769df929-8179-405e-9aac-454938600339", "indicator--3c452674-9809-4f36-bb9c-3fe3abd859a4", "indicator--88469701-d1c1-4e4d-b090-3a7c439b9a82", "indicator--19faf620-76bf-4a31-8c6b-5282b77da8fe", "indicator--34c1d440-ae53-42d0-b3bb-9c40fbc5971b", "indicator--99844e2a-594e-480f-bbfd-0caec92d22f6", "indicator--beaa4079-9d6c-422b-bc61-50b997d9e6f1", "indicator--f53ca7e0-d128-46ae-8ce0-1ba112ab7e0e", "indicator--e58ef249-38a9-4596-b872-02a6e89e5c7b", "indicator--a7246e74-1a3a-47a6-8c62-447dd45881d7", "indicator--7f970bad-7da6-4f06-a9bf-1f2e55163a1b", "indicator--d89fdbf2-3706-45de-a082-de51320d8dcc", "indicator--8f0278d7-f05d-44a7-b00a-971b54a3735e", "indicator--7f4b6bc7-abcd-4a69-94f6-04e0052eeec9", "indicator--00f05758-508c-44cd-b8fd-f3bbc985fa9e", "indicator--128e9748-c79e-42a7-8eaa-58cabca39127", "indicator--eb382467-60b4-415e-b7df-8523ae39a219", "indicator--cb3c8916-fb48-481e-b73f-eb2b700340b7", "indicator--5245234e-1616-4c6b-90ed-59829513d46b", "indicator--77586170-579c-4c07-87cc-7c4d3f264664", "indicator--46ae3d49-c18b-494a-8560-09694770fb74", "indicator--5685171a-8956-4aef-b340-334c61cd246e", "indicator--047581c7-6509-4bd4-aecb-a76f3ac788f8", "indicator--9fd2d0bb-de18-49eb-be21-cccec7ced4da", "indicator--c8665a21-49e5-44c4-8e72-ee0b22b889c8", "indicator--4e6561dd-a0e6-45ad-a0bf-a812e9ff6a90", "indicator--e8348154-0ec1-459c-be7f-c5fb4dcc2100", "indicator--e32dbbcd-9d8e-45fc-ad32-9eca622b9380", "indicator--247b9c47-ea1f-4ba4-b248-7367d2e51a20", "indicator--50ec6588-e7ee-4f14-bdc7-6bf86a264501", "indicator--0e3add42-c622-4c09-9c0f-848f4502445f", "indicator--02832c34-5f07-428f-a306-3a3394fb5bb0", "indicator--2f04913e-a0ad-4fcf-bd97-d2c0f226bf0d", "indicator--d3461fa7-382c-419d-b078-554df894fe42", "indicator--193448cc-b0ab-4e27-8ecc-962119a013a6", "indicator--8012d3a7-b9a5-4398-bcbd-fcb5321bd496", "indicator--df86f0d9-09c5-4a5a-9a32-35d27b645b57", "indicator--f2c00cca-421c-43de-8ddd-31723b97503f", "indicator--183f4f73-b592-467a-aa94-bc6358938536", "indicator--81568978-9d97-4f8a-9ab4-f32ec4627e8a", "indicator--cdc8f6f9-2f05-48d6-a4b3-af5405d3f846", "indicator--74f942f6-0425-46b7-8bf8-a384e7c038d8", "indicator--c6c2fd89-766b-4865-86b1-03454265c8ee", "indicator--c8b9ebf8-03f6-41d7-90cf-67e44b4cbc81", "indicator--2b6fd4e4-868b-4e72-9154-cf46ddd0fd40", "indicator--a9b13f98-d7bb-42ac-90b0-37fc8407d5a9", "indicator--3ffe388c-70f7-4222-8f2b-52fefec26f9a", "indicator--27ed8360-3fa2-4149-8d49-f465858f2044", "indicator--ecfc23c5-dfc7-4b28-9c4d-2a3f2b421182", "indicator--41b40fa6-3946-4ee0-a7bb-302f51c38c7c", "indicator--bc09a1ee-f625-406a-80fa-445049b34022", "indicator--fdd00bde-1040-4f2f-ba08-5d21a888021a", "indicator--de467288-fdf9-40be-82d9-b33e9a1ec8d9", "indicator--7de5377f-bad3-4ef9-99a8-7fd96a3f2fe4", "indicator--ac5578d3-3f0c-4ddd-a70f-3834e8e45373", "indicator--052c59b8-7e6f-4975-9c09-7d8285115a54", "indicator--54e3c89a-d175-4d48-bf6b-f20216aa101e", "indicator--5ef7994d-5ab1-419e-9b74-d064d5d0d6af", "indicator--22bd42a5-c71f-42cf-a81c-1b1929090e1e", "indicator--e51aa10c-7d30-4718-84e4-d16fa9d99df3", "indicator--0d37aae2-0e6f-483f-b088-c4d238c77fce", "indicator--075df7d1-133a-4771-b072-911b2d5b7b9d", "indicator--8e91c87b-8519-41b6-a59f-9e8b5cda5745", "indicator--ecb37e86-b26f-42f7-88a5-5253ca4ee7f5", "indicator--bcc142c1-e634-4b1d-ac75-d9ac261870d0", "indicator--060d130d-0707-4d03-ac67-345db36b1a52", "indicator--c75ba7b2-8655-4d3d-9aa3-cad476b9f184", "indicator--15f5d148-7399-4273-8cf8-3f2e200e6e4d", "indicator--d9c4a342-38ce-4ba2-8337-488d06dfdae1", "indicator--3397ede6-431e-40c7-b704-35745dbd60c5", "indicator--f2afb092-f3ec-4449-a8d9-c80492232e47", "indicator--db98b5f9-942a-4af0-8c92-193d7ceb7d1c", "indicator--9f87b170-6008-4643-9b62-fa7159884518", "indicator--7c704a1d-bbc5-4acb-b9e7-34d9f94475ef", "indicator--d328ef81-ca0b-4cb4-87f4-53843503daa1", "indicator--b0d9f640-ad2a-4f95-afee-908cfef96e4e", "indicator--b5a18949-e2fc-412b-a140-279e5dd02b04", "indicator--9f385f71-5bd2-43c9-8d61-cef1ea0dff02", "indicator--43f09500-fc46-4eed-8bf6-91522daeb439", "indicator--72d3289a-9f7f-47f0-a282-87de18d3574a", "indicator--7d7ef62a-8985-49a4-ae49-07120eb94224", "indicator--d46ea97a-cd81-4952-ab18-005a1a7aee25", "indicator--2303fe72-6674-41b4-a735-40d27d31d690", "indicator--97bce736-47d8-4471-9864-9affdd8f1a33", "indicator--68a0036a-77e8-4256-897b-a486302d8a03", "indicator--92822cb0-676c-49ed-a105-29ebc54426c0", "indicator--a509f3a9-add7-40d2-9f2f-4163bbd99368", "indicator--739a8d63-f70a-4c89-aaa2-2f49cda4d3a6", "indicator--ca072292-0aed-439f-ae04-46f1137f02ca", "indicator--d806f73c-e317-4c5b-947b-15b3a0e70cce", "indicator--b944ff7e-1579-4948-807b-a624d924a78f", "indicator--9efdf759-9241-4826-8b54-b3d6dd0d6acb", "indicator--d7852f08-48b1-467c-b4e2-4d293f610364", "indicator--6a4de585-6fbe-49a5-93f7-4d1febede050", "indicator--d40ce824-9b9c-4073-8112-d5fd780129c5", "indicator--5b44d286-fc51-4cd0-9ef4-3fafa791ad96", "indicator--8ff8f0b0-e228-4bf0-875c-4c6f62b21934", "indicator--96d8b002-a492-4930-ba82-c5405b328b58", "indicator--8c78f805-c1f6-4bc0-a84a-08353b7b5ee1", "indicator--0b01e0ec-309f-4ea4-9601-258cbb7f5b7b", "indicator--a6f34467-885f-481e-9106-392441b9dff2", "indicator--f288c0fe-cd79-4eb5-8600-6b6bf87d710c", "indicator--ed5dcf7a-c518-47b7-941f-4c630cb76d21", "indicator--b534badf-2015-4a14-a4d6-b5d8bda4e7b7", "indicator--630297cd-9745-4bac-8c46-2a964ca797c6", "indicator--9cea0d45-0199-4ae6-8edd-109c0ef2cb71", "indicator--d6136f7d-6e13-4e8d-a647-6a3ee2113cf5", "indicator--232cbc5a-c28e-43b9-9043-53bddf46b225", "indicator--b24ebe13-2af9-4a4c-b7e5-4649b93e0482", "indicator--8872b66c-b9fe-49f9-a081-76d125f0fee2", "indicator--660ed8b3-9623-499e-b881-d9c5d39f4d83", "indicator--803c46b4-f47c-486a-b944-8d3b75cccf08", "indicator--0a7c356b-d072-40cf-aa38-bb11c0cc7305", "indicator--431bb271-3eee-4d42-820a-37c0f3af7e07", "indicator--d2d4029a-be58-4698-91ad-7dfa32c88be1", "indicator--ed48bfc3-832d-46f1-9460-a32b7058a435", "indicator--1a5aa621-d5b6-4989-82c2-fa4af891434e", "indicator--168a714e-f40b-442a-a3b3-db35fa21bc2f", "indicator--d2564477-3fef-4b7e-b7fe-f333dae0bf4b", "indicator--4f9c6c80-afa5-44aa-ad8b-df1206c1b057", "indicator--9749d1bc-ebc0-4091-ade8-4756e27e3976", "indicator--be245122-9a93-4719-803e-ea2c78535793", "indicator--874a73e8-0856-49ef-a424-cc26ffff660f", "indicator--b11a771f-4cfb-41ff-87c4-d61a6dd14e24", "indicator--19490169-e07b-4049-b10c-01d6cbc6fb03", "indicator--aedfa76a-f287-4405-ba42-65ae2a683956", "indicator--ed119c2c-e066-45f3-a4a0-8f4705f94e8b", "indicator--37ffda61-3066-441a-8ffa-ce7f5e48c9ca", "indicator--a7137657-a65d-4a3b-b87e-578bb1f96297", "indicator--46bd7751-053d-495b-b5ba-ba7682b2a9d7", "indicator--7873ed9f-0ad6-4e75-a6df-78ae10ce87cd", "indicator--f15b3632-76d1-4feb-a55e-26165abec4fb", "indicator--84ed5455-3c05-4998-a1b9-98a1233474ab", "indicator--e7b51145-2add-4d6d-9103-d53f7b945c92", "indicator--d835987c-acaa-46cb-9db0-476162b605e0", "indicator--222ee45b-bb35-4e59-aa0c-46f2d4673cb2", "indicator--709e1a19-f01e-4910-937e-78dab763fdd2", "indicator--28bac81a-f4d1-426a-9660-39284360bfee", "indicator--57f31cac-95cc-4651-8bce-86f0b85221d8", "indicator--fd84631b-1ad3-4a67-82c9-ec1dbaa284e0", "indicator--3d602621-d8e4-4ba6-bbfb-67d7790a4d83", "indicator--b29e7ef2-8930-45dd-ae6a-9b03103bba03", "indicator--8b91c4c4-2a90-48ce-b11d-8f2c60484a26", "indicator--c5254d08-4147-4d77-b239-01efd2d8c1a7", "indicator--d84e91e8-6053-41f7-9885-4f54f12086ad", "indicator--cd9f116b-196b-4f1e-ac4d-7c8faa3e2956", "indicator--c0fbdf7b-ab10-4e7f-bef3-4e4dc2338da0", "indicator--5123c822-5d12-4571-b9eb-3216d59cdbf2", "indicator--92b7ec6d-0937-4eb5-a320-05c9affb0733", "indicator--4278eef1-9998-4bea-a6c8-a75e8bd0767c", "indicator--be292349-083e-401b-a53d-dfef3dba72a7", "indicator--909ea020-6ba0-4984-9089-7a26be795f06", "indicator--f944d740-3a3b-46d3-be83-6fd0b7c8ebbc", "indicator--f22976af-343c-4765-bd52-6805ea60f3fa", "indicator--47fdb142-47dd-4ed3-b50d-2bc78eb7bc23", "indicator--034a6bda-f239-4cc1-beb5-e4952c741eac", "indicator--788274f4-0f71-47f1-8ffa-b31447954b83", "indicator--bac3d797-6477-418b-9de8-8287947f8e9c", "indicator--7161d04e-d2f1-4a86-b7a8-89955d9c155b", "indicator--0321ef4e-0b38-4a86-ad96-f60c5cfa9356", "indicator--38a7c553-da8e-4bfb-a8c6-7128a8642619", "indicator--0e6c2046-5456-4323-bc98-3a20b3d3bd79", "indicator--a2510a18-5939-4792-82d9-a10154044be0", "indicator--a1356ae7-5533-4471-bdd3-8305c4cecd0f", "indicator--59580e3d-52c0-4a4d-8d4e-324579daac5b", "indicator--351d7dd5-4016-46c1-9cae-0ed52b99fdf9", "indicator--b3017ae1-a052-400d-9e9e-5f5e53af8728", "indicator--6e504e46-c1de-4e30-88a8-b6cad969ed3b", "indicator--3ea08aa6-e966-4aa0-aae6-5415b45eaddf", "indicator--1a66b5ed-7e25-451b-971e-e7d273f6cc62", "indicator--cfa56aa6-48b1-4507-8fb4-3887325bed4c", "indicator--2d0040f7-bd29-463b-9a64-dd153234fa1e", "indicator--7676c8f8-59e8-47ba-abc9-b69767ce915d", "indicator--0db3e781-e893-4b02-8948-bdcaf160135c", "indicator--3570c815-cefb-42f1-a56e-17f566aa6164", "indicator--385f7b6a-470b-426b-b392-93f52c0ac922", "indicator--0821bfaf-ec22-4196-bb1c-26483b42c806", "indicator--8ff24769-cb9b-4274-89f3-35781b349ac8", "indicator--737434b0-5d41-41bb-b48f-6a4afad8b137", "indicator--c92575bb-d500-4ca1-985c-c43376c80ad3", "indicator--f74a2bf8-4c67-4575-b77a-05e2302a862c", "indicator--fae1d9c0-77bd-4db7-9fb4-3b29f83d7c6e", "indicator--976389c2-8c0a-4d19-9241-5ad8c6dddbbb", "indicator--e7788a69-48c1-4625-9fb1-75db10dd9fbe", "indicator--e62f38ee-4d16-4baa-8e5f-25d78e64f2c9", "indicator--b75c5390-e5e9-42da-b630-8cf483a5954e", "indicator--b3c75234-f09d-4a88-8ff5-53ff56c99981", "indicator--9ae98d56-2415-4f56-b8de-69eedb890a4c", "indicator--6c093c0d-2ba3-4fce-9ba7-3f61f03d08da", "indicator--6fcbd8d6-3cd9-4331-af50-968ae2299b85", "indicator--24c75b34-3d3f-4ed1-8309-5dd28210da3d", "indicator--c73f5046-02fb-48fa-8d7a-03dc8f82b51e", "indicator--fb6bb421-04f2-491c-b89c-dea3707bbb4d", "indicator--24c359c9-d7bd-4f07-89bf-0bfc2e8a6312", "indicator--46806535-45fa-4c79-81a7-5cb84ef4ac4e", "indicator--9f2acbe7-615d-407e-9947-ae8fc55aa385", "indicator--5a061774-e2a9-445e-b66d-aede92cfe75d", "indicator--c63fd095-3581-4ac1-8498-e2c3d98c676e", "indicator--05130358-02e9-4cb3-a07f-330f2369e324", "indicator--6b8b1430-ff93-4ef0-8904-4c38dd5360ee", "indicator--70c86bb4-594a-43c6-a37b-6e67993046d5", "indicator--5ce99a01-89fa-458a-b482-8dc9907926d3", "indicator--dd60621c-50cc-4a97-8c03-fc108e025eca", "indicator--aebfa889-1c78-42d9-ab9c-eef2779dbd98", "indicator--cf267b40-c391-4f1f-9642-bd2287fc64fa", "indicator--e9ec0541-5fd3-43b5-9827-1ddd1b4e6e57", "indicator--344dfad3-f9e9-4ffe-98c4-f7bbf0d741c0", "indicator--8a733c56-79b2-4cf6-a38f-33df199bcb6d", "indicator--361f1fc3-09dc-4bf4-a917-6c93d5d9781a", "indicator--1ea7d2c1-3f6c-4c77-92da-ee42cd68fb0c", "indicator--d2c5f96a-feee-4f8b-a78d-8734ab8c9107", "indicator--b9b4a992-80aa-4209-b38e-8396794334d4", "indicator--d9526a12-6697-4dc1-9a67-1a045face65a", "indicator--925581bb-f2b5-402a-b5e0-ff5cb63ab1c4", "indicator--13be1a11-0877-4ca7-a437-d2d203c4e60e", "indicator--4bcfbc1f-a733-4da0-aa85-70b0820a6731", "indicator--8afb0b90-72d9-4194-89c9-98c08b740b95", "indicator--1f98deb5-95d0-4235-84c2-778e3a2605d5", "indicator--aa50faea-d1dd-4f0d-8cf3-e3ca055b7c85", "indicator--3fbae97b-e126-43ed-9797-f6e88637ebc9", "indicator--7446ea71-67dc-4e40-b2f3-ea831bc6e49e", "indicator--97e1cd80-c73c-44df-9b5b-4d4c1494d0d2", "indicator--7a45ed14-89fb-4c3f-8525-9ea2d49c425c", "indicator--bc70540e-8c51-4bb8-bd4e-d5bd1baa920d", "indicator--a2070eed-5608-48be-9349-9b3cc2acc56e", "indicator--1173821f-5952-40f6-8640-bc5af857a232", "indicator--862f14ce-1155-4ad4-acd5-0f98c0969fc7", "indicator--93e5c1ef-8fd3-4ae3-8987-601a190c1596", "indicator--ad6dcc96-257c-49c7-b111-4735ce6e9f8c", "indicator--4a48a765-7b74-4633-8957-1df418a22e80", "indicator--0de95070-89d7-4030-8c82-d0a80abbcfc7", "indicator--03926db8-3b23-451e-8593-16a6f9673a16", "indicator--f4addd53-4c1e-4067-9040-2daf5bdcdb1f", "indicator--74b79153-46e8-4d45-a016-0431fee48d9d", "indicator--ca529c02-729a-461f-b7db-273b53daa5e1", "indicator--93d7d0ab-5e23-41de-8dac-9632b8f215e8", "indicator--a53c6658-27d9-4406-a44c-79d2e2257e1a", "indicator--5fcb339a-aa66-4a80-80b3-c5cfa9019687", "indicator--33cfa3f3-0d80-435a-a874-9ccbc7b85e46", "indicator--9a4099f9-9cda-43cb-b723-43c3076ff65e", "indicator--c01d85c8-b1f0-413c-bc4c-26faba745c91", "indicator--03195f76-3f82-4f2a-8e60-83b0bf0c0165", "indicator--989e8e3d-c1de-460c-912b-8b3ad953d365", "indicator--093ce066-9f11-4692-ba77-f4abbffe77fe", "indicator--67f21339-82f0-4b44-971d-816141c08562", "indicator--31035b41-22ce-4bd2-8dd0-08e72347c892", "indicator--ced7297c-3513-4d0c-950a-9fc688a941bf", "indicator--4ee35689-935b-4f77-8dee-dd5d95c425eb", "indicator--60103ea2-69d1-4770-b3bd-0886876b8990", "indicator--11ee2d66-396f-425b-b855-a3525cc8191b", "indicator--abaf936f-4709-4de9-8f24-2e8417e17c1a", "indicator--a9792647-da2b-4bff-a2ed-26d26a6add55", "indicator--6a9311df-f632-4f2b-acd3-229d8d99f4ff", "indicator--3eb98463-1d96-465f-9e73-aaa68ad31380", "indicator--cab63dee-894f-4799-92f1-e7d877de5e8d", "indicator--1b8f98d7-1097-454b-9269-24165de3de3b", "indicator--5dd05846-0a43-47a5-a2d7-5dd704528034", "indicator--9be6f60d-c1ef-4dab-8a9d-f7b19cfc01d0", "indicator--c2764e40-024d-42f5-a110-0feb215a00b2", "indicator--4b1169a3-e57c-4219-99ff-b1a7b5c80a4a", "indicator--5a52a00b-9b64-4b60-ae61-95ce4a1c7a73", "indicator--f261c61d-3ad1-43b3-9a51-0489ec614d8c", "indicator--7024c95d-e4c0-4843-be03-50dc53c84046", "indicator--01e7b36c-d133-48e0-85e9-d805175da869", "indicator--8ee920ab-7da8-497c-aba0-839805290708", "indicator--d13894de-6e23-448b-9969-942c12b3f0e0", "indicator--bf0c4a83-b656-4391-91a6-0bdbad364439", "indicator--f7f5757c-dded-41da-a757-e410e735b9d0", "indicator--054bb6da-6e5d-4488-b22c-9828e89a3970", "indicator--5c4294c2-09ec-451f-b891-a47c55029194", "indicator--fbb1d10f-ae02-48e2-a543-cdef042b22f0", "indicator--a626b210-2973-4b8e-870b-3acba703f801", "indicator--25ed670c-03a3-43a1-acd8-801892c1ef34", "indicator--e0c7e0dc-fda3-4774-9501-c93e930c400f", "indicator--f39c38d1-f658-459d-b4ea-88b8353febcf", "indicator--1a4d3d38-e93c-4121-94b3-ed314136dc1f", "indicator--3f7a920c-8954-4256-98bf-fa61c52aff5b", "indicator--3ccec0be-ece1-429b-ac73-9e66c2bd311b", "indicator--4b1ce4af-8a87-4d32-b2e0-1e65bae84a24", "indicator--c8d18ef4-61b7-4e30-a311-ccd2b6af7fc8", "indicator--782c730b-5906-45d3-82b0-151b01ff7ad3", "indicator--2098d3b6-c93a-4d07-8cb7-58bc65d9f19a", "indicator--74c8c172-c3b5-4507-94d0-7b69f6aa51c0", "indicator--8ff6ec7e-5102-4b7c-b0e3-d0391324b338", "indicator--ed3a0f0f-7f4e-42df-806e-22f368d4d264", "indicator--8e4e85be-01ef-44e5-8f4b-debcde55a000", "indicator--3d7bb3d6-30c1-4511-9be0-093d0efb0cdc", "indicator--ca97d38d-112b-46f0-9a49-d7fc1fd7f1d3", "indicator--2cc82b42-5d1a-4dfa-8378-f255185d8ddb", "indicator--6d225007-22b5-40a7-97f6-9e8fdc15d1fa", "indicator--694b8f86-dbd3-4db5-a51b-6aa8e2d2c021", "indicator--fec7f09b-1afa-40ed-a650-102def38e5d8", "indicator--0a4f4f81-e0a2-4eee-81c0-65801a34f5d7", "indicator--e0c77c2f-2668-40bb-9fb0-02def89fb582", "indicator--86fbd778-68b4-4dd2-aa12-346b86c6e6a2", "indicator--2d240832-c709-482a-96de-b70a09cd6684", "indicator--eede34e0-043b-4048-a878-32efc1bd8386", "indicator--2b7a0fb9-e0e6-43c2-80b4-5eb6a2469e3f", "indicator--9411e8a6-c8b1-4e5e-8bf3-ca17c63cba77", "indicator--794a1427-9c7b-45df-a9c6-40598c7892e0", "indicator--d8560e74-38be-43b9-8ccf-ca61216ef908", "indicator--d7d95adb-6012-4ac6-a215-d9cd35d2caa8", "indicator--43da9db4-03f1-4d29-9a8d-455465158e97", "indicator--5d17a70d-7a90-4bd8-ad9e-d1a8db6582f7", "indicator--a971f9c7-2683-49a3-82c5-3dffd043c090", "indicator--678bc1f2-65d5-44b6-88bb-28b259328cbb", "indicator--a7e73265-3774-4eb5-889f-9b2a831e4b18", "indicator--41be42f2-7443-406f-80d8-08d232c2540a", "indicator--3100e98d-6ec6-4528-a571-42682c71c470", "indicator--ff544d2b-693a-4524-804a-b100e864b9d2", "indicator--b276d210-91e5-4710-9500-45ae3056bdcf", "indicator--167c57e5-faed-4602-9b3e-1b0a2588b035", "indicator--3f90edb0-c144-456e-8bc8-49231fce64cf", "indicator--4a5ec251-d085-43c5-aacb-446024d718df", "indicator--e3db1c8b-bab9-496f-8ecd-6f78ca2dfc32", "indicator--5608bd16-403f-4bd1-8bdd-75063f0cb967", "indicator--ac1fd082-ee54-4210-9b12-095f6bad9cd2", "indicator--3348643d-c3b1-4179-b897-b3a3071b9435", "indicator--e6f28c9b-c99e-4f46-9056-d01e6ced3536", "indicator--d75ce334-2699-4d4d-9283-307c27726eb2", "indicator--4a5ee95f-087a-4d73-bd13-48b48f54d718", "indicator--04c498d6-98e6-4af2-8247-8595d58da30b", "indicator--4cab3626-828c-4b8c-844b-81b4fb8a7658", "indicator--6dfd6303-4860-41be-96a9-b07a3ec0ee9f", "indicator--2d8818cd-f79f-4c5d-b370-ac66ed5a2530", "indicator--4a64345d-eaa2-444d-a26d-192ec6890a62", "indicator--6fa1d94a-1200-4ed0-8f81-a0d1a7a0d9aa", "indicator--4b7d3525-a495-44f1-9870-d2d43b684712", "indicator--3c7010be-5464-4b47-a3fa-9b540d0adb78", "indicator--325b9ad2-38c7-4745-b045-d4e36bcbdde6", "indicator--acf90aef-e6f5-49aa-a289-c944c8991598", "indicator--83b68710-be51-48b1-a0e2-3b3e13cac11f", "indicator--8e0b8055-1a8e-4652-953b-0f72cd52608c", "indicator--c7ebc08d-0d16-4e0c-a700-649300ebe251", "indicator--71e2ded5-d812-4778-a2f3-c3317bcc916e", "indicator--220764c8-59bf-4260-b067-d32cf90000ee", "indicator--2424d478-830c-42c5-a5ea-ba8852cb8037", "indicator--1f30d9df-709c-4274-938d-a3e7ea38acb2", "indicator--bd86c059-12e4-44f7-8ab2-9262f2db48ba", "indicator--039f734b-78f5-4c02-8d83-cddeb92abf1b", "indicator--e9b2b2ce-a5df-4456-818a-71cf3b543139", "indicator--3022c5b4-90f0-4db0-9b17-713df704d94e", "indicator--6c47efc3-73b1-40e0-90a3-2cf9b97c9dbb", "indicator--c6754333-cf73-4fdb-b14c-0df16e7f74de", "indicator--452a9b8d-74ba-4fad-aa10-1b30cd042880", "indicator--fc5523ca-73a4-4543-bca0-56117c2bcb5d", "indicator--66f922c3-0a83-436a-bfb4-3f59d4e537ca", "indicator--ef26b417-0207-4d9b-8c80-c28e54efb5e8", "indicator--391435cb-9ec8-4652-be91-41cfda1271a6", "indicator--e0bb3a3a-a16a-4270-b240-129cbfdf5522", "indicator--9bd2f812-68ea-4726-9582-40393a7f516e", "indicator--bfafd024-2692-4faa-8c74-33fc0e69bb5a", "indicator--bd0a58e7-d6ac-4b81-a78f-26b927a9c946", "indicator--cc401575-7dd7-4a66-a594-defffd5c1534", "indicator--ccaea33e-9fbf-49f9-aa5c-9d08bd8a80ea", "indicator--6a2a5658-a392-40b0-8705-6e395224d67c", "indicator--424e6cd6-aa10-4d1a-85f3-dea753b715d7", "indicator--4e186233-f854-4798-b0f3-06194e2ca012", "indicator--6e498849-4dcd-4118-9f55-7babd8661d22", "indicator--c72f0b21-80d7-44ae-a0d8-d0ea368c41b2", "indicator--5edecc0f-ad9f-48c7-baae-90d1bc4d844b", "indicator--e5495875-8c2a-4ede-9333-3bb1619adf3b", "indicator--cb618b1f-0e9c-41b3-b618-481a824207f0", "indicator--0d43ddb8-bce6-48bb-9715-b982eb7786ae", "indicator--a64479f8-db19-4375-993d-2204e5788285", "indicator--47c33731-a6fb-4e8b-a436-49de7fed055b", "indicator--cb7da18f-974e-44f7-a04a-ed2e3d8b110b", "indicator--e3a242c2-466b-4cf6-9ae6-554686af1ed8", "indicator--7f8e4089-3340-4b85-93db-3f0a41ee88ee", "indicator--173e8977-149e-4ff2-ad9f-18f92042a266", "indicator--aea45c5a-5058-418e-af9f-fd7f7a982739", "indicator--7e89713e-10e9-4a70-8336-9a3122a160da", "indicator--6338cdf8-375f-495d-866c-e1eed67909c2", "indicator--3c8f7d8d-46ea-4d1d-9f77-ba1a561ee978", "indicator--a5361d6f-3c9d-49f1-93c5-23b5da1e8fa5", "indicator--4761ab71-1f72-43ef-acfc-de2c5fd35176", "indicator--3717e1a0-1d97-40aa-b8fc-922187bfba2e", "indicator--6f4667a0-2cdf-4e76-9fd0-f697bbe1eea1", "indicator--4ca4af6d-9c26-4320-ab5d-6e0319d07475", "indicator--723b4d3f-ddbb-4ced-bae8-2a3305e52d85", "indicator--9b5a6bed-81c1-4539-bace-3495b1c3da36", "indicator--65bc0d1d-6b0e-41d5-a824-a21379f55276", "indicator--25243e6b-e21d-44dc-9c7d-783caf2a29f9", "indicator--1c58e337-20a7-4129-b3de-517cd6354b9b", "indicator--c26a7001-9930-470d-b03f-d913f29b78ef", "indicator--2276c995-c560-4f39-a5b3-932db65ff755", "indicator--2067aeb0-e096-4662-9279-82a110324d16", "indicator--7e5676a5-87b2-42dd-a1de-dbb505da9384", "indicator--6a276406-90d6-4513-9809-c7e7379b1583", "indicator--5ed9d563-ebd5-4a13-982f-e465417e115e", "indicator--f3b9c2ca-8ec2-402d-a766-da93fe4f4ccf", "indicator--9f8fa26d-c309-453a-a459-acd0b42c0f0d", "indicator--92e64c21-86ad-43bb-9813-48e84beee1e6", "indicator--19c2de36-59d3-4007-812a-b8eee0f7a2d7", "indicator--6aa99bd7-cb00-40d0-8a23-2e4aacb0ae7a", "indicator--99f87246-b5da-4c14-8725-4470220c5785", "indicator--c7ee9a1a-f589-4fe0-8c9e-6163718da105", "indicator--b6b6ef4f-55b2-40da-b5ef-2fc4dcf065a8", "indicator--faa02b0b-bb64-4484-aee4-90f167046e1d", "indicator--00c1fdfa-0f37-4d62-a45a-944d1014d11e", "indicator--4211ef1d-249b-4233-b72b-284e22e77651", "indicator--bcef2286-56c5-482a-9f3d-a8212e793de3", "indicator--a3c70015-b493-4854-b8a7-e646a8a49b80", "indicator--912fa2f7-f59b-40fb-995e-4a1f4241962b", "indicator--f7c1ce4a-f1f0-484a-9af2-16b6f0e85900", "indicator--4ed7dabf-1e03-4534-a42e-656c3bdeec56", "indicator--75ff7d5f-a5d1-41d6-b51f-ecd9441c1c9d", "indicator--3f6a455b-2d8b-4891-8c74-e6e7c01fce66", "indicator--0d54d406-f7c1-4080-b593-58892ce602d1", "indicator--2018474f-a3e6-4d3e-8375-54485dd4833f", "indicator--27bfbc03-2fb3-4aac-be3a-fb4c086754f1", "indicator--bd5fbc02-649e-448f-97ac-c05e26ffab84", "indicator--c04a5c75-5972-403a-8d43-0233b1c30124", "indicator--57592c30-ffbe-46bf-89b0-8a4d471ac8fb", "indicator--210642bf-98b1-4cd2-9a49-e30008b7295b", "indicator--ad97841b-3968-4d62-905a-0b9fb8e8a7a1", "indicator--6176a8aa-3680-444c-9ebc-46a6e1213bb8", "indicator--663829f0-be9f-4155-96ba-1619b3509c55", "indicator--77808a05-aaf9-4e10-a3ab-37d51bf4e046", "indicator--75a0e840-553e-4bca-b9fb-f9c40e4f7f24", "indicator--5aaa13d9-3b98-400e-8dff-38b4395a74c5", "indicator--4b386129-1dd7-4cd5-a471-37bcbda4e330", "indicator--17e4fb85-80da-41a3-ac5a-3533c3789d8d", "indicator--8460e227-7d61-4d37-857f-cc338eaf3da4", "indicator--d3d8689d-a435-4c6e-a685-ccc69d29e923", "indicator--7e395b35-f20c-491d-928c-940075c83478", "indicator--aee0358e-07fb-4800-a03c-b2ae211dc213", "indicator--b6cf8efc-c23d-43ce-b28f-d114e6709774", "indicator--c8628efc-b6c5-4339-81ed-634e768ea700", "indicator--ea6f71e7-25fa-4d57-853b-93da1f204707", "indicator--322b60b2-2e63-4483-a50b-95ad144479e6", "indicator--dbf9eaa3-5014-4b77-9d5d-7c600f6a8d79", "indicator--e2583ef4-c111-4a7b-87c9-08f8b47ca07b", "indicator--3cefc794-ebd8-4873-a823-9e23058a8ddd", "indicator--d9def3cf-8101-4067-aad3-2547e2b5d75b", "indicator--5d686249-7098-46f2-9e54-98e84566527f", "indicator--a3ae26fe-ec0d-47a7-abde-9a63914cd3ee", "indicator--20a62e99-ba34-4d4b-b95e-1dca9f533646", "indicator--a537f75a-d9db-4f4a-af89-a4ee58b2511c", "indicator--c430a3d6-c6e3-4323-b833-41f803631f85", "indicator--31cc3f6e-6bc2-407f-a97c-233dc4c71f13", "indicator--afbc46f1-65e7-4233-9e21-6eca6ef3c6e6", "indicator--fff84924-701e-4a5d-af50-97a03fc24350", "indicator--c68941c2-884e-4d3b-8df4-233e7eb93d51", "indicator--89d9694b-dd66-4443-b6c6-43cf67874317", "indicator--05ef8fda-009f-48a5-8a80-b7a131cd10b2", "indicator--122e8db2-911d-43ef-853c-be0ff02c440f", "indicator--b477898b-530b-46c3-a4d3-932e5df64ef0", "indicator--e2e78ab5-d2d9-426a-b554-22a59a7ac9fa", "indicator--5be16562-02df-42c4-8213-b0dab72067b4", "indicator--7fbcda4f-c657-4c81-997c-c6eb70e769a3", "indicator--f8e286aa-5322-4650-b3b8-c94e82ee8cde", "indicator--65e72295-a3e7-42ff-95ee-54c906305ae7", "indicator--ad242376-f2a4-435c-94f4-fd6c1ab047df", "indicator--d14f40a9-cd55-472c-a1b6-7f189fe101e0", "indicator--fec1d90d-4a11-46e6-b189-03883917f65e", "indicator--971242e2-213c-4e7d-aead-ac0a0620035c", "indicator--bb7a97f8-a805-4396-b7f6-91dd20686d88", "indicator--4d2b0479-de58-4ff3-a5c3-0ac5925e7091", "indicator--e3045ad1-76e4-41f3-9f7c-f25965c42127", "indicator--1d068c6a-d130-4223-b9be-de56d3063778", "indicator--75e8b846-e125-4089-af0d-b6fa417dc072", "indicator--761d2f8d-1353-4494-b0da-b8cb13f53223", "indicator--c268c85d-9d58-41d1-a256-31ef162691d3", "indicator--391aed11-7ad2-41ac-8fde-0fb14a04bb1f", "indicator--310ba7f5-0577-4b70-a833-1bfe138e65e5", "indicator--a19a3dc3-0cde-4391-b97e-8b5b6016d1bc", "indicator--93bdf526-4ff7-452a-87b6-32e581a47bdb", "indicator--eba596d5-3fbb-42e5-9f15-891d1c70aeea", "indicator--80bb874f-c08a-4a49-8d1b-945892f310f6", "indicator--fad259a3-9bf4-46ec-ad00-40241e881827", "indicator--5b1236e1-40d4-41cd-a344-7dc16ddb3a22", "indicator--c4bf0798-68c1-4969-92c0-36c001773c75", "indicator--3b6ad72b-99aa-4e91-90b8-d63d6f661889", "indicator--365a3f58-994e-4d80-bf6e-f5a29875c134", "indicator--3bc5b974-a91e-4e88-8779-2baa5e1324e9", "indicator--501b31d1-df8f-4a1d-8eb9-b82c954304a6", "indicator--0f0ac73d-83db-4916-a053-c895160b1192", "indicator--b4cc36b0-12c8-4cf8-8f03-8da553040392", "indicator--a472995a-5431-48df-ba1f-2db276a58755", "indicator--36877ef2-be1f-43f7-8604-16325561b52c", "indicator--3ae949b5-2f2b-4be6-9947-c1f315d84b85", "indicator--70e145d7-2eeb-4020-91f6-572ff36e06bb", "indicator--c5bf7604-8a7a-4a9d-9beb-e08725606d38", "indicator--8940a1cf-5906-4793-a02c-d4b9c242f9cf", "indicator--720b1fc9-101b-47fd-a372-b69ebe60939f", "indicator--a23d38cb-5e00-4e86-8b07-dbdee18e0708", "indicator--6f65abec-0644-4a2a-a470-92067b395570", "indicator--12104884-ebe7-4d70-a77a-23037a3c780d", "indicator--35aac3cb-a1df-4119-8898-d7e02e5fd56a", "indicator--38f82d12-f716-4f73-a690-7647670a6dd2", "indicator--02930d4b-62b7-4570-acc9-1c291a5a4ff6", "indicator--bb9660a1-5d11-4d93-b25c-af2070b30737", "indicator--74c4fea5-3f65-4e18-ba14-ba16d9662f05", "indicator--aa863e97-74e0-4d01-98e1-035407d1e621", "indicator--66a5161b-7fa4-4d72-8686-45794c22b5b3", "indicator--8c680e89-75a5-41df-b61a-461729c6d358", "indicator--d75a1e8a-e726-484f-aaa8-a1335116e3ad", "indicator--897364f8-5ae6-4582-86e9-3625a676ee22", "indicator--6f6eb2d4-cd50-4dbc-8980-28e4ee28cc5b", "indicator--291c1adf-9c63-4e73-88e6-d156113f9893", "indicator--9559adb4-c94c-4e37-ad46-b3294dec1892", "indicator--95fbb236-aeac-44ea-8484-fff5c77ac56e", "indicator--a8a132c4-6162-4818-adba-35afc83e1c98", "indicator--dccf193b-a327-41a3-8326-d67ba23707f6", "indicator--714f37f7-a71f-49fd-bc82-397c8a7bee61", "indicator--999c1fdb-9f99-4609-8f35-9358e0910c37", "indicator--d3aa9465-d0ad-4655-81b4-3bb9c97733d2", "indicator--3d8c59da-b0b0-4b7a-b046-7329d4fe47da", "indicator--ea602983-2b64-46fc-9210-2ee1bb259ac1", "indicator--639c05f9-09ea-4ddf-8362-072437a2dad0", "indicator--21a442c1-7f3b-4d44-b30f-eab28321f32c", "indicator--b6a4f819-1482-44a2-8d34-8ee568d6318f", "indicator--2197e79c-815c-455d-bcec-cbdf1da06e34", "indicator--3b3ab445-d474-450e-8198-68edfb067055", "indicator--fbd2d874-775a-4c05-9cd0-ea921f41cba5", "indicator--8231948b-b9b1-453d-8af6-19d33898ef49", "indicator--13867796-29da-4896-9718-012f1613a562", "indicator--7018144a-631b-46c3-a211-35f754ef7337", "indicator--5bb1baeb-d71e-4589-95f4-c758ff38d0e3", "indicator--44317980-363d-4951-b276-8ee6dd95edde", "indicator--f8a58c38-0b79-45dd-b751-ec73896832e4", "indicator--f6fe0f59-33ef-4220-a692-a27186dd62dc", "indicator--751e322a-e574-4776-80a9-606d385262a9", "indicator--75d74014-21cd-4d8d-9fcc-5a6afbf897a3", "indicator--3e777b8c-82e3-4c24-a09f-33b19642e560", "indicator--00faa95e-774e-49e9-8820-f225f07dc7e7", "indicator--26a37b91-386a-4165-b7d1-2daee9627194", "indicator--6bf0d9ed-2521-458d-a9f2-3f02efa503e4", "indicator--58b86c61-67f9-4a2b-940a-8f96d1947da5", "indicator--0c1636b4-1e76-4401-a902-bbc8bd25c88a", "indicator--ddf755d1-72fc-4590-b709-0a1a49a6cb38", "indicator--32c4749e-dcb0-4c90-9ddd-d8cdfd6cad2b", "indicator--2a8c5762-2847-4e7b-9634-6fa43aedc062", "indicator--3fd84b8f-acad-4d3f-9029-f6de6459a1c6", "indicator--4ff04ddf-a2b2-4c50-9b9c-7d8fdda64027", "indicator--db04f747-356a-4124-bb31-9b6042b13a2d", "indicator--628dccf5-5ddc-449a-af1b-ae2b000215f1", "indicator--1e883fe2-225a-4218-9ec1-164e2f0d012b", "indicator--408934aa-c652-4383-bd16-3ec92d3d4ebd", "indicator--732ade29-5fc6-412c-89e0-c399147fa27d", "indicator--5b3a0821-a5c0-4cec-a0b4-30aeb5e4b529", "indicator--65d2a62f-49b8-4c1a-8f87-d38990095547", "indicator--d5a0379b-b770-4021-ac2c-35b358be46ca", "indicator--6b08d989-1742-45d2-bcb8-7c5b26634ef0", "indicator--7741a16a-ee41-45c6-9429-02c61a397795", "indicator--05baa697-8e3d-4832-901f-4224f109f6ef", "indicator--d5bf0656-88bc-4057-8c7a-d58f9c5739ff", "indicator--5af97cc4-5e58-4720-b38d-a11dfbfaa286", "indicator--cb9c47d7-f129-4589-ace2-34d93ab3fed9", "indicator--6994753f-c07b-43a2-97de-60fe60cd3b80", "indicator--83f07d62-fd4d-4c76-957f-f0b7c499f5f0", "indicator--98f5dc2a-8a4c-40ce-95e9-8c350b465cbf", "indicator--069c833c-ef75-4deb-8ddf-2fcdc7311e4e", "indicator--d1b3f4b6-cb51-4a4d-817e-28bfc36c7f47", "indicator--c7d38dff-0fea-4791-9c83-7e2395c41026", "indicator--6eafaa2c-1007-4696-9554-1e95e25e4026", "indicator--f9be859e-bf1e-4bc3-b5e9-f7198168703d", "indicator--e58a4ef7-0714-4a9a-bf02-4ad12b657751", "indicator--0bc57514-f8f5-40bb-9747-deebe57e515d", "indicator--8f8d2167-d416-40ba-a035-54c98d7053ba", "indicator--cbc25de5-d5c4-4f9c-bc42-5c5f40b60cb1", "indicator--15bb4eda-92c8-4e72-8647-724592b0ee5c", "indicator--f0c08e27-95c5-431e-b7e0-a7a5f89d8b77", "indicator--c00d27fa-2ed5-44a2-b9d7-2b6773be1a7a", "indicator--15ccdb62-2ddf-489a-995d-7cfd98deda34", "indicator--59ecb475-f782-4558-9d61-a317650f6cec", "indicator--5820575e-4b3f-4eac-af24-f6d8763c9cda", "indicator--02e1ea66-5b29-4432-bd54-a995a2013644", "indicator--2b39a595-97db-4b0f-a94a-43e370abac7f", "indicator--53ea029d-8d44-4fee-ae6c-7ebe2717adf5", "indicator--5da19466-5b2c-4f8b-a671-f5d22b78b96e", "indicator--7bf68999-3965-44e3-8760-7e2e9b2d98b5", "indicator--2bbbce89-c36f-4608-be52-1b3d124e3c2d", "indicator--98ef5022-1327-46d1-bd89-bd0d683a760c", "indicator--f8bb0ee7-f3f9-48fa-a9f2-5c55dd28c07c", "indicator--bdac1903-1921-434c-b93f-c94d252fdb94", "indicator--aa00eb47-4d2a-4a4e-b8a5-c56c5ee58c17", "indicator--76bee846-44c1-431e-9a75-8c3ee832b0ff", "indicator--d87a98f5-dec8-483a-8d03-42f3af7b3a64", "indicator--c1af35e8-4eb6-4620-8a95-036c377d6ad4", "indicator--9e33143a-6f32-4af1-b454-43a7884500ec", "indicator--9919eef0-e414-4de9-94a5-3f9d4e32515b", "indicator--570e39a5-400b-40cf-907f-daa3b2042e9e", "indicator--a4025122-f462-4a00-8b89-0137ed13362d", "indicator--293e3344-7a63-431e-a093-9ed803eedf88", "indicator--fcdb8154-3fa2-48e0-b522-f4aad88837f2", "indicator--da266fd6-1be2-420d-a49c-c0b78984f944", "indicator--1ebb2b51-e838-4bbd-a3d1-c5b747b579cb", "indicator--909f6c5a-7efb-4eaf-b02e-430c966e8202", "indicator--57524375-016e-45ba-bd89-83f37bdad52b", "indicator--70cc2f9b-fe80-4901-bff1-6ec45454ab3c", "indicator--0885cfe0-f989-4044-9a3e-70af5ec42da4", "indicator--92705e1a-07b7-42b3-89ff-f2d53aba4744", "indicator--7562733a-12ff-4e79-a25d-bb5a6e3467a8", "indicator--1c8608dc-518b-41e3-b82b-98d7eea6026b", "indicator--a02826c6-7cf2-4d7a-b832-60debe924de8", "indicator--58a65098-9123-4f0a-ae21-afb0bf62e738", "indicator--555a3f49-7db7-4433-8212-ab5757a1c3cc", "indicator--1e19117b-7255-4ddb-8097-9fdc7bc01e09", "indicator--6018b1ed-2c91-448f-abd5-15127c9d3757", "indicator--4f37f036-48ee-4544-a86e-5eeb13c6e414", "indicator--c0cea1ec-5b75-4cfb-9ea2-bec5864235fa", "indicator--3ba6b6ef-f390-42d9-a376-168ab5143935", "indicator--682daa30-ee4e-4aa2-b295-9203f410ba4b", "indicator--b2650343-da41-4009-a79a-bcd06394fe76", "indicator--b07395b1-f67a-4f93-9c3b-8eadddf65483", "indicator--dd64e9dd-a429-44dc-a066-3ca1c2176d7e", "indicator--0bd124ff-d7c0-4ba3-8421-7be2a7270af3", "indicator--e1e505c5-a05a-4060-964b-7de428723f49", "indicator--96e80af3-aac9-4a76-9981-b4791163a539", "indicator--19a8a654-d06e-4a07-bcb3-4c1565675615", "indicator--65e440d8-5606-4d44-9a12-d93d0487d128", "indicator--c40ddaad-9df6-4461-a09b-47ed72cfc8da", "indicator--e42957c7-25b8-449b-9a7b-f695b1eb988a", "indicator--9672cd15-dbb1-46c6-afdd-5a9c0b2f2c8d", "indicator--9a465e19-5c80-494c-ba34-fd79690519eb", "indicator--128f24cf-6fba-424d-a5e2-55cf4d4dcd0a", "indicator--f1d48646-0c1a-46f3-a65d-9a3b51a7e173", "indicator--c1c497b2-0ef3-4929-9730-52ecfe4e74eb", "indicator--914d99e4-a176-40bf-bf38-46f02107f533", "indicator--6dd50fd1-64a9-4247-a717-638dd61d629c", "indicator--2363949a-67cf-47c7-80b2-cbba6871b04c", "indicator--40136a0c-785c-4fba-b928-1ce50644ef2b", "indicator--69f1df55-8352-4003-9905-246ba9e5c4ab", "indicator--857c10ea-dca3-480d-8045-18d9cd196616", "indicator--b6484e9c-7ca9-4781-aaa6-0b82f7f26508", "indicator--c6ab5e1a-4055-4b73-bf7b-18da6904cbcb", "indicator--3eb9b258-403e-4844-a80a-1e69622d69ce", "indicator--71000b39-86a7-49e6-9f5d-1525241cd652", "indicator--153f3dcf-8cc9-43cd-bb85-a080d5677ce1", "indicator--045b0a0b-25b6-4f27-a5d7-fedf2432dd1a", "indicator--5c971c08-bb2b-4475-bc0d-a8d34de0a07c", "indicator--cda187c6-e318-458c-9b69-4d045f262b77", "relationship--2d5bf684-fc44-4920-961b-68906c519cc4", "indicator--8aab4a48-69b6-4dc8-b5a9-26ebe9119672", "indicator--45c8a203-12ba-4f0c-ba11-468fcbfc0dd6", "indicator--bfd95fc8-116e-4e27-8ef1-df76f144baa0", "indicator--4e6cb087-381b-42dc-88e0-5ee93e1536d6", "indicator--39c1f8fb-b898-48dc-9378-5454f427dca4", "indicator--02949572-81cc-48d7-b682-84eaa6422e75", "indicator--f3603e82-0888-4936-8ab0-34463fc513ee", "indicator--da8af431-5d1e-4a30-94e2-98adaf27b7c9", "indicator--85d1211b-1d72-4112-aecb-2a82d8fed8bd", "indicator--f2e46d84-ccc4-4f5f-898a-2d143495659e", "indicator--45a136a7-2445-4ec6-a57d-15f6a6e899c7", "indicator--f53e22c6-22b2-4280-854c-7572e10b1a8e", "indicator--9bbf6789-7054-4d91-8596-157d59159776", "indicator--8e163176-542b-4195-863a-d187bd905d38", "indicator--399807ec-49bc-4d9f-a70b-4ec9bf9a1b9b", "indicator--38b96e8f-5ae2-498c-86a5-7752d868402a", "indicator--9f4be87c-c0fd-4fdd-b394-8094472268a5", "indicator--fbb3127f-9017-404e-9940-3451a6ba0d66", "indicator--34666f62-a33c-49b9-8fa5-186f7a7c2453", "indicator--eee3d4a0-3513-4165-9fb2-0f2e24d28017", "indicator--2b14bdc9-1dd2-4318-9336-9a35158cb9b3", "indicator--24e2ea15-faf9-41b6-9d1b-564b338761b7", "indicator--3db88b1c-a24e-44e5-8626-2f9ee974382f", "indicator--16da9fcf-7d2e-4558-834e-b06182a8829c", "indicator--2d56e82c-58ee-4bdc-a77f-2e7c4d08d410", "indicator--4c1d6be9-f1d6-4c6a-8f87-fc114fe3f1e2", "indicator--90fb95d3-08e6-4c4e-89b7-e3f8eeb662a4", "indicator--09f6c0d1-5269-463a-8c1d-5da5c0bcf187", "indicator--f5516ea3-1356-4766-9548-eaa08bf94901", "indicator--89f71191-8733-487f-b30c-72fd6ef247f1", "indicator--42e9dc9e-f1db-41fe-9c03-28646723afd0", "indicator--d2d9986a-2b1c-44a0-8477-7454c1147147", "indicator--169fe8ee-b1cb-4030-98d7-4c6a0dc49e3f", "indicator--9ff0b81f-e313-4051-b9da-05bfbe513240", "indicator--85c9492e-8692-480b-b20d-c04711ca04b1", "indicator--dbcc7be4-6cf4-4d4f-8d74-3a8e10520c44", "indicator--00602eff-ab92-4370-a093-1aa5c2e4eaa2", "indicator--ea910bc0-b793-46dd-a493-ebf4ea019b8c", "indicator--6cacc1a1-db0e-4832-b58b-9cfeef5f7cc1", "indicator--14983ff0-d275-424f-b329-e77632d00872", "indicator--80c78f40-c570-47ba-b975-9b1771f00710", "indicator--f3e7ec00-6ae7-42b3-8890-2ec9642ff3ce", "indicator--30440023-b0a0-4e20-9f5b-469d0ad0159b", "indicator--9f8cd332-156e-4666-998d-92e2fced4dce", "indicator--3fdce7cb-73e1-4c9c-8f67-ac4b98c0bff9", "indicator--a2416400-b7da-48c6-b9e5-9a06a89024a4", "indicator--c2ab91bf-b960-4b54-af34-142a34433889", "indicator--21225f0d-4bd4-4ab9-ab98-1fcac602c15f", "indicator--77186032-d26a-4521-869d-283c31477ba9", "indicator--9d50a7ed-4316-419f-bac2-c723603b9f0b", "indicator--a116894d-1e6c-4614-91ed-9c112b6d210c", "indicator--43595b88-b6c4-421d-b627-5c0b66fe40a6", "indicator--f94d8e76-996c-419d-aab8-7939e24cc90a", "indicator--3b890fdd-3eb4-4f21-8c15-655c252ec4bf", "indicator--43918817-621f-465e-acc7-0dbf627b9ede", "indicator--6a440f50-23e4-4cdb-8d42-1328e96cbb28", "indicator--a2c62597-1202-4d6f-9c43-cd1784ddd9ae", "indicator--0d47d85d-eb06-4e95-8683-87ec85520860", "indicator--f6656985-d195-4fe1-bc30-3fdef033c25c", "indicator--d78eb093-a528-4af4-8bba-c3e8df60005b", "indicator--d7456c7a-38da-4eef-ac4a-7cda551d9e7b", "indicator--c1f9bf39-547b-475d-b2d2-3d15dad63a49", "indicator--f7251031-4fda-4485-997c-ccca5c8da9b6", "indicator--9c071aad-ab97-478a-a93c-43c233239a08", "indicator--741c9322-e91f-45ec-90e5-ea42769de248", "indicator--53c1204c-001e-4e76-a368-86fd4b3de1ed", "indicator--889124ee-9d29-4c20-8b41-34fcb623169d", "indicator--8b10b5f9-83fa-42f1-a3d7-47e161111ed7", "indicator--e9b46ed6-f950-4c03-babc-07e23ca4a018", "indicator--8bac8026-34f8-4c92-a06d-911e350004c0", "indicator--edcd6491-0fb5-4bf8-b86d-a9567549a67b", "indicator--ecea24a2-b14c-4efc-b787-c626f49c2b55", "indicator--2d4f9762-aefe-4546-a26d-6ff9b68bd96e", "indicator--9291affe-4641-4add-ab05-956203bce0bc", "indicator--c84769c8-5c64-4470-ade4-2ca4e67b92eb", "indicator--7ca0557a-ac32-44ab-afb6-f69ed92bb970", "indicator--9d67f857-9347-46bf-b1d4-fecfc5b879cc", "indicator--637f8c26-3da0-4b68-a5b9-d5a727971bb0", "indicator--d327ea2a-020c-49b8-9c08-07a42efba754", "indicator--6cb87c8d-7441-4c65-a67e-95fe99f110dd", "indicator--705b451a-e950-42c6-ab35-30cf5c5f1346", "indicator--d5ffa57e-2058-4513-83ed-45b42f92fd8d", "indicator--a2a2d76e-fc21-4754-90af-876158f48e8b", "indicator--a792a605-2e7c-40e0-89b2-027b4277fcda", "indicator--01afd22b-2090-4cd5-8e2e-d874380b8980", "indicator--ed81f6fd-a1a9-4dae-9190-07f3796e7b32", "indicator--f15d6dfe-b5e1-4c74-80c9-a27cd8c21380", "indicator--24647e32-ec43-41a0-86e4-0a946f4d07c8", "indicator--db71a1c9-56a1-43d8-8f46-827a122ee116", "indicator--3c759276-663a-43e0-bebc-7548317c75b6", "indicator--f2550a1b-7083-4e13-9379-a700afa8a8af", "indicator--52aaebd7-2e20-4e73-af73-d099d7ef8c50", "indicator--cd13bc2f-52d3-4823-a5bf-7b2689759d4d", "indicator--7ec6428e-2831-488a-8224-7dcf0840e4f7", "indicator--14c3fb19-85b0-446f-a7e6-38e3d661907e", "indicator--8ec937e4-4fca-45b0-83d8-7729a6a32217", "indicator--0356cb8d-f201-4fbb-a4aa-4e84b4222675", "indicator--b4808e24-2b65-499b-8651-2479b7d4ae17", "indicator--d93bca55-9f1d-4d9b-b060-cdcc3627bd65", "indicator--8ab454d8-1cff-4137-9ea8-10f6b2023b68", "indicator--29e8879e-a350-44f6-9150-8204cf0d1886", "indicator--057a8cb3-577d-4a85-9e34-934d8e392f3c", "indicator--c5b55d57-ce35-4ced-81aa-fa8c5eb21aee", "indicator--da70b507-3ffa-4222-bc1c-a7b1a2276202", "indicator--807de7ab-c0a2-4ec9-86ec-a1f10ee10608", "indicator--71948032-f0e8-443c-8373-26cfd9d3f1f7", "indicator--5a9b7f12-b31a-4555-8daa-14f5f9398215", "indicator--51684c39-d0d4-4e8b-bb19-85dd3e34be36", "indicator--017ebfac-890e-496c-9763-b26c29b6c735", "indicator--bc540795-bad5-4907-a805-835bd6099443", "indicator--5ac991c8-4958-4e55-a26e-f3349fb231d5", "indicator--96db2be4-cf19-4064-9603-8d67a29be6a5", "indicator--7e47a12b-08c4-48f3-9fac-d11a88c8cc40", "indicator--910a1281-cb18-4ed5-8e2f-2c6e38976457", "indicator--c90a0dbb-9b91-46ad-9b24-6c18ed84d2ec", "indicator--2c02d7ef-b21f-427b-8aec-3d1d461a1853", "indicator--84838469-1945-4fe0-b340-c9e1f85defc7", "indicator--0e71c09f-96dd-4677-8f93-ceea0353d2bd", "indicator--57627646-8e15-48dc-813a-983a9a109fa8", "indicator--309fb3e7-775a-4206-8e21-705c63c63a57", "indicator--aceb9631-8736-4a5d-851c-86469c51a8ad", "indicator--fe684e3e-4efa-418a-9077-4f656cfd5e06", "indicator--0bb7072e-0d32-4ebd-8b98-59756b4d0550", "indicator--e5704e84-f31e-4588-85cd-450a1d473d9f", "indicator--ebf94869-7def-44c7-af86-631883558dcc", "indicator--012c7f2a-9373-4658-b57f-8f760c61e34a", "indicator--6d755c99-ae7b-4464-ba9c-864a0ea53a12", "indicator--8eb9f27f-a4a3-4775-9912-1127a41b9812", "indicator--f0f62150-cf4e-43c4-beca-3cbee2085fb0", "indicator--0e257db2-948f-42ed-9107-b01034f10485", "indicator--104396e5-cc84-40df-bd50-789be084b979", "indicator--7fe77211-6811-4951-9c83-2e14820a4d46", "indicator--93dad46b-7ac8-4b7b-9847-3bd28b7cfa3b", "indicator--fc67f495-6748-4f3e-be16-7a2f83ecc427", "indicator--e6afa500-0aaa-4879-be21-07b9ac33bb81", "indicator--4312cd93-6c11-4ca1-b8d5-084fdade1f7b", "indicator--604fc9cf-24ce-4e29-9283-5d4cce7019a3", "indicator--055d23a5-126d-47ab-8398-994f7d35f668", "indicator--57076582-6996-480c-b149-6c180323423a", "indicator--eaa4df64-18a9-4329-8d7b-32a35587d37a", "indicator--3cb7d78d-2d7d-4f9a-827c-d34ffc4e8e13", "indicator--66230edd-2aa5-486d-b9bb-9a30c6cb4b87", "indicator--681f32fa-d263-4355-82da-4205b2e8a69a", "indicator--aa3c8e06-c364-4735-9996-3cd1b449c37e", "indicator--7a975797-2679-4a84-9cf4-8ff6e6bd9f22", "indicator--dd975deb-d900-4e5f-9f0b-4574651f5805", "indicator--a78240a8-e27c-4983-ac27-a1dab8f9fe56", "indicator--64dc8d2c-2cb6-44bd-a71e-f42d9645b9b1", "indicator--4ecf2ffd-762f-40bf-847a-bb5c9a42c19a", "indicator--0d87d077-43a6-4c40-b339-4570391ebb8b", "indicator--aef89bf7-f703-4e2f-9422-48eff0ac073b", "indicator--8741cf1a-56a8-4971-a14d-6d28dd6a084d", "indicator--99c460a8-6287-4bf6-a8e4-2e85fe6502e7", "indicator--78422c6b-54da-4786-a377-ed9d44662b9c", "indicator--52956e6e-b700-40dd-98df-7c7889200e19", "indicator--ae89c838-390b-45b9-9a29-85ec7d251702", "indicator--c56edc87-47c6-47dd-97b5-fb85d9e90038", "indicator--223750ea-6c9f-4c95-a686-8ee9ec29b729", "indicator--7ca386b2-02a7-41ea-acbf-e4342169c576", "indicator--d8c30175-fb8c-4cc7-9b3f-3b20e1d5ac38", "indicator--bbdd83a1-d2de-431b-bc7d-96787aa965e2", "indicator--9884d511-8815-4616-8cca-1b0f8d115c52", "indicator--26754467-79bc-4afe-933e-62c3bd8c42fb", "indicator--f6fb09eb-430f-4300-9222-35d12df356cb", "indicator--51b0ac84-2057-4762-be2c-9f1f2e0d59c5", "indicator--5aee2ca1-ce5f-4fb6-9770-bef2112d67d9", "indicator--31768e48-fd64-4229-9130-82c85716b874", "indicator--32f0c58a-d253-4a49-97cb-9c538a9d9b7e", "indicator--9060016b-807f-459b-8faa-6bf9f617d90c", "indicator--d02fb5cb-1f11-499e-8f0b-6bb9c983cfbb", "indicator--039b2899-24e1-4b14-b26d-78380f2f6a3f", "indicator--dcfb06e6-62df-4cf8-b19b-d54552546557", "indicator--92897c88-7c76-42da-99f7-2ba0ba03d20c", "indicator--f6f9b350-b207-4dd2-8887-ee9d9a86cfd3", "indicator--c8bb0e5a-73cb-4c47-9067-44467fa43f91", "indicator--db5f43c3-36f0-4f9a-8d94-54efe05770be", "indicator--fc31ac5b-c858-479f-b02d-c7144ffed3db", "indicator--fa673996-e9b8-43f6-99ef-51ff113238cc", "indicator--65e82099-1c81-45a2-90fa-7b71998cdf75", "indicator--b024640d-a959-485d-a546-5a779569fb20", "indicator--89a7dc42-d8bb-446a-93c3-5fd0186d3c6f", "indicator--f07c84a6-5bff-40d3-8846-c9eb42d01242", "indicator--add86bd5-4684-4acb-9271-d77b0eae247a", "indicator--e55f9bb0-961e-45d3-823c-01768c8e4304", "indicator--78c9790f-3770-4a91-87d2-34b5124a69ac", "indicator--38eb0cec-faf8-4172-8bcb-f727906669a8", "indicator--7e1a1d4b-ada2-4deb-b1bc-99a867b2c1fd", "indicator--5c848622-0ad4-4911-a9d3-cbe73e06c160", "indicator--1ea090eb-ff97-474b-8c60-3ee9d472430a", "indicator--117fa373-a50a-4074-a86c-4bd58571ae52", "indicator--4f214816-6d9a-4924-8988-cbdd43adf054", "indicator--3136e483-41c4-47bf-b926-6b98a06616bf", "indicator--382d09c7-2dfa-4de0-a789-9f57e774acb5", "indicator--7a638d6f-1402-44c6-8561-54c5106ee6d6", "indicator--ce889122-cd6d-4e33-8046-93d5680617a3", "indicator--2660880d-1384-4c8d-9e12-224a7dedc036", "indicator--4b8a5623-4cd9-4ebe-96ff-2f9040ba3f8d", "indicator--cb03ec21-5ecc-426e-bbb9-4fbb580f3946", "indicator--2e61ddc0-edf9-4e2e-b19f-dc9924e12e21", "indicator--2c053ec7-d774-40dc-afe1-e0ffc47166c0", "indicator--eb993018-0131-4b52-86c6-21c25fba264e", "indicator--39af7bd8-ea12-4e50-9e14-7b2fdad9c6b9", "indicator--a6cfdd4f-3836-4498-bb46-b8d67deb80e2", "indicator--71d1398c-3e85-4f08-8bfd-dec203697a3a", "indicator--0125fd40-05cc-4f1f-8f17-bfb8df788f34", "indicator--547ad9f5-e376-43c4-af0b-43a3d740b6c7", "indicator--27969079-e09c-454a-8782-27e2e8cbc25c", "indicator--3508695e-3785-4636-aeb4-985bab212315", "indicator--22d6b1b1-b094-4c78-ada8-1273a24639e7", "indicator--6808a62e-620f-4c31-b482-0ecf54b63aa7", "indicator--cd7e3051-cffb-45c4-a974-a24c96d2eca3", "indicator--f4eaedf7-a32e-4c34-b7db-06c06cd16953", "indicator--e2a91f7a-4811-4c01-9ee0-ebfc06a6a446", "indicator--c204c87c-d545-4518-939b-649d08f1d7c7", "indicator--4657d014-cd29-4269-879d-0133b4ecaacc", "indicator--a069a04f-9f31-480a-9635-8de7a8714b5a", "indicator--d9f8e1a2-17cd-498d-96a1-ed98f25d8af5", "indicator--59441585-7580-45bf-9c53-629156f6d136", "indicator--753a1abf-62ce-4d62-ae32-111765e00e6b", "indicator--5ef214c4-4fcf-46f1-8f7a-b4e1fe53e8b3", "indicator--2f744eba-b641-49a1-85ba-2e55ae9ccbe5", "indicator--617b3485-241d-4ea1-924a-2d3173e54268", "indicator--61b32d26-ab74-4d5d-88fd-bfbc25328523", "indicator--88fc7255-98b7-4c7f-82e6-07ed6530ee56", "indicator--35ae9a70-8fc3-4f99-980d-d91e8743a42e", "indicator--793305a9-47e5-41ae-9dd5-4758c79cc314", "indicator--e9900877-5889-4df5-8754-67945e2a65a7", "indicator--8aca0152-bf4a-4071-bf74-6820763d2ce5", "indicator--3e69f3cc-bfab-4afb-8f70-86450e9dea6c", "indicator--918417fe-c10d-4296-a0f0-c25e1751e49d", "indicator--bd9fdcd5-ba2a-4075-81a8-29041c12f846", "indicator--e16b2931-d2dc-41d6-8132-9b4d6cea3640", "indicator--88939375-e59e-4896-8e64-d2d49ecdea3d", "indicator--0b0a4eea-f032-427e-9424-0b898a34584f", "indicator--27273c94-5e0c-4fbd-bbb5-9dffcb699863", "indicator--def26772-f65f-4087-b75b-60475d490cc5", "indicator--295de142-f0ef-4fba-a091-8e4b8b03a68c", "indicator--c98ba0d2-9007-408f-ae28-6783b896b0c5", "indicator--032c99dc-1569-492e-8757-324bfe277ced", "indicator--ea181bf8-9441-44a3-a1d2-fb8ffedf319a", "indicator--f28a70e6-1c36-4afb-acad-17555ae14542", "indicator--64bdda9d-0795-4e9b-a3b4-4315de994927", "indicator--ac862941-99f9-4775-b7c5-703b00a47be0", "indicator--c42edb0e-2d50-409c-a147-71e7b7662267", "indicator--d40b1c83-e328-461c-96f4-26514f58ed5f", "indicator--242c4a5f-0ee3-4479-9b1b-44bde3c2dcf6", "indicator--29eddbc2-3821-4773-8a98-1c427776b44c", "indicator--eba81695-4f84-4f26-a309-fbf9cfe73b58", "indicator--57a251a8-2391-4bfb-b6df-48014721e004", "indicator--fed77d63-144f-4807-b4e6-276a297d7eb5", "indicator--bf6da524-fc11-40c9-941e-a512ce43fba7", "indicator--4463a1db-12c5-40e4-bb7d-1e603c756de7", "indicator--101ee141-d0a6-475f-b133-5ac4f6a8ceb9", "indicator--3e15b461-49eb-4dcb-88c7-f33bbda60dcc", "indicator--3e696f7b-90ed-493b-8e9a-ccba10d0de56", "indicator--f07a53eb-da22-49a1-906e-83f87379256d", "indicator--f489c5c9-4339-45d8-b7eb-2bfc44bc8abf", "indicator--1eb61856-cd52-40d4-8932-cf2020b431be", "indicator--5bc80a00-eef3-4b4b-9c9e-f790c949c99a", "indicator--75e1ebbf-a556-4534-9671-d54963ac4e7f", "indicator--500bb269-7b5e-4b0b-8856-594e458e577e", "indicator--af5ccb6c-1a56-45f8-97e2-a0cbe2cf5c1c", "indicator--df973b87-3623-4f51-bf29-199ac2cc0b2f", "indicator--a20770dc-8569-487b-9dbf-313b79d0d0de", "indicator--7bcf7792-5a76-453d-8360-63036981a4bb", "indicator--ea03ea44-30c6-47d6-a50c-5804a0fffdfe", "indicator--8034daa2-e2ca-4249-983e-6ef0e70da695", "indicator--d438ca7c-7ec6-4388-ae87-4145bdb7b847", "indicator--abe7ca3e-3227-4fdf-9fca-c67e57169035", "indicator--01c913f4-eec7-43a3-9d4a-4158d9e59f94", "indicator--665b690e-134c-4fbf-b555-11f6c22c2667", "indicator--34aedf9d-4707-4506-8c87-9f555b82b813", "indicator--8a4dd4ba-ec39-4e81-832f-909514f2e2d8", "indicator--89dee30f-5678-41e9-aeba-07a6bd65c61b", "indicator--1f8a8c8a-9697-4b15-bcbe-a4aa20e3c7fb", "indicator--ed2da81c-292e-4c9a-97ab-265448216472", "indicator--c9dfba9c-e565-4da3-a382-2d2b49c77529", "indicator--eee940c7-ceee-4c44-9074-88604dc17fdd", "indicator--3c86e99d-c54e-44ad-8f0b-1efa3208d510", "indicator--df83d06f-f172-4c45-804f-eaa516375370", "indicator--93f660b9-1ff5-41f2-8de4-2b7b94c5c5d6", "indicator--88e1cfeb-2b58-4d24-82db-4f0517a6237e", "indicator--51c36199-6fef-4f1a-a0e7-f7bc6d1fae54", "indicator--f1ce38a3-06d2-457c-9508-bf304e67055e", "indicator--b1abd290-08b9-4c82-bbee-ec640aa78971", "indicator--a3e0a5ab-b003-46fb-b0ae-3d35bfe1da9d", "indicator--b76e33ad-e801-463f-baba-2e7182e23588", "indicator--bbd7f24d-f9b7-4f82-a483-ed628c36e1b9", "indicator--d23d3e69-eb76-43ba-8076-2a8de6dd98f3", "indicator--1c07d5dc-9756-4b66-a6eb-91382db1af08", "indicator--fc699d78-6f02-4029-b92d-ff9f94a4bb3c", "indicator--8df2f30e-3bab-499d-98ab-d0053ba9c9f7", "indicator--6056d5d9-47b4-4587-89a2-4354cc852eb6", "indicator--9fbc06e3-02fd-4ca2-887e-2850bd1efab8", "indicator--4803ed3e-ed0e-4bb4-b7ef-59baeb218567", "indicator--df775f04-fa2f-4c9c-adee-26f480866793", "indicator--ca36eb2f-4612-4e4e-ac84-98e693e76681", "indicator--5b005b56-b6ca-4632-97a5-bfaee797dceb", "indicator--0cd8aa88-18d9-4a5e-a3bc-986e3c761bce", "indicator--487ee108-2e2c-4697-b46c-36b6ead9c242", "indicator--8abd4ae6-f6e6-478c-b252-2001b8bd87dc", "indicator--2e94ea79-1d3f-4ab9-8b1e-b7374d898fd3", "indicator--478bcdf9-6312-4185-9f6d-28b46d2d462d", "indicator--c0303d31-bcab-43d3-b39f-7f5142c1c021", "indicator--14916a5c-02fe-4a5f-861e-5c9b4792e7ce", "indicator--db8b010a-ac6b-475c-8411-0f18b9e38aaa", "indicator--3d954b79-ab61-4d93-865a-4338b0472e4a", "indicator--5a12e200-850f-4a6a-b39b-9ab1930eeee5", "indicator--a3997944-2f7e-4839-a5e2-10b662293e43", "indicator--50854241-1a71-4f80-adfb-8535f406e073", "indicator--7494860f-abac-420a-a43d-7c45a8e5b7f3", "indicator--26abdaa1-70cc-4d61-8965-d515bfdfdbde", "indicator--5d7dc929-0aee-4c30-aa46-a64726381475", "indicator--f381242b-edf2-4038-9ba1-ff4cd4eb4bae", "indicator--b58befaa-658c-457d-bd15-1693ce332024", "indicator--f6f18af5-107e-4fc8-8868-0b39d5814f61", "indicator--d071881f-9731-4bd6-a913-4e30a1ac19e5", "indicator--c51a91f3-96a3-407f-b6b0-2d8d544eed28", "indicator--6a479153-5f41-4e5e-a92b-3ce98586bb3e", "indicator--c95e2f99-d411-41ed-85e8-e861fc499e0c", "indicator--c86d57a9-c1ef-4fcd-a58e-a6f02402ff44", "indicator--b82456c0-8d8a-4747-839a-d6a497cfc4aa", "indicator--92ec1d3b-f43c-47b9-9bc1-b98aec3350e6", "indicator--e0675fb4-15a1-4d73-8bd0-fe6364c49cdc", "indicator--8ba4da7e-500c-4d01-906c-ebf755a24dfd", "indicator--c64f51b1-6074-47cc-b8ac-b7e7c9826175", "indicator--3b1e8cee-9813-4d07-9d2a-01cae2cc39a7", "indicator--553b79a6-6b71-4e77-97ab-8d5b2ec6f6f9", "indicator--98cfd8b3-bab2-457d-a04e-87201c34c73a", "indicator--8bd1bc2f-1e69-447b-b7ab-a7733947957d", "indicator--ad57d8ed-ef3e-401d-8f13-262122e71f48", "indicator--85991486-5ad7-45e8-8083-cb8e80233755", "indicator--0937d6a2-d275-42f2-8792-a7adfac8f024", "indicator--25ed1fd0-df18-4e03-b2bb-959cd1959b8a", "indicator--ec8424bd-ebec-4aeb-b6b8-431b1d1e05ee", "indicator--90ba19bc-2206-468b-8648-47b01e4dafde", "indicator--be7b25ee-29e6-4df7-a2ba-4545efa6b7ad", "indicator--7d4ca428-6c0f-4c80-9a57-59b0ca7e18e0", "indicator--52407d7e-1ae0-46f9-9596-95e2fae3fcd2", "indicator--f9af9d67-4725-4cca-afa2-2d715bc0f5ee", "indicator--1ed81d6c-c05b-4365-8347-13f45b740f64", "indicator--06f6ca41-4876-4274-bf1c-976746d7d852", "indicator--24b93f92-1a76-46f7-857d-5d1854fc0d1d", "indicator--9c7ad87b-0144-4927-9445-cd64aaedecb5", "indicator--6a1500c6-11c7-400e-9cd5-c163a3a4425e", "indicator--c8268e95-b350-4a7b-8224-7a9d3a72a8c2", "indicator--754eea0d-c6b3-45a7-9fcf-3555aed89461", "indicator--1c6468c7-a970-413e-b971-d0c19492297e", "indicator--c1e362cf-2df6-41ce-a34a-0a8170a316a5", "indicator--e7dc0f36-192a-40fe-bfb5-e9641fc2f00e", "indicator--0e4b183b-b93b-4a64-aa0b-c826af693ed2", "indicator--5cce38a8-f7d3-497d-8f7a-46c63df502bc", "indicator--8f77fdce-eb75-4329-974c-310f3ecbb70d", "indicator--78eaa811-1bca-4ae0-a9a1-7e9fa97a80bc", "indicator--0715dc44-6a24-48b8-a8a2-19d1ddedf465", "indicator--5af6c20a-d4ba-447b-a760-eef583c71b1b", "indicator--a1f909f5-b02a-4345-ba3d-dfeaa3745051", "indicator--b3d841a3-6205-4445-9e8b-a3e64f0c5508", "indicator--9d931529-c9c0-4c06-b8c5-a6cff45fedc9", "indicator--df119f53-9898-48e1-9366-553c41f0eaa9", "indicator--2662d0b8-7a22-40d2-8b9f-e47b1c33d5ff", "indicator--4392635c-7e89-4ade-ab38-cd3ecad20fb9", "indicator--ca2321f9-e99d-4c06-8c72-7d10251faba2", "indicator--49fe5ad6-a51e-4a69-bcf2-2802d2eaa249", "indicator--b5941ce2-fb8d-45d6-9362-8ed8bbe89735", "indicator--f0049f90-12be-43b5-ab3e-687574672b54", "indicator--e5a17cd9-008f-4af0-90ba-4234e94f9bec", "indicator--a99f175d-563e-4663-91a9-791418208061", "indicator--fc6583c5-da20-4884-ae50-88a881ccee56", "indicator--b1fffd3c-d4d7-45ff-b781-ff54da144df7", "indicator--a1bf8538-d785-4e57-9652-8502aed72ec7", "indicator--e734da3d-9b6b-4f0f-a0f9-d286504f64ea", "indicator--9a936bce-9a62-4b65-84fd-d82cb0c74960", "indicator--8352a423-69dd-4765-bf03-827adb846b80", "indicator--45829018-5eb9-4dec-852a-9e8e463f1c63", "indicator--c1f3fe4a-abca-44bc-aa4b-a19d7f0c9bdb", "indicator--a31db3c0-4245-4f13-98fc-44a690c956af", "indicator--424a4d5f-7b4a-4d22-957f-e9ea1e3ff590", "indicator--2b3b62a8-22c0-44e4-9100-d9e14efc38ee", "indicator--7b3bb0fb-a2d7-4578-a2be-4f5bd1c2e89f", "indicator--671942b1-5bc3-43a4-a8b7-c0dd7fac35e2", "indicator--95c38f35-bdef-4a84-ae50-c462ae84c84e", "indicator--394f76ce-5531-4167-8380-cc9cf2526da2", "indicator--10b3a315-4432-4873-9d3e-e8c64a55f29b", "indicator--1d72d8f3-dacd-430f-9f14-cc3c17026cac", "indicator--27574ab2-438a-413a-99f5-d428f826601b", "indicator--47f9730c-bb00-44eb-9e14-c155b3ce7896", "indicator--38589cf4-7614-473d-a724-9148318d0616", "indicator--44207fdb-c873-4593-82f2-772fd509a27a", "indicator--ec680717-d063-452f-a940-f11946a36595", "indicator--c9bb5a25-a9f4-408f-b06e-281b0ceac1c5", "indicator--0a4c8597-d85e-400a-a39c-a2fb3ad49787", "indicator--b7fcad43-7908-42b6-892d-b7a8f3ed2e44", "indicator--cdf49ed1-8bb6-42c3-80cf-52d09ef46e1d", "indicator--e5c9c9ac-50f4-4ab1-bb43-b3ca763c560d", "indicator--9c663a74-ee9e-486f-b779-819f7543b942", "indicator--7ac73396-d8c8-4135-82e9-70fa3d591a57", "indicator--f76a2b32-f1c3-4d68-b5d6-0b22857bdc1f", "indicator--ed78dd13-3156-4dd1-978e-47e63cc04a90", "indicator--7ab0b292-f7c0-4b97-8705-240dd4999327", "indicator--5cc54e5b-cba7-4c04-a4d3-c297bb4fab40", "indicator--4407998e-6df2-4ccf-a2f5-2d67f759e762", "indicator--6f0d5eaf-6f73-4042-b08e-2955dec2f409", "indicator--1cd0b839-ce0e-4d5d-a38c-fc3a63badd16", "indicator--2c8c2a83-81c8-4a58-a536-037abf7f32c7", "indicator--49d80c65-3592-4e38-a7cd-6f89159b7068", "indicator--a6ba69fd-8383-410b-be2e-a9adddd95711", "indicator--99f06e63-8ff6-4e30-98cc-d741cdd6c28e", "indicator--52136d48-efe7-446c-b460-c169a96c9e9c", "indicator--9bde789e-7feb-446c-8934-37589e512e8e", "indicator--187e34e4-5746-4062-85a7-623da487db06", "indicator--5f6fc370-eb37-4760-a7b2-f879fa059f8a", "indicator--288842c0-732c-4d4d-85c0-704f1d4ada40", "indicator--ebc69c57-47f8-4872-864a-72fecbe7de7e", "indicator--df05a0cd-f0e2-4e13-996f-eec2a752f3f7", "indicator--8e105fd2-7b26-459f-87af-8ca411245d6b", "indicator--0b5eb50a-d18b-45f2-b8c2-9330424266ea", "indicator--762ab17a-7b59-4fcb-b2c0-1b03e203253b", "indicator--52ae9195-09fa-4d96-8812-3835c471f71e", "indicator--e961d814-d833-4bf2-96ce-dd7cd73f2cb6", "indicator--723cba7b-790e-47de-a3f8-31d3e32396ce", "indicator--5082f6d2-c51d-4b35-bd4d-d2428e52471e", "indicator--e1f047f3-c129-47df-9bde-308dc2841bdb", "indicator--e0ddac74-6079-45fd-bdd8-c7936aae0751", "indicator--5412771c-9547-4e9a-93f7-c9c70d0e6115", "indicator--e6630434-bc89-4cbd-959c-53a523071009", "indicator--bed4602e-0f4d-4f49-8006-6d0101cedf51", "indicator--4a4a64e1-47da-4c14-a6c8-c583a5943265", "indicator--a8d237bb-5653-4fa5-912d-712ae197ad2a", "indicator--09d2a519-4218-4b9d-a07e-5026f0d542cc", "indicator--fe7b56a0-7053-4de8-9b06-d34b107dfbc5", "indicator--a522fee4-3bdc-4253-a6c9-d0a2fd197b50", "indicator--beb1a7cd-2694-479f-8b22-8824d6faddc2", "indicator--bb6676f7-9986-47ac-830b-0b37c01cfcb7", "indicator--5a5b8745-8fa1-42f3-8860-dbc12d84c386", "indicator--7b1a20a7-ad0e-4b77-8dd8-368a10335a17", "indicator--d94a8115-fb84-43eb-9358-6fc3e7a6652e", "indicator--62af9f51-8fe9-4b11-b67e-ffe8ba045424", "indicator--e87972c9-207f-4948-b97d-49bb15b2a070", "indicator--94595a04-c338-4406-a666-690424ff9912", "indicator--27cc892a-5021-4d31-a5b9-15101892b241", "indicator--2427e669-0627-4cc4-a738-c326531eb588", "indicator--f4ed3d36-11d3-43e2-bd89-3c377a813489", "indicator--1b225002-4e45-4423-87d1-b2810fe2089f", "indicator--106401ba-b951-4661-9bab-bc5cd327c1f3", "indicator--b784f394-6d4f-40f9-b55d-6c4840229f7d", "indicator--7aa6c3c7-25dc-4b5d-a66a-50eb8b15a994", "indicator--8227a714-394a-460c-9b84-f54c2f0d2789", "indicator--d5388149-1d4b-4dae-9de7-5df806788ee2", "indicator--73436072-8196-4243-8f79-3d430785ee08", "indicator--3916aa1e-d3ae-4541-a9d5-c9b36b4a43cc", "indicator--ef39d41a-f468-4473-8045-27f314c27550", "indicator--927b65b4-216f-4dc8-9337-b4de15556923", "indicator--12558432-bda9-4635-86c4-fce46b02af90", "indicator--e2b88a5a-783f-459a-8fd0-91c651811ed6", "indicator--d2997b99-2d59-46c6-9e06-3c50e7254a7e", "indicator--e64c4c53-4809-4b13-9824-cd8e9c5a65ba", "indicator--ee85c966-98d2-4cd4-845c-343bd9a5af3b", "indicator--ecac51aa-7093-41b6-bdfa-e745a5c4167a", "indicator--5f7749da-a83f-4bf2-9377-f289f15d5c21", "indicator--4d8e9c40-8a46-4463-a5dd-6cea7b19acab", "indicator--ab97feb7-bec3-401c-a3d4-ad2698fbdc95", "indicator--4a245ae0-8d9e-4608-87db-78208b934805", "indicator--0c2fe540-5e9f-4bdc-baaa-f056b2ddec87", "indicator--a89631bd-6b71-4505-9253-fb9a3294efb8", "indicator--d91a1771-fd6e-41df-b4e8-a0af4745c738", "indicator--c205138d-158b-4246-9491-785615d1d9e2", "indicator--e3262bb7-f2da-40ca-a6ef-b01d5d54a8df", "indicator--12ae90eb-36f6-4531-a7ce-ce474883f3f4", "indicator--f38b8498-4001-4aae-98a7-aad6c5ec26e1", "indicator--8422467b-5fd1-4b6e-b956-fe96a3786937", "indicator--7cf9147b-d782-4d57-92ce-ddb38eaeb71e", "indicator--091d55ee-d32a-40ca-b3dc-4159c7b0161d", "indicator--ab0ecff8-f812-4582-bc95-74e41456bb9e", "indicator--619c7ff0-573d-4f19-a619-dea4c0bbd707", "indicator--6f5796ef-8c89-45bf-ba5c-7f24f06c552a", "indicator--3fc482ca-ffe2-44c9-8017-1f5eaa028c94", "indicator--b4451278-8057-4b6e-ac20-8d198a8b10c0", "indicator--a0e9a18a-318e-4815-9a14-9e3585c80d39", "indicator--72bc29dd-475e-4a21-8a1d-50bf097604e0", "indicator--a91f2611-690e-41ff-99f0-90c53ef743c0", "indicator--426aeecd-f000-402f-ba36-763a77394038", "indicator--f4890851-b5a0-41a5-a0d2-305f37970f83", "indicator--776e4a6d-4ed2-4f08-9883-d2adf89b06f9", "indicator--ec417ff2-bce7-4980-a9e2-2033df1d90af", "indicator--4c42ba6c-211f-4154-be3b-69ea070184df", "indicator--b525348e-b6e8-420e-8584-65fa19acc83e", "indicator--c02bdc76-dd2a-4e49-bc6f-579a94bf571d", "indicator--2cc27c96-25b0-4253-a923-2696000aa828", "indicator--1d57fd56-4b64-46e4-98ea-720adaff9027", "indicator--ca3f28b5-c0cf-4e68-b6fa-e26e5ddcac42", "indicator--ec00613d-5b6a-41b2-b551-969142a5a9bd", "indicator--63037b86-7490-41a7-8801-e11f4e92c98f", "indicator--5f052401-dc05-4b0d-a69b-b0712c73c356", "indicator--991c45e9-cc77-4053-a40c-db464ca3021a", "indicator--783aac8e-c4d1-4035-a108-b8b04c67a69b", "indicator--df3359bf-ab90-4401-93a8-50656478e76e", "indicator--4827bf08-bb6a-4088-a553-7d6931a43835", "indicator--055137fc-0403-44bd-8c69-977cb77c4de5", "indicator--f4604e96-8f0d-4235-ba31-2848521077ce", "indicator--1e02a7b5-b35b-458c-b04a-694eca98e04e", "indicator--340ec8b2-f9ce-4386-a7be-43a2c9670b33", "indicator--1e180c7a-ad3e-47cc-a2c4-425d1b40a637", "indicator--f9e85806-ed7e-4a26-95ea-edfdd0de53dc", "indicator--e160c992-44ca-4158-81c4-dcd20f0d6c24", "indicator--e845f1c6-e890-40e7-a115-55274b3f5691", "indicator--66cec94e-4365-44e3-a9fd-e55401f52865", "indicator--ceea1b03-3b00-4753-a46a-a5d287603b2f", "indicator--658b4f21-8f70-4386-8ac3-91fa373339eb", "indicator--f6ef96ab-6d97-4714-985c-435c02d811c2", "indicator--23b307ba-dda0-492d-8ebf-b6ba0bed91ac", "indicator--b522d40e-c898-45ef-b96d-fe9b5adf75ca", "indicator--0c18d947-d65b-4ef6-aa3d-8f201f71e897", "indicator--44df1ef5-cda7-4030-bc0c-81208df518e8", "indicator--91e79b86-901f-4c0f-ad5f-57338abba475", "indicator--75fa0fc2-8a4a-470b-8365-2c0243d450b3", "indicator--bf428316-e195-4fcd-b248-0eb55bd5befe", "indicator--783f2386-9b4b-4eed-8b6f-ac17e7ea791b", "indicator--9eafb29f-d664-42c0-960a-c47df01e8128", "indicator--807e5981-c709-4e12-a7cc-54c08966c31c", "indicator--14e0c823-3c51-42c5-b21d-89547ee7e8c6", "indicator--b9602dc6-670e-49f1-90ae-e819b8a43847", "indicator--9882f622-5502-4269-b3d2-fc3cf4b088e0", "indicator--42e968d9-c262-4813-b252-2f600f3b6601", "indicator--fa09d3e3-651d-4566-a616-cfba26f13c14", "indicator--35c4b7cc-3cd2-45b4-953d-8cdeab93d326", "indicator--a777402c-963b-42ae-b650-cad62210816d", "indicator--71fdb257-e66c-4121-b350-2f63702c47b4", "indicator--d16e28bc-eb45-453d-9510-1863e622b9f2", "indicator--95dc6766-e68f-48bb-bb91-df81d3805868", "indicator--e37fee59-16a4-4617-b87e-09c169420077", "indicator--4a0884e8-7c31-4671-9500-37d7d84e3e6d", "indicator--67dc5603-3896-4a87-833e-a19517017343", "indicator--2fcaba33-04d3-47fd-93f1-ec7d353d9922", "indicator--8b73e831-3a13-4a51-a151-7f0959cbdc5a", "indicator--cea9ca5a-f78a-4911-8b25-0a99296c44ab", "indicator--3fe291fa-7170-4e7c-a844-f44283e507cb", "indicator--5dcd5820-e39a-4193-89db-0a510dcf56fb", "indicator--a4fa71f8-847c-43e5-b622-11a792f56ffb", "indicator--d4b22336-d0c7-44a8-94c4-1296ee08376b", "indicator--13b60785-f52d-4d6e-b4cf-a77d7d19a6cf", "indicator--f4ce966e-d47a-4f20-8fbc-b7fc2ca8cc62", "indicator--f4b7b279-c95b-4b61-ab1f-d20583b2e631", "indicator--930b5d49-d117-4ef7-a28d-1ae7cf73ee8d", "indicator--15a7f44d-275c-4e4f-a9fa-d1956ee579f6", "indicator--3e6fcdcf-b41d-42e6-ab21-af2c574bd3b7", "indicator--5c1ca276-d9a8-4d12-9df0-ea72f11516c8", "indicator--43dea191-e190-4299-909a-8494ce13aba7", "indicator--6b802c7d-ed2e-4f8f-92cb-46988e12bf05", "indicator--aeebac51-217b-4c15-876f-db1c6fef32d2", "indicator--61b2ebc5-2691-4406-8da6-a6915e288836", "indicator--8878b233-f5d0-42e5-8f3a-dbfd7bd2e811", "indicator--e258b1df-3b25-4239-adce-67d9cda26a3b", "indicator--bb1fd901-3bf1-4bb2-a999-0630c8d8aa7a", "indicator--8e264d35-8de8-4f18-9d85-3fd72354049f", "indicator--9200f3a5-0aa3-4993-abcd-e6b724e312c5", "indicator--63ad1d6b-34ab-4f2a-9d1f-46b409336fa7", "indicator--89059c63-d741-4894-9590-d896e1d6cd1c", "indicator--1e3a1d30-42c6-4a4a-8a72-796dabbf1ebf", "indicator--1e501bf5-d693-4b9e-8a75-1ef60fbcaba2", "indicator--5b8657c8-48ce-45f7-b872-bf22fefbedb7", "indicator--a7c07af6-6899-4584-a522-e9c08a7acb21", "indicator--18ecc06c-bfed-4ce7-9372-381532db2871", "indicator--fac96fe6-4ded-44f3-b116-6ee93df400df", "indicator--0578fe7e-6160-4424-a0cd-397d0804ce79", "indicator--546993cf-c4c7-43c8-baae-83ac0d63cbd4", "indicator--f9bcb370-cba8-4fca-929b-5b3530a41ef1", "indicator--11a9e4dd-915c-46a0-80a2-55952891ed6b", "indicator--ef5e4d94-0086-4e81-9e57-60141e9fb23e", "indicator--ce672fbd-dce6-4890-a9e2-d59f7b8ab521", "indicator--67415395-ad73-4f4c-9c60-5251c3491664", "indicator--dfc20b46-8716-4061-9d62-cf49c14a541d", "indicator--07495959-3481-482b-81df-b0ca55b98b54", "indicator--f5086a81-7cdc-4b60-bf20-1ba1561c8219", "indicator--a1db7eb2-1a2b-43a1-8eef-d52183bc77de", "indicator--0c968368-8078-474c-9fa6-a808a1f4a29a", "indicator--d9ed34f5-0576-4993-9297-5e1c057d7a0c", "indicator--5ffb6b5d-1bab-4364-8f31-89dd4d5d49c5", "indicator--37263433-b371-4bd0-8bb0-02f147bff549", "indicator--cba0e522-f452-4ac3-a137-5ef5320438a9", "indicator--db208d84-3dc3-4d60-bfd8-90bf1a4e75f8", "indicator--fb5c78dc-4a1a-455e-8a62-87ac980b3c41", "indicator--89ce689c-71d8-4149-99fb-8fb7083741fa", "indicator--c2f14ea0-d6bd-44f0-a442-bd184c20dc62", "indicator--bb25d996-eefc-42d3-8749-ff86fa4c1e90", "indicator--10a18cad-7b00-4317-93fe-bda42fbc12a7", "indicator--43d1f524-ad33-4d05-abe9-4f31da2ee593", "indicator--b06f9137-2f9f-4a06-ae26-f8bbcf953846", "indicator--93fc75b9-135e-4687-8ea0-f500f08df5c4", "indicator--e7e82358-ae49-4af4-b212-899f26032a6a", "indicator--7895ee7b-fddc-4e1a-9b0f-efa0a92d12ad", "indicator--f2f34133-d926-4abc-9d06-f2339a45a65d", "indicator--81c10e93-4c1b-4ab9-b3c6-e17c2ef1d1ec", "indicator--e5998c07-eacf-4443-bf3a-5f1fc8eccab1", "indicator--1b55f6f6-e1e6-4b4c-8bd2-a2ee2727c8bb", "indicator--f28ede46-b934-4d4e-8e84-afed59450808", "indicator--ea6697bd-e67c-4455-9bd1-5c4dadc7dd94", "indicator--d26d4359-ec48-4aa1-9153-bada93a44f4c", "indicator--3ee215df-acb2-4f2b-b654-eb8d3b2bf7a1", "indicator--c6e852d8-2ade-48d5-a1b5-d2522390197b", "indicator--96d84b63-a909-47a5-98a1-21c24e860f77", "indicator--ab40d590-41a1-41d7-91bf-011aa6da6fcd", "indicator--5070d94e-0f3b-41ee-b4fb-9d6f31f8f40d", "indicator--ede0cc3f-a33e-4ad2-b9ee-ca57ae196338", "indicator--5fd1a2f9-fcc9-4dad-98d7-5eea373cbdf4", "indicator--f13b508c-c33b-42ab-ad07-3eec6f20a9e4", "indicator--7cbbd9cc-0808-4836-a40b-851a703b2233", "indicator--9ae265e5-fcad-492d-9321-5033bd5b115e", "indicator--86a317a8-6c78-48e1-9b0d-a073e89e3cad", "indicator--6eea3db6-984d-4961-b97d-e867b1056e37", "indicator--79d09fcc-ba48-4a7b-9ef3-890256422c7d", "indicator--ed412637-771a-4212-b3c9-428c6be2eb69", "indicator--ed5b9131-8cc6-47ce-8814-8f7404c67bdf", "indicator--6eb87d1a-d94d-460e-bb83-4f909543d8ff", "indicator--ff65d0ed-f374-4919-b1d6-e1d48282c5c0", "indicator--2dad0041-fe95-4831-b3ad-da8d0135ec09", "indicator--b6e406db-e239-48e4-970f-94b5fd3fdf41", "indicator--20760a9d-ce2a-44af-83af-027d61892d44", "indicator--fd9aa723-6416-49df-b83f-d31563efafa6", "indicator--e07f27c1-402c-4bea-81ff-caedb1079ff1", "indicator--fde006ab-a687-4a62-a976-a2442b874e65", "indicator--212dc87d-a102-430d-bf11-6558fc5035dc", "indicator--04c94c9f-9018-40e5-95ca-5e8256f7e46c", "indicator--47e53dee-dc31-4dea-844a-1dafb1e906db", "indicator--0efe11b3-88b5-4f1d-8538-244d03cea643", "indicator--19752301-1678-4e85-a182-680e39d16623", "indicator--e53d95ad-9d6b-4b82-b758-93747ad59307", "indicator--11b1d0f3-3e83-473b-b045-bc9558b5c057", "indicator--b36e4bc9-c36c-4e9b-ad0b-618c692fa819", "indicator--431c760d-8ffd-4597-bea2-fea2007a80cd", "indicator--1d6db9db-56a3-4b62-87f4-4a4540e2e6be", "indicator--38eebe3d-1a6b-474e-bd26-89bfb6c21984", "indicator--d931c6c3-1440-4759-921b-f010d7e0a0bc", "indicator--41469fd0-ea92-4b0b-9835-e0b4b20bcd18", "indicator--b0fec75a-b656-462d-ae51-b883d2e613cf", "indicator--fa4a1bdb-5d33-44fd-8042-3a3e789ef35b", "indicator--529e0bb1-c596-41e2-a799-10c1be708605", "indicator--e80bdac4-6133-4ee8-9978-f86114c5dcd6", "indicator--7f913fe1-afe9-40c9-9852-d6b6ce5a5aa7", "indicator--767cd52c-2658-4bf3-acb4-66b143b5b01e", "indicator--367a7781-1627-4a17-bd1c-021a74757b16", "indicator--43f42d25-c7ee-4ab2-94c8-f4ff6e93e8f0", "indicator--54b8cd7a-9122-4996-9db4-ab0f95601145", "indicator--a551c6e3-415f-4571-9298-b23481c3e57c", "indicator--7415b712-5a03-4c52-9750-a928b5b6b7cb", "indicator--b99fb9fe-a328-41b4-b83a-eed7b54aa308", "indicator--f312896c-da5d-4633-816c-95061972e363", "indicator--8779b0d6-1375-411e-89ff-d975681027c2", "indicator--269e226c-bcc6-480f-ac53-7c650deefa0a", "indicator--0e44f312-56c8-4fef-a675-2dd373202983", "indicator--1af41a1d-baed-452e-b90c-77cdc5d9c706", "indicator--d7292d6e-9400-4129-92a5-84f1a2b87425", "indicator--61d91c42-599a-4681-b168-ee830c962986", "indicator--cb764284-acfc-4cf4-9d6a-d4a667e97964", "indicator--17d2c7d1-4749-4086-8926-8ee21216edd7", "indicator--e67bf271-6cab-4d7b-b3ef-f3726c1f8261", "indicator--0d132ec3-908a-4014-b279-d5066e3305c4", "indicator--b37097fd-11c9-4f08-abc1-4d6e6a2e0226", "indicator--e7635b2b-4912-4ec2-b7a9-93325661968a", "indicator--9b99f558-842b-4e6f-b040-da1bd18c74f9", "indicator--a2b2dc6c-fc82-4fdc-8be4-504bc477aef7", "indicator--53535bb6-947c-4c31-a647-20f64f6231ab", "indicator--aea45e5e-6f67-4db1-ae52-e47662926e26", "indicator--9c8be281-5d3f-42fe-9a88-790de56b7505", "indicator--3404d669-8120-4230-808e-b44248a98417", "indicator--dbc7ad0f-1c4d-4859-b79a-1d77b1ed662c", "indicator--f91e5f3b-e70e-44aa-ba62-2543c4b3cc71", "indicator--2873ca7e-6fd4-4e71-bb93-e674138c2b29", "indicator--30150a16-8e1b-48ec-acf9-e7eb6754cd49", "indicator--dbf2e792-4770-4433-9883-0a0c0a753d93", "indicator--966fac3a-7bb3-46cd-9991-bc97e0231926", "indicator--1d07bbe0-ef33-48d3-a42b-112417ba78f4", "indicator--cc5b4323-0567-4a52-8483-76ea6e0df6f0", "indicator--3c7f2090-b62a-4a59-b18e-5bfd395dc5ae", "indicator--9a11a5a5-7a2b-4fc6-9226-d263d13bbc2f", "indicator--6e19e558-2342-4e98-8d6f-a5669a395817", "indicator--830a3d19-7d43-4dc1-92ce-0e53fd839078", "indicator--68c026f6-9bce-48b4-91a1-29e2af9e09fd", "indicator--cabb35f4-cfd7-42d1-af73-5be045ace750", "indicator--29a9dcbf-e513-43d7-91ff-396a2175d375", "indicator--44523f6a-2d6c-4ff7-b4dc-6aa3c3238650", "indicator--4d660b72-81ad-4ede-8e9c-12676d9076c6", "indicator--c7c72505-0e67-4566-a467-a2282360133a", "indicator--fbb80233-985c-44b0-8e0f-cb3ea8c211fc", "indicator--758398be-8cfc-4579-8e80-9b97bb65fccf", "indicator--94416f1e-af21-4993-aa69-5ddc6d63a7ea", "indicator--ee50e5ab-117c-4750-9f32-92a552d00b87", "indicator--22edf208-5f4d-43db-bca9-7f74b3571877", "indicator--0665e6ee-029f-4f9a-99f5-8fe7016305e2", "indicator--c29f71e5-0a11-46bb-98f1-1684d554252e", "indicator--75780a1b-9cfd-4f7b-b35c-0b71062968b9", "indicator--0130e8b8-b013-49f1-8a50-f894d848b42a", "indicator--7fe3f8bf-d70b-4128-996d-f173bdccaaa2", "indicator--31108f0c-2095-4227-a1e5-beb21c5f9f5a", "indicator--2ac92f65-8128-4827-aa85-522f371b1ce8", "indicator--4a4744c4-da16-42e6-9fbd-e6d6f877c86a", "indicator--b0281f73-a2e3-46fb-9cd5-eab902158e15", "indicator--87b99ae4-2f2c-4788-97bc-6cdc7e36f4ca", "indicator--5d6c2576-2683-42fb-bca9-48a372fa6fc0", "indicator--74d6cac2-f1f9-4356-86fc-34fc9c73fba1", "indicator--34c3700f-0709-4caf-8acc-f7ea8d2ead44", "indicator--ee312b75-af97-4696-bdee-17e2560a65bc", "indicator--a18fb56a-a094-4fd8-9cbb-ea7aee254234", "indicator--4d051a13-76c9-4dd6-b6d3-9fab183d4fe9", "indicator--14632d77-5448-44d6-8d91-adaeea056682", "indicator--14663e4e-b622-47ab-b994-434c59065534", "indicator--2f823617-89b7-4169-82ef-ebe86d2fefbe", "indicator--a3f00acf-dfda-4cf5-8f78-40000868025b", "indicator--68c74ea9-495f-4882-9038-6500c4357b6d", "indicator--7883ccc0-8dd8-4996-b596-2101221472fd", "indicator--db44bcbf-e010-42d9-a010-f97dab3d1b37", "indicator--6fab7d9f-bf7d-4353-b328-0c872e331c7e", "indicator--d9241d4d-5b5c-45d9-b866-914e5011cc4e", "indicator--56161547-0d1f-46a1-96b2-bf62ca8d0567", "indicator--216929fe-dc5b-4814-9dd8-7da0d82a5e17", "indicator--63a6a935-d915-4b8d-9810-6aa117b8debe", "indicator--13fe0bdf-c4d8-42eb-8091-5044fc7a431a", "indicator--53d288a7-186a-47e3-986d-f63fb1fe1ea4", "indicator--44773714-1d37-48e1-827a-88736c9429a5", "indicator--aae16c42-d537-4a11-bba5-0d60fd0f8efa", "indicator--1fdbfcbd-0a63-4801-86ad-d3bf59665a9f", "indicator--9fca9bb8-09b8-4a8f-a0ed-3ec29da524a2", "indicator--6c32c4fa-ef8b-42d8-b1a6-425cc2a9723d", "indicator--45307187-da7b-4766-9833-a3095ed4ad78", "indicator--25c37cb8-2658-4054-9723-33b6d7f5ceee", "indicator--33f9b594-85cb-40d8-86b6-b70155d1227a", "indicator--8f253437-8ccb-450f-aa5c-9b5364d88ac2", "indicator--b13f3a46-a185-4788-baa3-77d883bde659", "indicator--28ce50e8-38e6-4aa6-afb1-2a96f427566a", "indicator--99f86d42-6035-45c3-8ea5-2a479f64e3fd", "indicator--b636567d-217b-43e9-87f2-8c1ece038b53", "indicator--f3f45698-e34c-4ba9-b256-1b891788dab9", "indicator--b3ef7bfe-8eb9-4b9d-b54c-8a9c0ca2459a", "indicator--5c934301-8d5e-4ba4-bb1c-821f3dd78ebb", "indicator--1948cd18-1422-4d65-9c54-e9a4d1958c43", "indicator--db1e490d-3b65-449b-9b35-1651fed242f6", "indicator--b67675b4-9c10-4e6b-a0fd-db23b61019a5", "indicator--66491549-38ad-4eda-8c43-15831936e349", "indicator--c959c199-000f-4a7a-8b25-636751731a1e", "indicator--00049654-60d4-4003-9222-02f208678b9e", "indicator--842dbab0-4397-4cc5-995a-2df3db0259a9", "indicator--05387bd0-0a78-447d-848c-7f461afaf2f9", "sighting--aba76f65-88e0-4a3d-8d54-50341e7cb198", "sighting--093bee55-dbad-4d5f-80ae-eb01f4b1f39a", "sighting--8c2f5f91-88ac-4fa8-9722-35a377366aa2", "sighting--479dc490-cefb-486c-b9d3-b055151ac99a", "sighting--2847a894-fb1b-4ab4-bc5a-ce5ca21c5fb2", "sighting--d7a6726f-6e55-46e2-82db-04527fe7582e", "sighting--5a45cbf4-e73c-4e2a-8234-6c461ccc9f8f", "sighting--0d78a79e-f692-4fd5-91fd-d152c051e772", "sighting--7663e605-6092-4648-9316-55012ca61d64", "sighting--09f36c7b-a900-4a3c-8e43-bd013dee28eb", "sighting--614daec5-f6a5-45f2-ade6-4c32038dc6ff", "sighting--a328161b-5824-49f9-854c-c4007b3c9c49", "sighting--69a2b894-f549-45a9-8995-d1c7a2258dea", "sighting--87c00854-41e8-4bd0-80e7-0e0b1f4c7fcf", "sighting--70af1713-fcba-4b60-9700-27a35287be04", "sighting--8b284fac-25b3-43d0-bc2c-7a50a2483e10", "sighting--6e8ff524-156a-40c8-abe8-e6a86ad2729f", "sighting--4b6da1de-7435-437a-a37a-726749549423", "sighting--f0f3a73e-fc54-46c1-8ca7-a8d460331849", "sighting--0823a1cb-6c12-4dba-8b54-c8e64d312c92", "sighting--1daa67a1-21f5-4b78-8f77-b849d93e7ed7", "sighting--ae637384-7c11-4f57-8f45-2c8e5ebace5e", "sighting--06ec5f32-b392-4ae9-9361-cc45c42686d4", "sighting--f622187a-d319-46ab-84bf-38533ba05162", "sighting--666bd97c-a36d-4694-86da-a5e581c273ce", "sighting--bdbba225-fa4a-427a-b2e8-80e01359fc6f", "sighting--96e5563c-08ad-4f5e-b28f-a5d668a4955f", "sighting--d0de1544-5525-4661-a5cc-c9692eb6a347", "sighting--36face4e-61d2-42f3-8156-9f2de37a54b8", "sighting--82eaff73-95d0-45b2-9ff2-087498a38cbe", "sighting--017b3ee3-048a-4b61-ba4d-4bcd6a957a0b", "sighting--51fb6fe3-ca4f-4640-840f-278cc199f3a9", "sighting--590d9eca-3a5a-404c-bc5a-8f13e74e285c", "sighting--7d506d36-75e4-419e-a737-9646a9327000", "sighting--e29bb43b-aadd-4fc4-ae7f-f1b7494a27b1", "sighting--ec5f5fc3-9ee9-485f-9fd7-cf0c737786c1", "sighting--a34ed1ea-775c-4bf0-a40d-75c23f07f156", "sighting--3a06d1b0-8d8f-4e8a-90f7-0933a812a549", "sighting--84be1909-e746-4300-abca-0b9934876f36", "sighting--919627e3-bb38-4980-8b19-f3bf217708d4", "sighting--6d583e00-48bb-4c2d-b19f-cd8676ba748e", "sighting--f946342a-6e28-4ff2-a693-368bad94b3d5", "sighting--38dc92e3-d81d-4903-9e00-1f234153ef50", "sighting--2a6b902c-83f5-4045-a321-f209874fa29a", "sighting--f3c4e942-73b7-4a3f-aa68-25987cc9e200", "sighting--68996e68-2390-45ad-99a7-9aa9c4e1c4bd", "sighting--93892150-39f7-4b74-aa3a-f5ce0254732c", "sighting--0453dc65-649e-4fb1-80b0-e65720fad231", "sighting--ceb516ac-21e0-4843-a00e-f5c9dade2a6d", "sighting--f727d6fd-4ea2-4913-9e7c-fecc8b7c6bf9", "sighting--aaaedd6f-4103-4fa1-a3ed-65b7f8b403a9", "sighting--913a07f3-5759-4427-ab82-e82ea8aa791a", "sighting--137002b6-b24b-4677-ae9b-89cbcfca6d88", "sighting--6de87309-937d-492f-ae64-cd40be8e54cd", "sighting--d8d873a3-3ede-480a-ad2a-11013a3c9cfa", "sighting--e94aa344-21da-4b97-92e3-903eba30457f", "sighting--1dbb7340-778b-4637-bfa1-8575f423be09", "sighting--3fff32d7-2ad3-46c4-b0e0-12f77bbbf899", "sighting--b56d327b-cfa9-436d-b197-492b9b4d5057", "sighting--3023a557-7e7e-44f2-a73b-78f8be89108d", "sighting--f98e2e1f-1be6-4f5b-b7b4-00fcf032edec", "sighting--0242067d-17cd-4fe8-8d3d-d273a790545e", "sighting--c769e64a-6d4e-4bf0-8b37-58e77d661df0", "sighting--f61ffbbb-8765-4154-a9fe-e9c8855ece3c", "sighting--5cb58580-0f7d-4e91-9342-977b62c55cf2", "sighting--ea3c8e5d-2a70-4356-964d-f8259cea4143", "sighting--fd842bc3-2c02-40c6-981b-9aea951408be", "sighting--3a05cf35-ef8e-4d46-8853-2a304e225bae", "sighting--4f837404-7e13-4e28-9367-245419e81615", "sighting--c2944079-1132-4268-b26f-f81d76924cb0", "sighting--69f824c2-0b2a-4104-9488-faa258bc9a4a", "sighting--65471e92-f8b6-489b-8c18-b7741148e20b", "sighting--47c5a6ec-622c-47d1-a8ea-1f30c280fa54", "sighting--9ace84e8-1bf0-4796-b801-b443f3fae08b", "sighting--97d79d9d-41ad-4f20-a366-e4bfd9395785", "sighting--db207e08-fcad-4712-b518-4a88cc850bb4", "sighting--047980d7-95b9-4302-b4bd-f1374ace3bdc", "sighting--e9b647da-27e6-4503-a44e-851f45d4279c", "sighting--5ad4105c-7335-49d6-a387-a1d363145033", "sighting--4c4b0c44-1797-4ed7-ae85-6e210b4dac01", "sighting--f0b3ac9c-7a6b-421d-a479-ecf6ac261f17", "sighting--da50163c-28d0-4a51-b997-80108a232d63", "sighting--faa89b0b-396e-449e-bf5e-f5bd677f4dc5", "sighting--2f70481f-a535-4003-a1de-5783300fefa3", "sighting--d5aa8fea-94b5-4c33-a0f8-cbe7d2a277df", "sighting--68ed03fb-2ed6-474f-9517-52e5f9507fa5", "sighting--6354612d-6d43-4b27-8151-354f8ec21491", "sighting--dd74ce61-fd48-4915-8ad7-0c9d247403d0", "sighting--df224a28-a88c-4726-80ef-8b0494207ab6", "sighting--c85a0c85-f5b4-42df-b3b1-33c8a8d20944", "sighting--5fb3224b-adb8-4d3d-85b4-c240ce19d796", "sighting--9f9bb459-aabe-45df-8107-6186cb30e5ca", "sighting--c015f59f-9f76-4b42-9ba1-c7aa600114b5", "sighting--e921915e-8de6-45db-ba5f-8dfaf5d4176a", "sighting--3acf3dc9-63d9-489f-8418-506c45d7d882", "sighting--62f63c34-f444-4569-ad80-29d5e9f21d2c", "sighting--320cfc53-a9c2-4714-b4e6-2012903e9f05", "sighting--cf10dcce-8c84-48c7-8ab4-68616cb0e358", "sighting--77dccecc-af17-4fd3-88dd-a305fb667416", "sighting--1753cc2f-2c3d-4786-b882-7ebf5916a89d", "sighting--90742c34-d69d-4fca-b004-7116e999c909", "sighting--ae3eb5dd-4d0f-4fd6-8bdd-f2f23e33a8d0", "sighting--0ade8107-9562-4758-ab60-34a7961dffca", "sighting--9b7604af-5586-4458-83dd-85bad08b64b7", "sighting--9392b4e4-8799-4d76-aaf8-2f6e2b446d33", "sighting--e9428d07-a212-4769-9041-cc210b600ba8", "sighting--808bb879-b118-49e1-9a88-59f5e4c87ae3", "sighting--686ead82-95b3-4b30-a351-8c6b56e72af1", "sighting--bc8055af-9421-439f-9764-9c0330d26acd", "sighting--2f03cf2c-7da6-444a-9350-a5185f3ae162", "sighting--2889d179-2087-4159-b0ef-ffc57083eb76", "sighting--ca75f0df-949c-4882-8c5f-a40c904bd965", "sighting--04d19a3f-077d-470e-88bf-6f1d6fc28995", "sighting--e4abcfc0-7b64-4d35-be3b-2c60e3675357", "sighting--14368648-41a6-4ba3-b9b9-8095183e94dc", "sighting--e9b76e18-8829-4fe9-b608-9a500481c0b3", "sighting--76cf70ec-0bbb-412b-b400-01bb1c074e15", "sighting--f6d9bb4f-6cda-4d29-b7c3-811c430af530", "sighting--c9871856-a365-446a-a359-490772bcc90c", "sighting--f6ef1b55-0b9d-41cb-b4ca-b13685a4a770", "sighting--816d5073-8fdd-4c46-b710-eefc76c6cba9", "sighting--24cabd45-5138-4e71-bd7f-00ab636795b6", "sighting--43e462ee-4f6a-42c4-8021-3c45d321e9c8", "sighting--a4c79c16-d84b-4da9-bd62-654c7f4d1419", "sighting--8e9f6a66-ecde-424d-a268-19bc27078753", "sighting--1a6b6a73-1796-48a0-8bf7-64f005826e63", "sighting--5f50e979-54de-4f9c-a9bf-18e92ee1a02b", "sighting--2e9d75ed-d0b6-4607-82f9-ed92c27a3b5a", "sighting--2773406c-14d9-4460-bc50-54579c5af9cd", "sighting--8006d714-3cc8-4690-a250-e2c029e80b0b", "sighting--3a011331-d026-4931-842e-a549cc16f34c", "sighting--be8ce32d-5189-487b-beed-9264b4b069b4", "sighting--e561a8fa-3546-4c0f-bfa7-7e1003230199", "sighting--4fbcc66e-0dbe-489c-9530-fae7f5ab276e", "sighting--6445ebbf-0410-46b0-9424-558256d3be85", "sighting--43bea13e-5daf-4e2b-a80e-403b1bb627c0", "sighting--076607b9-85a6-4969-b70e-b4c7ab9ca578", "sighting--a1087204-b23a-44a0-80f7-1071ef13099a", "sighting--688facfb-2cb7-469d-a680-72f0e308e9eb", "sighting--c988d84b-868e-41f6-b6d6-a30c2cae97ce", "sighting--b42ce69a-2639-4216-a504-4aab97d76cff", "sighting--e0eb4a48-d895-4e85-878f-54915d6e96ab", "sighting--c1f5a573-6705-4f53-a66b-a12fca004a71", "sighting--26267b05-06d5-474b-89a8-66ee7fcd06ac", "sighting--a251953e-4db3-47af-9216-679e489bf1de", "sighting--b0260702-ec3c-48a8-961b-d3210610ebb1", "sighting--61b604b9-bab5-4589-9eb5-6ad3f01f6164", "sighting--329de525-593d-4328-9d54-eae4b9a1a88f", "sighting--f0c2f09e-056d-4824-b6a0-799ef9beea92", "sighting--5517afc6-63b8-43f9-bc37-25a769a8bfeb", "sighting--261ef9b5-10b0-46a8-8506-ec438bd4d150", "sighting--0190de53-6a3f-477d-b3ad-8c81facb4c0b", "sighting--9c850959-6bc2-4238-932d-67ecfcc0437b", "sighting--ad64179e-369f-4e85-b729-0c1e3bc24648", "sighting--8ba197a0-f303-4716-95f3-2dcf7743080d", "sighting--45d84993-c2ba-4209-bb68-7481666175a9", "sighting--830fb057-595e-4ccd-920d-7385977a5636", "sighting--47f3b4d5-8be0-4639-8a1f-28327261d2d4", "sighting--9bf07bed-f3f2-4ea8-8767-0b92b034051c", "sighting--9206e326-939b-43d0-88c7-e87c9a0ad4f2", "sighting--8cd682be-449d-4bd2-8148-a5987dc7ca77", "sighting--5a8e3139-9664-4e5d-b4ba-39e0fa9b3357", "sighting--917cffdd-4f5c-4cb0-a53a-5c43e4322fec", "sighting--ae37403f-a26e-4fa8-9280-304b812ef6a4", "sighting--7eb1599b-9985-428d-8e1c-7242c80d3751", "sighting--40fe7f23-3e14-4547-8e78-1ef6a0365030", "sighting--eaa1fe5a-5ad0-49d2-aef3-a5d1823b8c34", "sighting--f3974e11-0fc7-4d03-b8fb-c8bd6da4e8ee", "sighting--4da4a8d1-fffa-421d-9229-73338b60e639", "sighting--14e81ae8-f4f2-45ef-9e06-06cc82df9350", "sighting--9edba9e8-ced2-4ac2-8b9d-7e9fd1b3536c", "sighting--b1eb265d-3d7d-44f1-9683-a3a30242edb0", "sighting--5a7ee12f-66b2-4c39-9a14-14ad421b8c39", "sighting--b8e8e62a-9a74-45e0-94c0-5d50984ebff7", "sighting--f2681a62-8e46-4bb0-a92d-cb01f0b3356e", "sighting--0ad79677-8f62-461a-aae3-2d04f50495a6", "sighting--f7d5171e-479e-4bd6-b25e-8da9157bed3b", "sighting--e7ee79b8-1fce-4bde-a110-d1941a41cf1d", "sighting--5a599793-56d1-4eb8-857c-cb6928258b41", "sighting--d475a19b-613e-4d6b-9e3c-fd7a2d504313", "sighting--c032da15-d9d8-415f-857f-b3411e0e9430", "sighting--3c86ba4d-6de7-45e9-9d1a-0b09763328f4", "sighting--56b32132-16b9-4299-b32d-95b576bbdd6a", "sighting--13744d40-0ac8-4823-a47d-8d3931437ad8", "sighting--c90434ca-9edd-448c-9c05-7806366b747a", "sighting--67ec31df-d948-42b6-81cf-b7b287321f61", "sighting--3dbc88cc-477a-465a-a9a5-3ac37e9c3322", "sighting--bc1273d3-e0fa-463d-a5de-b558b7c40297", "sighting--84745945-1821-44b2-bc8d-6763d64e0bf9", "sighting--6fbc35d5-a0e6-428a-accc-8523f63faa67", "sighting--f42f9bc4-ec21-4968-b580-71e95df639f6", "sighting--62a2cca5-ff02-4dd0-be81-f7b3593ceebb", "sighting--9f3dd232-20f1-491f-b9d3-0f5e2ba433dc", "sighting--9617c92d-3624-49ab-8cd1-61f21e785bdf", "sighting--19c2e82f-10da-4312-989d-ded211e4da98", "sighting--4d65a950-ef85-40d5-9660-42cebfd88dec", "sighting--b8498ce1-d369-4434-8fba-4c57105102cf", "sighting--8f6cc84d-324e-46c3-87dd-f8f89ce33be6", "sighting--7cf66bdd-123b-4795-b84a-ca1f7bba24f0", "sighting--39ec1c5b-0dad-4fbb-b7df-9bab0e9508e1", "sighting--2d0a9e19-9fcc-48be-a82f-2fc2941db0d0", "sighting--a5a6ad85-cd4f-4877-ac34-db97d8a21213", "sighting--a5540dd9-cc7f-4cf8-af81-3e65fe96b7ac", "sighting--784616af-b693-4be7-8032-73624b99d998", "sighting--6b73e23d-4bc4-46b7-ad94-0230e7b220b1", "sighting--7da10869-98b4-4ab9-927f-265c45299af6", "sighting--59bb3e9c-9624-418a-a368-a63cb11c974d", "sighting--062899b4-c547-4d19-9e7e-554b67ce0825", "sighting--ffc0fbf8-a34c-41fc-be7c-045664a7accc", "sighting--81308ed2-b484-4a04-87f5-330c0609a368", "sighting--366489b7-abee-42e8-98de-65de4f2e78c2", "sighting--79a93e81-b33b-4f7f-ac8e-39d4e29919a8", "sighting--5a2f3268-4c61-4b1e-a682-5dd25c6b8b7d", "sighting--c9e5bd4a-ac97-491b-b1db-47b1e22d94d0", "sighting--02a82be6-15c8-4bdd-a5ff-4d9d492260b1", "sighting--decd4f6b-6ec6-4668-a63f-77746ed4c9c7", "sighting--db2ad1a5-5810-4dc4-96f3-b7efb2cc4567", "sighting--22daaba1-2be8-4d41-9cc8-6b622a3c7d2e", "sighting--bd22ec6d-f761-464f-828d-80bde4e0f6b6", "sighting--0fdba95d-5202-4039-a5fb-ec8eba1159b1", "sighting--12672bbb-de6c-4b23-b7bc-29e8edb486b2", "sighting--03e67cb8-ef4e-4e39-912e-4c521ef7f0db", "sighting--b93a2ee7-f03e-4867-bc25-cd6b547e80a1", "sighting--23512750-4ad0-4e55-9c1e-561db6c85bf4", "sighting--5875e606-0c3b-42f2-981e-832704f6c724", "sighting--b6433fed-9a50-4a8a-ad75-0c41cb993feb", "sighting--0632d9d7-29c7-4861-adce-4e59f048e9c3", "sighting--7c63191e-4e43-4a92-a746-55e60265e1ff", "sighting--053f2f73-8e02-46d3-89af-68246e3587cb", "sighting--4e52a499-71cc-4046-8871-4b3e3eb1304a", "sighting--b26edbf7-156b-4fc6-bc83-852478ad88ae", "sighting--52b6914f-5613-486e-9bd1-61362dbb2f28", "sighting--9d1c5d58-6cb5-46cf-96ea-8c3e66f8ad86", "sighting--432d8f7a-6bbd-4d20-b3c4-6f38479ce69d", "sighting--2e85d414-afd5-40e8-ae98-b35184351ba0", "sighting--160ace52-726b-4732-9aad-dbce7fa32fec", "sighting--bb3ef908-3852-4327-a5ef-2d6d1be9aae8", "sighting--c86eb6ec-cb7a-430f-8375-b079bc121b58", "sighting--ec7f0dcb-f9ce-4438-b8f9-7237a1487d99", "sighting--6ee8c18d-00e1-4456-ad33-36a5364c0afd", "sighting--1bb85ff0-0672-461f-ba52-7fb96f0d4522", "sighting--fd12e9cb-b261-4f26-a4a2-aaceaa5f6d24", "sighting--253b4773-a1d9-4892-8c25-cd42bef04135", "sighting--e2a28600-81a9-45c1-a4f9-2d365e5a4385", "sighting--8ecfb796-27f3-46ee-88b2-999afe24e031", "sighting--b3837ffe-ca54-498e-b206-f1dd3326f51e", "sighting--9fe336cb-648a-41d0-91b8-415db4ba89df", "sighting--dec2a931-a2ae-4baf-b97d-a8fe2e5be422", "sighting--abb5d034-db23-4423-a8da-2720f368a704", "sighting--7b6f8581-500c-40fe-9c6c-de3000601d80", "sighting--e672da57-16e1-423d-b290-0b3e6c095aea", "sighting--6528bc99-06ef-4512-a0fd-17d70f1671f3", "sighting--226d429c-c1c5-4243-bf21-657bf5834636", "sighting--bb607539-ab2b-4ef1-aafc-1af28e03d861", "sighting--59f8a086-c663-425d-80c8-c646b2506bf8", "sighting--c5f5c3fc-84b2-4971-ade9-23d0e0a1612c", "sighting--1422b2ac-fc6a-4245-ad67-4cff85f1eb95", "sighting--3a82cbfb-5922-4463-bfb9-2a97baeb2cec", "sighting--c8b1f4ad-3b12-4722-af5e-6f76724a6e1b", "sighting--72ad277f-5067-4f71-8ca0-145a9ef4d3c5", "sighting--41132a1c-846f-4cba-ba2f-a46cf1280988", "sighting--485e6ac7-b46c-406b-aaf9-821a13be6a7b", "sighting--30c200e4-792a-401f-8838-6d3e563c8300", "sighting--383e14a7-77fc-4583-905a-47b464d2c7b8", "sighting--410fe8d6-ef49-4f96-8d0f-138af38dec12", "sighting--e0fb4718-8598-4e6c-9a52-30f30f166de0", "sighting--fddc55ce-20d3-42bd-9e03-1a431d0b760f", "sighting--08ee84ce-43dd-4bfa-ac17-87a9ab055021", "sighting--679b7a64-d864-4e73-872a-bb11309e9df0", "sighting--06cb11e6-d9e2-46c7-aa67-093064b5ec21", "sighting--7d14c6cd-5c74-49fc-842b-cf5daa9cdc74", "sighting--407298c6-fd6f-4f93-b215-e84ce9763a04", "sighting--dc1ef8ba-5238-4746-a59a-755a3e46577d", "sighting--87709305-c9dd-486d-9191-011965655f10", "sighting--713596d8-efc9-4a5e-a054-044b471877a3", "sighting--5181a8a6-b9da-4be2-aa73-811a693a4dbc", "sighting--dca84eb4-1807-4483-9540-e81d9e0b6c36", "sighting--fd74f399-359e-4933-a062-68d14e86219b", "sighting--e81ad44d-4f70-4ed9-9c0f-1024d8c6ad61", "sighting--e9c04645-e0ff-4b3d-9313-66ea815cd833", "sighting--4b243e80-7f41-46aa-b902-98e21de43204", "sighting--f99e39f9-9c84-4399-9acc-c74f1920ff0c", "sighting--dce9a080-9497-48f1-b2d3-c104e1e53a87", "sighting--c60a09ea-8d83-4702-b735-ee1336c2c29b", "sighting--45942ee3-407c-41f0-9edc-2e541ed7c532", "sighting--1f097b7b-0433-4515-92bf-ab1f5a897a50", "sighting--e8bf275a-af96-4fd9-bd15-2d55022c2a6b", "sighting--1608670c-aa65-4d15-9244-9cd33eedcdb6", "sighting--b138b6e3-c653-4eee-9f72-3c97d0732527", "sighting--40a4de1a-6a8a-4872-8a7c-f76faebc5dbf", "sighting--9fe5688d-a133-4781-90d4-493f09873dd7", "sighting--d880d7fe-9683-42ab-b0c8-5f2dc9ec8480", "sighting--2e4c99c7-bb57-44f4-b1a6-367f13ca0421", "sighting--a62f41a2-c672-4828-8b91-a946384d4c3c", "sighting--13bd1e71-fdb0-4afa-ad7d-60147105405c", "sighting--6bdfcf81-bc36-487b-911a-5c455500afe4", "sighting--2bbd9dd1-3679-4e3e-925a-3c7b933f32f1", "sighting--93767829-82e2-47c7-a3f4-12b5c8cc64e1", "sighting--ea54370e-ed5d-4fc0-946f-dd60f09fcfb9", "sighting--7745b1b9-c0df-4f42-b011-dce3bfbe303c", "sighting--b2523a3f-6bd9-4023-bfd3-a572364567a6", "sighting--99421c2d-c279-4378-ab14-4faf8ea56a51", "sighting--a5bef260-cd3a-4bd5-9901-b843ece05bef", "sighting--c25f016f-e2c1-4093-b240-902077ce75fc", "sighting--7164a849-eac9-4a56-9320-9a82438e59f9", "sighting--996cdc37-1c65-4f18-891b-ec1ef217c13c", "sighting--c848ded5-25ad-4372-83e5-219c0c01037a", "sighting--6e13c813-66e5-45c6-966d-b7bdd182bf25", "sighting--072db9b5-08e9-4316-b7b2-d598619a302f", "sighting--499dd7c1-c333-45e2-bc7c-48757fdbb939", "sighting--591a6c49-bd1b-406f-a1c1-8f61f56ff6fd", "sighting--3d5d31a7-2cda-485c-ab85-6fca85632359", "sighting--fa29e581-edff-4158-8b12-99e75c791646", "sighting--af0e1ab0-568b-416f-a764-fbd4a4dd26f7", "sighting--4a3628ca-b682-40c1-9417-0da240db2d73", "sighting--41a61cc4-91b7-4bd5-aefd-04fb84d06473", "sighting--2cb6bf4c-da3c-4c04-8039-f28feb1936e9", "sighting--f4c89efd-1d40-43c5-9ff1-878bc05bcd99", "sighting--634739aa-5562-4dbe-8566-39c34475c5a2", "sighting--98ec8ab5-c904-4155-961a-429d51884853", "sighting--9d52197f-3ce9-4b50-ac13-334ef7a29e7b", "sighting--c7733836-419b-454f-b9f9-ce4d2c526262", "sighting--ca3ae849-ddf6-4adc-b411-93103a0b49ac", "sighting--44d1fbd0-1bf1-4a04-9d56-574855aca7a4", "sighting--08438864-dab8-43eb-b0d0-a9442638c23e", "sighting--1d83cf7b-8b3b-4888-8017-2a0692570257", "sighting--f5ae16e5-56ee-473d-8e7d-bf782608bcec", "sighting--7baf1050-fe33-47f1-af80-a9133fc92389", "sighting--1b7621ee-bfb1-46ad-88e0-4de901d01418", "sighting--913e441b-1df8-4a91-a9b1-71774c3242d2", "sighting--095080ce-c2e2-408f-9fc5-c8802aa2b487", "sighting--8263f29a-b08f-4b89-8d4b-a7de17b1294a", "sighting--30eb0dae-6341-49a0-9034-d3cef583a55c", "sighting--dc37bfe6-fbd9-44f5-8be6-0b9e8b2a64da", "sighting--72ffe536-6b03-45a0-9cfc-0301647e2d49", "sighting--f7803b72-461c-4e1d-885c-7c174ae8ed48", "sighting--5f4ab3a3-72eb-4f33-a0f1-0571af4e2074", "sighting--ae4d7840-89a2-41a4-9015-c224d6f03367", "sighting--e877e30c-f596-49ee-b5e3-c2fd01782085", "sighting--b43519ff-f258-4f78-8cdd-0a1b79b39fcf", "sighting--98ccd747-8237-42a7-b056-454575207782", "sighting--f7d1abd3-d31e-44e0-9cc6-7e8327368e66", "sighting--bc3d70a7-c5e1-4622-9e83-d896e285bd3c", "sighting--5b243de5-4de2-4aab-9a67-8e14a0f06a65", "sighting--1dc30bf3-214e-42cf-b999-6fdccd18deb6", "sighting--1dac1c51-eae1-46aa-98b1-47c8332cc958", "sighting--a2f320d6-93a8-4d03-a010-0a8f79d6ada7", "sighting--c9d68578-a2a0-4008-a237-0007db9869a0", "sighting--5140b390-f57e-42c1-8f5b-d853b944a7eb", "sighting--aabd6a1e-8de8-40cf-987e-38b2c5cd6262", "sighting--77920ded-54fd-482c-be15-b188007597db", "sighting--e4ee9c06-388a-420c-b8af-4dea02b3f6bc", "sighting--39217ced-ccff-4f2e-83d7-475ceb3a6303", "sighting--4209e89c-b8d5-405e-9207-d15cb2e04d9f", "sighting--2ccced6c-a10f-4c3e-b45b-f22d3eb16890", "sighting--6ed1000d-de66-458d-a27a-714fc2c85be8", "sighting--0011dd86-a4a8-4037-a924-a02e5ae78c2d", "sighting--dffdc9d5-59e3-482e-8ad4-bee441ae1938", "sighting--66f40a36-1b32-4d33-9884-57897a22ff46", "sighting--0b12e58a-29cd-4736-af6c-2bb0b35e87d9", "sighting--b8a46fc8-557e-43c8-9682-8a7a98593828", "sighting--4b7fece3-e4e5-4ebe-a1ac-de349fff6473", "sighting--a1c6ea0e-1919-4d09-8cc4-9a38226cefba", "sighting--57508862-86bc-4bc0-9a58-bceb15347029", "sighting--eb9c0d6b-3571-4052-8fd7-4b45f9a8e984", "sighting--bc60778e-f375-43e2-bcb5-40152e6a5225", "sighting--43c54daa-cd78-4fa7-917d-285ef244890b", "sighting--ac719844-98f0-4af2-8ba0-0b6078a9aeb1", "sighting--6caf1c29-5755-408d-b4bc-060d8e9e2ba4", "sighting--e385939b-f4da-491e-9303-d8843f3d04b5", "sighting--7acb7b31-a4c2-48d7-8ff4-25c56d77fd91", "sighting--fe9deac8-4af7-4dc1-b285-16be80901568", "sighting--782e1faa-9070-452c-b29a-6af1a8f7f5a9", "sighting--ef040093-2385-4ae0-8a04-ddec9f5ec169", "sighting--05f8df19-5255-4919-b0a1-83479727f7f3", "sighting--5a915d42-3fb6-4994-88dd-e926b1c97b9a", "sighting--b53fb2ef-f2b5-4c91-b806-805212516a36", "sighting--6bf6cbd5-d493-46ed-b0f6-680901e26da6", "sighting--7622f79c-67dc-44fd-96c3-e84353eb326c", "sighting--c381bc1f-a256-4e24-b930-c71ac91c6efe", "sighting--a4dcbf4a-eb1f-44d1-825c-ba7041014fbc", "sighting--14d19db6-6daa-453b-bf0f-3055ab31b79e", "sighting--b9da6e1a-7891-4d5f-9e9b-ddd4853d02c0", "sighting--ee96c480-082c-4315-9f7f-e2c4e26cc001", "sighting--f3008f77-69b1-4779-b612-93338b83c91d", "sighting--7efd6d50-c0be-40e1-a58a-a519d7cab8d4", "sighting--0a2f7901-1513-4ab3-afe1-46c248c6c645", "sighting--df6a614a-c6ff-4c08-9a34-30fd52747bee", "sighting--1f019929-ac34-45f8-8e5a-23ce5737ef96", "sighting--d4cfc3fb-5bd2-4b5d-802a-c371291eb83a", "sighting--98046e6f-17f2-4a28-9695-c194a536b4e1", "sighting--1c77f479-8bac-486d-a662-f743583d0fde", "sighting--96306d0a-ed23-48a8-9c69-381253677772", "sighting--03b8ee6c-55fe-4a23-81e1-0a5e0695d3b0", "sighting--4bde7400-4ecc-4c6d-b475-fac6f9c63856", "sighting--ba23ba5b-2807-4a2a-9e58-94c17abec607", "sighting--81c18648-c60f-44db-9c01-e90d928fbb28", "sighting--f653fa60-1584-46dc-b380-3fffc8d02d09", "sighting--55915ace-3af3-48a8-918f-e35cdf238276", "sighting--695951da-7973-441b-b174-f2e625c5d0ef", "sighting--c4ecce88-605d-4fe7-a1f3-0f87330790ee", "sighting--71bb41cf-2304-4791-aeeb-989632e8ad18", "sighting--8df908fb-dc80-4a83-9b1a-956423069367", "sighting--ba849d79-8cb7-47f3-b5b1-4588b8ba9992", "sighting--afeb1dd3-b76a-4632-96f3-bd5ac1a2e8d4", "sighting--e99c0843-643e-4924-8ad1-189ccca30775", "sighting--78267479-5f27-415e-96e7-971dccba8e82", "sighting--e4268000-a5a1-4ad5-bad9-87023f82bd23", "sighting--8368a636-acd7-474d-be26-4e7735f84559", "sighting--8390100b-0e24-4b65-9b90-7e030059e1df", "sighting--04ebfc42-e1cd-4e3f-8352-f7d852d7ecaa", "sighting--3babaf36-89a9-499f-87f1-9ee6cc6604e8", "sighting--00f17095-2bea-44de-863d-c5d006f4e012", "sighting--68e29ab1-605f-44f6-a0cf-11c2650a4263", "sighting--634a4b8b-8784-4062-b868-1b7c62f5e25f", "sighting--16d8c6c7-55dd-4dc7-97ee-e6b7136bc93b", "sighting--3968dfcc-d478-475c-bd5e-5cb7a45cfc13", "sighting--a5d91e3e-586b-468f-a986-87f63c358766", "sighting--0c480b17-88ce-4269-b279-c21b7ff1de53", "sighting--967cb726-d011-4715-8013-da043dad6cf1", "sighting--a8f39e4b-7cea-4a37-8158-fea568f012e8", "sighting--01dee5e4-1a8c-41bc-a7a4-75a99c967599", "sighting--738d8120-b5e7-43ad-b95e-c63e17159ab4", "sighting--ad88241e-6802-4043-902e-068ea980996b", "sighting--6c3692de-d34a-4f56-9acc-163465998010", "sighting--d0bece76-05d9-4d0b-904d-ec1cd629a215", "sighting--3af3b45e-dccc-44ef-8299-a005a88c522e", "sighting--451dbb91-0869-47b6-8557-19bbdaf4f7e4", "sighting--ed99bd4b-d195-40d7-b579-e2714192cf60", "sighting--b5bf5204-200a-491c-bd8c-957c04672ad9", "sighting--12224339-348d-4116-88ca-1eb388685c15", "sighting--b272a9aa-197b-4722-a620-56324ce4aadf", "sighting--c8656a42-df15-476c-95ec-dea47f0de54c", "sighting--4237469f-860c-4735-b1fc-207129cf5c52", "sighting--3134dd7e-e00d-480a-a51b-976a0baca131", "sighting--ada66d38-ec19-47ec-809c-378e740f3e68", "sighting--5268e224-f266-4682-83e6-cb0f31c6fc9c", "sighting--f776582b-e5a1-428a-8d19-7bc46de8bbba", "sighting--ad47b834-4dc8-4bce-83a1-a31570e5747b", "sighting--cc36266c-01a3-4c76-8066-6f050e5fd006", "sighting--79922378-272b-4afc-904c-b7bdd75e9233", "sighting--7c14c02b-060a-4eda-8cda-e9f82fd17842", "sighting--49798739-cffc-4318-856a-8960f463f9c2", "sighting--e549a410-a13d-4236-8876-a04723a79fd7", "sighting--a0a3e968-a896-4cc9-92f9-c61737ce5990", "sighting--f760b7c6-87a7-43fe-b5ef-58521b066e67", "sighting--50b18197-62b7-4e61-81f8-11deda417683", "sighting--7964d6ed-67b2-46fb-8c1e-ce7bd493220f", "sighting--61ce423b-2b9e-492a-86cb-c796009b6644", "sighting--176032e0-0263-418c-90d9-2511b20ca481", "sighting--b27cee7f-7879-4e49-98cf-e18581068ed0", "sighting--e48441b4-886a-4784-90fb-5a7d2d993558", "sighting--def61141-17bb-4b16-acbe-99206ecb4534", "sighting--ab992c4b-2e0f-40bc-b042-f2913538f642", "sighting--ce6fa49a-eadc-4e2f-ab63-c868f1a4b3ce", "sighting--6e8fedfb-7d34-4df2-aa3a-9541800f7c97", "sighting--d257da28-4264-43b4-bc6b-62224940eed1", "sighting--8a083845-5bf0-446c-81ce-519f8b834ed2", "sighting--34d8bb42-320f-45ae-ae2d-4ef1ccc19a95", "sighting--3b5dd464-d285-4b56-984b-7845dcaa05bc", "sighting--ecfcf7d5-e0ae-4a02-9d92-6c805312ee61", "sighting--76d392e4-9d9f-4a09-b6c7-0bdc84298336", "sighting--028963e0-942e-4cc2-8e62-f6e8df971965", "sighting--9af43c07-3697-4d32-ad75-61db6967254e", "sighting--53b564ef-e8f9-43ce-8a95-7fac59eea73d", "sighting--a6f2280a-dd01-4978-a267-07ff258631ef", "sighting--89da2efd-b76f-4d00-9209-4415a561c2bb", "sighting--b9a6bc08-de72-43ed-9825-cf85e9107e68", "sighting--1d79de83-b039-4d06-8087-fa31f595ee33", "sighting--e5af4251-d7a9-45a2-8001-5a111959b043", "sighting--f59a36e6-5ec6-4df7-a181-10741f9dd5f7", "sighting--f6d07119-f7b5-48c6-96de-38a9c709ecc3", "sighting--b0f1cd31-9763-422c-9213-62dab5baf449", "sighting--eeaf37cc-e84d-4266-8296-5152a87859a3", "sighting--d2fd7ddd-86f4-4a5e-b6c0-3129755be241", "sighting--b6d89ce8-3529-4a33-a226-2b3a7204d2b2", "sighting--7c77fcff-a92d-4a2e-b5e6-9e73ec4377b1", "sighting--d53dccf9-6736-43b0-ba71-bac1c1d53749", "sighting--1e93988a-1bb0-4ff3-9ec9-47137f688162", "sighting--8eaf73bf-218f-4763-914d-b8f22a97b42a", "sighting--44292554-5597-49c3-8bb4-df0de4f66fad", "sighting--adeefe68-d043-4167-adda-aac953bf6f4f", "sighting--15c21675-2d45-425c-83f3-40b0bf820ced", "sighting--6c60235c-cea6-41c9-8740-3da1b350fd7d", "sighting--5ae3b1d9-16a0-4f39-a5e3-fd926d2838e1", "sighting--fbb4c243-f09d-441d-8af2-36f3f08bddde", "sighting--098d1ac3-87d9-437f-a4b8-1689c6084a52", "sighting--661cd433-dc49-4ea1-9e37-dd5b9b4bd444", "sighting--1e291320-333b-47fe-bf4e-9e10ac83bfb1", "sighting--06e14508-8311-4dbb-b2dd-f8460c23ddf9", "sighting--691b1f86-8f80-4362-a68f-972e85336b53", "sighting--bab4b2f3-565e-434c-b27d-d93354157f09", "sighting--fe36fc77-87cc-41cc-a816-079d3eb37d5a", "sighting--857a6172-712d-423c-900d-a7f486f7d0e4", "sighting--c9bcb578-38d0-42a5-8864-2bd45dbb4b49", "sighting--c34718bd-036f-474d-ae02-3a7e0b02d5fa", "sighting--aaec6ace-537c-4f54-a607-cdf7a86523ea", "sighting--9b9629b5-1223-4b5f-9df5-4659063e36e2", "sighting--95c52b32-67c2-496e-92d6-7ce91fea7bc5", "sighting--6586807c-cc1b-4acb-b92b-33b5f2e1f9af", "sighting--87849eb0-6b59-40b6-b11b-5773bb6d7238", "sighting--3884b095-a351-4fc6-a41a-a3f11478a550", "sighting--c997dd64-6b0e-4375-8f56-a84d0374ca05", "sighting--9d441467-2042-4970-b34d-61ea5cd01581", "sighting--c0295d78-0565-4899-91ba-6496eb86ce90", "sighting--d5912319-fea7-492c-83f6-7d34947ce994", "sighting--0aa07b93-5ffd-4206-b23e-da13bb8a1d8f", "sighting--f27810fa-a993-47c8-873d-10004c8d92f6", "sighting--78cc849f-29e6-43af-988f-a9504141ef56", "sighting--22f10c10-5769-43fb-8cc0-49129f34ca69", "sighting--7d24d5a4-4f46-4a86-803c-fcae00da63e9", "sighting--a3c63eef-e7cc-4ca0-a742-f11636c3afb4", "sighting--6dd45a0e-586f-49fe-833b-6113799cb21b", "sighting--efd54eba-9663-43c1-bae5-d07054478899", "sighting--7d33c747-be9a-4015-b13b-c8735d54bb09", "sighting--07a57bb6-79f1-4756-af76-cb0af7544cf5", "sighting--ca966b59-0a76-4e67-9702-113a5c86a88d", "sighting--bc28ed53-c3e7-43f5-ae23-502b568c68a9", "sighting--42468c3b-e068-4afd-90b6-ebc3d81e5150", "sighting--61fdb8fd-107d-43ba-83cf-00aba41ea916", "sighting--5dc4cfda-4e69-4fb3-bb44-b83103677dfb", "sighting--814745d7-c263-492b-b766-10957f21b490", "sighting--3d977879-798f-470f-ac31-20d3e599a98c", "sighting--7bb657de-f866-46a9-9b1c-ef55ab46128b", "sighting--b63c3aaa-6e08-43a5-911b-783492740b4d", "sighting--b035a729-3ef6-4068-8ef0-7c0684567536", "sighting--2df864b0-8d6b-489d-bf99-7ec2a8ce9f3e", "sighting--0f6e1732-74f6-41b4-a959-9130165b0593", "sighting--90efd130-e128-4042-8f65-371b0f7fda03", "sighting--3939080d-cc09-44ca-8207-f7ea32a0337c", "sighting--1eca3c59-56e6-4f6d-8495-762d1ebf7a5d", "sighting--50f124a1-0239-47aa-a6a0-41170d1c5fa5", "sighting--2c94f9be-8485-4693-a8e3-399309d85a79", "sighting--3124543c-94c4-4971-a0b3-88a37d070386", "sighting--340f8463-2b0a-4a59-8799-e665bfb66b8c", "sighting--b04a2ad2-4d71-48b4-bde6-914945a10f5b", "sighting--5fb0117d-7e2f-4ecf-bfc1-603ab40ef7e1", "sighting--08eb036a-421c-46a3-bc73-04d75254f06a", "sighting--f0fc967b-4ef7-45ea-823c-38ccf11ad7c1", "sighting--268c4e5a-e662-41a6-94d9-39ca1b59a44c", "sighting--9d32f1a5-7f72-4d21-b525-0cbec1419714", "sighting--9314d7d4-f374-494d-bcdd-0bad0e7d7669", "sighting--a385d4d0-c4b2-4c02-9fd6-5d82f762d9e4", "sighting--ffc3a84c-ad03-4b59-987d-32e777b887c3", "sighting--25c95a77-4502-4370-940f-e551a13426d4", "sighting--db6b6d49-86a2-4d26-92cc-0068ae901891", "sighting--5badd04c-a3ed-4e6b-988b-b1101ce108d2", "sighting--eb773874-69f0-4ca1-bd72-c3c238ad1803", "sighting--30540000-7232-4ff5-8c46-794269da868e", "sighting--39392886-03fb-4742-a64b-8ef7b544d7fa", "sighting--c34281f3-77b6-4829-8df3-1271afa8456d", "sighting--8a5156bc-0555-4e6e-9dcb-fcbab40d70c5", "sighting--00fb72f8-0399-401e-ab0e-8a6a7f6511b4", "sighting--1e5eb12e-a29b-4918-b076-7bff30c6078f", "sighting--6015d3e5-3eb1-4e8f-8775-8cd8f0413551", "sighting--8f3a000f-2aa5-47f3-b2ff-660ffb214c87", "sighting--9c274dd2-9b9d-4b11-a1cd-fcc829e16dfc", "sighting--8ee077b9-4442-4871-bbb7-5c214b3da036", "sighting--8160b70e-4c8f-422d-aa77-2be9d5c30120", "sighting--83aeabc3-3d15-41ee-bb6a-46f48af53ffc", "sighting--5036c37d-92a6-4fce-92e3-456b4c0c2113", "sighting--b1e326b3-e6b0-439d-9660-ebd78d207fa4", "sighting--2e749a53-784c-4f17-b26d-9b8009a9647a", "sighting--67f613f6-b792-4641-82d5-6aa657412f0b", "sighting--1551582d-c4dc-4b22-996d-33096f12baf0", "sighting--dc416404-6e67-4427-98d1-2fd1108db36e", "sighting--6d4287fb-0360-48bf-8174-50805c56d32d", "sighting--a920a1e8-cdd4-424a-be11-22b77ddb46e8", "sighting--ff2dd58d-1f62-4d8c-afa4-05ee6a5f4764", "sighting--ca4065f7-aef0-40f1-9385-472e7952b33f", "sighting--e7a369b6-c5ff-4d8a-8cc4-8732328bdc0d", "sighting--8f42b157-bc32-49a7-a452-a598bccba7e9", "sighting--3c796869-9fb3-465f-8aad-5e6a6b719e20", "sighting--197c74a4-72c7-47d9-8516-ae04a19dc63b", "sighting--1e5fab20-3ce7-4802-8bfb-87dde3db650e", "sighting--e53399c0-9312-4281-a556-370e025ba7ee", "sighting--9a4b1e3b-839b-4cc2-8e96-6cb8c7aa5238", "sighting--88ee10fa-dde8-452f-b7bc-64b7d81d0525", "sighting--3e645200-f7ad-4d9c-8123-82d622f39023", "sighting--c5cf9a12-d97c-4745-8204-ffff68e6e435", "sighting--43a586f5-00f1-47f0-a056-24caed31ce8a", "sighting--8c210c5f-03ca-43e0-b202-29f94f10743e", "sighting--3edcd2ba-8820-429c-9701-050c529a54b7", "sighting--5177d9fc-7e3d-4112-898a-39dcd707bb53", "sighting--0bc6b4e8-c52e-4607-8dc6-8e7bc76b7e92", "sighting--2baa2ddc-9fd0-4cb6-b47b-a3ed827ab828", "sighting--771c93b5-a9fb-4742-8321-6763e703d65f", "sighting--c4d23d60-746d-4b2a-a762-1e989795923f", "sighting--69f8a1d8-6a71-4e12-99d4-c79cdc49283a", "sighting--5e353c2a-a130-4405-a112-f312f727db3e", "sighting--fc74ced6-aa46-4353-b341-80450c351a98", "sighting--63e0c0ba-8e96-4bc8-b380-f1c2b4d0659a", "sighting--1acff877-f2e7-40b9-9f03-c7161529d1df", "sighting--83f9b357-94e6-4bf8-9a2d-fcff473eb584", "sighting--441f249f-24ff-4bf0-8e30-1f9abc1e1258", "sighting--6748972a-0971-48c8-9182-3472f8c7d343", "sighting--0e6752f0-b26d-4366-8ab6-c0ada4d6a603", "sighting--c9661ed8-b6e0-4d47-a52e-bb1a084df4e8", "sighting--689e2085-edda-493a-9b45-91d308cf5f16", "sighting--97508797-d7fe-4a4e-ae78-1283f0741492", "sighting--eb3365d1-edd3-41aa-a17c-b78367999675", "sighting--cf7a4fd7-c5d0-4325-94d6-75b9d1ec7d46", "sighting--2c9a6fd2-4e41-4a16-b29c-96a57b8c303f", "sighting--b6abd192-e488-45f2-bf41-046becb82cca", "sighting--7b98326b-298a-4bea-a664-456012e6b501", "sighting--0b9cb9f0-30cc-4f71-8905-403270c95088", "sighting--86f58a07-cf0e-4996-ac51-d4c8a5ac1eb1", "sighting--3d195079-27d5-4f73-abd9-6dc38b5ba0cc", "sighting--68e6067f-185e-4eb7-b635-88d79c3655f1", "sighting--452a205e-f1a4-4fbc-a511-562378fa0374", "sighting--d3d567f8-a3b0-4458-b2f6-c84ba0973a16", "sighting--92401ba3-d0b2-4204-a1dd-ca156b86bc62", "sighting--584ab0a0-8e2e-437d-928c-ac1371067abf", "sighting--ba9c81a9-72f4-475d-b54c-030423f8be59", "sighting--d621de1a-6fcf-4e69-957e-7d55f105aa54", "sighting--7468aa3a-aaee-48c6-90ad-85777daefff5", "sighting--dac8cd66-d8ba-4da5-b636-841026e42d39", "sighting--89fa0918-821d-4362-95bd-708eb7a488f9", "sighting--9a5124bb-566b-409c-b7c8-9ac277ba89f7", "sighting--c76d330a-9b5b-46cd-b470-314c2d375ffe", "sighting--9f78c2bd-d281-4949-852c-d24dd128ef0d", "sighting--1822f16d-f169-4f97-994f-1b571e0b01d1", "sighting--9aac4211-f279-47ac-94a2-30d6921a162f", "sighting--a1869893-a7ab-4eed-80e1-a4b21ed4236e", "sighting--15f94640-98fd-4eab-a933-04e5f69eefbb", "sighting--26df2041-5d08-497b-af8c-686cb64861f1", "sighting--5147f6d3-91b5-4f27-8b16-c155d76a2f45", "sighting--d0677510-9cd2-466f-98b5-60a2d41a24fd", "sighting--6667d04b-26c1-44db-a931-cb2c62d3b8ee", "sighting--008f8609-950a-49d1-8115-33a50f098436", "sighting--b2aee091-4dd2-4038-acb8-7d4119896e45", "sighting--360d5ccf-f3db-404e-ae70-bc1ced13dd7c", "sighting--c31196c3-46a6-485a-98bb-0ed2a72823aa", "sighting--0f6e0bf8-3aa8-48bc-955b-6f8775698a48", "sighting--b691b22e-9841-442b-9615-4d2a3c0145c2", "sighting--19aad6b0-9802-4923-921a-5d0428de511c", "sighting--30214ab3-f302-4484-a2d7-50ec2a406c7f", "sighting--b325cf02-3011-4679-a737-387ac4552de1", "sighting--b58b4567-7176-4080-b8a1-317199b0536e", "sighting--9706640b-517c-4fbe-94e2-bcd5ac7620e8", "sighting--eb935f3a-b1e2-4eb7-b238-b294d0cbe86a", "sighting--eb58baf8-7b2d-49e2-8531-e13d25cee0d9", "sighting--3d237d3d-b123-496c-adee-c39fbe27a938", "sighting--53c024e8-5786-45ba-a9cb-7de5023e76e3", "sighting--e40d3a66-0062-4618-a86d-ca4ebd4c4981", "sighting--760b1de7-04ac-44d6-91a5-b923250f35d7", "sighting--cc0e07f5-d571-4ce0-aad7-d5bf6f999d05", "sighting--b0b71331-112d-41e1-afab-ad6adb2cccbc", "sighting--aab371dc-4385-4c6c-97fb-bf1ed75b76f5", "sighting--b0de3d69-119f-4267-ae69-855998ecbdf0", "sighting--aa59691c-b388-4aa3-834b-b1cbeffc5ab0", "sighting--794f0e67-606b-4652-a574-8882b3b68e56", "sighting--a919c44f-79d9-4332-8d68-ebe472f02f6b", "sighting--f010cd0e-5ba5-49b1-aea1-092b7a175174", "sighting--8a389b29-c8eb-4bbd-bcb9-7ace04474897", "sighting--e62f6463-4688-41a3-969c-5cfc4adfb6de", "sighting--7e98fc67-322d-4a46-b889-911c9fca7aeb", "sighting--41733bff-8d63-43a8-b37a-f69dbc8e758d", "sighting--18346674-85e8-4637-aec6-f5e4e9274549", "sighting--4d9e7eff-7070-418e-9068-2e7483b2bd59", "sighting--fcb23db6-476b-415e-b7c9-2cb7c87e2ea6", "sighting--c09aebc2-ee74-4161-b582-2d614443807d", "sighting--49afcae8-e118-42c7-a56f-230b70870a2d", "sighting--744a0e19-f8db-4dcd-b5be-1861a617bda2", "sighting--c75009ea-af4a-4053-8e63-5ed4263a240a", "sighting--3f7ed6ea-88e3-4ad6-896a-4629d9cb93c6", "sighting--6df0f0ec-380c-4bc0-bc89-6c84e6b219aa", "sighting--8bb6e925-26bb-4159-8a44-4e28e00ebdf7", "sighting--c54110a7-f3b6-4d9b-844e-3e4f15bb37ff", "sighting--7fdddf7a-f244-4722-a085-e443cd658cb6", "sighting--a925c3f6-5b4f-4946-95a9-7c295b61dbbc", "sighting--dd2d3a3a-5622-45c8-99d0-821340629cee", "sighting--442502b2-749f-4d89-b9cd-24ebe2a6d027", "sighting--46a661ad-cb15-431f-acff-a8a96b864693", "sighting--214646ce-3385-4a8b-9363-55eb96c209f8", "sighting--39cc06e2-6447-43af-beb9-90c7453f339d", "sighting--4504ef67-be77-486f-8dd3-d4151653f5f3", "sighting--297820f3-cb95-4783-882f-4867b008c686", "sighting--e52f9f32-8954-4833-91d8-6be1d67d527f", "sighting--b97c76df-91e0-4b5d-8eed-a8155576e1b6", "sighting--cd0fc8e7-a452-41a1-9e0d-7ea3ae6ba7b7", "sighting--fdf829ce-9883-472e-bc55-1f0df8a4e18c", "sighting--6724aeb7-9d9a-4a17-9278-2513ae7bbef7", "sighting--817b8594-1745-444a-be32-5e0bd945eb75", "sighting--e66865cf-0c6b-4520-84bb-4655d5285268", "sighting--d28d955f-3b96-4485-868a-c3e368e1dfa4", "sighting--7d96dd27-966d-49ce-9b00-e5b3c9cb930b", "sighting--edf2f2f1-c966-4edc-942c-7323e5c484ec", "sighting--9c7192fa-f314-47dc-a8c0-9eafbe75ba3e", "sighting--82140a05-dc7f-4b31-bc55-deb2acde5066", "sighting--4457aff3-4bb0-40d0-a55b-398d02281e14", "sighting--6dca37b5-620b-45ec-a7dd-a53b427f5beb", "sighting--cbba67a7-35f5-430f-a493-a5d6be07263a", "sighting--f23afe00-941a-46ac-889a-f0709ab6cc06", "sighting--12f026f7-07d0-462d-8ef3-95cbdfcd557c", "sighting--43c8298d-fc47-4f40-9369-d850fc062ec4", "sighting--4e21281c-aece-4453-8a92-6c2de49ea1fd", "sighting--946b201e-d065-4bc2-a12f-9c88bb365e3b", "sighting--5a723a39-7cf8-4994-a847-0bc70bce7c52", "sighting--9fc128d5-2509-44f6-9f3f-18a309c96122", "sighting--0a6dc11c-2eb6-4fa2-8917-13e7f18996bc", "sighting--6730c558-b922-4eb5-a93a-4dc7ee5375dd", "sighting--62774288-aba4-4564-b153-dd04c900f506", "sighting--c7208287-70a9-429d-8577-7720d5268335", "sighting--3fb5b1c4-a53b-4858-98c7-aa87c6b7d78d", "sighting--c1d231dc-c4c9-4296-89bf-e7bf4ed1a29d", "sighting--5efeedb3-a80c-40e6-8ce8-ad1534988796", "sighting--47613065-1b84-4453-bb78-8f13d9c05bac", "sighting--8ca26689-a8c9-4f33-a08f-b8e9881b9889", "sighting--33414cc5-d041-4216-ad7c-df420d9a99e5", "sighting--6b3240b9-d77b-4e60-85f6-e75c03756872", "sighting--ac4b79bf-1e8d-40b8-984f-840b4a1b034d", "sighting--ca4d16f2-57c0-42eb-8dee-11f08ca71591", "sighting--aac3feed-6073-4fdc-ab34-fbac8148b803", "sighting--ecf03897-7b25-4b97-8ea5-b7f0332bd139", "sighting--81c6c07d-6ca0-40ba-b2b1-60bf196a852b", "sighting--96d14bed-98ca-4857-9c27-6b6e469ae1e5", "sighting--78912f55-73a8-4847-a8a7-9a2f3c21c4fd", "sighting--d453d4fb-c2b2-455c-bf87-ac6b971340c9", "sighting--6f6eb122-c6a6-47ea-ae48-24d7b7be393c", "sighting--b58823f7-f38b-47eb-8497-0290ce4c07b7", "sighting--9d42ac98-2c33-410a-828a-1acaeb59f3bf", "sighting--53cdc5d3-e668-497a-91a2-d458bed3ec99", "sighting--4055ed35-9b04-41fb-b3ca-3a09a1b2400f", "sighting--1e56e705-91a5-424f-b831-94ae0a052bcd", "sighting--b53d7dae-ae89-4113-835d-f0253657afd0", "sighting--2293d682-7e0d-409f-b069-9dfad0c367d7", "sighting--aca11627-f8b9-4526-8342-878f6919b903", "sighting--274ca4b4-cbf6-4331-a8c0-a26e1eb94b48", "sighting--1adc6d7c-108e-41e0-a840-8303c7becfdb", "sighting--4ce3d4eb-c643-4e04-8c3c-6ccf71b8d420", "sighting--6405b6e8-11bf-4534-af43-d3d1f37918c4", "sighting--dc815b5e-bbdd-4ce4-b19d-bdef1db8cff6", "sighting--7eedc0cf-1557-4a37-a99a-8e47d41aab54", "sighting--3de6a770-87d8-4b82-998e-306f1ea8c407", "sighting--f584954d-a122-4fc8-836c-68c1a83d4ec7", "sighting--e6f73ea7-1ee1-4fc8-8918-641f5d3b9641", "sighting--4838c897-e66e-4120-a8ae-cccc0042ccb5", "sighting--8d884c41-4986-4d46-9b1e-bbf20271a4f7", "sighting--27cb8e8a-9ba6-4b71-9563-d010086dde08", "sighting--dd17ffbe-ba81-4fa7-a3dc-f9ce7995c190", "sighting--937589a7-c8cd-4e24-ad8e-b1d77ab8da34", "sighting--19d84081-aa6d-48c0-9b5a-29a87657a1ef", "sighting--5b7f49d6-3bf7-4f85-b2b1-9a429e1a335b", "sighting--c7620f5f-a16a-49db-8156-1b5395fd4085", "sighting--b917bda8-3e4c-4900-94f7-b599de812805", "sighting--1a9b051c-1432-4da1-b66b-e55a614a0c4b", "sighting--5fd8ee2a-0dd5-40ac-986b-41f1f408b4fe", "sighting--7e6b63a8-3d2e-45be-8b54-7d901859feab", "sighting--83b73cee-1448-4202-8492-7b7e241342d6", "sighting--7bbf8601-5a15-4730-888b-527e04f062cf", "sighting--370db374-1090-4c15-a58f-db9d2baa8442", "sighting--41b55c2b-9a55-4cc2-b25b-25d7687c969f", "sighting--e9920a17-d3fa-423d-b5ba-409901a42950", "sighting--c251fa41-fed9-4313-85c8-9cfd51370fba", "sighting--b09413d6-4456-4ba1-9cf3-b855b7e83fed", "sighting--287914c5-ff68-41f5-8fd4-69379575cc69", "sighting--bd8ba45d-f95c-4433-947c-a29b2f7be105", "sighting--8759cff1-3eeb-47a5-9c31-c6aed6657748", "sighting--e5b22a43-9e25-4022-afef-ef56a25725c3", "sighting--9310abdb-3c87-4e50-82fe-cd61e8a9f305", "sighting--ce86ada1-a31a-4f40-a8bc-a74403b15125", "sighting--a5c1b07c-dafc-4f1c-9c96-4812ba480159", "sighting--80457b3a-ba9f-4927-8d46-f14d2a41c178", "sighting--d1693a61-1ce1-4e8b-a1f0-cfe9e1b13093", "sighting--4b00e5f1-c866-4a5a-b902-bcb9e4d0906b", "sighting--494fc10b-f9b8-4d76-89d4-8ba8ffa1323a", "sighting--97a9c65a-a2b1-4103-b214-02a540c4b35d", "sighting--b97d5d18-33fb-4742-a3c1-41faf5918d04", "sighting--93852220-93cd-42db-a65c-2587be872369", "sighting--c29cfa41-fe8a-46b7-b496-7e23f126da6f", "sighting--e40cbd0f-c45a-494b-82eb-9a06bc1af85e", "sighting--a151dd38-066a-4b70-8a32-b221a46ab24f", "sighting--2bb98552-7fde-4270-ab91-285d90422c75", "sighting--10b88b26-ca93-4c55-a695-f1c4b89245de", "sighting--871c6e2c-5360-4165-9237-2503c2dc7858", "sighting--08b5885a-2ce4-49d0-aee9-42ee95a444fb", "sighting--6c639248-2d1d-4adc-8dba-a3e53ba4ab74", "sighting--71a917aa-5ff0-491d-b308-247526984040", "sighting--538ba747-57f2-498b-98d0-4362833aca6e", "sighting--ead73268-938f-4599-bc67-2221159ea663", "sighting--43ab7102-7b28-490b-99e8-ebb3328659d5", "sighting--a75a01a0-218d-4cf5-ba78-fd436277da0e", "sighting--128fe370-4538-45dc-b5a5-7e6bad62e52b", "sighting--0a6ce4b2-47d1-4c72-932a-322e5e816d39", "sighting--18317f31-1933-4bea-b2c3-997fc2dbbd61", "sighting--69702e08-5f18-4e01-9945-485c5eb9b598", "sighting--12ccbd4a-7c59-40ff-908d-9f25f2bd6907", "sighting--05044740-d509-4311-a4d7-b18d69f942d0", "sighting--a66a9a93-fdcb-462a-a18b-1d7655f6b8a1", "sighting--970e95f2-94c7-4e87-a734-fe3697f9aecd", "sighting--aff14153-817e-42bf-8189-e5f24b027961", "sighting--d9b017b4-63c7-4282-8f6f-0370854b2441", "sighting--09859978-33d5-4140-b226-76c3b1557272", "sighting--dd12d8f3-2955-4124-8c86-43919bbb5341", "sighting--4ad19bd5-833f-425c-a09b-aba6ec5b2e59", "sighting--ea10b3f2-a5df-4393-8531-7aa5316a00a5", "sighting--9dee48ec-ba2c-474c-83ab-97d09a89dffa", "sighting--25395135-46ef-4d85-a46b-2473cebef82a", "sighting--81f780b0-e2e6-404c-ab4c-e2392b0fe805", "sighting--e9d5ec24-ec84-4281-87dd-93a60fe33d75", "sighting--99aa962e-929c-43da-b0fe-fdb013f20741", "sighting--e0d19245-a9d7-462a-ae43-11cdc1676913", "sighting--2d1a1813-a76b-45e2-9a1e-3cbfb5c20eda", "sighting--4652de46-438e-4b47-a14e-08ce261a1557", "sighting--dac3184a-e901-49a5-90dc-cd0c5d9f8562", "sighting--31105219-cc7a-411b-ac13-5c3bf5610d1e", "sighting--fa73e2c2-6204-4c7d-bd65-badba1e2a1fd", "sighting--6d1c9d94-2920-4ab5-adb7-2349b347a905", "sighting--25e8dadd-2923-4774-a655-7bce110b3dc2", "sighting--39e15e30-f5a0-4ece-8b08-e577d72654b8", "sighting--56b2158e-8450-49b1-bda6-4c20c577e17b", "sighting--0b16afa0-e01c-4d36-8df3-ff097c1f1687", "sighting--b3b902c7-0519-47e5-a173-17927a2f4991", "sighting--33d624d2-dd33-410c-a0d1-1e05e7a939be", "sighting--58fda126-df6b-4772-add9-f4fcc7a60f4b", "sighting--6f149506-32c7-4662-ac04-ac9126a1dacb", "sighting--020e4378-b2d4-49af-acaa-4bd4c228f93c", "sighting--dd577a32-5686-4bfb-b816-09060a12849c", "sighting--9c390bd1-d49d-4b4d-a13c-9df2bdef3194", "sighting--e129b599-1768-4fd3-b80d-559d35890388", "sighting--114a4780-ef23-4c44-af34-766347a9db93", "sighting--86d97401-ac86-491a-bf8c-6986bfd509be", "sighting--aa263003-9248-4925-9a13-6fd3e5f795fb", "sighting--1eb7de73-41c2-4754-967c-da3bfe9fea5f", "sighting--72e4c08d-7d55-48a5-b872-c12edc0d5280", "sighting--fa770a41-9086-4a62-b06f-d30bb4cee987", "sighting--e3e80c99-496c-4e05-a8c0-ddca6dcf7b14", "sighting--0a359251-50dc-4b7a-af5b-be8e9a3ab8ca", "sighting--fcec292d-10f1-4ad1-a302-4bf4cdf9cbb5", "sighting--0f7d1a31-daab-415b-b946-875fa74e19bb", "sighting--9cd9146d-f3c9-41ed-beff-bf1de79ae322", "sighting--b1ff5ea2-0321-458e-a749-4a7a532c25ab", "sighting--4baa5521-5cf8-4bae-ab23-f798a3f24a19", "sighting--a1f662f4-82d0-4d46-b63f-299b3ac4875a", "sighting--568d2ea3-f095-4eb6-884f-f5947da6693a", "sighting--386e6bd3-92a0-42cb-a537-5d2e4993a571", "sighting--fabd74c2-9baa-4d59-8528-99199f63a3c8", "sighting--9861d08e-3e09-4b32-aee2-d6a9cc2630dd", "sighting--b56a2b31-0749-4b9c-b742-ac7a1ea00d07", "sighting--6adf71df-e6c7-4b81-b34e-b3ce67dcb7cd", "sighting--acbafb74-4258-414f-99d5-c15829019b29", "sighting--67a9365c-3a24-4bfc-978b-8683f89b478f", "sighting--f9ee887d-0466-453b-a3ba-eb8cf09693b2", "sighting--2912bd5a-0cf7-49dc-90dc-1587ebead28e", "sighting--b608f3c7-0d23-4d55-8e09-4f8dd8a377fa", "sighting--ce5a9374-5953-44e2-b755-957ffd67167b", "sighting--b050a7b5-f2a8-43eb-a10e-c51ce4710c65", "sighting--ae3dd14c-35a5-478a-b6cf-ef95de9a6a2b", "sighting--61716f2f-75c7-4d99-9dea-3da675deb35c", "sighting--a4cfb2f2-b7cb-43f1-98b4-2436cc0a9a7f", "sighting--f9d0e667-820a-4264-b0cc-7d072be26f05", "sighting--7d7d408c-6590-4514-a0a9-3c8412519098", "sighting--4bd8a8a6-5d02-41d8-bac9-a9462585c15c", "sighting--bb430617-79d4-4064-a1e4-13f822690d1b", "sighting--a426b120-2211-46f0-a0e2-40d917508313", "sighting--c24066ed-85a9-40e3-aba5-18216e8356e8", "sighting--40b19979-c29e-428a-9c25-9681fa1572ee", "sighting--cef04ebb-ae21-4b21-9bef-5843499e5381", "sighting--8be0699d-273d-4321-8ab0-bd3dca7d8667", "sighting--cb7750f7-ed13-4855-897c-7b174b7f4a97", "sighting--b51ca901-0c8b-43f3-b686-5a23fb224b94", "sighting--27c82406-976e-4947-aa14-6bdeacc3713b", "sighting--0606a532-28a2-4f13-85d0-8e5bc4ed5590", "sighting--cdf03aff-8169-4884-988a-01fb083f3912", "sighting--cdad87fa-c1c7-45ab-863e-4f3575424532", "sighting--8a05aef8-960a-4ba5-876f-9baf5bcce5a8", "sighting--c1ff1499-c684-448c-b32a-59b5951a2a18", "sighting--403e11ca-3067-4a31-821f-e2580eadcf50", "sighting--24835235-6b6b-4e2a-85b0-57d227a20228", "sighting--da08e9cb-d9ba-464f-9c2c-93ada6cd3bc7", "sighting--4aba2515-dc37-4910-a44e-1724aad945b5", "sighting--b7613cdc-6194-4e3c-b7cd-efd6aa871b84", "sighting--70e7b86e-2d16-4058-9ee2-9469fc0fea5f", "sighting--952f21e9-3429-4e5f-a234-f9fd67e72212", "sighting--b0e1ddda-49ec-48f0-81e3-c52150fda6c1", "sighting--38da9b49-773d-4c81-9e13-9449cf54b051", "sighting--ccddc14e-2336-4e49-860a-f8d3d3f776d8", "sighting--46ce39eb-adc6-470f-be0b-0f6443d8c8c0", "sighting--42948b95-c70a-4315-978f-075e0186a952", "sighting--80099f81-ea11-457a-b813-8b789124aad0", "sighting--999b1536-0bab-446d-9989-aca0220e50d4", "sighting--6ec73b30-e993-4007-8b5e-16b0cf15ac45", "sighting--736c2d6f-d815-41ed-8952-84567923c467", "sighting--82679d21-a94a-4aad-b490-8eb9ce82d18c", "sighting--300c797f-f89d-461c-8305-6dff3b120281", "sighting--7a287c77-09d8-4ad7-b397-506e19c9461a", "sighting--573a2f69-7f45-4877-9f5c-b7c807764f6c", "sighting--476260a4-6310-407a-b0fe-1db7e7ef666a", "sighting--e9680724-e1ff-4438-ae5f-b7cadfa7fa17", "sighting--8c5d0d78-8441-47a1-878d-79cc7bbf6e37", "sighting--ebaf1e25-e8ea-46e7-9402-db95330657e8", "sighting--75b4e270-ab2a-4171-98cf-0084dddc9e0d", "sighting--db2fb1b3-ab29-4d6a-9452-35456edc52ae", "sighting--40eedd14-8cec-4389-abf6-201d02eba1ff", "sighting--d1d92bd3-de18-4365-a7a6-faa97b3ce036", "sighting--552086a5-e1b1-464b-9cfa-cc67d4676fb5", "sighting--fc0950da-2d96-454d-a774-a66a7924ef6f", "sighting--f2bcd99a-b625-479b-8b10-bc2aa128d41c", "sighting--7cdc8b07-0dfd-4994-8174-11efa7c85695", "sighting--df1c8131-cd6d-4942-9de1-6e2b0c6052fa", "sighting--63b44862-2aa4-4c89-b64d-ff7689ab7d64", "sighting--6c3afe8b-59ae-4fd8-811b-d400632329a8", "sighting--ace2eca5-6d22-46f0-9fbf-5720d9dae33b", "sighting--08c2b3af-21ba-4a7e-b6c9-34f4ef37def9", "sighting--dbc63a14-c755-45cd-b6b8-a497a483f4f6", "sighting--7ec114ef-8e3c-4b4a-802b-fe674021bbbb", "sighting--2e27a36f-0b6f-4fe9-aca2-e73baeaba3ab", "sighting--e329d24f-b68c-49e7-a152-4181ef863284", "sighting--4f06abe5-8e24-47bf-9fb3-b7a5555f92d9", "sighting--56c52ce1-e1cf-4019-91af-fb1d62fb1eac", "sighting--3e32c7c1-a63e-481b-b227-6028d185b608", "sighting--d4b14a69-ae1c-49f7-aa69-29148f52434f", "sighting--b085c827-8810-4380-b27e-47ecee116306", "sighting--2e5f0a5e-886d-4e0c-99cb-437b8c64e15d", "sighting--1731c402-cfd4-4d94-91a3-1e4db6db415a", "sighting--d0833aee-78c2-4b4d-bf7a-46dc219455df", "sighting--f8de4212-106f-4b3c-9aed-40438641a89e", "sighting--262265ec-5d11-40b1-83fe-10309c8f2b67", "sighting--2ce98f5e-4949-48a5-b2c9-3e8ddef641c7", "sighting--f2da6118-2ed2-4009-b4ba-6fb8f202f7e2", "sighting--a65a1682-fec5-4bfb-9798-eba2b50d6c69", "sighting--d8fdcbbc-489d-4bba-a32c-164778e4f4b9", "sighting--eb86ff73-b018-4208-9fe7-8bb04d110e50", "sighting--bff3e264-eaff-4cb2-92d9-e7d2da8f7993", "sighting--b6352f6d-9f57-4a65-88ad-0128ea97668f", "sighting--acb7a2ea-1c9f-4f32-9af1-94b577302173", "sighting--7d12ab77-09a0-44db-b4ab-4ef66a26d5d7", "sighting--c9ff3de3-7d3b-410b-b18b-a383e233b3cc", "sighting--07cacd91-0afb-4882-8d90-6de1f04a0045", "sighting--fe95bacc-4408-4518-80ae-81e7d2908923", "sighting--864b33af-26d8-4be1-9bed-e28725535048", "sighting--97552c1b-7bf4-41d1-9013-22304d5dfdb4", "sighting--3f31655f-b870-43ed-8636-8ba74636caab", "sighting--c6c9ee9f-3141-4866-aa8d-c6bddaa70c12", "sighting--48d3ccfc-1ac3-4790-ba8e-d7bb1ae472d4", "sighting--3db41ba5-9d35-4846-af1a-85b194b34eb0", "sighting--1d22156b-c3ab-45fc-b463-a101d01017db", "sighting--5bab0903-f7aa-4d76-9a56-fcf45f7eab07", "sighting--3e237b57-bb01-4f0a-9041-6886ccb279b9", "sighting--ce1951ab-0d0e-4ec5-8505-45b286024dd0", "sighting--cbe823f6-ba03-4cb9-8d61-f7d5e7c672b6", "sighting--96d082e6-800a-4655-986b-e7400d1d4c34", "sighting--1d84e81f-7630-43ee-a6d1-97ba4c94b6c5", "sighting--a0673cab-2a36-4494-97e8-a5c04997d4c2", "sighting--9c4279ea-363d-4c33-b718-b0c6cf67645f", "sighting--592280fd-7675-4f4b-a6c0-c6a56dbc7c6e", "sighting--bc9c539b-5925-44cf-8450-a63175ed399d", "sighting--f8f5e4a7-e1de-40b9-a3e9-e1fc5d0ed2ac", "sighting--ed48b00e-5b62-46cd-86fb-305aff6bfa4d", "sighting--1c0b7dd0-9062-4de5-bb81-ad2ebcf8fdf3", "sighting--2a72fa08-33e2-42d8-9b36-3196b02d6c35", "sighting--fab17861-655b-4052-8891-c9cabaefc635", "sighting--1db4eb6d-22f5-4685-8865-4e03081d7b1e", "sighting--95c2e863-2990-4cd3-95b4-c0c8be4ef938", "sighting--e0f268b3-8302-40bd-ba8f-7a030d25b53f", "sighting--154913ca-d9da-4667-b04c-515c2049cbcf", "sighting--6422d9f6-a13b-4528-935a-b80eea1498b1", "sighting--41591551-eec2-43b2-8425-83e2c71cc146", "sighting--fd1c6867-b23a-43f7-bfb8-6ed23d6cd5ab", "sighting--197121fa-6cf0-4172-916f-798c8e4b7116", "sighting--523976ae-18fc-4f3a-a366-b8c2bd6764f7", "sighting--7b4959cf-d9de-4036-9e24-da314912d1e0", "sighting--13265419-8e82-411e-8416-0ef562de5993", "sighting--d500542d-07ab-430f-bab7-38395313fca5", "sighting--5f9872be-6187-44c5-a1c6-4bc307a661a4", "sighting--0417b353-6952-4506-a741-8ea71bc69acc", "sighting--08b8f01e-534f-4d32-aba8-06e7a94f8af9", "sighting--f631aff9-b45d-4222-816c-7105d286c549", "sighting--f2d3d1e7-353a-451c-870a-9a21a449f31c", "sighting--2ae5ccee-6be0-4d92-987c-4e7c15e887aa", "sighting--2c535f4f-1caf-40b3-ba97-19db86b8df32", "sighting--379ff026-16e6-4cd7-a465-71061827be3e", "sighting--779bb224-40d7-4a4c-8a46-b281af4f88ac", "sighting--563e3b20-b01f-4a65-919f-8d667281acea", "sighting--f7a00258-1b8e-4548-b386-9ba6900c9a70", "sighting--a9c4a486-0ea0-44bb-a0e4-b8324a57182b", "sighting--65bcafe2-8f93-4c75-b586-5fee62228205", "sighting--b135a0f5-cd6c-4f09-bd76-56030ddc15f6", "sighting--586231ea-7da7-453f-a05e-83697abbafb5", "sighting--7ba63a0a-6382-465c-ac3d-8cd5a2d6f07c", "sighting--951fa156-c7f1-4de1-9cd5-6a08e2bc7656", "sighting--f45d0c4b-ca12-4052-99fb-71f998254d02", "sighting--108b8d7c-768a-46c1-884d-c86124dabba7", "sighting--b67226f6-0508-4676-a602-72f32e815401", "sighting--8635d22d-2829-4584-a1ed-d554318beeb3", "sighting--3f9732b8-d43f-4137-8c2b-0071664cb11d", "sighting--7c9b4005-805a-4a89-9260-94f3f5718530", "sighting--3c0538d6-0810-4531-89bb-3cb69491e98d", "sighting--534e30e6-b2ce-4c59-8b5c-3055f8ea428c", "sighting--e2075671-721a-49b1-813f-dd248b84f412", "sighting--dc4df0e1-2073-4cca-bbf7-04fa25253544", "sighting--414dbc8f-b533-4c10-8b34-784015d9388f", "sighting--5d87e45b-ff2f-4431-a970-6437feb40ded", "sighting--26d10f0f-c577-4e64-92ae-11b4700aa295", "sighting--add35426-c8eb-4448-bc4a-0b1b162b7d3c", "sighting--51332095-adf0-4775-b65e-76d188bbb559", "sighting--30316fc1-e4d9-411b-bb46-d6e6ee6bc140", "sighting--f21fa523-d5e5-4902-9cae-78fc522f30c6", "sighting--a71285b4-f941-4066-9866-7444f333e5f9", "sighting--c27ede54-a712-43ee-9006-8dcad1f40ca1", "sighting--3b50d134-b3eb-45d3-b214-6cc695192fac", "sighting--cbfb6121-3c17-4e0c-9e11-8ca4c8afda18", "sighting--65e8ab9f-2959-453f-b015-feea63ea5d0a", "sighting--b619b5d4-eca2-45d3-ba83-f60ec385de45", "sighting--bab1d059-90ea-44df-a246-ec3e26999fe1", "sighting--ba055311-6c52-42b3-9671-b4f0d3a3e754", "sighting--670297bb-da42-4441-8881-e21741d56849", "sighting--4aec53d6-1a6e-43cd-ba42-aec8f89c2e6c", "sighting--a0f073b1-5259-461f-bab0-1dfd31d5f310", "sighting--313727f8-5d1d-467f-ba91-daa15b43fbe0", "sighting--243ea604-141a-41a1-b1fa-5ac50c9dda1c", "sighting--6e5fac49-5246-49da-8fd1-d39cc73ac1f9", "sighting--dee2512e-2000-4bf2-91ee-b980bf2f3c78", "sighting--d1bd71f7-001e-4d54-a0ca-8e313de2b5bb", "sighting--01f4c3dc-fe7c-46ec-9347-522895bf955f", "sighting--81b44fb6-dce9-4f22-a7ec-95a0b0ae0e14", "sighting--a2185228-9b2e-4739-9f26-5499cc46d482", "sighting--25a17749-9a36-4e6c-adf4-3a1e6d12976f", "sighting--6b8e6c6b-0430-44e2-9a56-24a63d4d5859", "sighting--4dc09bda-9466-41c6-90fe-c2f41519e926", "sighting--289efb5b-7fdf-4f62-8aa7-46d615eb4d63", "sighting--ba9f342f-6119-456e-a723-2b52224a311f", "sighting--9faa0240-8007-4b6c-a6b8-e09ef4412fa3", "sighting--9565eaa7-7f97-40c6-89ef-30a93cb2d43b", "sighting--66ea26ec-94a3-4715-8c1c-207c76b98132", "sighting--26dd56b9-7b84-40de-8d02-fed9f3672f13", "sighting--800499c1-be4d-475b-bc44-367b3536f199", "sighting--9348cfcb-c53d-44d5-a15e-5b9ae9fecf02", "sighting--da935a51-169d-4b66-a19f-b2229cc1ae09", "sighting--23a8649d-65a3-48dc-aa01-d17c1103a181", "sighting--2b528657-134b-4d44-9dbd-4436fee04b2a", "sighting--e5a9f159-d491-4fa8-81b1-69c175f1ca96", "sighting--6f3c982a-b2c4-4d18-aea1-7ae258e9f9bd", "sighting--1544bf1e-3ae4-4c15-9573-8ddb57152daa", "sighting--a0d0423a-45e0-472b-bee9-dd7534d137ee", "sighting--ede4e468-ae31-49c0-9dd6-1f55992ad55f", "sighting--7374c382-5eda-4e8b-b1f1-22a495be7e43", "sighting--b2d5d6fb-c6c6-4028-9800-86e1a50fd561", "sighting--d0fedb81-ffbb-4602-923a-848edafa19fe", "sighting--90aa4e22-34df-45c5-82b7-ce643e09b2c6", "sighting--5cea1095-c14d-4088-9c4f-d14de90fe660", "sighting--0481c3b0-4cab-4126-a05f-57eb16fe1947", "sighting--ee1653e1-c7a4-4794-945c-f9dda271c6a2", "sighting--dfbfdf03-529b-4991-839e-eb092404c777", "sighting--ed4c4623-78f9-4511-881a-e672a8ff0b79", "sighting--975781b6-6b03-4d9b-b84c-f8fa6ad4b616", "sighting--69996325-d565-4634-b7c9-d8280eca8966", "sighting--35972fbc-f437-4dbf-ada5-dd18e911ea9f", "sighting--8de6bb03-e88c-4d2b-a824-4f6f29ba034d", "sighting--2fba2e6a-5e6d-414a-858b-f6480980fadc", "sighting--04531d45-7d81-492f-aad4-80900516ef46", "sighting--dcd221bf-d0b2-4535-b996-ebeb91c0a227", "sighting--5e8594c3-8acd-463e-81ea-55a0c94b0c98", "sighting--6f89242e-2d46-4ab0-b1e6-5d8292cbe33d", "sighting--8ae9d7cb-0ced-4b75-8f80-1ea4b7d98a1b", "sighting--a8584075-c10e-430d-afdf-d92f631429cc", "sighting--4284cbfe-8306-4bbd-a210-2c044bbfb60b", "sighting--7873304b-1582-4723-9861-1679dc57af17", "sighting--75dca3bf-c786-4009-b7b2-6afd423312ee", "sighting--28375ffb-5b5d-4c5d-88bf-f4ebb2e74052", "sighting--791b8981-7fa9-496a-96d7-81d17a4ce55c", "sighting--d96e0864-c2f4-4698-82b1-3895ff86281e", "sighting--25c1e855-b0bd-4f38-abac-f3b24460f287", "sighting--94f8f372-7184-46c5-98c6-0e61fe5f7c9a", "sighting--2523b0e1-a11e-4385-95ff-bda0859b800c", "sighting--4bfa7958-cfd7-4ced-9276-4a3516c751d7", "sighting--27741c68-fb6a-46f4-9590-7d26f5de3e7c", "sighting--43433584-188e-4217-8ad3-8db4670191c8", "sighting--4c1b676c-88d5-4d05-97f2-7819801b2448", "sighting--553bed86-343e-46af-a9b2-ac617f3c206d", "sighting--c0f71503-22c9-44ae-a97d-1fbaf09b5563", "sighting--314d69b7-389d-495c-bc20-c98c05291e64", "sighting--f6eda13c-1994-4b1a-bcc6-7a07bbe70b1a", "sighting--1ecebf2a-f2e5-498d-ac04-42d27e7fe731", "sighting--f1b64ab8-2e69-45c7-86fe-eda5c5c5809b", "sighting--957725ef-1df5-44c5-8ee7-74e201169b74", "sighting--cd1e74c4-736a-47b1-ab7f-93efecd91749", "sighting--64a22c44-183a-4fbd-bedb-5a1ef5b6829b", "sighting--2cc958ca-8199-4680-9052-b22fa49746e9", "sighting--b38843ce-d32c-40f0-9bbd-6fcd1b6c009a", "sighting--661afa3d-4f95-45ed-832f-dbc6c337390b", "sighting--1d39d134-e927-421c-a397-6f1fa5906f41", "sighting--a9dec536-9473-4f2a-b7cd-97eddac38cde", "sighting--4fd6ca12-1921-4edc-b296-9ced815b200a", "sighting--73af6021-cb47-4ee9-90f9-315f35a2f13e", "sighting--03b96cde-63bd-4069-a149-25d0bdebf841", "sighting--384e906b-a8cf-48d3-8766-60433e18e392", "sighting--aa397658-4c6d-467c-81dc-89f8620b1ed1", "sighting--d336fd7d-b6d0-44a9-9051-8fc6517d4909", "sighting--5df406b8-95fa-4081-878e-47c397a10ac9", "sighting--51e9e557-d50f-4787-b2bb-a119a2f59d95", "sighting--8ffb8088-9ef7-4b7f-a471-e85b0f61bf35", "sighting--e20b88cb-dfba-433f-81f7-8a1e16f2e7ab", "sighting--a4d34780-cc5d-49e5-a0fd-91c5cb3a2cc4", "sighting--bf675179-c89a-454d-ad6c-95e1cadd64f9", "sighting--1fdfa13c-23a3-4b1d-b441-9d8e9a161c1d", "sighting--1ed09c4a-81c0-487b-ae84-9e51056d31c9", "sighting--830a000d-7065-40ad-a5b6-5fe96cf8b6c9", "sighting--8031b365-91a6-4c5f-a785-8877b9ef7755", "sighting--6150f591-81e5-429e-9419-9f78731b37ae", "sighting--d998d81f-8c2a-4b87-aa95-0ce3070d656e", "sighting--e6b0ae7f-3864-4d5a-a40b-bcea59b020f1", "sighting--368fe697-86fb-4d57-8e41-0df9c1f893c4", "sighting--1792d902-930b-4f16-8e67-a5af28e4a19e", "sighting--e05860e0-2d2a-460e-b931-ca1eb9b5c803", "sighting--4c2df3c3-c0e3-47ee-95da-3e294b7648ab", "sighting--5ac6b945-2d84-4c8d-a417-b6b20f6e9383", "sighting--840ec0f1-8c0e-4906-a30f-3a8c4b54b320", "sighting--792d7a62-710b-4cd6-9429-c0e9419415df", "sighting--0f859d4c-4222-4bbe-9431-741f21a0ead7", "sighting--10a13c83-c853-4c9f-b3ca-055a242df8cf", "sighting--2b011b81-8b85-4b4a-b349-f6b23576ebaa", "sighting--89f22f80-3550-4a2f-a19e-a93184eebf05", "sighting--044e143d-d588-4816-9e2f-87ba9d6ab0bd", "sighting--6a596482-0688-42ad-b20a-7b12944d2ddc", "sighting--17475f75-85a1-41ec-b090-8ae2f18e4281", "sighting--cb10414f-d8f4-4132-8ea7-e99fe7e100c9", "sighting--e343f021-44c5-4dce-a781-dee8fcd86fa3", "sighting--f05ab2f1-7403-4a92-b57d-3b0b5e4ea5f4", "sighting--eb7492b7-1d96-4e19-9c73-d2aee6ebb19c", "sighting--1240dd3b-97d1-4d27-8b81-c6202141587b", "sighting--6e9e78dd-abc0-4266-82aa-f4be74327bf1", "sighting--9e271433-ffa7-432d-9f2a-325576817724", "sighting--e0af651d-f02f-4f71-8131-11902c4a0d44", "sighting--2771acb4-eb43-4d6a-a05e-9213bd953971", "sighting--3a4845b4-396e-4064-ad39-c70f2147ca50", "sighting--a7027a53-ddbc-4d40-b730-e9a75bd427b5", "sighting--414ded55-bcc8-4a55-ad84-802b33e45450", "sighting--d7d486dd-a799-4d97-8049-cb5549350e32", "sighting--4d09e75e-14a1-4fbf-9f30-ad79137e2a7b", "sighting--eaa2efa0-46c6-4d6e-b166-add286ada2f1", "sighting--d654b8c9-d97b-466a-87f8-57d3f2bfc5bd", "sighting--e5ba10f5-053c-4ab4-b234-4fd45b461afc", "sighting--b2821591-d896-4afa-a77b-2f1e327ef7dd", "sighting--0553d149-e8df-44de-bc6e-9741e4c74e19", "sighting--fc728cc1-0637-4985-b4df-c07b4e2a5ed1", "sighting--dc7e301b-8da3-4bcb-95bb-87f888a33488", "sighting--c54869ab-78e2-45da-85b7-8d87b3ced6cd", "sighting--d1177c0e-1fbd-4d60-80d1-ab40ad25d38c", "sighting--c348b5b6-2ca5-4614-aaee-38cb9cd814b1", "sighting--0f6a9484-a70c-40c7-91b2-541ee61df348", "sighting--2c3258cd-99fc-4bfd-a30b-49bc5e5aece3", "sighting--2b1ac89f-abae-4ce0-a48c-bcf88d2ef4f1", "sighting--36e9dc2e-bedc-4f55-807b-71602daedd38", "sighting--58131131-b093-4956-bd43-5284208813ad", "sighting--b5248f1e-9701-4917-bd9c-3cf5b99d8e87", "sighting--aecfdce1-16df-43ba-b9da-d4468877f17b", "sighting--4a663d78-0acf-4cd9-85ac-83454564b5f9", "sighting--5a7a42d1-c2ef-4a96-a228-53fbf431fcb7", "sighting--fb8a28f7-26c8-43a5-be02-734957084556", "sighting--c318c6c4-d38d-403c-a6e4-b05e1d01252d", "sighting--f1a5f549-0772-4ec1-8afc-10f0d2b24614", "sighting--ab65ab32-7d79-44ac-9cf5-e78573068f6f", "sighting--53b49334-840c-4585-b32e-eba8f99bc038", "sighting--2aac3e65-baf0-4526-80df-67ac381f0af2", "sighting--594a1bda-5114-4b6a-9e73-63812522c032", "sighting--3d16266a-8046-48b9-9e64-7128be3d2e06", "sighting--fe014efa-0163-4ef3-ada3-6e1143112b01", "sighting--1525ac23-b77f-4c4f-9135-132b6f675e36", "sighting--49970be2-f851-49e3-8997-93e608359a48", "sighting--1aabb22a-23a3-4f59-a0e3-49e596e5f382", "sighting--d14179c2-3da7-4562-8be1-7c741c354d7a", "sighting--7193ffe8-5aa4-4d6c-89d0-e5c59d1fe6d5", "sighting--f37dc3bd-7e42-4c71-960f-8b70598c85aa", "sighting--9e516bf0-c0ac-4df3-af4a-2907e5da5580", "sighting--d6ff2dde-1069-4905-b418-06338978dc10", "sighting--83fbe6df-8504-4c5d-ae0e-065f7c7f6772", "sighting--db145280-486b-476d-8b31-8fe5f92fc16a", "sighting--d113f3eb-0118-437e-ae3f-eb78a79b964e", "sighting--25c2384c-7bb0-4e52-9b8e-d574f886db78", "sighting--7dd8f4f9-abb3-425e-ac18-709059e1c6e2", "sighting--1efa4c81-6546-479e-a551-2dfcae61b19d", "sighting--a5981714-50ca-4bbd-aa1d-ce48e35bb4c6", "sighting--e5e93558-2370-4c29-abfd-de89a065c20b", "sighting--f6c1c1f3-c5e9-4040-8426-27f12f819ddf", "sighting--8ce88ff3-d3d1-4c85-b905-9412d192d0fa", "sighting--a9656ca7-c896-4676-a33d-428fa2f279e2", "sighting--ea69ec39-ae6c-4df6-b06f-d87848d147b3", "sighting--31b795f9-b70c-4b22-b4fd-738f7bf05192", "sighting--1077e213-3e29-444d-9087-df569228cbac", "sighting--88709c94-bac9-4f18-a440-a585b9b08064", "sighting--d919fbc3-92da-4653-b06d-6dc46ba6bcb4", "sighting--5b461373-df00-487c-ad8f-f20af4190bf9", "sighting--a8307497-933a-4074-aa7e-116b9936e5c8", "sighting--8d99b797-f3d0-44cf-9d4e-54fe77e1483b", "sighting--a615438f-00a1-4f98-92ab-62bbb8200a06", "sighting--f5d7e8f0-5908-4cd4-85f4-174a3176c90f", "sighting--e8220aa5-1e21-49d7-bffc-8463705143d8", "sighting--abc0ce61-ab13-483c-a697-03cb759df601", "sighting--5df241b0-fdf9-438c-8db1-b8da7ebe1625", "sighting--4ae26526-8615-4b86-9f9e-eb5aba9320da", "sighting--053c063e-abfb-43aa-a28d-4637cb58d2b8", "sighting--c47939f7-0f0a-469c-8f6d-d892e20b93f8", "sighting--5c132589-a8a0-44b5-ad88-1e91db078b7b", "sighting--b1f2e25d-cb70-4515-ab49-afc044d65756", "sighting--a65d0d2d-5062-4dff-a5fc-b15fd15128a2", "sighting--225da3e7-7a6e-4e14-847b-cd41731cbef3", "sighting--7bdbd585-9e83-44b6-a9db-6f45e3cf5814", "sighting--7b94fdbc-9f75-4042-9bf9-f2ab4e354180", "sighting--c877bf8c-1c33-4073-be3e-7e09eababe72", "sighting--4180f736-a911-47ab-b762-342b2cd2fcc5", "sighting--f298b914-09e8-4b3a-9b85-bcb9317d54b5", "sighting--e6083122-814e-40e2-a375-829957dbef79", "sighting--672500e7-c8c9-4484-b0b0-b648694b9bff", "sighting--23692489-6815-4740-bf1f-fb88aa9364b2", "sighting--b06be704-c78d-445d-ac89-d264f1c0405e", "sighting--7c327df9-90f2-451e-ac64-e561c9c850fa", "sighting--7de60cb5-c338-4fb3-b62a-99abc37d31bd", "sighting--f13ab6ca-4a69-4fd7-9807-a385b817d4ce", "sighting--8cbf8151-f664-4dda-b014-d18b8f3a9113", "sighting--e39102e0-8e8a-4608-bd40-0ca0951b147e", "sighting--e7a93efb-8b31-4b87-b64d-71b3513ede87", "sighting--d0ac6882-fe9a-4cdd-af0d-937f813dea40", "sighting--7b2c46ad-cd97-4993-a6a8-91e6e6fbc811", "sighting--80d30a32-4e71-4917-b25e-aeae3df6e41a", "sighting--c07736cf-132d-4cb4-9718-eca18d12d5a3", "sighting--db8de439-87e6-4e28-85f8-3295755c8f90", "sighting--47b39e1c-26bb-417e-8fdc-44b2c14321ee", "sighting--3b7bd7ea-9dd9-423b-8ee1-5b4f8f01cb31", "sighting--c5eeafe9-838c-4bdd-9b59-cb8777bea582", "sighting--9ce5803b-ead6-4739-bc19-3b7f61ca68ed", "sighting--beba0640-c742-4a4d-8e22-5010703fce1d", "sighting--e966f2dd-dfc6-48fc-8dbe-bb4d08fdbd3e", "sighting--83c66ca5-de5f-4142-9c04-236138b21986", "sighting--733b1e63-3907-4658-bcdd-687b833f513f", "sighting--29213fc6-f9bc-495d-aba6-d09391ad436e", "sighting--ac38cc49-6bf6-491a-874b-5fdc5965bba4", "sighting--48fb81cc-90cc-46ad-8f40-54b0e0df95fc", "sighting--37216009-fc16-4d9e-a73e-cf46281e7491", "sighting--92f5cbe1-880e-4444-82af-5b06983fc049", "sighting--438d562f-7890-42de-b500-cd7ca26e9867", "sighting--d09f744f-e9f3-4c92-998f-19715bc8f389", "sighting--7f1666cb-0f55-41ec-83bf-12b4db4796e9", "sighting--6f44efc6-e269-4c31-90ce-1c58f2af4508", "sighting--2f8e5600-c612-4218-8c6b-4a03a26893e0", "sighting--deb034c6-9a13-46b9-b2e9-c06aece62ac1", "sighting--e219559a-659f-41ec-82b7-f29cdb7f80e6", "sighting--922ee3cc-c399-42cb-920b-b579578484b6", "sighting--7143cdc7-b1c3-4c07-ba8a-672bb44a5e41", "sighting--db394304-b40e-4f20-90df-e28997997a23", "sighting--c9870a8c-6265-4188-ad07-e41b73050729", "sighting--c0e15b61-d2f7-494f-a03d-3027dae53fed", "sighting--82440cd6-771c-440f-8735-6c7172e43155", "sighting--7ac12681-66a6-4378-8e6b-790ca9351657", "sighting--9ffc71fc-1f05-4a2a-84b5-f6825d6c857c", "sighting--d67031db-7336-43c1-aed7-79124aa4ba11", "sighting--b65240b2-0164-4e5f-b779-86759b4ee132", "sighting--b88fa42d-e644-4f76-85d6-396c6ea9bd43", "sighting--9df28e02-5d83-4b86-93b6-3c8cc300fd2d", "sighting--fd209f0a-dd06-4dee-a6b1-1ea0df50551c", "sighting--b5e2190d-7123-4e20-ab34-bd6814aaecc0", "sighting--d711eb94-4aac-4b3e-a630-ded12b6a369b", "sighting--ad4831c6-8354-43a2-99a4-9bea2b9c13e1", "sighting--037b5f55-b453-409f-b260-0339a8e7d91a", "sighting--811fe684-5c3c-4545-ae08-bc6d95fc45bc", "sighting--192e355f-6307-4026-98eb-a5b893816906", "sighting--707caa0e-6d17-46f1-975f-47dd6b4fb5c4", "sighting--dc7a76c7-ebc1-455e-a527-017266956378", "sighting--cc2f6b86-67ce-4658-b4fc-809278a8cc8e", "sighting--d5f54ccb-cb06-4b6d-bb89-56a0d257ac25", "sighting--a00a3fb4-646c-43d1-beb9-8c23916af6fd", "sighting--e6188645-7dee-4666-9d21-9f38c6f919da", "sighting--d8a36ee7-e442-4588-9210-ef48945842d7", "sighting--6f2d71e6-88b1-4eec-8da0-272541f3cc1d", "sighting--c4e89ae0-d198-4fc6-88cb-d3da99c6194c", "sighting--8508c922-7592-4dc1-b36e-583ef6c9f358", "sighting--c770ff43-1b13-406a-9791-242a30b72572", "sighting--efecde09-1637-42cb-be17-5ec6babc8c80", "sighting--553176f1-a36a-44a4-b579-378cdd4c4da7", "sighting--c73d703e-98ca-442a-bd74-937e8c945fc4", "sighting--02d7e1f7-9838-48f5-be04-c723fe0cf16f", "sighting--3845867f-fde6-4827-b8e0-fc20847fa04a", "sighting--86d59bd4-349b-4d5e-ba95-2583fa3d5dc3", "sighting--fa71176f-055a-4d78-b984-964904d608d1", "sighting--354694eb-b014-419e-92cd-23c34fbd076f", "sighting--709e2a16-5b99-4b06-8494-329449859c2b", "sighting--13d3357b-70bf-4bc3-8b5d-7855308a41e9", "sighting--e8c7a1be-1047-4c99-9650-9bcff91747c7", "sighting--98b18b61-9d8d-4a5b-ab8e-344a226adbb0", "sighting--8cbf382b-1864-4331-8fb6-9be57f4e0d38", "sighting--dcb28143-cafb-4c3a-9c95-13c90bb60fed", "sighting--f380c46e-7ef3-4567-a393-2c4c77ce1d44", "sighting--83e0e63f-e122-4274-989e-27ade0d95f14", "sighting--e1efd9e7-b61b-46e4-a132-9af779d1cef1", "sighting--e7c944cf-70c6-48f9-8d74-838838674c0d", "sighting--f4708ce9-1d1c-4987-8220-e0cb14b8e3ba", "sighting--85c7c73f-b188-492a-b403-00b15bfa85c3", "sighting--137b990a-87a1-41ac-a44a-0391b6773066", "sighting--5539a10d-6e9f-4185-89c5-1f692eeab90c", "sighting--ae9afca1-4873-4812-89e6-4b0d3caa23c5", "sighting--e1eeca84-fd09-4579-8633-beec12991f25", "sighting--6948f069-0b36-491d-856d-648cbf6e47a9", "sighting--1624b837-1ce5-4c7f-be18-2164f25cb4bc", "sighting--5781bd7d-f521-45ec-9964-713754dc8083", "sighting--c2a7ae19-4bfe-4b6a-a97f-e990b5986989", "sighting--e18ee314-f547-43ed-8ff9-91822a6e9145", "sighting--2dc0d34f-4767-4c34-8e89-622508d8a9ce", "sighting--7dad121b-46f1-44fb-99de-d0401f64500c", "sighting--23f5ef5b-6325-4e9c-92a9-7db21a951c74", "sighting--a149274d-fa8d-4ce3-b0dc-aa80de6dc301", "sighting--0da8835a-3812-4c41-a1ac-de5097ae2204", "sighting--37f0f815-7bce-472d-b30e-50d3eb4b68b6", "sighting--3ec25125-650f-425a-8a31-a6ffe67cdaf6", "sighting--9707611c-6862-43ec-bff8-4e19e8b40e52", "sighting--2273b1b1-8634-4f06-b5cd-7565cc0273ab", "sighting--9c9d81f7-37a4-4ef2-8552-cc548320af22", "sighting--89ec5862-2cbc-473c-ab49-56bddd1d7841", "sighting--11a1eaea-8d28-46dd-9f4e-2cbc0c8607fe", "sighting--f3415404-1de7-47bb-aac7-87a77e4a90c9", "sighting--cae66e80-a72f-4049-bfcd-3b584a0a9fb4", "sighting--2c98f89c-3528-47cf-bb58-529efbe61afc", "sighting--ace952f6-4e5e-4792-a642-a20e12f3441a", "sighting--1e7a6f7d-a35d-4f81-8e4d-774bc1f86fac", "sighting--35296f75-93bf-4dcf-bf15-3c059b5bd1b5", "sighting--af8db39a-2c60-4d0e-957e-5255dfba8890", "sighting--cc7588c2-e84d-44a5-b90d-5da6755978f9", "sighting--dd8b94d2-9afc-43da-9bf7-be7497f0b703", "sighting--017bdd3c-c614-4150-9503-fec96a510145", "sighting--6d927f9b-ff03-49e4-ba27-64bf11521060", "sighting--2b186b32-6ace-43c9-9dbc-8a544e64734a", "sighting--eaf275af-afbc-44dd-91a2-2c1ebc65417d", "sighting--aaba85c3-9f90-4fa9-b990-e8e3a1a6f25f", "sighting--75f9158a-eb2a-4551-871d-7e418c979765", "sighting--192ab525-5d67-4c1d-b584-04e20aa94d84", "sighting--d2376ed4-4f03-42e5-8958-3931de624b20", "sighting--d6f24fb5-df67-46c8-b670-a703334ec784", "sighting--3e46f3a2-f9bf-4514-b7fd-06a0715c3ab9", "sighting--abafc2fc-21b8-49af-a4a8-5febbb9e8ea0", "sighting--99e572fa-c1fb-43f3-a0b4-5acd60084ed5", "sighting--0571a9ac-7fd4-4672-a77e-8ed0c1f08ea8", "sighting--f519a06d-8c34-40f0-bd5f-2b08cff51096", "sighting--44fc3f07-6eb3-48f7-97a0-c2c3033ff9b4", "sighting--bbd5018e-998f-4f95-960d-da2fc42a2333", "sighting--40a7a035-8cd1-4880-ba6b-002443ef8192", "sighting--f909afd4-951b-49ad-9eb8-b8f5a07f30de", "sighting--57c98b50-645a-4268-a464-3d1830a1abb4", "sighting--09c792a5-ab00-4a5e-8a33-4444801f9f2e", "sighting--e8e1788f-f9f2-46ca-903e-4aa7e534956e", "sighting--70932860-de54-4a54-bab8-8c0ed513c881", "sighting--bfd8a147-a885-4905-a27a-85425e0002e7", "sighting--60212fc5-e825-429a-a491-9555903adbe6", "sighting--81c2e123-be34-4c8a-abf6-0a38e505ede4", "sighting--0b8b4d6b-50c8-46ea-89fb-70c01952813d", "sighting--75161692-daf4-44d1-a92a-deb089073bef", "sighting--cdefd3a7-6100-4013-9331-c9ddb8cd0a12", "sighting--29edac0f-3205-4a88-8a6f-7924bd08c103", "sighting--96c39a46-ea2a-4f81-8a7e-25620643bd72", "sighting--0d2901c2-4495-4580-a57d-93f8e46626cc", "sighting--2058475c-cd9b-48a7-9af2-7a7c26cc4161", "sighting--c94bb13d-9c4d-4af7-978e-cc3d90fe5eba", "sighting--94ea0a74-2638-40d2-95d7-e32fcfca2727", "sighting--15c9c6f3-3b7e-4416-bdec-be30814602fe", "sighting--a7475087-b782-403c-8efd-4a97ce867da6", "sighting--70cfa01b-85b2-4a7c-b3ab-b161c7438a01", "sighting--792b09c5-2140-4d99-a942-1d1cdba6f9bf", "sighting--9f865faf-f8fe-42d7-8c70-0c047b9bd817", "sighting--ae93fdc8-e39f-420e-87aa-b1c8ac982c00", "sighting--b875d778-39e8-41f3-9047-aed15a907df4", "sighting--05278116-b732-4fe3-ab88-b20eb5341133", "sighting--80e5bafd-7820-4e2a-b104-f2bc602a263c", "sighting--6de3f2fa-03da-4042-9c0d-d3f94d8b00ee", "sighting--bed03647-6c08-490c-a9e0-7e5eee675212", "sighting--b7fd0383-6098-46db-b1d2-c7d4246d92f0", "sighting--c078e5e9-3ad4-4aa7-b68a-b506ed899c68", "sighting--0a14841d-f037-4bb1-a466-73fa18695060", "sighting--29428850-ce0f-4693-9136-4f030c384768", "sighting--d887a99b-88c4-4200-b873-12235bb4b113", "sighting--77fabb35-0077-43b2-b067-0885b9a0a16c", "sighting--324fe66c-061c-4ea9-8c4f-05dd0751f4fa", "sighting--ac0c6277-bf96-4f54-b7b5-eee65868d64e", "sighting--c66db6fe-ddb4-459c-8c98-b81ebb9911ac", "sighting--d1431b77-3ec0-46cb-bb53-0edb2a8fb3ed", "sighting--4b0c9920-6c5e-4e65-9cd5-93ae49f4b94f", "sighting--a1daac03-8e1b-495e-be8e-fc8c8979d179", "sighting--93aaa242-caf3-4182-8133-de714dd269f3", "sighting--24f56265-109e-4459-92b1-e303d0252676", "sighting--4ddff63c-7aad-4ca7-9598-b828ce581c48", "sighting--694eb90f-fa2f-4a78-aedb-0cc1a8d7546a", "sighting--74108cd0-2e12-4cba-a55a-818ed5fcf567", "sighting--4154cb0f-da19-4942-b73c-dbdd2259b138", "sighting--f8d54f4f-716c-4ab4-ae1e-e25597668052", "sighting--023e749a-11dc-4642-b005-20bac2c5389f", "sighting--67b8aa45-7d05-4e97-845c-fed0cd378d70", "sighting--35eb9fac-2534-461f-84eb-41122ca9a0b3", "sighting--73690c00-3aae-440e-a2ce-5fbc4bb0f99a", "sighting--15d01dba-7c59-4df2-b43d-42809714a807", "sighting--8550efc2-2e97-41a2-b72a-6c2d32ccab16", "sighting--56e379d9-e67e-471b-a5b2-5b565406ec72", "sighting--44d0f6b4-0ccb-43ba-9714-46f7854c661c", "sighting--9f687360-6213-4a00-87dd-6aa916d6f999", "sighting--5b56cea5-9878-4ce6-8b1c-a663cce7f085", "sighting--ca3ff108-21ee-4f23-849b-66ed29f7e8c4", "sighting--eabeb594-3594-4793-a4dc-4708b9f023cf", "sighting--d8ebbb23-63ae-4282-aae0-24cfb06e85d7", "sighting--30f1a55d-ef4e-4927-bbe0-c154171584fe", "sighting--99a80ad5-0905-4242-8da8-93c9eebbdf1a", "sighting--6fc72fea-0b77-4d97-ad27-e4fa0fc58dce", "sighting--9050bf25-75c3-4bf4-9772-2b3db8b03269", "sighting--29860e68-f1ff-43ac-ab9e-a242c4adc894", "sighting--79ddde64-3876-42a6-b9bf-562b92dc1902", "sighting--069180ef-1856-4399-a66c-3fc9d9626433", "sighting--24e9f832-de6b-4eab-bd8c-869446702ac8", "sighting--9d12e74f-0de7-4eeb-a9c9-62f5774f443d", "sighting--9d4243c2-b6a6-496b-9c57-bcee288623c3", "sighting--2f8a5b4e-5f68-46d0-b78e-f14eb9fd5ed3", "sighting--70466483-5391-4574-a658-cfcde0eefb51", "sighting--4040e834-7379-4193-83a3-dc9572dec517", "sighting--7a336a28-1a67-457f-9e7f-e2743a46744f", "sighting--90ba806c-25cf-4833-a9e8-cdfc47e0dc00", "sighting--c1dc9cfb-3a66-4581-aee3-980d9d084119", "sighting--b7e6b242-789a-4191-a9ae-3830914bab03", "sighting--acbafd66-b43c-4ea9-b025-455f79edc949", "sighting--f7b30777-9a80-4ed2-93c6-e4c6286296f7", "sighting--108e4c8a-4e56-4848-bbdb-7acf11a65811", "sighting--0061b645-a066-4929-84b2-8924b9104cc3", "sighting--a212b96a-1720-4a45-932e-a14b5d40fd94", "sighting--3498e070-aaa2-45ae-8238-e3a4bae1546e", "sighting--99b239f9-3d4b-413c-9a29-1872d59acf6a", "sighting--735d8944-8d05-4e3b-bbfa-e83f55f956f8", "sighting--6d5d2c13-4fbd-46a2-b728-9edb287892fd", "sighting--df8ab5ce-5870-4f34-8009-0536490c0561", "sighting--8a8be981-7a62-4091-8388-4f2e39631d26", "sighting--e84b4172-c263-4530-bb09-f780ed19423b", "sighting--1d4d4258-ef52-4e17-a0db-ef3aaa69d5e7", "sighting--b20b6785-72ef-4e57-90a6-53cfc069fbba", "sighting--fee8a5a1-ede1-43f3-8228-76aa862e22d7", "sighting--92a9505f-88ea-4a9b-ab9b-4adfa0e72b3f", "sighting--3c7c448f-57ea-4c75-abf2-dcaf76651aa2", "sighting--b67c6de5-44bf-40a6-ae1a-79f68455d2c5", "sighting--2fc0e4f1-bc98-4107-998b-2bd5f5eb54a4", "sighting--ca495281-70d1-4950-b85c-c3a8abf27a74", "sighting--004c9f4c-baca-4050-932c-c6592d98f801", "sighting--def2069e-89cf-4eb3-af7f-8d9944b09f03", "sighting--a0506576-cb87-44a0-be36-d6aefeb538bf", "sighting--da478e81-ce4f-4306-9560-cdeed2256bf9", "sighting--936e7dd2-4e79-497d-ae55-b4875b92a3ae", "sighting--fa67351a-9f40-43d0-ac47-8e6f02ac2b51", "sighting--1dff0871-6e4f-4c8e-97e0-8bd62dfddbb4", "sighting--6a88194d-c216-49a4-a640-a80c12841ac4", "sighting--f83523f1-2ab9-4d55-b5fa-d86363710238", "sighting--cf759475-c5cc-4671-80e0-66b5b3f60758", "sighting--71adb771-0f6d-4174-b969-d41dddb526d7", "sighting--e80005f4-646e-47e4-a424-957741e68018", "sighting--0262c676-dc09-4f0f-972e-33170d09e19e", "sighting--a1fcb936-d861-4fe7-893e-b00208aaf518", "sighting--7efbe184-ed44-4c04-aff3-21e86efe17eb", "sighting--e15917c9-544e-4afb-af65-476a4056ec3e", "sighting--c920e43b-2282-483b-92a5-51b8e58fa9ae", "sighting--cdfedf62-34e5-467c-8772-0d6efe710140", "sighting--1853bce8-7c47-47a8-84a0-1e6f98df8403", "sighting--e1fe34cf-8ad3-462a-a846-051bdb11ba50", "sighting--5226625b-4524-4ca4-86f3-8867cffc29f2", "sighting--b493064c-b92e-4e3b-b998-784b60f294f8", "sighting--1d38b806-b530-43a3-8053-b208ac221120", "sighting--5ba80175-5ac0-4988-bd60-383b9f4ed648", "sighting--c2bd110f-149e-4bfe-af4f-67aacd809a64", "sighting--352a5a05-f8e8-41b5-88d6-f696b989be07", "sighting--ed8c7fb2-11ae-4f2c-842f-e7d148ecf145", "sighting--faad7892-858e-4d0a-b363-a8d897f9bcd3", "sighting--66b08c15-6e12-4f47-acae-a469b5c03b5e", "sighting--e1904cca-d576-4da6-994b-e36ef5d0eeab", "sighting--3831b287-e2f4-4dc7-a2cc-6f1fc45a75c9", "sighting--56121715-18e8-4765-a5e1-14dd965d71af", "sighting--ba4bf9d6-29d2-45ef-b04e-3eb19ab2a261", "sighting--55837e67-80a4-4dc3-a6c2-e8be050c9de1", "sighting--e8946123-b30b-4139-b126-371437aa7437", "sighting--f9a99bbd-c399-4184-8d19-3b4cd5b76c03", "sighting--1c1c70bc-5297-4618-a85c-da3e4e0b5a87", "sighting--6df5ccf2-d466-40ba-8d77-4fd7e0cf1695", "sighting--ebc3eca4-c8ea-44d0-8966-29b7943c5293", "sighting--51b866d1-595b-4745-b9e6-cf5207ece532", "sighting--a722fb69-da3c-488d-bddf-0cc6190e3392", "sighting--b326faf0-5758-488a-b1df-03744e795f36", "sighting--594b8a23-4562-4197-8cee-b5e200d78773", "sighting--47c2e1b8-e3c5-430d-8bb6-0b9aa9d08fba", "sighting--b7244293-ffd1-4c86-bb20-6e95f20eace0", "sighting--389ee9be-cc2e-42bd-94a3-32606ec2ee0c", "sighting--c153fdb1-ec26-433f-b2d0-b33a53c01542", "sighting--c4f3e282-d7cc-4856-a6f0-ac3c38998ab4", "sighting--9803c40c-f9df-43f9-a689-087dccbb2d87", "sighting--55aa844b-b700-4206-87c1-90494d541c73", "sighting--27bab46f-76b6-4176-9900-09f34e1de986", "sighting--b57c67b6-f13e-4ea4-a21f-ee34189cd3e2", "sighting--3f4db142-cd04-4e94-b1ec-ccf3b295f0b6", "sighting--03512063-4c1b-4c89-9732-bc968953746f", "sighting--cfd10095-43d6-4c40-924a-2cae300115a1", "sighting--cf41f399-418e-4eea-8f72-eef68c08d26b", "sighting--7031b84b-1163-4f2b-b07e-74c867b5f314", "sighting--94757ccf-801f-4ce2-ac19-0a2d643966c9", "sighting--70bf70bb-ebb3-49b1-b1cb-5ee66e464f0b", "sighting--22ca7e4b-970e-4257-8600-a6e2325d413d", "sighting--95615060-6888-429f-88e0-78b6fd68a278", "sighting--3070e432-3bce-4786-bb07-9901e3c1fde3", "sighting--0799ee16-0487-4594-a32f-e4fdae6496af", "sighting--eebd2f61-33ab-4a0e-9251-4e9ad05a9d4d", "sighting--a1a15f49-fd9d-469c-965e-0394b73c0e4d", "sighting--8900af42-9491-4889-916a-47778534a1d3", "sighting--3ee72a20-2e30-4f68-9e62-e3a3872a4d68", "sighting--13b348d8-b2a8-4084-838c-b51784c07c2f", "sighting--5a6ea0c2-bee4-40bc-a53e-deeedd39a4bb", "sighting--41f8121b-bad4-400d-97b9-2474a2561884", "sighting--19cc10ad-4c72-4a69-b7f5-31c8c90c837d", "sighting--5afee2cf-d8f9-46cb-ba14-4ce4817a9303", "sighting--de4ed701-ae9a-4573-9a04-f5f2cb5c8412", "sighting--a6400e78-4cb9-416e-9156-3b1ce4c9bd87", "sighting--725e5fbc-52dd-4565-bbf7-36b3be56374f", "sighting--83b7e75b-6982-4fa8-bf9c-537f44c111ad", "sighting--7220d330-1b53-4c7c-8eb2-f1ef8dfbede0", "sighting--ee68f7a2-7635-47e8-b842-ea76ddc16db7", "sighting--059c0d54-3aed-4d5f-9ca5-e35114815053", "sighting--30d707a7-af90-4f22-ad71-fe36c8257e9d", "sighting--5e33e22f-faf4-4100-90c7-3570ca5cd7a2", "sighting--648caa91-9172-4bec-a9e4-b5eca87aee2f", "sighting--731958d1-efeb-4b8f-a2db-eb73bc01e2e6", "sighting--f42cac7e-e012-42ac-9697-280759d7501d", "sighting--a506984c-228c-4ec9-abdd-57696adbeaa9", "sighting--2b804e5b-7c62-422d-b823-d21f6a865b1c", "sighting--9c2ace9b-734f-4b1d-a770-ee5f09c36e27", "sighting--188f56d3-9891-4bc9-b859-8804575b8927", "sighting--d977139d-8613-4e56-bf58-964bebf93ad7", "sighting--d6107d6e-4805-4774-9f57-1dcee52837ae", "sighting--50963608-439d-452e-8e70-48a8fecc0fe0", "sighting--2d1e098d-1273-4420-b890-467988a3e202", "sighting--e3fc396e-2e90-43e8-98bd-e744e9679042", "sighting--3130b886-da7d-44c0-a797-6a10b983056b", "sighting--1a3631fb-a77e-4984-ae8d-89d742b49346", "sighting--7dd00257-13f4-4b24-a039-dc25d0a9213d", "sighting--68c8900b-7ef2-439e-b315-abea84e2aa7a", "sighting--0195bda1-e21d-44d9-a93a-9740945682e3", "sighting--95edce98-3255-4cce-8c93-64f509fa04c4", "sighting--b1ef8b40-df1a-419b-a37b-0fdf03a15794", "sighting--a9afa61f-b709-4240-b01b-64969aeeaf73", "sighting--d38c2e4f-8703-415b-8509-d8d3a48e3e68", "sighting--eab8b808-c498-46bb-bdc2-071eeaad2037", "sighting--09cfe7ec-dd0f-4175-a046-1382504c6d71", "sighting--6b8ac580-1252-4f89-8faf-de3e9fa02773", "sighting--62318656-1056-4e6f-bcb3-b747838ac298", "sighting--ad4c1b2f-a9d8-41f9-b98d-fe2c4e4bb9f6", "sighting--5c28b5ca-b24c-4814-9ded-b5988cb8fa55", "sighting--7c8191dd-1378-4141-b2b3-3f500888e5e0", "sighting--86c5a16b-c0ca-456b-8af2-91784945e6d7", "sighting--84878ac8-6bd2-4d4e-9b99-2ffba52bbc62", "sighting--7e319bc7-171f-4852-ad0b-e6de1fad735a", "sighting--586ced0c-4797-4a52-ade8-e6e63feaf85d", "sighting--3fdfe97a-34bf-4ad4-a765-e7ed10e5809b", "sighting--2126ecda-3656-4fe5-ab46-132779987a5f", "sighting--50a51720-9ebe-47fd-b2ee-aaffc0a49036", "sighting--e984a3ff-f7e8-483b-853b-43c1459535c0", "sighting--f2abd195-9ba8-41a9-b73b-eef38f2f7219", "sighting--054e517e-f009-4dee-a60d-c09e9cda462c", "sighting--29714752-1cad-4984-a6bb-17735a2dd5f2", "sighting--8d32778e-18b2-4fe7-9ce1-65f755491441", "sighting--5fb1c9ba-1199-4850-9377-12e98b8e6caa", "sighting--aae58278-1711-4a49-9cdc-d3ce395e7b0e", "sighting--d083d17e-e75c-4c3c-85e2-d231d48f54c5", "sighting--25d025cd-afa4-4113-b01d-501397413528", "sighting--8658dd4e-f07f-463a-a8d7-eca888c47000", "sighting--7b2779a7-0ee7-459e-9e7e-7fc11335c4fa", "sighting--3d1b2edf-d23f-4f98-93c4-42371e53562d", "sighting--3578e731-8247-48b1-882b-a841a7da56fa", "sighting--d85bce26-ac32-48c5-8581-f15e64b76570", "sighting--82ed00b9-34b0-42a8-a113-458c81d7b903", "sighting--4fc5d287-6858-4654-87fd-b0509ecb628b", "sighting--535f0bbd-7f74-45a3-9a9d-48459dd39b64", "sighting--a02a2e87-1e65-4354-b04a-5d976d1e4dd0", "sighting--28d565cc-ffb2-45ab-941e-27a398b15ab8", "sighting--84448b44-1f99-4314-b2c1-eb3e1409f25d", "sighting--80e8635e-745d-4982-9988-a0b05d48a366", "sighting--ad0cae29-11d3-486d-b8ef-fedcfc1a526e", "sighting--5acc28fb-6645-4da3-8f93-96aa2fa6ea8f", "sighting--7e2c5000-3d26-4417-85a1-1cadcb9904fb", "sighting--4ce82c63-5fb1-49aa-842e-db9927944218", "sighting--08a4e829-ba38-41ca-b80b-aeccd69e11bf", "sighting--7f481dd4-6e48-444c-82ae-107050839a7c", "sighting--47400985-13b6-4b46-819f-d34dd5ad4b3a", "sighting--6a667ec4-f94f-4276-9a22-50dab6f4a429", "sighting--59503f33-aa89-4ea8-9042-fef2481c086c", "sighting--24994b4b-19b6-46bc-a467-cfc02b49df7c", "sighting--638e2f02-3c19-4015-9bef-1435431d1e8e", "sighting--f16bf2fb-4c7f-4901-8ccb-1aeee619359d", "sighting--e76fcd60-f8c5-462f-9e95-789aa3d65a9e", "sighting--20517de8-5681-4081-a864-15ca94758a7b", "sighting--8a78022a-271b-4608-ace9-f7fbb90287a4", "sighting--e7895021-de7d-4d8b-b305-779f6f39d084", "sighting--61f3951c-38e8-40a9-82c0-5f17f198429c", "sighting--51be6833-7ae4-441b-bfed-bc92b226b33e", "sighting--88ff4410-e4ff-42f1-ab94-e5924cdd87c4", "sighting--2a8d1508-38fd-46ae-8f47-c60df741ee25", "sighting--7c8a63da-639c-4c20-94cf-21e27fc0e358", "sighting--7c753440-9f37-4cf2-a532-9efdd4c580bb", "sighting--dace7ce2-1099-4244-aa8b-35ce092d3b9e", "sighting--c41282f6-b200-424c-b4db-99d51a890e54", "sighting--5101061b-3ad5-43f4-88f3-9b6d44e0a4c6", "sighting--22e9dd4d-0ae9-47b4-9e02-2163acfe12a5", "sighting--42d85604-d91b-41c8-9b7e-544ea403e1e8", "sighting--3a6c9915-9c9a-4a6d-9dca-fef9a0d0a95d", "sighting--68057efc-f40c-461e-86d3-af5c5052550d", "sighting--11155f22-ae2a-43f9-8c0f-ed1120d1691a", "sighting--b7978601-a8f7-4340-a36e-b2d3574a9a03", "sighting--9ce27b38-d1c0-4d22-a172-4ada641e93eb", "sighting--77e8e176-7f7e-4724-8f1b-f45b2a498983", "sighting--3c3c63f1-4208-4cb9-97ee-cbdeb3f3ac47", "sighting--2d988aaf-b968-4e09-9555-c5e1068f4f5d", "sighting--fbb91a92-52ca-4462-8aa5-6eb6cc7e0704", "sighting--e62a584a-81e0-4918-9526-63a1062372fa", "sighting--b3d83854-9d86-4aa5-9d87-14383e874d20", "sighting--b4ac7afb-95ae-43cb-82bf-89003f1766f2", "sighting--832ad655-5c9e-4947-861e-b1b578d3af68", "sighting--dc088c27-0f79-465f-be3a-750f9981722e", "sighting--e2088186-2348-4a67-ab30-4ebf23899464", "sighting--7703587e-3a64-4785-bfe5-7a8bffa6703a", "sighting--5fd4eab3-63af-4ea7-a52b-ae9581a71800", "sighting--00e4d14a-f82c-40d1-9be8-f627d0dc8f2f", "sighting--e7925e30-0cdb-4edc-8a00-024c86a17f1a", "sighting--53b98a79-1fe8-4e17-b3a5-d9c694998d3c", "sighting--1c0408f9-0eaf-403a-b5dd-bcfd43b9199d", "sighting--e78ca2fe-c9f6-4501-af53-b5f45fd73b7d", "sighting--5b7d6e86-d145-4f7f-8ee2-2e6076b441f5", "sighting--ef2ca4fa-65f2-4142-b3fa-10b7d6685c31", "sighting--d528e006-8199-4629-9f00-8f96a860c567", "sighting--5a6e4b90-3367-4dec-acb5-0355047d7fb4", "sighting--7261e6a8-13d1-4960-8c77-299b23267d0e", "sighting--4b599e04-b362-415b-91a3-13cacc6c6cc3", "sighting--ddc35886-eea9-4cab-b7f7-ccf548b3aab9", "sighting--b18a6d80-658e-4225-b426-35a0966f5f02", "sighting--83463f4a-8a05-4f03-a885-fd7372dc7e71", "sighting--ed7d4c03-e9d2-435a-b6b3-19ebe5c3c3a3", "sighting--883bdcd8-d30f-4c73-bb67-805abd845602", "sighting--5f1bdb35-5999-43b9-8abe-d553940a4b0b", "sighting--cd0c1989-410a-4465-a089-daff5e3c15db", "sighting--d5b379cc-78f4-4195-ac93-d635e3a7532e", "sighting--03d6239d-d724-4e22-aabf-ccced0e708a4", "sighting--1a6df66d-f04a-4d8c-839b-5351a64ea3b3", "sighting--0b22d6bc-0c58-464c-9b49-d75f7bec87af", "sighting--ac411d25-cf04-4850-8410-5e717d9ffdce", "sighting--f7bf4f94-daaf-4875-b909-179b077fa661", "sighting--a08e77ae-1134-4276-bcce-e1fa5f46dc96", "sighting--74792365-f2ac-45b3-842e-13b50334a64b", "sighting--37d1f043-1afd-4be7-a128-6710eb8c68ae", "sighting--393750b3-9c70-46fe-a930-1da7624ebcf5", "sighting--f3801be1-1434-4a32-be61-8f5d5bbc937e", "sighting--a57b2131-665f-4f49-a28f-cd8c27a68721", "sighting--b714e571-85a0-499f-871a-1e5467f8dc1e", "sighting--61ba00d9-ee41-43ad-b068-b51872f63a45", "sighting--37d57a37-9b81-4557-99c2-f60748f5a3ff", "sighting--e213e2f0-a368-4214-b40b-f5eea89b266d", "sighting--91d4c495-75e3-4d9f-85dd-eaad4e8be0eb", "sighting--7c0ae934-9d4d-4c55-95f0-0548bd215f38", "sighting--0a23e890-925d-445a-af18-3fedd1aabb9c", "sighting--d09a5c14-7af7-42e5-bab5-cfef525630c7", "sighting--eb6dfd89-3809-4b49-8a83-cfe7b9d2104d", "sighting--221098d1-1e15-4bad-a1fe-3e9b858eafb5", "sighting--6bd8df9b-6e55-4a5b-a156-f0babbe47754", "sighting--30eee306-e491-4801-bf88-ec8d430c613a", "sighting--977c60f7-79a0-4ce8-9411-889952ab0872", "sighting--9d9f4c83-f997-4bcf-9713-9c319b770712", "sighting--47efc541-58d8-471a-b0c1-0635f7060054", "sighting--49929033-e218-4817-94a7-d5029737d678", "sighting--5fa037c8-51bc-47c0-bc09-e2b5030288ab", "sighting--362d14d3-d6a5-49b1-86ec-774e6cbd3e82", "sighting--f4c20359-6fc7-4fc8-af40-dd24b41ce067", "sighting--34788441-c690-4241-b67b-c536702660dc", "sighting--4d0f2017-2286-4da4-87d4-808c8d908de2", "sighting--7acc757a-20c0-4627-a48c-4335c1fbbe7e", "sighting--7d0be970-3af1-4fc4-adbc-bff826ebef08", "sighting--d0eee1fd-42b4-40e2-8205-ef0b4bb3a94e", "sighting--9144ec39-4d87-4d42-895f-ee16661c3755", "sighting--8a7af1ae-d330-43d9-88ce-6d80517557c6", "sighting--1b9d4343-6ab7-4301-9e25-10ec1af29cc6", "sighting--bfece3cf-4f5e-4adc-8fbc-8fd1d9efac42", "sighting--b26f2151-8a08-4f06-96b2-b0a3840aa9c6", "sighting--3cf0d0ba-2fe4-41c8-aaf2-2cc45f21c495", "sighting--3f70e828-5721-482a-b2f3-2dedb1f29924", "sighting--6d456e4d-194d-48dc-8fec-81e2484e6c63", "sighting--3b1da6d4-eead-418b-af41-b355c21b2015", "sighting--075035ed-11d9-4e6e-828c-f2bb64b6b0e3", "sighting--aa5333c4-df4d-4025-a88f-c2c9a05e184d", "sighting--2fbd0536-5f48-4fb6-93e4-b6ecee6fee65", "sighting--bb1e54d7-5d6e-4cb1-aef2-9215a66aa404", "sighting--7a26394b-ae68-475c-beca-c4f50aea6fa6", "sighting--c1c14e28-ca98-4fc1-9bc8-4eb2f11781d6", "sighting--483cde79-6b2f-4b1d-817d-7daea8161f3f", "sighting--e1e261b7-2dd9-4a19-a957-e396003f73d0", "sighting--c9e16e5a-d9cf-435e-b3a2-bc9e1549e4e7", "sighting--cf02ddbf-ccea-4a14-99a0-b09fff50a424", "sighting--b384e1e5-d71a-4394-bb5f-5bdac61a207d", "sighting--f7a121be-130f-4e9b-90c4-fbd6feac0c1b", "sighting--46c30574-4d8c-497d-8157-34ac22371fc3", "sighting--28d2e3ca-246f-4a94-b80e-be908faf798f", "sighting--aaa79232-e09c-4227-a33a-31b013afbb23", "sighting--86d16537-4cb0-4e11-b47b-64e5baaf2604", "sighting--30bcd2a6-747a-49d0-9797-2b93e0b82a1a", "sighting--9dd61c35-9beb-4431-8b5c-ed03301e5234", "sighting--8eef71d6-a7e2-4b55-b88e-976615ff378b", "sighting--fdefad45-17a5-4051-a9e1-578040511311", "sighting--a9f41a91-9d23-4d3a-847a-5b37dceaf813", "sighting--624562b0-4ded-4e69-a4d5-0373f5a54c65", "sighting--472519e8-840e-4096-a4a0-5e91b0488d58", "sighting--f9a1c28c-372f-4d09-b442-a6492b0e8105", "sighting--3f676587-15da-4034-9118-2d4cddd6f085", "sighting--b8364cef-3f0f-40b1-b5e8-f6e79d7fe748", "sighting--196046f0-2345-4318-8034-ad806fa91428", "sighting--413def26-ab1d-4eba-9ba0-ca1d93fa4413", "sighting--1b5d3d93-1ef1-45be-b089-cd2450182f00", "sighting--c82970d5-c010-49ca-bfa6-a23c920c051d", "sighting--36792ca0-55f9-4164-a48c-e1847a86a563", "sighting--606d0126-dd57-4e1a-a0a4-75d9e157543b", "sighting--2022e90e-4912-45e8-887b-768f70c2d89e", "sighting--481273dd-83f5-4fef-98f8-c9643c1ef5b4", "sighting--f47ece2c-4b1b-4341-ba96-af3898f8270e", "sighting--0afb3324-b3c2-40b4-9d0d-188fa7b83a9d", "sighting--d4a47a3f-1650-48f8-ba31-9cd56a029110", "sighting--11b35eef-925c-4486-845a-6ce8e7d577af", "sighting--05662208-b387-47a5-8fb7-b1bd99033fe4", "sighting--aefc8c48-0f5b-4ca9-9be6-052f4349fbcb", "sighting--e7f1e1cd-82d4-4643-944b-c703d16e4eee", "sighting--b99f1b19-0459-4199-85f2-af53c00de6c1", "sighting--fec0edaf-2f64-4a3f-8939-3d6a1e19ec56", "sighting--b6007ab9-6de1-4c98-bba7-5d24ba7a5f10", "sighting--37ee43b7-be6f-4e45-b0f6-ec18db18e722", "sighting--444732bf-570c-475f-b423-d50e19504d36", "sighting--8c9d7865-be94-4791-951e-2707607ad394", "sighting--8f4a2140-4336-4945-98a3-a57e1f31ce67", "sighting--55e99372-0cb2-4a07-8a38-a735aab2aff6", "sighting--ba8e47cf-fd57-4047-82c1-ec7bb429781b", "sighting--8838a5da-1a6f-49db-917f-370eb42179b6", "sighting--a12681f8-369f-4a4a-a9ab-1ac8970cb8b3", "sighting--2f2c87e2-f3b6-4d4b-afc4-06faef524d43", "sighting--bfd0356a-9444-4139-a2a9-60e1750562ee", "sighting--112dea7f-4687-4320-a001-417c1a1f622b", "sighting--5014cf16-9d37-498f-b94a-1b63acc69cc8", "sighting--d82ce6c4-ac2c-48f5-bbdc-c5b99472f1e8", "sighting--ca33075d-72e1-4177-864c-23b2b7bf1b45", "sighting--adad9535-77c6-41d5-a608-5169b81f8401", "sighting--9ec7f93b-087c-41fa-a731-4ca533bd1f84", "sighting--483428b9-8c4e-4808-b3f6-15a1aa7f40d4", "sighting--e3cf08a8-193b-401d-a525-2b849c54ba8c", "sighting--7d0eaffd-214f-48de-9d68-249a3494c3b9", "sighting--516eb596-70c3-4456-ba2b-728b347c57db", "sighting--2082c46b-efcb-48cc-9701-2dceddd1cd41", "sighting--95562120-2e22-491a-a0e4-20d60810dca5", "sighting--50b91fca-c820-4516-8e65-aa04a8d9a374", "sighting--c5d2c25e-892f-420f-b332-1574b1600277", "sighting--24ba46ee-5594-4a24-acf2-64ab46e4d92d", "sighting--2b71b7fa-bc1b-4e18-9530-15276c5e2355", "sighting--884179f0-9884-4645-9311-38d345d7f496", "sighting--103e56d3-1eb2-47b9-8f1b-b63ac2e76f84", "sighting--66752947-d604-49d4-be88-91401ee6af60", "sighting--88dd70e7-b3fc-4b52-bfd6-c30b5f9231cd", "sighting--d227be8b-175e-4412-8ec3-4b1bee2c55cd", "sighting--e7c682ef-e6d8-4e4b-8886-0a00e5176190", "sighting--b8f29898-9ec4-471e-a40c-5fd0d676623b", "sighting--1ee6b54a-e335-462f-9728-fc240884eff7", "sighting--38487b6e-2957-4dcd-a2ec-44e02c9b36a2", "sighting--298b68ac-cc4b-4e05-9d23-001ac37d1a88", "sighting--e350b8a0-6c57-40bb-8696-ea21fb514519", "sighting--2e056867-b239-46a1-8028-557b3d49e996", "sighting--2e2f89bb-f872-4872-94fe-46c02b488011", "sighting--3b994ec7-a62d-41a6-bcb0-fe1f0a4ddebf", "sighting--7b552d8d-e148-4588-8818-cd27ec775de2", "sighting--c32e9d49-dacc-4ef5-9832-d6c62c10e444", "sighting--d21fb635-6513-4c1a-bb7e-fba03d6f41a7", "sighting--0c34b1ff-2359-4031-b1ad-723f76451509", "sighting--2dda9c8c-66cf-4e1d-85a2-ccfe211d2327", "sighting--291d4b34-7183-4a24-b5df-ce52b3e4f6a2", "sighting--3366949a-6eb3-43bc-a469-2fe73ae6ba4f", "sighting--9703d157-85eb-41ee-bacc-c09fefa8894a", "sighting--9afc12ef-ea8e-44db-9912-38f00043cfbc", "sighting--757a7409-253e-46a8-bb69-3b10a7b60f7f", "sighting--f9156bb1-16f9-4d52-b57d-cad8b2c3a2db", "sighting--cb3d3d9d-5dc7-4fbb-934b-8f37e35fa214", "sighting--aa8dd60c-0d97-41a8-83e9-cd44e5bc914a", "sighting--3657d8cc-ee00-445b-8e9b-17c18d813372", "sighting--f247ab8c-cf36-453f-8eae-513bb345ddb9", "sighting--dc7dd7b5-3829-4acd-ad45-7b0c9f743e93", "sighting--20d3095f-74fd-4154-871e-dc91b0a7a364", "sighting--a31ad92a-dd3b-45c1-9a82-f809946f2be7", "sighting--2329befe-673e-47b5-ad5e-3c69e77ae58b", "sighting--7919cce0-ec8e-4e7d-b314-a5c671d80241", "sighting--37c23846-a09f-4ad4-b0ed-34a0cc10c642", "sighting--7d08b04a-dbae-4e62-8f12-d6469f3ff35a", "sighting--93300cfb-c1cc-4ab3-8c11-7f8ac882aa2c", "sighting--22f69844-42ac-4714-9a45-532e6b8832e5", "sighting--94d46b3c-19d7-4a6b-9bad-2563c9843b84", "sighting--473cc8c8-0eef-4ee1-be15-9ecf1c344a45", "sighting--4ca07eca-d256-4252-9967-eb75ba45c619", "sighting--7e7ebe54-069a-407f-915b-c13696e1e40a", "sighting--77ba2b70-15d1-4062-b6a4-99f840396be1", "sighting--e3dd2dec-d52d-44d8-8c3c-db14e3442ba9", "sighting--1c6203de-c520-4dff-a211-27313163abb7", "sighting--1b6186a4-79c4-4349-963e-e6367f985d0d", "sighting--d78fb0b5-07c5-4003-b2d3-fbe4ad4771f9", "sighting--649bcea5-98ac-493d-ba21-5c437eb8882c", "sighting--4adb19f7-44fb-47ff-85e3-81a43a00a0e4", "sighting--f95ddad2-c91e-4eac-9ead-4eb699fea603", "sighting--cfece398-9335-497b-a43f-24d83f073b46", "sighting--ec898711-3f63-4ea2-ab29-26544ec1c886", "sighting--bbed409b-2036-4e83-9314-37b5b6c73a29", "sighting--99613f9e-a3e4-48b5-b356-163b6e302aa4", "sighting--c144ead6-590f-4e96-b153-c5d9e377115a", "sighting--bb3c15b4-a8df-4ad4-b4af-c72706b7e296", "sighting--ec896a81-24aa-41bf-9b1e-3d4bd3daf1ee", "sighting--ad3f45fc-f8f5-4fd7-9dd8-36f2a60a64e9", "sighting--eca1e945-029f-4a95-b828-116cb1f050ae", "sighting--114e4e03-cb79-45d9-92a8-3599f6c15549", "sighting--4e8f66fc-7b40-4c80-a18c-0490a8bcc61c", "sighting--bfa12092-4870-4f22-bab9-88a222118696", "sighting--3e214570-c352-4c81-8734-d56dfb3e6b71", "sighting--73cbe308-f881-4ddf-a7b6-1f81b9f4ddca", "sighting--1a3ffa2e-3a9e-49e8-9573-9a17922b6eb5", "sighting--e2c9d2b6-d54e-45c7-bc0b-f161e46eb70f", "sighting--98c97497-0f50-424b-8bc2-9b05d2dce9c9", "sighting--971544a6-95e6-453d-95b3-870e0ddc1bca", "sighting--b6151fe8-7ea0-4433-9401-652dc7d8c2e2", "sighting--bb962b8f-73ab-461d-9bf0-ca101f122b82", "sighting--51405c45-9a3c-4d5c-bef2-95dac833108a", "sighting--75427927-1557-4487-89f9-e390f6e3cc52", "sighting--c7e7cf62-999f-40b8-9b8a-c4d1bd445ebd", "sighting--6187903d-ecd6-4444-ae15-8d861fd78438", "sighting--ecca7402-c175-4325-8e1b-130c8aa7c026", "sighting--11e16265-f89c-4793-8511-e31fa0cf8493", "sighting--8c9fc913-4a70-414a-8a85-6cdc49721eee", "sighting--c63b04dd-b9a6-4b23-b961-6a7825ad9f25", "sighting--ed06ddb3-a50b-4bd0-936d-22cc98cd6697", "sighting--de4b09f7-d876-4ad3-895f-4c1fe9e37dc0", "sighting--a0ea600b-b70f-4901-b02b-116ae2db98ca", "sighting--62576a31-32c8-4068-a474-c8e3f08e4bd8", "sighting--55a8538d-26f5-4a24-abc3-5fc1f3c3f5e5", "sighting--c1f94619-1e15-4cf5-aa93-62b5d99ed4e4", "sighting--ef163a5e-bd9d-447c-956f-08a40ee3c9eb", "sighting--eab0efec-7ec2-498d-a261-7f041e3355dd", "sighting--271722cd-f1ce-4008-a545-b581405505e4", "sighting--75eb059d-4498-4035-aa32-e6cba52affb5", "sighting--58048c93-b632-4909-a398-b57172bbe639", "sighting--3bdfb0bb-aa5a-48b7-807b-68c3ef9f64b4", "sighting--0cfbaa36-de42-4e54-b0ad-4112932750dc", "sighting--acddf11a-b2ee-46f6-945e-598fdc1d119c", "sighting--7e29f20f-6458-44ea-8cdc-661658ddcb00", "sighting--f2ec01db-d0d8-4150-af10-baedb059c8a7", "sighting--8d3b3e33-aa0b-4006-80bc-75d004479afd", "sighting--f0794a80-c2f7-47dd-aa14-4a3768d058c4", "sighting--652e5ddb-73c6-4786-b392-72a92fee8f33", "sighting--c2f3b684-69ce-4da8-ab8d-c50a75007ddf", "sighting--0c3a15c1-5005-4405-a773-06e819e04f76", "sighting--fac4998b-8010-424e-b0b6-3a8923f996b8", "sighting--d2bc5c4f-c0ae-458a-8a49-90c42a11b25f", "sighting--bed8545d-0e48-4d71-922e-d640de9d142f", "sighting--5ccd1695-cdd8-4ed1-b638-1f4288f080b2", "sighting--38937a02-5252-4140-aa87-3ca07b109bd0", "sighting--4abb7405-631e-4f9a-bf9c-107d34f694b6", "sighting--4f13a58e-58c6-4cb9-9317-c622d1b6dd1e", "sighting--86c1fa87-0da3-4734-b6e0-3bfd85a3300b", "sighting--0741c8f0-7eae-4107-a6b7-37cc1e99051a", "sighting--f2c277f8-54e4-4386-9d16-99f5a3a601ce", "sighting--df749f9d-7b96-4ca1-a28d-038433adea40", "sighting--e655533a-9560-420c-9ead-9a29ecae7aa6", "sighting--66c160f7-8130-44e0-a03a-5ebaf2e28154", "sighting--8674b111-0ce7-4c8f-b91e-7b0c498d7038", "sighting--3448507a-2fdc-434a-a677-19040ad2e1bb", "sighting--c99901a1-36d0-42ea-a05e-26a62999c81e", "sighting--e5884448-2449-43d3-a087-6ef9b57d296c", "sighting--7bea1dd7-643b-40c3-ad00-96e2dad7e532", "sighting--4d45631e-5d2b-4a2e-9d13-8b72def31a85", "sighting--53788ab8-c914-465e-bd3e-aa1b05ba278b", "sighting--b668cd1f-b7a1-4bb6-849c-112c8ecc4379", "sighting--f0656db4-1292-4bc2-b0f7-3d4c5c8e5e70", "sighting--9e06261a-3f82-4e3d-ae4c-ecbe606abc19", "sighting--9b2a88ce-8147-47c0-8b5b-daba261dbc76", "sighting--a15744a8-f192-41f3-ad7e-c36abbbf4d9b", "sighting--edb4f4a0-a071-4b11-9ceb-7af593739d97", "sighting--2e4457e3-2bc0-4fcb-add5-ce6fc63a8f74", "sighting--70d721f9-33e6-45e7-bee6-67683e4043a9", "sighting--29dc5cbf-289b-4497-9f8b-83f32af33d0e", "sighting--013a31a7-a847-473c-80c5-71e0654f1a07", "sighting--b4d43d43-63c5-4fbf-b2e3-6a301400b5a4", "sighting--450f5bcd-8a1a-48a5-8f8d-34b7dabb426d", "sighting--7b95d9d9-21d0-4ed6-b105-166e3597a1a2", "sighting--f59a03c8-9faf-4b87-9e80-62c6656c86cb", "sighting--2c7f3b14-c647-48d2-9222-6145dd6ff384", "sighting--fadc8796-8c27-439b-b19e-9814c165c388", "sighting--2318f46f-eb8a-4320-ad3b-2d6363c6a76c", "sighting--4140627c-6b1a-43cc-9807-d0066711d5a8", "sighting--f08f3c02-abf6-4443-8bac-95858827f89c", "sighting--6b2b08f6-d03c-46b4-863b-07d9b0790904", "sighting--91e6e7ae-3706-49be-bf62-c24cc9a31bea", "sighting--a6a01141-0547-4f7c-9a41-710e4be1d71a", "sighting--b54677df-e1bf-41b3-980b-5d50011ad88a", "sighting--756259c0-f4a1-4d8d-99f3-b8a1864ad1b4", "sighting--2e44320d-c515-4b23-bcbf-a2396c0cd22d", "sighting--f218dd98-bf11-4602-8962-ef899bc49104", "sighting--461d7301-8f3b-42ad-af06-0563d0b05f9f", "sighting--7ed50fe5-4590-431b-9a74-32afcb72ea27", "sighting--83501126-a9a1-4f96-9c83-f88d4d6226f2", "sighting--9a689720-0319-4a73-ae38-c9c8b3e4ed23", "sighting--9b099721-a27f-4612-8aee-56c6a17482fc", "sighting--12bf2c2d-fe46-4f73-902a-d35350a7ecb7", "sighting--5f95367d-29fa-4dde-ae1f-57f2816e7371", "sighting--baffc1bd-3e36-4018-94b5-c550112200ff", "sighting--61a33489-c3c2-4a45-b3cb-648c2d6ba6f6", "sighting--9ec465d7-f623-4e1f-b6f2-b0c603c084cd", "sighting--547d490e-4fe0-4c63-a415-b6ac1c63cb59", "sighting--4089274c-3167-42fa-b824-e4b6ea5e84b8", "sighting--4b1f44a8-241f-4148-a191-2237f6a4275c", "sighting--26d8882b-33e6-4c31-98f1-2bc12c219af6", "sighting--11e1c0e1-2846-464f-98fa-b2f732a792f1", "sighting--fd35834e-f0d2-4338-a846-0dfd602f7692", "sighting--244c43f1-0df6-48bf-840e-6b42cd83a454", "sighting--2c67b2ed-0662-4371-bbe1-5f4e20607556", "sighting--cd226527-04c4-4dfd-8296-7289819f0022", "sighting--336778a8-4b71-40bf-9ef4-2417ff05ad17", "sighting--6aa3b780-5210-4f39-bdbb-7edf0bb84836", "sighting--735c1668-0046-4e47-8786-ecf4aedee9bd", "sighting--c6778388-bdfe-448a-b380-55ec98b35ef8", "sighting--c83dc349-8d29-4d82-a471-c753baca8756", "sighting--d2aeae76-20e8-42d4-b1c9-81d9857980cd", "sighting--3acb0f40-8250-4501-96c7-b113cd6c2b21", "sighting--cb155ccf-3618-40ae-8d86-5bb942ef4707", "sighting--496d988c-ab91-4369-a192-c87a00ef841e", "sighting--23407c12-9e87-4575-8ec5-29b0172481f9", "sighting--ec53608c-37ee-4d66-bd23-1c98ddb41d15", "sighting--d1fea74f-19ef-43ac-9734-38a423f19433", "sighting--ba454f6a-c0cd-4a78-9487-b5e8d49dd658", "sighting--92cc3b6a-ad98-4dae-87ea-ba61f0ee957b", "sighting--abe37a2b-e80c-49ff-8c40-95c5679b5805", "sighting--6fbcb710-17df-48c9-8524-c0ccc3877d84", "sighting--64b79432-75d0-4824-8a85-cf5a2e6ca90f", "sighting--111d9685-0cea-463f-9184-57d081117cb3", "sighting--42aa03e5-1f51-4b15-ac72-bf737f4b2bac", "sighting--eab9cea5-96ae-42cc-8c02-8fcedf7a2eb8", "sighting--165b21b3-55a4-4ffb-8453-b40d927a9038", "sighting--c14d1795-80cc-49db-9817-a754c664ddc8", "sighting--8c2dbf40-8e86-4361-879e-2df54c839ccf", "sighting--dc3ee20d-7fef-4cf9-911b-e47fb83a6374", "sighting--be6d7bf1-6577-4da4-a0c3-3eb5562c20af", "sighting--08123b95-d9a2-4510-b9e1-7fe7c12d9dc9", "sighting--30c8853a-44ed-4280-9177-7eb560b23287", "sighting--848b3fb8-ef98-4855-be1d-6740a378c7be", "sighting--05d9a7ec-00ab-4b3a-a53c-370a9babcbee", "sighting--2e059124-d4e7-4a59-b12a-54975526bad0", "sighting--55faf021-7f2a-4e36-9743-67e393daaef4", "sighting--c23d1412-2468-463f-8a7f-224352962c16", "sighting--606c7f15-b460-4e35-864d-5da0881cf1fd", "sighting--0fd8bbbb-82bf-4805-91b6-86a09473c2d8", "sighting--8c85c088-7a0f-41eb-b300-6bd064fc4867", "sighting--97865ed7-97ff-4785-b80e-bfc1cf2b723e", "sighting--0b2505aa-26de-41ff-b502-d6c3d17bfaa7", "sighting--f85638cf-2608-47b4-bdea-2a2a5b007dcc", "sighting--63964e50-2c96-4f10-a588-d5496f8e2aca", "sighting--5f145209-6288-46e2-aa0d-224e58d7e1d1", "sighting--4c09e878-841c-471c-9b9e-592364aaa24a", "sighting--bad1643a-2a08-42c2-8f3b-19d1d8083af8", "sighting--ca2c4ee5-df19-44a8-ae01-cc9201f0293e", "sighting--8a8bacf7-07f1-4442-9b90-5f6db5d0f786", "sighting--4d54e497-df0f-4bef-b059-5c2ac83b88fa", "sighting--eef74d71-e5c4-4522-879e-a75f2b4ce190", "sighting--14960270-2677-4173-98da-c24a6fdb5397", "sighting--5daec382-667e-4ace-8171-c23ef7c6f097", "sighting--e1e52f08-3648-448b-a505-734a288b8f22", "sighting--70af8f44-046c-4895-b841-113139125283", "sighting--0639c2c3-0c6f-4af0-936b-aa5df350cff2", "sighting--ff2c9dfa-c5b0-4c01-9cf8-ecbdb4613a52", "sighting--3c04ae88-7738-4e35-8581-c0e353d33740", "sighting--9c14100d-933f-4f90-ae8e-54f84fb28a8a", "sighting--c4692070-98e3-41c4-ad83-195c36404fb4", "sighting--59fedc70-7ccf-4604-abf1-76056e5d5c97", "sighting--5b49a3da-955c-4d81-be3f-b6638061f93d", "sighting--83e1a005-3dd6-451f-93f5-abded192fb1b", "sighting--44dd0450-29d4-484b-aafa-1e59d4a4591d", "sighting--e63d1a78-cc28-4012-b2fb-440b626216b3", "sighting--e7d218b1-51da-4a5f-afe4-cb1cd9442dad", "sighting--fa5b449f-d11d-48cb-a758-6fbc128008b8", "sighting--d506ef54-e2ee-40a0-8078-19ae238e5f36", "sighting--7b370f64-876a-49ff-b3a4-cad112041048", "sighting--f325052b-1d5e-432d-9ac6-8c55ffc7c2d6", "sighting--083a682f-7519-4a98-be81-81cbebc379bf", "sighting--c43410da-be58-409d-affd-6c57ecdc519e", "sighting--f87436f8-ca0b-42a1-b035-994018d4372c", "sighting--fa706464-23c0-4e60-8c4e-5feb70a47793", "sighting--189ae126-7b9f-4003-8d04-5a156b14b4f6", "sighting--b695408e-c6ab-47aa-9c4b-c8d5c9ecdd93", "sighting--76bd8bc5-60c1-482b-9ca5-f313b1d7ac75", "sighting--e7c844d5-a74d-43cd-9b58-6da6575745d0", "sighting--4b56134f-6f63-4700-9410-7da73aad1d7f", "sighting--80a30fa1-35ed-491f-9ee2-3d95b688fb77", "sighting--1f179489-808d-467e-910e-09b051727615", "sighting--3cf83f8a-de16-4bb6-a8cc-086ae5bf87d5", "sighting--2aa7fdf4-e885-451c-8040-ee75854b1a81", "sighting--0b28d62a-c7ed-487b-958d-b7d7dbeac8c7", "sighting--d5952bb2-9570-4b52-95d1-47dffc630f51", "sighting--942067be-5979-419f-9e38-4e634fa694df", "sighting--02a40409-e881-438f-bdfc-bc64a77343e4", "sighting--58d3b116-ab55-4a9d-8af8-cdede01fd6eb", "sighting--89ed7c63-10d2-41f6-b682-65fab8cff62c", "sighting--bd6e6e04-649a-4c3a-a6ee-7aa1e76debb3", "sighting--0794129e-8376-4c96-ad90-0797b6def9cb", "sighting--7b88bc77-d086-4b53-a6ed-034de745547f", "sighting--c2a2e88a-7764-41d7-9541-06473fd66c28", "sighting--fe3f7ebd-5464-422d-b339-7b7588ef1151", "sighting--2baa5d0e-95c9-4d0e-aaaa-ee56a46b00c5", "sighting--91c08569-c19d-4973-aa89-603e6a999edc", "sighting--e00319ce-3594-4c2e-8bb5-15fe17e2aaff", "sighting--6d9c0108-ea94-4230-8529-fd34b6e25a05", "sighting--1f10fcdc-a2e8-470c-9878-8db64c3417d8", "sighting--c18b49d3-0d25-4d8f-875a-7660113632f6", "sighting--614be043-2889-4605-88e7-a219df8d819d", "sighting--b10fdcfa-723e-46b2-bd62-3a43d68fd3e1", "sighting--88dddb33-ba6c-40a2-b057-8ffd9511ab90", "sighting--c1d30c93-4e4d-4381-84aa-2670a8bae71d", "sighting--20346391-a46d-4d84-a702-f95938d089d9", "sighting--3243d1ee-caab-404b-988a-c1e0b6ffe05c", "sighting--fbb75e3f-14d4-4883-9ff1-a3875e32c8a1", "sighting--f20f1e1e-eb3f-4a91-b3e6-e3b3c0aa8142", "sighting--d0723a22-49fd-45b1-b0c9-9c8ff774751d", "sighting--7adb4a99-6dc0-4a72-9526-78a3c8078ef0", "sighting--c491de15-6aa4-4def-9e37-13b54e6704b7", "sighting--e7bd6164-d09c-4cfe-b582-5fecc2778d2f", "sighting--93e43269-29a8-48c0-93fb-d51c5a31f8e1", "sighting--df492c18-0e5b-4b20-81c5-8b5d2abbb972", "sighting--14efaab9-6072-478a-8e68-e38208e0e19f", "sighting--7009eeba-86ca-4f38-83c2-d67c1a023a83", "sighting--a1b9263a-83b2-4500-9a6a-816f2bcfb17e", "sighting--6357a267-f5af-48b7-998c-efc68201c331", "sighting--31729972-4b2c-49d6-969e-c6831455a34e", "sighting--57f93a6b-f272-496a-9ba2-1e83253e0789", "sighting--88aecdf0-8d6f-47d7-8701-16d96f909c0b", "sighting--a67499ed-650f-41c9-b530-55028dd552c5", "sighting--8964faad-1264-4164-9aaa-3719a7413a72", "sighting--00e02624-5348-43a6-ba03-f2585734ad68", "sighting--5f85e999-51d8-453d-bc83-7e67b7f1bc1c", "sighting--973e0c2c-b465-465c-91d7-0f0eb4550926", "sighting--2b22d702-3cdf-4f2a-904c-6691ae3f78ce", "sighting--39ceb46e-7d41-4220-a742-032e549f00a9", "sighting--90861640-ca33-450c-844d-58391c5ad20b", "sighting--264b74c5-3e8a-48eb-8b21-f06928b4b007", "sighting--118e3271-4c0b-4177-a7a3-f074cd0ad9bd", "sighting--c335b6b8-ffab-40d2-add7-6fbe13685b00", "sighting--fc55e02f-d241-4d22-86f8-b2f3d92710e9", "sighting--8c4e86fe-0048-4990-b2f9-2dbf3d39fa09", "sighting--f5ae7bd2-f61f-45c7-b53e-70f13aa94b46", "sighting--b99d348c-a29d-4f6d-be70-e6c79293be0d", "sighting--20229d5d-40f2-4d76-bf00-9f8b3adb4f12", "sighting--39949eff-71a8-4f5c-b7bb-2f61be58e4d3", "sighting--33f8af81-1734-415a-b279-cb7749bd8b72", "sighting--413a5c9b-10ce-499c-a3ed-f4b9828235c4", "sighting--a159a61b-8fbf-4cbf-a51e-06efaa774651", "sighting--814e0e79-c9f1-49b9-ba5c-3f0c00612ad7", "sighting--b3ceb9a6-8381-4cd4-9b0a-254b381a107b", "sighting--3cc530e7-f338-4391-82da-712c213f7deb", "sighting--fef8e51a-0ca1-42bf-b738-9f5b81bd42ed", "sighting--2a7f4828-2003-40bd-a5ef-2e407f0dbe06", "sighting--1999fc2c-f36a-49cf-94cd-67e180c64450", "sighting--18c3c45a-b9fc-481a-8b9c-405cdac83ae6", "sighting--972da3ba-25b3-45da-a9b5-a8a6c731a8d0", "sighting--f63c576b-16ef-4111-8a6a-0c715ec46c72", "sighting--4b62ee60-b189-41ac-aba7-5bb93d97cb52", "sighting--7e165182-2086-44c2-a2d3-b10ac2f7ed68", "sighting--9517255a-9ef7-40c3-a88e-a90a3539706e", "sighting--988650c4-f52b-4083-864f-052b9269cd14", "sighting--be8580a3-4394-48f6-bea0-5dcecd567928", "sighting--8d40335d-7440-4768-b58b-457fe8a8ad2f", "sighting--5ea4127f-393d-44f3-9911-6ef2da726789", "sighting--03be02d8-58c5-4018-a488-2cd02569454a", "sighting--1d19f0b0-5c49-4bf2-82ee-a7d84856356a", "sighting--a7e9c635-9f0e-47f9-9f90-ab00557c22a1", "sighting--bde5e3a3-2aa9-42a8-88d8-82236f5c581e", "sighting--a75722e9-6cfe-455d-9710-b32b8db071ef", "sighting--3bb0c0ba-acac-4c81-b75e-2c927e209695", "sighting--6a8719d8-4218-4610-a552-2d613b998589", "sighting--9f897b6a-f9d7-4079-a3f6-d5713ceaaffc", "sighting--cba8d54d-01ec-4301-b33f-ea4dc96eef89", "sighting--6f7002b4-b856-413c-bdbd-ec78360c8ee1", "sighting--a6f8aa01-2cdc-4b39-9e5e-a1ca111bd1f1", "sighting--8467522b-c7bd-48e3-b64a-8f7a551287fe", "sighting--6422c7f9-092b-4c21-9e01-928648956428", "sighting--d5358cce-5873-489b-b094-e64e406b340a", "sighting--b2f02566-e703-467e-8765-d79a36c5e11d", "sighting--cfde4438-1b65-4732-a5a7-69197fafb3db", "sighting--ebb4c074-9d83-47a8-a150-c0c95672e098", "sighting--cfea860b-37d7-4de8-ad11-294e41307952", "sighting--7632fa82-2142-45a0-8870-8e045e92416a", "sighting--b27aa648-677d-46c8-838a-bf14e27eb8aa", "sighting--b2742c59-ed67-421a-a47e-b5f14ed377ea", "sighting--5bd001a4-b085-464a-a1ea-8fb599a8311c", "sighting--de1441a6-62f6-4e21-bc92-bd6956753f96", "sighting--cf5e32e5-9ed5-40ed-b570-5f25fc86372e", "sighting--c2e6ee3d-eeef-4533-b4f3-112b4a090c18", "sighting--460fa024-b333-41a5-a657-76af2a124b86", "sighting--64549868-0fd7-4f9a-b217-17e8a2c0f65c", "sighting--5ab765ed-cf0a-48d1-8be6-1f90617cb9ad", "sighting--ed6ce7ca-4a52-49a6-9e73-91bb765421e7", "sighting--c5bbb2e0-8f03-47e0-9d1d-1b8a4fddcbd5", "sighting--7af52c3e-98ad-470b-9497-6036bc3ef146", "sighting--aa14e613-e0d0-4844-9c78-190b8e1731dd", "sighting--ce136832-98dd-4427-b55f-5a1e221c8dfa", "sighting--3abe53ae-6f0a-4d50-8e80-2b1c7ac9ab07", "sighting--e5aa984a-10fa-4f33-892d-ac5068baa0ea", "sighting--e7a5d35d-5f97-4b79-b8fe-db38b8d08453", "sighting--72a8d971-b80b-4470-871d-7494975b7668", "sighting--ff0b12f5-3ae5-4f6e-8a77-cf1bd3bb08a1", "sighting--d121f0d2-36c5-4928-92da-0af80f4e5a82", "sighting--9b28224d-8ec2-4931-96f2-24171a8bb707", "sighting--f140fae5-8edd-4d03-83c9-fa712a51c7bb", "sighting--bf65583b-ea57-4def-af13-b7e53f120f2e", "sighting--7959901c-3c9e-4daa-962e-e49cfbd96109", "sighting--cfcd4115-9d37-4d70-8889-8c4e0e9e056a", "sighting--2fb5560a-72b2-4783-8fb0-eb0f1312c72d", "sighting--a0b3faec-f4ea-40db-b600-055173f3d7d8", "sighting--32eeb8c7-b5eb-498c-af6f-04aae0ba3037", "sighting--40c0308d-f00f-4f82-af9d-0c547770d776", "sighting--5c8ca4b6-7020-490a-b0e6-ea1e77241ce9", "sighting--9f6446d9-2ef5-437e-826e-9f6c072036e1", "sighting--0751e5be-a48c-451a-923d-498b9d2b04ea", "sighting--83ad96e9-b427-4c6d-aa44-519c84209dc0", "sighting--65b1b126-d5df-4990-869a-4fc6ef9faa1a", "sighting--4fdc2a45-c341-4f5e-95d7-af586ac5b94b", "sighting--2471f89a-f4ee-427f-a20d-088e1169d914", "sighting--9546b8a3-47c8-423c-b6eb-b02e858f0df0", "sighting--c0ff3a0f-d68c-46c5-a635-ee2870e7ae3a", "sighting--0f83bceb-b6c5-4902-a670-3664c7bc8a97", "sighting--7d897aef-093b-4d84-bbf1-89865dc28b8b", "sighting--79715efd-3d27-4e5f-9dfa-d0f8ab3bda73", "sighting--83b61d03-6b7e-40b9-9bd8-5404ba026b2f", "sighting--1a1da47c-830e-4fca-b128-dbabc8a1cc55", "sighting--5b0a6f59-3c27-4b5b-abd5-005db8cc4104", "sighting--f0f8484b-b375-4831-ab88-b066adeb31db", "sighting--13c94621-eb59-4fbe-95bb-6312fa137216", "sighting--1357d070-784e-4cfc-8cc0-d87cd24ce4bb", "sighting--641e655d-371e-4ed9-b2ef-1cf76f913374", "sighting--5d7961a3-14d8-4b73-8161-8eeffda88a90", "sighting--cfabf984-b788-4d4c-b3d9-bce1da17e1c7", "sighting--27ed6b87-e95d-4c29-bee5-d8a46d67278f", "sighting--baa4d037-dc0f-496c-ab15-7d16b1734a4f", "sighting--00d8774d-daf4-4530-95f1-a6651635701b", "sighting--b6bdf799-c004-435d-b949-65a957893ca3", "sighting--08581896-c637-49a2-97ee-621cdee7480b", "sighting--1a575d75-f66f-4bb2-a762-0d7ba2422043", "sighting--7b064ac8-98a1-4ebf-9e63-e8f1b4177faa", "sighting--77de41fb-38e9-4fd8-8730-d353e72a36ef", "sighting--79177a2b-ad06-481c-8c4f-e371aa4ebb26", "sighting--6f3a8c6b-3060-4d6e-9cbf-4e52f7d1e556", "sighting--2ed4401d-0ba7-4f5e-8681-80fc4039eea6", "sighting--cf74e34e-b047-4ef3-9db6-dd739a9fe887", "sighting--121f31b8-5f3f-47e5-ac1c-267ff5e74e55", "sighting--223e41da-ce18-4258-bf27-d22ddbff7c6c", "sighting--c72b16ac-c00d-404d-802e-682754fabfcf", "sighting--0e558f00-10c7-41de-98ce-48b50108bcc0", "sighting--d80e76a4-06ca-4427-900c-d0c14040dcec", "sighting--c7fa12b7-b557-42ce-8d7e-0aaaa9768c37", "sighting--382d3d54-08a0-4e10-aa01-e01bec837a7d", "sighting--4d9716cc-56a9-4941-a31d-4cfc0315fb12", "sighting--05a08087-e4ac-45c8-a34b-1de4da34987a", "sighting--263a9050-3d68-4c95-91bd-c5c2a169ba5a", "sighting--9d0116c4-dfc9-4eef-bae4-0f001c051343", "sighting--ce51033a-aed3-4482-8c61-bf5f5f57e59f", "sighting--82842134-dc42-45d8-badf-487819902624", "sighting--31a9e49e-d3f6-479f-a7a6-9f9e98ba0e57", "sighting--11fbd3d8-1a74-4eda-8329-aee945507a8f", "sighting--4e621036-88c7-430e-a5eb-09f23b1b0dba", "sighting--b00e324d-96ca-4b58-8557-b69887487fd9", "sighting--73527020-a803-4b75-8699-9f2f23748ee0", "sighting--dec99575-f90e-4051-8ec3-fe3daa88cdf7", "sighting--3b50e0fc-60a1-472b-8e31-9c4d21af88f6", "sighting--7ce53e9d-7eaa-4f5e-8256-fbc9474bd8ff", "sighting--ebbd4185-fbe6-4543-910f-40d121aef856", "sighting--86ffae37-9cf1-42c3-82e3-49856946b02a", "sighting--4f94a61c-0de3-40e2-ad3d-c9430d640656", "sighting--02d3196a-394f-4de4-9466-0023dba1469c", "sighting--d19f99b8-eb31-4269-9388-b49b76124bee", "sighting--67d7f021-da93-47e9-be83-04a97752e239", "sighting--f6b9b97f-2f20-4230-89c7-c5a60a7f35c2", "sighting--086b7e79-8b71-4df3-934a-f34a2402fca5", "sighting--b82d7f4c-ac88-4776-8f58-83382178922a", "sighting--996add40-c607-42a7-ac5c-bfc7d53ba815", "sighting--1f817216-0114-4719-ad79-8a4f5c73e37f", "sighting--2f3479f5-9ba7-4f96-9165-4fca7d71caf3", "sighting--c8cd7eaf-a0ee-4213-823e-e5cbe783a3f4", "sighting--244654d0-c27c-494b-97cf-b62e2c0261fe", "sighting--eaa81cd5-cb38-4987-9263-96768b245961", "sighting--855ecf15-c4df-4552-9bd2-4d26779785af", "sighting--647354af-ce0b-46d6-a183-c494fe1f59dc", "sighting--e8dd2dc6-65e5-4f6c-be14-43e3f8a76c72", "sighting--ecf74d1a-18eb-4b8c-a099-f0f0f24b52c7", "sighting--17c42791-a713-4f46-ab09-d330ac7304c9", "sighting--43a4f118-262c-4d90-83e3-93599a8efe02", "sighting--274e5bd5-aab5-4bab-8291-72310833a769", "sighting--39b9db04-b293-4aa0-9d98-8a90daf87f19", "sighting--ad8483c4-edb6-48f9-b60d-c79e18e3bd25", "sighting--d7edefba-7b0e-4457-b006-150f8d6ba69a", "sighting--1cede69c-97bc-4c5d-95e9-c7445a3af190", "sighting--3ec35d92-4242-4397-aec8-fb1d8c3349c8", "sighting--5dde21ae-2a9b-488d-8a33-f0384ae3b1d9", "sighting--503f6dc6-f05b-4eb4-b4de-27447bdaf422", "sighting--4ac04470-96f5-47a8-9ba2-76cd6a098122", "sighting--675c8607-bbac-4fc1-97a7-fb83f0ad5b25", "sighting--d50b55e6-f314-4628-8bf3-fc519ab6ce0c", "sighting--8edeef13-d0c2-4ce8-a311-06b805e6f481", "sighting--3758b0f6-2ceb-4fe0-a47b-b2cd1bebfc97", "sighting--5a4bcf63-c49d-4a79-be04-2a5bd41bb1f7", "sighting--c02783a3-b1b7-413c-b207-bb9a15568704", "sighting--d426e365-9c73-48fe-8c73-cdecd66748ac", "sighting--a045185e-eba4-45fc-9f2f-b5ebec6fdf77", "sighting--dfa893b3-9b02-4546-97bc-63bf2cb2e6ae", "sighting--d6aaa91a-8219-4d05-b0a7-b99e6beba34e", "sighting--0f8bfcc5-c0e5-4b60-8a6a-62f6d7547a62", "sighting--c5de62c3-1e73-427e-b09e-31b12a0e7a2c", "sighting--19d1789e-3b1f-4c9a-ad4a-0213f272181d", "sighting--0d5a537b-21ef-4014-9803-cabc83b74c47", "sighting--bbc68003-8b49-4837-bb07-0b347e6ba541", "sighting--7645b9a8-aceb-46a7-9b02-a4e435361d29", "sighting--be57f0b9-054c-48ee-a6e5-ffed6cf9266e", "sighting--dbc09089-45a7-4d66-a20c-82085e8f436b", "sighting--13c46d79-7d03-4e84-a5e1-2d37f6b055bc", "sighting--de4acf37-b4b2-4952-8732-48aee4b6b391", "sighting--576a0297-face-4656-92d7-fb6d172a1891", "sighting--35746695-b5e4-4d99-9df2-639423f14605", "sighting--6f3218d9-fa0a-43c6-a972-17c242760105", "sighting--3cf793a3-30e9-40b8-8e54-a732dba38714", "sighting--170b2ce1-f2bf-40d8-93fe-4c90c098d090", "sighting--ca68e4ff-444c-4f70-84c8-8fba79841000", "sighting--f1688ad1-0872-4825-bd81-a7d534c17033", "sighting--fef58448-6a2a-470b-8f7e-b054e665c327", "sighting--efa50ce1-048d-4dcb-8bfc-e859172d6bcf", "sighting--fb38cb47-4e71-4add-9282-32f52606bf6e", "sighting--3186fca8-a41c-46c0-8a88-d543cdb2164d", "sighting--d4fe908d-05d6-4218-84b7-3e3eaeef901e", "sighting--c56b72dd-1b43-42e9-9a61-e8375d25d8f6", "sighting--7f1490ff-a3a6-46a8-96be-0e7a4d26f60a", "sighting--ff206021-c49c-4768-ad53-e21ae9d8824b", "sighting--5d0a41c6-39c5-4ad9-a1e5-c7e91b001cd4", "sighting--094b0ad3-7c04-4a80-a7b8-73d25f2df9be", "sighting--f8356578-b651-43c3-8c2f-542a3ad15f0b", "sighting--58e1e9d3-bc46-4212-bab8-5aed1cc889f8", "sighting--af5421d7-a7e0-4010-abc0-ec98d04cdca9", "sighting--72992ea6-a261-4df1-bc52-52ed418e59b5", "sighting--b4dd7a72-d623-4c2f-ae1b-dc557d85ce6f", "sighting--f580c7bb-6c28-4146-a7d9-fcbc0efb77ac", "sighting--7246ac58-7122-445b-b451-0bc0c38ec36b", "sighting--c8ce951e-20fa-43fa-b8ff-36f1d35d13fd", "sighting--9a351b02-ded9-4174-a6c2-43f56a4051b0", "sighting--ed372600-bc24-4854-8a91-cde40edbec95", "sighting--4fbecfa3-2a29-4095-a028-c47ed4ef19a1", "sighting--9c2ca351-de6a-4409-8272-7c3488a32b05", "sighting--313877f3-f405-4e50-976f-5710443bfdd4", "sighting--a0310709-23b7-4c47-814f-e6a7c0222c12", "sighting--ca065613-fdf8-4576-954d-d59f5bcc4687", "sighting--09a31fe8-1037-4161-a29d-437abf22c8a7", "sighting--5edc8890-9389-4bb2-b58e-6b6b57295a64", "sighting--38de9633-a461-4ec0-bd75-593e654e46e1", "sighting--1382941b-5dc6-45d7-a1dc-71fb10919f71", "sighting--15535bd2-916a-432f-9aed-a84fbe10bc44", "sighting--cdba4b43-5ab6-46d1-a8fc-b2660ec669b2", "sighting--dd91b223-5eff-404d-abb8-1ae59d150339", "sighting--7698babc-5957-491a-85cd-12b54e0815c2", "sighting--481d1b2f-00af-480d-b650-5b86a87d3fed", "sighting--ea54ec87-41ab-4dea-afed-3121c02dc20a", "sighting--55e0065c-1e26-4f95-916c-b57625909696", "sighting--24c7df91-3a66-4602-b8c0-4286b71e04b6", "sighting--87622973-9526-4d11-a63a-e475ef2dd2f8", "sighting--2e2274b2-3ab9-4319-a969-59af3e8dc8f7", "sighting--65b11281-80aa-40af-8120-6bf4767411ea", "sighting--34913d69-1b01-4ab1-a6fa-4329e63ede71", "sighting--adbe5685-e744-4c4a-9a6f-5ff349e317e6", "sighting--dc2377c0-0bd2-47c2-b0d3-fc19d2775ac4", "sighting--f23776f2-5444-4b8d-82a7-e10f397de096", "sighting--67e0e861-4faf-462e-bbf5-47cd6f41b7a4", "sighting--a9ddc8b4-1638-49bb-9430-4ce7d3eba8de", "sighting--7d40a233-d871-424a-a561-85759d5ee202", "sighting--00502338-9613-4d24-8340-e5520c6662f5", "sighting--5f651ffb-b0b5-4fc4-9df4-7d15b17df0aa", "sighting--3790e105-c729-4268-9c76-6b6a1c18f5cc", "sighting--2066c9be-cadd-40e4-959a-9c9285c779ee", "sighting--c556ed5e-ef52-4037-b9f9-de63598fea48", "sighting--4f3caf46-d444-4a4e-96ad-97fdd5fbd26a", "sighting--d2cb265b-de77-4567-8eb6-29db72b9677e", "sighting--8129cb84-1abe-419f-a323-383636555a93", "sighting--be4b169c-c1f3-42a7-bd89-a631b02d2f5a", "sighting--8882c107-4212-4fa2-9eae-d955beebfe9b", "sighting--0dd2c543-2a8a-403a-9c5a-ac44a257aa76", "sighting--4038c613-8f78-4e91-9eb1-43bb1820b3cd", "sighting--33106921-cff7-4e24-b002-a69902bdf7b8", "sighting--ce114e91-5af9-4b39-9f7c-978df357c94a", "sighting--ceb87d8f-3369-499d-844f-c21577d5407c", "sighting--eafd5981-aabe-411e-bcf1-b7eed824eda1", "sighting--4ec6cf7a-a012-4973-b512-a33c7a1bfc23", "sighting--e21c9353-8bd8-4454-8998-987a6ce96346", "sighting--f5ce1cf1-01c7-48af-aaeb-6f74930e87c9", "sighting--57639786-451b-46e1-a4d4-6b8d1035010f", "sighting--2b882a95-0f99-49ef-8c1e-b4bb48941d22", "sighting--0f477a99-995c-4d7e-87b3-7260624bebb8", "sighting--d97a9753-121e-4875-a43e-5a0f08aa5eaa", "sighting--afd77e4a-3eae-4485-bb28-4fa266770333", "sighting--1875ed2a-f5f5-4ad4-a7d1-f76e15a726b1", "sighting--065bee5e-e5ac-47a5-b09a-be6b917563bd", "sighting--4d4ee0b1-2868-46df-98df-3c1e8ea2ab8e", "sighting--52f4c9b6-199c-4f11-a848-ec5c83c5a466", "sighting--186fdbc4-a882-4aac-859b-e0a3ea9b9e27", "sighting--3ffca400-28b3-476a-b219-33c8f3d0b9e5", "sighting--1da19f6a-45b9-4cfa-b767-8cfb3b404705", "sighting--b18926fe-9bb9-4fa5-9e97-63852793f6ce", "sighting--b676d839-ed92-44d4-8980-50cef36da01a", "sighting--6dab04a6-fc63-4cc1-97ec-c2d82d4e4fff", "sighting--98828541-4f21-4111-96ff-c69fbc6247a3", "sighting--ab92a445-6567-4e04-87c6-f55827ee103b", "sighting--39d6a05e-cb6b-48a0-bc00-71785969c82c", "sighting--4fdca600-788f-401a-be28-40ff0f5809f1", "sighting--5376c49d-b39f-4c2a-9d0b-2f90c2579849", "sighting--95e46137-b904-49b5-8d7f-3821e66ba9eb", "sighting--09f101cc-ac1e-4661-a767-0f846040245e", "sighting--b19326c1-fba6-436b-9fa2-d39acb4b6acc", "sighting--99c9c7e2-5f3d-43b8-a454-6ea891a7f592", "sighting--8042aa2f-7ce2-4ca6-ab65-ec5f737f3229", "sighting--b84d8bc0-69e2-4ca4-8c32-a7a0dfae377b", "sighting--63582bcd-5a9a-4681-abab-d3b57253cea5", "sighting--3326ffb0-782b-49f1-b08c-10626c5d30eb", "sighting--66a50582-e284-45e0-b03c-5c422cabcc00", "sighting--1d35701b-f34c-4677-83cf-8b975eefb3e8", "sighting--1ee1bba9-fe5e-40db-823c-a7e4f0af458d", "sighting--4857b937-1172-4838-852c-ab5b01b4c627", "sighting--9af423fb-9271-4093-985f-d1ff8111c46e", "sighting--89587d83-fc80-4515-b1c3-cacb9667df3e", "sighting--7437cbd7-ac77-4df0-84f2-4581dfce8ced", "sighting--f0fd14a6-90e4-4c23-a84b-23ae1df144fb", "sighting--e1f779fa-47a4-440b-8a21-7d34c0655cb4", "sighting--802158d4-665d-4153-88f7-0ee2d33915e6", "sighting--506522df-8a11-4e81-a5a0-5c591c457cdb", "sighting--d5e67c87-520f-488e-b697-9feb44f099ef", "sighting--02f196b7-09c2-4016-9fc6-52f05ce47955", "sighting--fe2ffbb1-0b79-42a7-abab-132ce8d68944", "sighting--ac2f2967-cc77-49e2-af08-dc44db19b6ff", "sighting--d6b06850-9116-4ba2-b92f-1c1e5314c110", "sighting--775376cb-8bc8-4def-af71-967b2c44edfb", "sighting--776c85c7-7556-4358-9bc8-d62e39d8a816", "sighting--5bed9519-e15f-4bcc-a21e-7784fcc0a4c2", "sighting--00da5cf4-6151-4206-922e-0e95ee137b7a", "sighting--1d58474c-489c-4c19-9d80-5b644e320827", "sighting--135627aa-5050-441b-8a1f-f84ad9a47588", "sighting--dd9c888f-f8b6-4c4a-af40-0f13f8e8bcdf", "sighting--93f42d94-555a-4378-ac16-a3967e65a7fa", "sighting--5e0511bd-5140-415d-87cc-ebeff516bca7", "sighting--6c4b9306-fa46-49a9-bd47-a04cd869cdf8", "sighting--71f0f083-bb2e-458b-b4a5-41341d13cc34", "sighting--76f0c381-652c-4ae7-8a8f-8c393420012a", "sighting--566afa29-2d11-41e7-ba7d-6ecc533bc157", "sighting--f81673a0-241a-478f-b079-dea6ce54976f", "sighting--0c06bad2-d986-4a1a-a129-86a4f8f77dd4", "sighting--bc0f82ef-2573-4f9b-a9d2-3b79a1d7ced7", "sighting--8693c36a-3c26-4c04-bb20-30e41f8dbe7b", "sighting--4e1e6e86-6b45-445b-9eba-4d2e50c23f70", "sighting--e0b63c1f-d1a2-47a2-84dc-825811670e76", "sighting--36f021ae-7963-4308-bc7d-e31fc5aeb691", "sighting--314a793c-7170-41fd-b23b-380d9c104616", "sighting--bfcf19c1-419a-4429-abcc-a0c3672e5cfb", "sighting--4c306d40-4eda-417a-ade3-211b170cbf8e", "sighting--6a77266e-0336-490b-9f02-c748ef83805d", "sighting--7440689b-cfc9-41fc-b4d5-7ba2971e4a6a", "sighting--cb6205d0-a70c-4aa9-aea6-c7cf7a2b9dd0", "sighting--99232d35-586e-410e-8b71-dfcd2e5676d6", "sighting--c2a79b2b-a384-4c18-8e34-aa49b99772e8", "sighting--2292271b-84ac-4603-a86e-74c16c09c689", "sighting--eeb20102-9d89-4158-8d3f-e573c37ecd4b", "sighting--0465e046-fefd-43fd-819b-9bc2cd769752", "sighting--55e551ee-7211-4548-b99d-816d784644ab", "sighting--c2d36238-5047-4568-971d-f156f548272e", "sighting--c71c662e-6427-4c43-bfe6-92fe034803b6", "sighting--c7caa7bb-0467-458a-8c22-4f1e7e768384", "sighting--41d46533-300d-4491-b611-0742ea395147", "sighting--62fac3cf-409e-4024-8347-df36b24a1f7f", "sighting--af947217-2d46-4353-8c09-34ae08cd9e97", "sighting--5dd7db3c-b8fa-49fd-9f74-9933bd849310", "sighting--d52822a8-fb09-4b75-b9a2-ce300256e1be", "sighting--85411e07-73c7-47fe-9527-905f0d8f0451", "sighting--fb2b5e61-e9ce-4f9b-bccc-2c8d42e96aab", "sighting--104c27a1-806b-4078-8132-f2b902e3b7a6", "sighting--22b16011-8bca-4338-b709-ea80f339197d", "sighting--64c21ed1-da21-4108-bd14-ef7b26854aef", "sighting--8133bb26-00b5-4a92-845b-855692f5e18f", "sighting--10b8f4cd-1731-47ea-b1f8-8586a82203fe", "sighting--7efa6a15-627e-4107-91c4-5ab4d89027f2", "sighting--35567414-5cdb-4b7b-a01e-cba04a8a3953", "sighting--ca246d3c-6792-4801-ae04-5c25a76cdd42", "sighting--2c7cb436-d57d-402b-8dfd-29f1113659fe", "sighting--ee8be8f9-46d0-466a-b9e1-43b7315c233d", "sighting--51683b5a-a606-4371-8baa-d2541e404267", "sighting--d543c37f-3663-481b-88d6-8fefd2c85470", "sighting--05732d85-be30-4349-a2e8-0e39671de3b8", "sighting--79d879d5-5abb-43b2-9e70-579c85420723", "sighting--565e1337-a4fd-4c13-8402-f5f9d4b5ece7", "sighting--8312df29-a49b-49eb-b953-0a556d3fc4d0", "sighting--5171dac9-a92f-48a6-8377-3834f627f93c", "sighting--556eece5-cc7b-4b13-8d28-cb647f385283", "sighting--46cfdc9e-7fd2-4659-aa50-fc343ede9ba7", "sighting--46d515dd-0dc1-45d9-8239-5d9dae052bc2", "sighting--04fd1f37-c05b-4fea-998c-a9a37fb8a51e", "sighting--53a7a3d4-afd2-47cb-8ec9-d78420bcda27", "sighting--4654d4e5-7dc6-410f-8d01-12cbc08ecc2d", "sighting--64047114-2a73-49ae-9aa8-7ed7aa00a0b3", "sighting--bb8607c4-cc25-4d8d-9146-89491cfca8b4", "sighting--c0e6aa11-c8ed-4293-ae8f-b06d9d10e538", "sighting--56233c48-0690-4338-b198-b22f73311373", "sighting--2f06dbb5-a796-442c-b4d1-7ae3ef103953", "sighting--8a454f24-4b0b-409f-8445-f6b05e691701", "sighting--a714284d-810a-40f7-b250-1536bc2080c6", "sighting--a0d31a3b-b254-431f-a5c3-ca885f88b881", "sighting--5e185844-bbe3-4acf-95af-da6fe068deb0", "sighting--a06af184-b123-4dba-8484-478b4cdda99f", "sighting--9462b0e3-282f-4e7b-866a-abb1534b246f", "sighting--06b98df4-2b80-46fe-8a17-cf6a4ea1c183", "sighting--5782780d-85ed-4841-a900-4984bcc44fd2", "sighting--7c58a924-53fc-4d23-ae87-4585de2c2995", "sighting--7a3efeac-9f76-4085-a127-ca3e784577e6", "sighting--96ff6336-a7d0-4495-be5c-80c4304a767f", "sighting--2f91fa3f-9e70-451d-a537-170766b4d4e3", "sighting--6580fcdf-d1ad-49bc-bbc6-3af2e3a40286", "sighting--815c40fe-b2fc-4604-b51a-91f8b3cc66ca", "sighting--00eeb8ef-510b-4d55-8355-8f16b29584e3", "sighting--875eb23f-433e-4331-aad4-c01e66cfedf7", "sighting--06f4a2a5-49b7-4cc3-afe6-d48adc071151", "sighting--efa3d8f9-8763-49a1-8282-f8fa51af16a7", "sighting--12b29be7-632d-483b-b999-30d2e219d442", "sighting--c95fad38-ff53-40fc-9803-5a731d514390", "sighting--73f67be5-1eea-4efe-bccb-e912d8cc4263", "sighting--346f2354-4048-421c-81d3-ce78bc785ffd", "sighting--a964ae23-a892-4f64-8fe9-c70e04cf5869", "sighting--a62fe64f-0d71-4d69-82c2-3a1000b1b00b", "sighting--898414f5-052e-48fa-9f01-b68e73384fcf", "sighting--654f12bf-188b-4b94-902e-d9f51499e492", "sighting--844f6e8b-df8e-4900-b718-9d64b0758e46", "sighting--6d5af354-e912-4b72-b266-a240bc671ee4", "sighting--6c9c01c4-e439-43a1-8798-f5367371337f", "sighting--f95af864-319f-4edf-a3c3-0ce2deaf4e1e", "sighting--7242f5d9-7b25-49b2-b897-ae7ad7575b09", "sighting--76df18eb-94ef-49d0-9648-442b6350780e", "sighting--52e362a7-90ff-437c-88e0-3cd196654182", "sighting--b2f1a821-f5de-4c04-9c11-67e0a7e48d62", "sighting--aa3e62fe-2701-4127-978f-b842a2eb86cb", "sighting--6c5b67a2-ed5c-4479-bf2a-e8d5293b77c6", "sighting--fb622ee9-74e7-4342-9ea5-66eb0496d1aa", "sighting--5e39421c-4977-495f-968e-ae82fbef7f86", "sighting--c7b36a47-faba-4994-85d1-3da4e42b2724", "sighting--73b876da-74e4-49f3-acf8-d196c4cf8bc8", "sighting--d1ffcbb7-fd88-4615-b2d5-c733da5360e1", "sighting--cdc07236-eb1e-4cad-a13f-c3d592614b9c", "sighting--37d6062f-b0ba-4e0a-844b-6006e3bca271", "sighting--30890e12-2661-4d40-9b68-2e8fef1991be", "sighting--2c6f843c-c569-45d5-8b3e-840c774f61ae", "sighting--15413907-aab3-4c3c-94d4-c225554b24e8", "sighting--8d7b7035-1dce-4062-bf7b-7bd3321894ef", "sighting--4ea00406-dc98-454a-8338-ab3566de4f50", "sighting--7d02dbf7-bebf-48b1-94b6-d2471bf88891", "sighting--1e06b884-b4a6-4981-9b7d-de803b4f4acb", "sighting--2be5a3c0-b72d-48d8-835e-0fcb4e477a88", "sighting--8517d214-07f0-46d3-bfd3-bcdc4a0b37f6", "sighting--188097b9-c97a-4a39-9a43-fc2142ea3157", "sighting--89595669-fd3d-4e95-8b82-cf6946eb540d", "sighting--0a1b1f6a-38a4-4d32-8516-c5693e557269", "sighting--25a38fc7-82dc-4e31-a173-a5bb16c9ba5a", "sighting--ba15061c-ebd3-4071-b01f-45185dd0a1d4", "sighting--3663fbfd-337a-497c-aee5-d7debab394cd", "sighting--1e9f2e25-6306-4dbe-998e-5547b9ac095f", "sighting--5da33ada-e96c-4324-a4f0-0fd18fff5edd", "sighting--43a65429-0a71-484a-b6fc-05faa9a7a61b", "sighting--b8d27a9f-e619-4baf-8667-0eeb04332dcf", "sighting--f7855224-a8f8-4f62-8d07-dd02b77d6b5c", "sighting--983f7eb3-36cc-4c92-922c-577400621703", "sighting--ce9f2ab0-8943-4df4-a236-07730ff88ffd", "sighting--8de86fd2-305a-43c1-9bdf-ac1bc49ae545", "sighting--955dfb8a-9703-4bfa-81bb-b991a1b34237", "sighting--f06cf107-d8af-41d6-8e37-2d609b3a73b6", "sighting--fcae47dc-f666-4d1e-902c-060afbd8d256", "sighting--82ddfe7f-ae92-4fc7-8c16-9efcdf42aed5", "sighting--256dc429-885c-4ccb-891d-040f3afa45cd", "sighting--8b82bb2e-4cbf-46f4-9bda-bc7baef914c0", "sighting--9e5fb40a-5074-4445-86f5-291367218265", "sighting--5c134736-0367-4fe9-a29a-badf3c123f44", "sighting--0b5318e8-31af-40ca-9c4e-142bc34e9bfe", "sighting--76ff99a1-9019-4e56-a816-a612b0edf724", "sighting--2cdc6d41-0990-4eca-8d8b-f5be3ecabe63", "sighting--fb71011d-0cac-445c-a472-5b5566daa372", "sighting--d1dbf5e7-e81f-43c8-a5f8-6290748c3365", "sighting--c2acad95-3fc9-46e8-9127-d99ed66350a1", "sighting--009722dd-65b3-4e37-82d8-d301b4048708", "sighting--52980a14-85eb-4213-afcd-f8da838e88b5", "sighting--e3e66708-c93b-42d1-8f43-32eae92fb980", "sighting--b566f89b-7adf-4bc8-b364-ebda31d79573", "sighting--cda4f749-1b4b-4af6-a3bb-7585e20cbc2b", "sighting--cd99b624-699d-4f59-81b3-093879afd65e", "sighting--d6963db6-d4e7-4752-8026-dc03d6538e43", "sighting--733966c6-b1da-4703-b041-361d0e3d5fc4", "sighting--4102a482-0a03-4de9-9c79-6e4d270f7328", "sighting--3a280c0e-31ef-4d9b-91d4-06f165bea311", "sighting--a0dd9d38-a25f-4b50-99f1-0722502dff09", "sighting--4f365b01-4f7e-49b4-bc94-53b7f7c762d2", "sighting--9546a72d-b26c-4d0e-80e4-d4995053e3c9", "sighting--2ebe5683-f840-4228-84fd-e5f02b54de3f", "sighting--106061fd-a3fe-4b67-b4d7-4a7974775736", "sighting--bf18872b-eac0-43ed-aecb-2bd9fe912b12", "sighting--897e81e3-cda6-465d-9c3d-e4166951b2ad", "sighting--2dd51675-8c10-42b9-90d0-4d0cba52d594", "sighting--bb7451dc-ea07-4c46-b204-de7952f9f846", "sighting--e5261529-badd-4341-b1ec-941085ec827f", "sighting--0ee862c6-cd7b-48d8-9a70-fab67c067a0a", "sighting--783a3d64-9574-43ae-ac96-8393e0ac9a4b", "sighting--ec1a5846-70ed-407f-8211-e7184266de85", "sighting--b79162ca-ed75-4790-b493-5513e33d59ba", "sighting--7b6bb2b7-aa18-43ed-a0e8-1b5ddcc60070", "sighting--6f51d69d-511d-44f9-a4c3-713d72eaee69", "sighting--3d20f8ba-dfc8-408a-ad5b-f324b8bad4f7", "sighting--350956ab-8f06-4390-9958-278077e74e9a", "sighting--0cadcba6-aa1f-4e24-bc2f-a20120fa81ca", "sighting--a4ae1a1c-7ded-4374-b8b9-a9ce656f9b85", "sighting--877eb6a7-eb4a-4809-8adc-18e1520240f0", "sighting--bd128094-d0e3-4240-a7af-0f62ac27aeda", "sighting--728118f6-5e2a-454b-ab1c-047b3f4e463d", "sighting--7b3beeb7-4d39-44f2-8136-0113ab456929", "sighting--10feba2a-286d-42de-90a6-1b32f96024d9", "sighting--84525ee1-5509-4671-8d06-3020e0cd69e9", "sighting--feb9118a-ba02-4665-a5e2-3118bd94d090", "sighting--9d493b69-f8e5-4a59-9dfc-aa0411c2e78b", "sighting--b8e4a789-71c2-4d1c-8f14-7ed3a0878e42", "sighting--24528351-e9cc-4fd7-9dce-cd26e8386e54", "sighting--a0af6c6f-918d-4110-9d0f-18cdc4eb8561", "sighting--210dda05-bc49-4a11-950e-83f2395de775", "sighting--4125b04e-314a-4622-bef4-25ed41d7bea7", "sighting--36d83723-43d5-41dd-8e4d-d38e50e941e7", "sighting--5a513bc9-fee7-4db9-93c9-90f8a19df2b3", "sighting--a7595847-5215-4309-9f3d-8e26c40a8077", "sighting--09faca97-da77-4205-8ecd-b7c275dd16e3", "sighting--8ed3ca65-4995-437e-9438-66b9c57fd6bb", "sighting--6a0f59ec-26d5-40a5-a3a6-566be578d5c9", "sighting--b94f3052-8cb4-4fef-8fd4-a9db97fc4d4e", "sighting--ee4cd4cc-63d8-444b-bbda-ca2498f509f0", "sighting--8f72fdf8-877b-4927-b912-c3b8b41df8dd", "sighting--4bec3124-f45c-4ce0-810c-63db4356871e", "sighting--370bfd9d-d303-4f0e-b040-f4801314b9b7", "sighting--3436537d-4106-4c3f-a3c0-3d8bf083b959", "sighting--d9990ce2-5d61-45f1-9f4e-c55e17656da0", "sighting--347e89cb-c032-4de1-b82f-64931b216016", "sighting--6ef119fb-8354-4109-ae72-7895a2b23ccf", "sighting--9eb37437-2b72-47e2-8882-1cde57ac413d", "sighting--9756b560-33b4-4d68-97fd-0fa520715061", "sighting--fec12591-6709-467d-9180-37a5354271d8", "sighting--3029eee2-c76d-4e63-b20a-5c66fa1764ea", "sighting--440a73c0-8a1a-47dd-9a80-b6be8559f416", "sighting--99323799-0e2a-4dfa-9b18-b445e4eeb1ea", "sighting--95cd84fb-8222-4c76-9ce1-fef80c640659", "sighting--3b38711e-02aa-4c00-9df0-6d8af8da6abd", "sighting--aaa717ef-65f2-4361-8506-48a0e97972e6", "sighting--1afb1dd9-0fd2-4044-9b9b-627595caccb2", "sighting--766bed46-9aba-4aa5-9154-7e8570372a39", "sighting--9451bba5-6ed1-48f8-bdf3-a69c4c2d1436", "sighting--789800a9-8fbc-47fd-a66a-e7e36dd3c790", "sighting--7510f7b9-7372-44c4-84a2-a171ffe9367a", "sighting--f8906403-8fe4-43a5-bffc-f0db358bfeef", "sighting--cdfa5405-76b5-4fc3-a437-2af5e80dcbfd", "sighting--f08f5ba6-6220-44cd-9267-c31c2cac07da", "sighting--8cd4c26c-88ab-43be-af81-0e1a4f5039b9", "sighting--6baa0cdc-7658-4631-9ed2-bd306ed636ce", "sighting--1b686e3d-3e44-4ff8-86b5-ae3b2d1cc7ea", "sighting--baeb9c73-7310-4d0e-9dea-a0ba5831b5b1", "sighting--f6721109-6432-402a-99d1-f50c75da21c2", "sighting--7332a2a1-572a-41a3-a26e-dc80b9d5a6da", "sighting--f7d0747c-124d-456c-ae4f-1030342d2278", "sighting--7d9ac234-6162-4b3e-97b8-455e79919309", "sighting--a5d564f6-f737-4c19-bd24-09495be31972", "sighting--3cc7020d-9cb7-4ae6-8f60-fcb504b8b669", "sighting--c49badc7-d39b-4a9b-aef3-1c9780908499", "sighting--39b0a937-2b2a-44c1-8c1c-ad1654918fa6", "sighting--7193f4b1-b9ee-4f76-9d87-b51a71736e14", "sighting--c95a6c32-395d-46f4-b097-da0f6d2ccad2", "sighting--8bbc6812-8632-4fe6-8fd0-912f922d1bab", "sighting--b19a2d0f-9b99-4101-83fe-122a7a170bd2", "sighting--44a431ea-e723-45c5-99fe-0bec46653b2f", "sighting--86b5b2aa-f0d5-4270-bbe0-43b62aa27e45", "sighting--50b39180-046e-4a3f-a115-c65dba37935f", "sighting--854cf33b-fb3f-4505-bf0d-7c7e340e8730", "sighting--3a1cdbbd-353d-4b45-bef0-ec55d12fe1a3", "sighting--a6e6577b-2410-47c6-b4e1-431a4d6cd969", "sighting--b646be80-2370-47db-a50b-c3ac8370ed03", "sighting--08a0e82e-ce6f-46e6-a99e-f84d898b50d8", "sighting--1244c8ff-b393-4a57-b085-9d1f7e057268", "sighting--ddf4b180-ea6c-4e32-b396-c17d423b4b75", "sighting--193829cb-9ac5-43f4-8f0d-105d0f9f954a", "sighting--c814b17a-2de7-4ba8-a4d8-d20e2ed7d9fe", "sighting--fe941094-7a80-431f-84c7-5319b1dc23d0", "sighting--7fac9336-e8d0-4b85-81ff-90ea2b95124b", "sighting--30f2e97c-9f74-4e40-9129-a1ff8deb23ca", "sighting--8309bbd9-11bf-4954-89fa-e3f6ca424d9e", "sighting--8f611a52-6945-4035-8e32-c92683028947", "sighting--4419d9dc-4162-46a4-93b5-d6572e264881", "sighting--85bc7b92-0d7f-40fa-b9e5-4ae00b4f58fc", "sighting--124531d2-9c34-455b-a360-52f23033e25f", "sighting--422d556a-c404-4440-8c3d-2d1e28b7ede8", "sighting--e7ef7989-5c59-455f-82bb-c09beceff648", "sighting--b9ad8d0a-459a-44db-ad40-d6c280662fc4", "sighting--599a43bc-3760-41c7-9e0c-d3ca89fcf517", "sighting--7a9c9585-9bc9-4a90-b5fa-9bf12d95237a", "sighting--366990ed-022a-4f6d-87e7-c578ba8da584", "sighting--3f120659-08e9-4284-9f88-3801508a57f6", "sighting--ba3a71f3-fce3-4849-9c28-f8ffc671c0f1", "sighting--0537553c-639c-4cbc-a65e-94a50bc375c7", "sighting--ad11659f-6fba-4f80-b376-1d66e773145e", "sighting--c8131389-e557-45db-8fbd-2dc738724b99", "sighting--588788ed-2bab-4c3b-bfce-0220c15bfaef", "sighting--b3e4286c-c93c-40ef-8624-542043c9217f", "sighting--c06f4562-5671-4cf8-a0a8-f8cf0ba1b76d", "sighting--cd87197e-9b27-42e7-8e02-f4f2a0638e1f", "sighting--947d1326-5042-4b54-acb5-f82a18aaf253", "sighting--c02b9f4c-2598-40eb-870b-05295a19bba1", "sighting--3668374c-50a5-40a3-8308-35ee3e21ed64", "sighting--c240105c-5396-48c2-86bd-298b818c89dc", "sighting--6972ffb0-1a13-45eb-b5dc-82ec3258f08f", "sighting--2dd40cdc-4eb0-4a8c-a33f-7e21ca50aa5c", "sighting--f7e25dd0-4940-4d15-a7e7-00640a9bc8fd", "sighting--9a03b931-d894-4d77-b3d7-4bf58dc5f314", "sighting--9ef5271c-006c-4b5c-a00e-b6c323dd3cdf", "sighting--33c66b14-28de-40c3-a7a3-0dc80b3a4ce9", "sighting--38c037bc-b06c-4e69-9384-6b100cc0ebf7", "sighting--fc3c9104-3cd8-4953-8537-83b7d50070f2", "sighting--e441ab1b-2015-440f-b269-054308777d70", "sighting--14a729d3-0af2-47e4-91d3-371751980201", "sighting--bc9707c8-ff59-45ed-b3cb-e7c1d9198e93", "sighting--cd11bae7-da68-4b44-b84c-ba3c063c6af4", "sighting--e9d4e219-5f72-4b34-b61e-232f0626d4a4", "sighting--80a791e4-8cf7-4a96-bc5f-81c94599f976", "sighting--f7eefbc6-8331-4216-be8e-8adf5342c7da", "sighting--9eed6655-ef54-4a51-a8bf-a0490cc6f277", "sighting--392d4316-a758-47da-955d-ea8d9d06f289", "sighting--057a9c5b-4a74-4286-a7b2-49a6e09846a0", "sighting--50797441-3533-40cd-bd34-4a0b64bc599d", "sighting--abbefbab-3f63-48cb-adfe-6135ccda3877", "sighting--cd0b484e-94dc-4955-91aa-b6921f986228", "sighting--a47f57db-68dc-41dc-adfd-7d22521e8d2c", "sighting--4da7160d-95af-4c29-b262-2dbea9ee166d", "sighting--012fdf0d-39ca-466b-8138-649b66863b9c", "sighting--8a03e595-500d-4fd0-8a35-7aaf5ec6b66e", "sighting--117b3069-7b39-4af0-ba91-6390db90340b", "sighting--c054f578-b0b9-4219-8686-c4c3b88aae15", "sighting--8c9761d9-4a2e-4ee8-b452-71aeabeb3ca9", "sighting--0a815320-6555-4de9-bd6c-d42123b3a3e4", "sighting--bf6ebf01-f81d-46a4-a305-c2d5c6f77a6e", "sighting--b5b915ed-6b75-4c79-9c8d-0e55a6abce01", "sighting--d38f6089-5e53-42d9-b288-2f32d3637ea8", "sighting--1e699fd8-f7d0-415d-943f-55c144174442", "sighting--ffe553ae-0aee-4ae2-bc79-4e7a73dc3743", "sighting--94c229b7-7027-4533-8f65-ceba9c1f6cb5", "sighting--ed46656e-2087-4ad3-b566-70eb6672d3f9", "sighting--2bb6f144-9d3e-45a0-9999-6c82da0ecf64", "sighting--d7ae59b1-034e-4983-a846-da1cecd662f4", "sighting--0167fdd5-229c-41c5-953f-811f1916ed57", "sighting--71b7e247-5644-44ba-9738-abfa9e5b8fe2", "sighting--5c4dcb06-63e3-487f-af7d-b4d391aef4ce", "sighting--9b14ab9f-9572-4391-9344-9a6dffe7fc6d", "sighting--68f76851-a71f-4b97-bfa5-b9e4452a424d", "sighting--235be004-0bdc-40e2-9e77-64338b053e9a", "sighting--137caaa8-fb76-4bdb-bdf8-4aab65784631", "sighting--74d90438-f05b-4294-a31b-b3cdf3f19c42", "sighting--c6663c80-52f8-4b2d-887a-f04ecfd96ac6", "sighting--efc07cc4-b915-4ab7-b289-44034b6ce4a9", "sighting--e3724f9b-832a-4dbb-af05-0bfdf50c8bdd", "sighting--8e889ae2-c27e-4a8f-a539-76538aa91d5f", "sighting--c4a06209-231c-4f9b-af8d-e3c74ceedbab", "sighting--f44b3bb8-72dd-415e-bab4-0370038dd889", "sighting--68d940ac-61a5-4c86-84b9-d4a7be7f2989", "sighting--f429abe0-9474-4098-a65d-040a539d6477", "sighting--758608e0-03c5-4758-a3c7-1e38df7f03a5", "sighting--6d8e344a-029b-4679-805b-00282fae0dc2", "sighting--513298a7-c45c-4f76-8a27-eaf9d0f5747f", "sighting--73aec514-26da-4e96-9dda-36af9d86b45a", "sighting--d7be3e32-2598-4e7e-96c2-bc0cefe7d1c8", "sighting--bbba8a74-1776-4c93-b953-970c210da426", "sighting--35068222-75d0-4e0b-bc04-c16817428205", "sighting--4d7ae936-b87d-4c6e-9c5f-6c3b883356b5", "sighting--d98f3160-62f4-485d-9248-dd0ce60895ef", "sighting--b7079fb2-5cda-4241-ac59-716bb20f1435", "sighting--52d1003d-2dee-4f25-8f32-4449cfac9f40", "sighting--f671cbfc-a2ca-4be9-8e4d-c85a2bd8700c", "sighting--facdbcc2-791b-43f4-b626-6b6a3b36a1c2", "sighting--c91586d4-3b6c-42fa-bcaf-e9da7cfe97fc", "sighting--e73a6bd3-72e0-4a27-bcd1-90c9201759f6", "sighting--0a0216d8-79f1-485a-8c2e-5ae6ef4e27fa", "sighting--7e2dfb28-402f-4841-ae14-dfa606908045", "sighting--3a10948f-917a-4e86-bd2f-e067202b33ee", "sighting--a2f39100-99c5-4be2-90d1-1215d1e4e18a", "sighting--d120eccb-1658-496f-b110-86ac984f3eaf", "sighting--9ce8118a-9205-4ee6-b372-2b0d3b6918c4", "sighting--ce819f63-238a-4cbd-8357-944f33f08d4d", "sighting--80e9316c-344b-49f9-a415-d1a0a21eef82", "sighting--5835f7e4-53ae-4835-8132-13b54aff5321", "sighting--4e935311-16b3-4ff7-8c8d-04e4a35d974f", "sighting--1347d2d9-7697-4394-b3ce-55d6b634f7e2", "sighting--97b1f114-13ce-4615-8d9b-bd0fef1bb248", "sighting--d5b2cd10-3ba9-48aa-8eab-be364d45b73a", "sighting--4402c192-381b-440f-9d24-4b4b042ecb0c", "sighting--1f4532fb-4983-45de-8aad-05456cf34fed", "sighting--c94d8e56-e261-45dc-8d90-cd7b8d5bb104", "sighting--170e8d3f-0d6c-46aa-9282-ca135705b79a", "sighting--4a0854cf-45bb-4c81-b19c-6267472b657a", "sighting--9bdbb059-00a4-4afc-9900-07aba2f564a4", "sighting--61a8534e-c351-4162-9829-f7b8c2d8affc", "sighting--e4dd981b-493f-4814-b4fe-62a63854edf5", "sighting--e38d9e59-abbd-4e1b-9918-3e834be8ad24", "sighting--67b1d945-8acd-428d-881f-46ce862eedac", "sighting--7c82219f-1831-4b10-849a-51fe35800dc3", "sighting--5b28444d-88c6-429b-bf78-65a4a75ec690", "sighting--92331c2e-253c-468f-9827-7105fefef3b1", "sighting--2843ab35-88c8-4a2c-96ef-7d7fc7767a34", "sighting--6bb18123-1dbe-4a43-b896-36757749f21d", "sighting--1a421287-a078-4787-aecc-5444e42ca270", "sighting--cd6cf762-d0a0-4128-b7d5-5dd97cb78d66", "sighting--2e63d940-d65d-4dfa-a1e5-a41df4d546e9", "sighting--d1afbe76-3ba3-4748-8419-9768817c862e", "sighting--59f559ea-593d-4d21-9352-8882c60ce957", "sighting--1cd3905d-f22d-43c4-8508-e9b5fc76e621", "sighting--1b3b721c-ec39-4e0b-9a23-1a8765b38aec", "sighting--f375b8aa-84b2-42a0-9c92-8d2f365f90fe", "sighting--01ffefd0-fbd0-492f-9450-39b6016afe4e", "sighting--248aa71f-00d8-4326-bb60-a072959c8a7f", "sighting--513a4572-8200-496b-9206-6f707fc3332b", "sighting--5fd0f299-3563-45e2-8deb-7229814cd879", "sighting--78f8c914-fd0d-4a7d-bf2a-9ccbcb0b9d72", "sighting--aaa8d31c-8b24-4b3b-8cfb-efae893595f2", "sighting--36789235-4c1b-480c-ac4d-47bbb139465e", "sighting--9967069e-35bb-4b47-955d-caf1f652eca9", "sighting--326fcb90-9dd6-4b9b-9eec-d3d7618d0a30", "sighting--34c901b2-0cba-422e-b6dc-4775a142ca6b", "sighting--cdb3d669-a391-4881-baa9-20621e4e3223", "sighting--515cee9b-512f-4795-8072-c6a0f3260755", "sighting--365ae678-b2f7-40de-9bc7-3de7178b73e2", "sighting--dd9133a1-1923-4e81-bfd5-b007b431acc7", "sighting--5bde4cce-62f4-4bda-aa12-dd22b1777089", "sighting--27cf8da6-e036-4c63-a36f-51c09d794ca3", "sighting--fbf539ea-96e6-4207-9a7c-7b8579b23f3a", "sighting--97fcb50a-1553-4d24-a3ce-a16129f09e4a", "sighting--6b6d1caa-5ad4-4961-b6b7-1d434831f859", "sighting--cbd7aa99-0a28-4a02-a37b-4c6623e94982", "sighting--937daf58-0e23-487f-adaf-202a41ea2496", "sighting--71c07896-036c-463b-8b89-5d956265ea6e", "sighting--f50011b9-ebdb-4412-9187-48f1a5f8f844", "sighting--bb141dd3-8435-40db-bb32-5b84631840bf", "sighting--dd160a18-2f6e-4fee-b38d-6fb6fc08259c", "sighting--73caad90-46e4-4c23-a847-5e2a5787adda", "sighting--b456ca8e-0a9c-46a0-8ec3-03c72fe6f1df", "sighting--5593b88a-05b2-49d5-af80-6df9ac462de7", "sighting--1268d18d-c8f1-4d0d-9a4f-9902d7355807", "sighting--adf36bfc-d726-4dfb-a5db-b519d66a29fb", "sighting--ad2ad939-f141-4bad-8197-ff72f32f1489", "sighting--4e5533c4-4092-4c96-8548-3f0e99a62e0b", "sighting--b813eb22-5370-4807-b956-7d88b5bb1ed2", "sighting--f8a14049-af04-417d-84ba-e0bbf21cfae8", "sighting--62307f5b-da23-408a-9527-6ef9644a790a", "sighting--2fbace63-e0f8-4312-be8f-002ebe012701", "sighting--eda811e6-e826-41ec-a0fd-dfcca97854f1", "sighting--ccbbc5f0-d92e-4a41-8187-ab1cb9da1277", "sighting--7fbba5a0-1657-4714-84d4-4933e8b51cfa", "sighting--7e9d987f-e49f-47e1-bc20-711ce440360c", "sighting--e322573b-89f1-4261-96ce-f5c72dd39949", "sighting--cb8316c9-0569-44ac-bc27-95664caf0a1a", "sighting--9052ad34-5b1f-4a36-ac63-f6ed86af872c", "sighting--02140873-28ac-4998-a469-3d9b05c62a37", "sighting--ebeee6b3-1476-4bc9-a925-c52bbafce079", "sighting--6c439ec1-f629-4473-8c91-690e1fd1e6f0", "sighting--39da726d-14c8-4bba-822a-f1b6ea088040", "sighting--7f9e4010-3eab-4070-af1b-b5d26fcfb1fc", "sighting--cf34e24e-cd18-46f7-89e9-78226a17fbf9", "sighting--7b27fe48-b051-4f9c-8ede-fde5048b0a29", "sighting--36233451-756f-45ed-8518-58d75dec33c1", "sighting--cf5bc830-b40f-4de7-be83-9fea86d7609f", "sighting--4ee9dab6-a416-46c2-8a03-fe3c6e35cc93", "sighting--e9065295-b1ea-44d1-9629-b9d40cb1379b", "sighting--e411f78a-d2e3-461c-ad8f-bc8a0ebb8240", "sighting--e43422c0-3370-4ff3-baa3-482df298e32c", "sighting--f602a6d6-9d13-4d8b-ae81-363e6cbb56c4", "sighting--c649e1c4-b4e7-4a22-bfc8-ca5177a6b244", "sighting--f27c49e9-7eaa-42d6-b3e5-da4c78086c3f", "sighting--fabf6fbc-24d1-4dcf-b0e1-89bf37ad2605", "sighting--8dad539a-fa42-4f24-ae24-fd3cf2779b99", "sighting--9a4d32f9-7a77-42ef-b9ec-532909e6efad", "sighting--7880fb03-11d3-432e-9977-0bbd104ae490", "sighting--dbd20cfb-b514-4ba5-94c6-836bb0bce1a3", "sighting--3db85cc4-0292-476c-b09d-c27a52ced202", "sighting--66d6fa11-4a82-4f49-8642-9ebae5416a2b", "sighting--ec65d4b8-54c9-445f-a4a2-b7a872ea8c45", "sighting--a6ca734a-8860-437f-8d41-623ef74e4227", "sighting--fb3613dd-2782-4341-ba10-1cffe50f8db7", "sighting--b06f0081-c21e-4a1b-ba6b-dc8f7a6434f8", "sighting--693d41ff-7d5e-4366-b25b-6874f9356378", "sighting--68d5d6dd-9380-40e1-bf98-5647b610edb0", "sighting--bf02ae5a-0931-4d21-baac-27d10639d6d0", "sighting--aceb4ee5-63e6-48f4-85b5-d32538ae8eec", "sighting--cd6b34c0-7839-42bf-80e6-f0334ca3f265", "sighting--0f35d98e-d9e0-495a-8699-af32af79f3c2", "sighting--eabe060a-f63d-4557-9593-a367254d4193", "sighting--7a2e62f0-bb2d-454c-8d58-3c21cdc1ee99", "sighting--0ae845f2-4c4a-4c87-b529-faa06f5c06f8", "sighting--12853066-2ca5-48cf-87ac-7f9df9dcf276", "sighting--587f1f80-03c2-4ac2-bf6e-d4252c113777", "sighting--6dd8af5a-ce58-4521-8c89-264604e1b5fb", "sighting--1fc7758f-f357-4bc2-91a8-aa6fdc809ced", "sighting--4e5f434c-0b43-40dc-8ea5-919481ac3948", "sighting--e4e928e0-00b7-4a96-83d3-c0d51ec363c3", "sighting--fa9bb517-0651-458b-ae18-2ebd05bbc8ec", "sighting--9e483c3e-a18f-424a-91d2-09398c927896", "sighting--3190c928-81c1-4a6d-93cd-ce90aaca8761", "sighting--d5f1b3fb-f80a-490e-b16b-0f736b882321", "sighting--a2f7ff1a-c942-4ca0-832e-31144768fa9f", "sighting--9f6263a8-204b-4888-bd0a-54fc5dcfb932", "sighting--e93fc858-2bb2-4ddf-b364-e3b9c6c36918", "sighting--6ba0eab2-b33a-44b0-b5e0-fb5cae9e584e", "sighting--5e3e6b4b-d1a9-48ef-abeb-a9045c9fb734", "sighting--09bf0288-a4d8-4bb9-9748-2368d7468b59", "sighting--f4402ae0-6f59-46ab-951b-ffba60027b1e", "sighting--210cf1ae-ce13-445a-9f62-23a006112d51", "sighting--981f1cdb-fcc4-4df6-ae6a-9d8cd33d55a7", "sighting--34dc9cc7-d1e2-445d-94ba-d18f8d963c86", "sighting--281a4522-99c6-41fd-801d-d6fc9acca093", "sighting--68da1c17-9c03-4187-b19a-d5e410d30524", "sighting--f905adf9-e7d9-4f4d-ba27-784bab5e9f24", "sighting--2b438ed9-541c-4aae-84d7-eb7aeec6dee1", "sighting--77a236b3-86fb-4c27-9bea-77989a9b51ab", "sighting--f6b8c5f2-1c9b-4555-af67-887b232650eb", "sighting--c1a7c426-5bc7-4013-a94a-a795f83be5f8", "sighting--d0c2d2f8-ca05-4f70-ae11-e06633ef2c40", "sighting--55a50253-c11b-4f6e-8001-2983b180a8f8", "sighting--d3430480-a05c-412a-adcb-7cf46c2a8d1b", "sighting--c85176c4-478e-4244-80a0-28659295cd86", "sighting--0927d589-df66-4c70-8dd7-24883d7c4a1b", "sighting--ecbefe44-6a33-48cb-b530-35c5703d9d62", "sighting--88f2c8b2-e4b5-4a04-b371-30c4c572b04a", "sighting--2513e954-bbc2-4f17-82e9-e88890295e6a", "sighting--565460ba-7356-4ad2-9605-b8995b1a77d1", "sighting--1bd7bfd2-e62a-480b-8482-5d6b6f99102f", "sighting--89812bec-c9f4-4c72-9806-c4c6763d63e9", "sighting--9d8737a8-c3f7-4ff4-b492-98b1fc48f254", "sighting--880cc268-c4f0-4352-9f51-0cf1642cc361", "sighting--f8b9fd4d-1eb4-456e-af8b-afd8c1d8e538", "sighting--df23e733-4de0-4fff-bbe4-8d901029d017", "sighting--4b78e958-4278-4369-b0f1-6f8d8dd9e86a", "sighting--8196ba38-5994-4c7d-96b3-ee6485202d63", "sighting--27fe5776-0d86-4b7f-9ac5-fa2d583603c7", "sighting--53501ba9-3b04-4abd-867d-033314a6affd", "sighting--0b079c06-75b4-41b6-9295-3d3d23115877", "sighting--c3aec54b-34c9-4522-9fce-790e20e323ed", "sighting--56448db2-a1c3-475f-9c70-471a89b903a5", "sighting--523d5d13-ba0c-44ba-8a6d-1d0fee078409", "sighting--aac69824-f085-4dc0-bbf2-016592bbfde0", "sighting--807d8f63-2132-4413-a1af-a913a04615f3", "sighting--31f036b8-f04e-4975-bde8-672d9cabb77b", "sighting--71540ba6-d286-4e61-9258-0a6a85381c9c", "sighting--271611b6-3b50-421b-ac09-498d9b604e8d", "sighting--32c92c04-841e-4890-b2c8-890071e9eb18", "sighting--3437aab9-fee5-4b58-a3f8-cbf8e5845cb7", "sighting--5553c764-9c12-49e3-b589-eb7445a48a3e", "sighting--bf27aa72-5ccd-44c3-8ae6-dd94b581cae7", "sighting--fd847bc5-2ee6-481d-90d8-ccba019314a5", "sighting--29441c69-0dc4-4fe4-93fb-69f8ab96e6f2", "sighting--abfe2ef0-02f6-48b1-8359-4730918c30c4", "sighting--10c73a49-98bc-4467-9a50-65a20114c9f9", "sighting--ca4edebe-6cb6-4ee8-b753-e7d6dfbb4a4e", "sighting--6f1d544b-b9ad-4847-aebe-7697f133ea1f", "sighting--d0022363-ddf1-474d-b61c-4c7ecf050e16", "sighting--f2b8a9df-7957-4486-9d31-809603b3d1e4", "sighting--89972209-3acb-4a9d-bd20-5ff855ab4db6", "sighting--6839e26b-00ae-4f96-a8af-9cb30e3c24b1", "sighting--230c096f-c355-472a-a388-7dcb411b5640", "sighting--f0fd4008-57db-4610-b5e2-8d1e286a3ba6", "sighting--91323ee6-437f-47db-abcc-113f3cdc0638", "sighting--eb200dcb-36f6-4aa0-8514-959b82de9146", "sighting--0fac838e-f965-42cf-8610-8f621b2ee7d8", "sighting--52fec0da-8d04-4430-9a71-9afbe4bf2c2a", "sighting--45934f4b-8889-4a9a-8e68-88d6aa765818", "sighting--08bcdac8-48d0-410d-961f-5c1b8aa8a4ae", "sighting--b58dc54a-8fb3-4dbe-842b-972c77e372e0", "sighting--2c2ef287-651e-4e0d-bfaf-24f780fe16fd", "sighting--7cf025b1-92b0-4ba3-8a57-86c1dcf8d073", "sighting--84b2be04-e05f-4fcb-90a5-84be9c897200", "sighting--fdef1a59-a0aa-4534-8d38-d6860bb5b240", "sighting--2081e838-011c-4823-9459-a0621eee2ad9", "sighting--0a4f7922-f018-45b7-9c5b-c96c5b390a7d", "sighting--8b3f720c-1dbe-4e02-a08c-0eb935fcfec0", "sighting--361cacab-25ad-4fec-a971-43d8fbaf6c3d", "sighting--65a73962-566a-4c2c-866b-c85f521a80d5", "sighting--0fe54123-f819-4874-a910-2e3d813fe003", "sighting--5ee1e82b-a42f-4537-bffc-eb86810a1c9c", "sighting--1dd67406-af34-4bed-89c7-cf1480986b53", "sighting--f15f90bc-3a24-4124-8f98-511c3d1d8fd3", "sighting--4d5251c0-f711-4038-9f05-c97badca8f47", "sighting--610523b2-8ef9-4cc6-8812-4e735d7e85a8", "sighting--8df29017-13e5-431b-92d7-5ce0147d7293", "sighting--61510f1e-422a-4548-8267-eedcef20cb18", "sighting--b5c191c0-c61f-453e-bdbb-4ac21c734f3f", "sighting--459c9f00-7c72-4d48-a6ac-3fdd4e9c6d03", "sighting--493ba6fd-767a-4fc6-8ad7-2459c0ae768f", "sighting--8ec0ee83-4548-48a1-9410-16fe413905ef", "sighting--18fa204c-cb2e-4181-9a1d-1cbe5130c6b5", "sighting--63dd947a-de1d-42ed-9112-5ce6afb9996b", "sighting--8e90e7cd-754c-42ed-8d9d-6189f49a2db0", "sighting--5f23f902-8634-49fd-8a38-3e81223eb820", "sighting--3a01bb74-70c8-4728-9966-f3c65cd34991", "sighting--00b25246-551f-4882-8a15-6eceadb07560", "sighting--36f0a9d1-292f-4501-be82-136569716434", "sighting--9d16a273-6d9c-40a9-bb9f-095b0b82bbe5", "sighting--0f51c515-1830-48bb-a88e-54350bdc021e", "sighting--9c0f8311-b263-4757-81ae-e6bb0fba1572", "sighting--bda25bdc-083c-4c24-af2a-6772672d5713", "sighting--0ffdfda2-121d-4768-a084-1dd5369479cd", "sighting--ba5e0bc5-9de3-4b97-855e-ccacdc53d6c2", "sighting--15fd339f-ba8a-4bf0-8f25-2310a6b87bb4", "sighting--3fd4e106-400a-44a5-b31b-ed6e62eb79e4", "sighting--c46541bc-e582-4050-b091-9dd051c00234", "sighting--ece9b1db-bca6-4255-a795-f31cb8d2d3ef", "sighting--41da86f7-550d-4bf4-ad1f-131b656e4eba", "sighting--d5734f7e-5f16-40ce-ada1-fb479a6a900d", "sighting--f19afb73-c915-439c-b215-7eeee788c170", "sighting--c1f53241-91b6-496f-8bb7-6cdfc3c524c2", "sighting--8a3c1b9c-f2cf-49bb-8fe0-4ffad6588302", "sighting--833292f5-e1e7-47bd-9dcc-1409c1a304f5", "sighting--63bc7f07-fb75-4299-91d7-595163cc152a", "sighting--f88f53a9-be53-4d73-8972-1f563a677a17", "sighting--8fb66adc-85f0-4445-9611-a112ee6f07fb", "sighting--a7913d5d-8842-4506-85b9-bb8e9f34575c", "sighting--5186352e-6f59-4a85-ab88-903a8af308e8", "sighting--5d0a042f-b270-4d62-a96c-e26f1889b22a", "sighting--19a0e362-de84-4586-a89b-14b73e68ac99", "sighting--f9d9142e-f4da-45fb-a845-ee6d2ffe61bb", "sighting--0feb8fde-7476-470a-a437-c57d29d96d57", "sighting--2e67cc7b-25d9-4311-9931-cf219e052bfe", "sighting--949220c3-8a55-4eb1-9609-e44203e734a7", "sighting--3b783fd6-c2dc-4635-a622-f1fc03ad18ef", "sighting--d7c9f5b3-defc-4fad-98f2-45c8efcc1071", "sighting--f2010dfc-90ed-4c4f-a93b-232ba5575e58", "sighting--c6d98c17-5700-4127-992e-1f39814ecdd6", "sighting--f76ab6b7-061a-433d-b776-2527e4ac9982", "sighting--0ff2ca0e-14c7-47ac-8cf7-7b2eaa53dc36", "sighting--1362761d-ea58-4e4b-83f6-c0804611f8e1", "sighting--7998f462-5c8c-4b29-a714-2a14d8ef3e13", "sighting--8eef942a-54d9-4c56-a69c-f6a09fa8fad7", "sighting--b24a84a1-8515-4782-899a-77c3dceceea7", "sighting--2100dbcf-e9fc-4fd1-b1e8-cf4860c3b53d", "sighting--5e54cee8-a7a8-430f-9c01-684f261d1818", "sighting--72539d32-d163-433c-8327-6ec7f5e2e4be", "sighting--6e764228-2c31-4576-b564-e29378044445", "sighting--fd8c21ce-eb7a-40e0-bfbf-bbb461d74098", "sighting--3c56a7ff-02f1-47b1-9067-06c0615aac6f", "sighting--3049cc17-f3c9-44d7-95f2-72b09c0e2d09", "sighting--df725682-1566-4fb6-a7f5-34f65ab21021", "sighting--f7a0dce8-5d2c-4ad1-a527-d04385c33597", "sighting--dea914ed-7135-4cdd-ab56-90b4cd808f9f", "sighting--4dc00950-e247-449d-84ab-4c691be592fb", "sighting--76e54e44-5e8d-40e6-8fd2-74a063bdbbde", "sighting--9cafaf48-1cf8-46fb-b04b-a427126d9f35", "sighting--68b308d3-ea2f-44b8-b896-4765848c0589", "sighting--df82ec7f-1af3-4e9a-be39-88168bc1afb8", "sighting--3e01cf21-ba7f-49ff-842c-7c38cfdee179", "sighting--4b6bf7aa-be5b-47ca-997b-9da9f8eea2ff", "sighting--ceb20568-c9e3-423a-8513-0b3cfd0c0bc9", "sighting--1d2b650a-d7da-4326-82c5-79e8f50449d5", "sighting--b8adb9ea-ae96-4029-b62a-3c4775a19977", "sighting--aeb9c21b-1c7b-4fbf-a404-d60d495714c7", "sighting--9aab0516-5abb-4f45-88c5-d74e5deb34f0", "sighting--174b01da-e2c0-49b5-bc7b-64c1d1243aee", "sighting--3db61ba2-b669-4475-95aa-62b15d99b206", "sighting--2340602d-a9b1-4dee-9286-f5bd21468976", "sighting--292efba6-0c8b-481c-b21d-2281b42fec5f", "sighting--635dd42e-156e-48ce-a89e-8c37322f51ee", "sighting--4586664e-0f26-4d3e-bfd6-b20c37a78d7d", "sighting--9673b172-1f44-4d2e-8cc1-c3bd2ce4f4e0", "sighting--3e1ac48a-b693-42d6-866b-8d8b34212fdc", "sighting--ba067f3d-60c3-4fe0-b9f1-e67937faf48a", "sighting--bf45d48c-d3d1-4287-91c3-48137c366cba", "sighting--82bd8379-dd9e-4d80-8926-18ca3fcd3828", "sighting--b7dd38ed-f90a-4d04-80c3-4e10dbedb638", "sighting--5c205172-b7c7-44b2-8ad4-699d72d91317", "sighting--93496f14-1a26-4722-a340-09d2e07ec242", "sighting--8759d115-4f02-46a4-9fb1-9c73c9bab985", "sighting--9c90821c-3641-4503-b98a-54dc254ce1a5", "sighting--1a54f1e0-6dfb-4d3f-95c0-a0a033887ce1", "sighting--105a6375-9fb2-4f6f-a10e-cf3867061625", "sighting--9f8aba71-9b1a-451a-8c12-01571ba54d3e", "sighting--a1c72865-aadc-4c39-9bc4-1f1517376276", "sighting--0e924fb5-ae9e-42f9-b934-e803d6699948", "sighting--b4c0efba-6a9e-4265-acaf-400269f68f3f", "sighting--e3b9b1c0-0b09-4b70-a870-730ce0c4d0f7", "sighting--2a48144b-3bc9-4037-ad64-04a76fbc011d", "sighting--7e657daa-fc6a-4241-8a49-7b02f790a779", "sighting--05339045-827a-4846-9542-9e631877fecb", "sighting--3d9a93eb-1121-42d4-b59e-03c6341377a5", "sighting--6a3846b6-026a-4e01-91bf-e1cbd8fbcded", "sighting--a927a9c9-c9f4-4082-a325-f404e44007d8", "sighting--5dfd5ad2-7cb5-42b0-b333-87c147ea5161", "sighting--ebc66102-3c89-4af5-9e39-a07fdeeff173", "sighting--ca7cb650-02e1-4909-948f-09e407076999", "sighting--aefc380f-e9ef-4f93-9b11-2d979154aa40", "sighting--a531f915-59e3-4238-944a-880aaf743230", "sighting--b5df80e7-5c52-467b-98c1-e272eb06db74", "sighting--7f8dc775-701a-40c6-a832-ac76c7b17482", "sighting--52851de3-5f9c-4d0d-bbcc-0fe0d6d63c72", "sighting--1473c05c-0206-470c-a6f0-3eaa41fa22f5", "sighting--74714e34-b8b6-4975-9740-60654b5d6e67", "sighting--5c5b53d2-0a4b-44ff-ab62-bc31da397c06", "sighting--36fe80ab-7988-4f3f-89f7-72a96f2f31e6", "sighting--fbf75bc9-203c-41f6-9c32-0bc757ab0774", "sighting--0952233d-f08c-4642-9487-ccc43fb8981b", "sighting--3b10b283-3fd6-4fc8-b7f2-c934a942e531", "sighting--a129ffcb-044d-4612-90f2-d56c5edbe69b", "sighting--87da2852-9e38-4eaa-9371-82966d669a76", "sighting--6a72add0-4490-4298-b474-512cf751d59d", "sighting--9a42633b-ad68-46f3-9f70-e575e1effca3", "sighting--f98e2707-e14a-4b36-a088-b246d4c8fbcc", "sighting--f0b72974-fabf-4cc9-86f7-cf73d63f9ac3", "sighting--50464dd1-1a62-4aa1-b12d-632c6df28735", "sighting--f1cd859f-c8f3-4585-9e0e-f36055e261bf", "sighting--144b970d-3399-4fc1-ace4-d2bca2f6ec66", "sighting--36511bb6-2b9a-41e8-8427-dd49e6e03c74", "sighting--d71fcab9-cf76-447e-97a5-5c008f9b76b1", "sighting--0ebb2bb2-b858-4d53-b1e9-502bf36db57f", "sighting--6fe4d4cf-0282-472b-bee1-43693bce41d9", "sighting--2ac6d67b-d10d-4ca1-aff8-f7e6c7ee91ab", "sighting--ccb2fbcc-e4a2-4ed0-be41-b6eaaa4df294", "sighting--4029ff45-90b4-461e-b7d8-8de1c29efbbd", "sighting--0b9a9966-f96e-4bd0-8e80-9f5acde2b07a", "sighting--5bdaf9b1-96d8-4526-afc1-9fbda1057a0a", "sighting--8c0ecac0-a2c8-450d-9b6d-0f40e7be5438", "sighting--279062a3-eb6c-4149-9075-0c8d2db164f8", "sighting--9cd4c8e6-33f8-42b1-97f1-fddb0747520f", "sighting--782d714d-858d-4815-9e77-405c18d27664", "sighting--aa6e379e-e56a-4afa-aa9e-e08bf413f92b", "sighting--91436caf-1a67-40b0-aca0-46e84af681e1", "sighting--67ee1aaa-dd2a-4df1-9d0a-4c3ce6e2fd2a", "sighting--3f207b77-e4ba-426d-a97d-5bbb74028972", "sighting--c73b3cb4-2e1f-40f1-bd07-57e37e192f23", "sighting--87fcefe8-9e8a-4093-8b3d-7fb3d0f451b1", "sighting--e122eb85-211c-4d34-b558-cf8793a89a09", "sighting--f2dfc25a-430d-4c05-ae8b-4c12cc10a763", "sighting--6466a2f4-ab88-435a-8f62-694fe4b9aa76", "sighting--86cb945e-156f-493b-bb06-a70329f2bc6d", "sighting--895b9895-f0ab-4446-9a59-3f60afdbf7d0", "sighting--44995df5-9a51-4dcf-932d-d8d59654cab8", "sighting--37bff7ee-298d-49a3-8117-bafcc629cc3f", "sighting--0d8b282f-623b-4b52-98c7-bb4182498248", "sighting--6a49f6f9-feb0-4922-86c7-6c8f20f2e1fe", "sighting--883a8d7a-f992-407c-9efa-88cabeb8a77a", "sighting--82558ddf-7856-4805-a357-c85ba628b26c", "sighting--e1549703-620e-4447-a00f-c89856b1f778", "sighting--9dd60b50-6f16-47aa-b5b2-ea5e615eb28d", "sighting--b7b6ea52-ac59-4f48-9e8c-d7cb7827c99c", "sighting--767903a9-d3fa-4eee-b878-30c6476de424", "sighting--89e646ef-94ef-474f-ae20-f5ed498e862d", "sighting--7d63c86a-beda-4399-8e08-57b7cb62187e", "sighting--b2754e83-5097-442a-b191-3e4fa8efd2cd", "sighting--18a8ccae-3a25-43b4-b245-1a945edd8366", "sighting--becc5afa-ab7e-4ada-a2c3-2095800691e2", "sighting--2bf49750-5a18-4137-80bf-9b3c260a77c1", "sighting--190f6086-5294-43b8-b5b3-94c0a0506840", "sighting--028e265a-316c-4ce0-ba6f-b749fc2aee1b", "sighting--a6f1ccfb-86ca-4721-a3dc-bc3c540eeead", "sighting--18c9e4a6-44c7-47e6-b1d1-8c93f39708c9", "sighting--f7995d95-7357-4e68-b331-83f4aa70a086", "sighting--feb9dfcb-aa67-4705-87b6-3d623bbd4ad1", "sighting--d3253651-a869-47ed-8a70-3a0c4cfcd064", "sighting--3872f623-0b22-4061-856b-88b1e525cb0a", "sighting--60cf06f6-5188-46e1-8d31-b288f8a2230b", "sighting--4f9e90f7-eccd-4dfb-81aa-925ff01aed34", "sighting--e11e40dc-c4ba-4040-95c1-28b68eb00500", "sighting--c263d4d8-14d6-46fb-98ad-dc5bbcea25fe", "sighting--dc2283fb-6e8b-46c8-98a5-b30be8da82dc", "sighting--688bee94-216d-469e-b79f-3123d5832d6e", "sighting--51024610-3be7-49ce-956f-64ab8968f54f", "sighting--2ee49e1b-9c7a-40e8-bf33-fcddf28507bb", "sighting--2e8cf9a8-67f8-4e03-884b-ec46bc859528", "sighting--fab69893-3c52-4327-bbd4-58483b367158", "sighting--db2c0853-ef4f-4bf7-8eea-3bc66cdec736", "sighting--602fe0dd-2e02-45a3-8918-cca5d85617e5", "sighting--42d050f8-a7a7-4cbd-a500-08717a9a7084", "sighting--b1c04e83-e82c-447e-beee-df0cf94ec676", "sighting--ead42f86-9f4c-4c5a-9f65-8ff77cb559ce", "sighting--668dd1ad-5b1a-47b0-a05b-8cf73abc3880", "sighting--417dbe60-30e8-4106-800c-a138e197d439", "sighting--545b4816-0ee3-4d15-a9ca-3b8e6ae4827d", "sighting--a04913df-e03b-4675-b35b-ed7bd7dec0b4", "sighting--5d6c73fc-8351-4442-a284-71bb15a9fd5c", "sighting--08616051-18ef-4923-ac6a-01c9a4f27ca8", "sighting--b815207c-db7d-4929-8906-0a0774109203", "sighting--96f98485-e339-4dee-91fb-6c4f9af8e57f", "sighting--10701847-a964-4fcf-8d21-477ba8e44d77", "sighting--3a09b0f6-63c6-4985-a8b4-61f31381cd77", "sighting--f8bf1a8a-a2c8-4c85-819a-5c43ea268180", "sighting--9fbec525-f158-42f8-b665-dca40a4adf3b", "sighting--ad794447-5b68-432a-82b8-03ddf6aee078", "sighting--d1233948-ba1a-40df-a3a8-597d2ac4ba99", "sighting--e3c2d5b8-770e-4365-8c1b-457fa719c82b", "sighting--e33dc66e-6360-440d-9170-429fe66b8cce", "sighting--0ff648a4-6486-4f52-a475-fffa9d261752", "sighting--b3f91d8e-51ce-4a86-bc0c-9f2ffd44ef61", "sighting--c4846e31-4391-4c08-b692-31cccad79912", "sighting--5a496f4f-521c-4413-8a93-ea07dac4b6a2", "sighting--b275709c-f12c-4621-825e-9e1f33610590", "sighting--a72168a0-3c61-4b4b-be5b-d4022d74cc9a", "sighting--00d8290b-1790-4567-a9ab-a9a88e2d92e4", "sighting--99ad4d08-98f2-4141-845d-676112ef66af", "sighting--7687aa6f-7c8f-4745-934a-9747bc537804", "sighting--4dcbcd08-010d-4613-817e-c0c55d6eafc3", "sighting--609c954e-9257-4a0c-a899-e477c9e2541a", "sighting--c575edc4-73b5-4ed2-951d-91405c756b4f", "sighting--8cd426ce-d4f2-42d6-8053-e231793c99aa", "sighting--50c02dfa-6934-4078-81f5-2c37671dd659", "sighting--8777f5f1-ab93-43b3-85c0-a8a01d239efe", "sighting--9890ad82-feaa-4b47-8ebd-823b9e324bbf", "sighting--b8074fbc-4d80-4bb8-9db2-2b0ce3180e1b", "sighting--03da9578-37c4-4a76-93ad-8063dc7f643e", "sighting--6765941c-dd95-4100-b8a1-959d32449a14", "sighting--fe2e75a8-c2ce-4694-9244-8ece56d4f2de", "sighting--e550b5ba-7f33-4a7f-8c26-f36091ead58a", "sighting--0851bf0a-25bd-4a0e-bf22-d3accb9bbfbc", "sighting--15122183-7317-4186-b26f-7777d6924e3c", "sighting--b49d8cc7-8e82-494c-ac2a-46a34fbe04e1", "sighting--e67e9e04-da8e-43fa-ae17-5dbe3db00d21", "sighting--4986ba91-1a1b-47a2-8551-1eb9ddc0e229", "sighting--3b1812bf-e3f4-4256-b231-f72707b5613b", "sighting--1e936308-4807-408a-9138-a4af8f190de6", "sighting--ce9a4333-0e5f-4132-8085-63189ee42f67", "sighting--90ae5ae9-a38b-46f1-87e8-2fc21761736b", "sighting--4a261e49-61d0-4627-b935-16ce5b7576a7", "sighting--eb5be01c-5181-45fa-9890-ca8772d43fb1", "sighting--7db381ef-6563-422d-8dfa-0abed8cffecb", "sighting--f0030de1-e6eb-4e95-8dbd-622aa935cd0f", "sighting--702f12cf-1ddd-46ee-98f6-4a192e9026ca", "sighting--c0054473-c9fe-4769-8767-b23fea76dbf2", "sighting--b59d893c-c448-4928-b891-b526cc45953f", "sighting--0c760366-2ac4-4538-80c9-7b543ee8fec4", "sighting--a1c569da-93ba-4559-955b-2e63bd114656", "sighting--b32aa00c-0944-4761-8da7-4b8f3ac3ec2f", "sighting--56682509-620a-49fc-bcac-6a033a7fa5aa", "sighting--34308eab-bb38-4466-a59b-4cccd8d8fb9a", "sighting--60d6f28f-7721-4bcd-805e-0866746a1ad2", "sighting--65792b7a-db45-4df3-8bd4-d295aa69bf08", "sighting--6cb260df-f548-4189-8e8b-bd0b9f6fc915", "sighting--e244a6b9-5218-4e71-8041-8fffffe8da01", "sighting--afb6acaf-d650-4b62-a073-da1aaa840775", "sighting--8b719cdd-4a66-41be-9562-21d44ff4694f", "sighting--26cc5d8e-763c-4914-ae53-153f9a70f953", "sighting--faedc11a-356b-4554-b48f-7e54983b0e5c", "sighting--14506171-9ce4-49e6-bc94-5d82c42a3e86", "sighting--c164abd9-9a64-4732-8841-6d3549dae0c7", "sighting--f1a6c477-a43d-4337-af1d-88e716e37c55", "sighting--05458ba0-865d-45ff-925b-83b93466f0c5", "sighting--e455d43b-526f-45c2-a712-51f206e32b1e", "sighting--ec575292-c679-4224-8722-9db6717d4673", "sighting--ae2f580e-3057-4ef1-b4ea-ad5588a554eb", "sighting--4ae05eda-9473-4303-a49f-8b3d74c143da", "sighting--caba8d18-0212-4643-9379-bc59298fa245", "sighting--51eb9083-4a3f-470a-81f7-524cdd3167f2", "sighting--a836ca4c-874d-437a-8284-95085d3c38b9", "sighting--00bf7fde-8d36-4548-8c03-3b2ba547fe6f", "sighting--aff8eebe-ead3-4f4c-8568-8b3bbeb4355b", "sighting--d79cc2bd-827e-46f9-a30a-fd4801517fd1", "sighting--9ee9673f-bd0a-487b-87fd-8ffe3fed8e33", "sighting--92fe32f4-d8c2-4af1-b975-833baed0ee70", "sighting--81233475-5e4a-4c6b-8ae9-679b75914d5a", "sighting--4d28b0d0-835e-4e13-9ebe-9ff0ab47a9fa", "sighting--4f379d9e-d207-476a-b3ca-a70b4f9f74b4", "sighting--bfd09a2d-1ffc-4656-9c6b-b6bdb185ffcf", "sighting--f51f70b3-357c-44c0-bb4b-8b2b07bad3fa", "sighting--4cfcd136-f787-4c0b-b1e2-dbb32ce266d4", "sighting--6e7011a3-7098-4d29-80fb-ad386850ebbd", "sighting--8dddea70-d4ff-4e44-9afa-999ac54adeca", "sighting--2a078bbf-c934-4753-af76-30e8d7d76a81", "sighting--8bbf2bc8-2c33-43ac-9483-6b25b025a60b", "sighting--90181773-4d17-40b7-af72-9ace0efcec79", "sighting--af9569d5-cae2-4b5b-989e-4b153e28100f", "sighting--8b85adbd-1080-4c32-b651-111d2b74f42b", "sighting--1b21a0fc-004b-46f2-adde-5cc99b99a61a", "sighting--02698886-d298-456a-aa77-f2c66ff1e2ea", "sighting--402f4c61-d93e-4abf-b266-e8c9247c7f4d", "sighting--0efb406c-b2d4-4dbd-99ef-dbf59886f9b5", "sighting--40360f65-7925-49b9-8dbd-fd6c031c2b04", "sighting--65aa1b20-b07d-4ef6-bdb4-9cba236c49ad", "sighting--a5056659-1de7-4363-a1ec-b022ef389981", "sighting--4c4f829b-7a0e-40f5-a4f6-3b271a4d6f4e", "sighting--aced8145-a7e8-4055-8c4e-9f7d0d6e2cca", "sighting--ced18f5e-6a9a-4de4-ad0d-429792ae320d", "sighting--efea0cbb-e40e-416c-ab5d-e9adff23d9b1", "sighting--48ce5570-7719-4296-8ac2-d335db36a7b8", "sighting--118deebd-8710-41d8-b2e7-b16cc9d72a44", "sighting--828d8a7b-a782-4de6-b251-ba8827b0b6d0", "sighting--074f594d-a55b-4172-a555-4eb533dd09dc", "sighting--21c68997-ab92-447a-837a-cf6d5ade5d84", "sighting--1b673448-ed7e-4320-b950-7a19af73ab75", "sighting--2a7a39ce-1489-4ff4-a87c-1e3c374e6f4f", "sighting--3841b902-3565-44e7-8b6d-a4fab15d5c32", "sighting--162f7202-0318-46f9-9010-5a413da0f79e", "sighting--3775699d-c657-4a94-9dc8-9db632a9cea0", "sighting--d7e05200-1877-4dbc-a235-f78ef4715702", "sighting--bd7c7767-32d7-439d-8e90-02f501849851", "sighting--cfe9cb40-aaa6-47de-95fc-7243362246cd", "sighting--dd8cfbf8-f1b3-4dc9-b822-d874ce3d97fc", "sighting--56b5a51c-c7cb-467f-90be-1d1984646d6d", "sighting--caf5f7f4-6f0c-4a4d-af25-d41c9f37e9ff", "sighting--aacb809a-da7b-42c3-9778-be41663c438a", "sighting--982a1567-840d-4872-acc5-562cbdc676e5", "sighting--33ab08ec-6e3b-45f6-9aa6-a43ecf26e144", "sighting--3d9bf98a-d9e1-41f2-84ba-94f2c8e7fe8c", "sighting--0c2d88a0-044f-4ed8-8e06-92e74f15d2da", "sighting--8b36fef5-221b-46c7-9a8c-a95b90a21355", "sighting--5d1e88e1-269b-4c71-8269-e8fa8de54fa0", "sighting--911f67e0-919c-442b-89e5-b32cb80261e2", "sighting--bc0255f9-c7c8-4617-8e55-d36a7f0d0554", "sighting--f3542ea5-410c-48e8-8edc-b27adcf72c10", "sighting--f4aa7440-689a-4dca-82b9-187543878a65", "sighting--5654a425-a623-4565-a9f1-58dea2c9f7d7", "sighting--164fbcbd-f21b-4794-839b-594d935d4fa2", "sighting--06531909-36d6-4e49-a465-46ca79ffdea0", "sighting--f2646d8a-2d79-4fa5-ba19-8d5409b1dfd6", "sighting--d3e81200-9c4b-451b-bf1b-da2381b9e4ed", "sighting--6943337e-f487-4ebe-95fc-88e7de2c7310", "sighting--bae31621-ee28-4b59-99a5-05e98df494f0", "sighting--1e1e4690-08a2-436f-bbad-5d8b3e9e5779", "sighting--227073cd-4b6f-4a82-815d-f95a83b1189d", "sighting--6baa387d-216e-4514-9c78-89503122a785", "sighting--e8fed2b9-1f08-4732-869e-e890ce662a05", "sighting--085501bd-a4f8-4a18-ae0c-8ca6550e8942", "sighting--fb625971-cc64-4320-a8ee-9c12ac084a95", "sighting--a3d1aeca-3d41-4915-8db7-5903e6452cf8", "sighting--e0102533-5fbc-4d2d-b064-da79bd55853d", "sighting--8849ad90-3f54-4439-90fa-d678aedca37b", "sighting--afc1de4c-a8a9-4d12-b132-7d7943833796", "sighting--925e01fc-9dc7-411c-a088-750af2466219", "sighting--cbc4a303-9dec-4914-88c9-193aaac2dafd", "sighting--b8b8d275-6c14-430f-84bf-2c72cb321b4d", "sighting--b3e07518-d591-4626-8e76-08db5f18103b", "sighting--8205278e-c03a-49a6-a7c9-413eb13a475c", "sighting--ab180c9e-568c-4d48-9c53-da02a70a949d", "sighting--6d7ee453-cdd0-4ded-9fd4-b071406cf572", "sighting--525866bb-cef6-4e50-af33-21dba6936481", "sighting--0d1373b7-cbb6-4c0d-b604-cb2912edc8c4", "sighting--60302c71-eca1-4f5b-9984-cbec174fc0c9", "sighting--ff5540d9-a831-4a65-b495-0743a848d092", "sighting--83749e11-f426-41ce-99a8-690554164b04", "sighting--4adc766c-11d5-4476-acc4-798a12d80749", "sighting--4bfc7581-5555-4086-b784-e7fd07bbcd22", "sighting--514731fd-0b7f-48f8-afbe-65df426cdaf4", "sighting--240033bd-287b-41bc-9b41-d973fdeddf49", "sighting--59a5ac66-438d-427f-8102-4c3220e2a714", "sighting--ade7b69d-1c9e-47f9-885b-9dd3143beaca", "sighting--5a02057b-9eb0-4690-9fe6-f1114065dc08", "sighting--6922bf9a-ef18-4b2c-b495-fd5fd87f22f0", "sighting--5e583dfd-04d1-4bdd-8dee-4f18c1cba592", "sighting--b02d5fe9-4ac3-44a8-96c9-5d07c4d57e6f", "sighting--079b199e-06c8-4dc9-8952-c83b35b814f8", "sighting--77467fa6-abdf-43fc-8216-73feba4744ba", "sighting--f84a4db0-abce-45f4-b2f5-1dd33eec38f2", "sighting--2dccfd7a-adc6-4768-b5be-4c0255721c01", "sighting--2873dd7c-5f59-4562-83b1-8d33bec01c28", "sighting--fb0625fc-2644-4e6b-89b7-c64fcdc0de26", "sighting--534898b9-0f8b-4b48-851a-ccce54469289", "sighting--b651daa4-f034-420b-adbe-18723f16da1b", "sighting--a2e44134-2bae-42d1-8827-b65699d80138", "sighting--fcff94a6-2cee-46fc-b2f5-c8685c9ce7bb", "sighting--86b6d568-4602-4421-b860-2072088e5ecb", "sighting--ae82dfef-3bdc-45d4-a4b6-70b99821c1a1", "sighting--82525a3d-5f2b-4e0a-bdbb-23681c1279cc", "sighting--5b277ba3-3d02-4d0d-8aae-f32b7cc2d999", "sighting--7b55a5dc-8cd6-4a73-b2ac-335dbae8a32a", "sighting--74dbc1c3-fded-432a-aa05-0badf8455a29", "sighting--276c055e-57fc-4d2b-ba30-27b41a4bef41", "sighting--d3a7e3f6-a102-427d-b42f-9e146b1e979a", "sighting--489b07c7-21a9-4bfd-9ad4-c2299a5e2cbd", "sighting--b48dfad8-c299-472b-aa8c-544a41644b8b", "sighting--03672f75-2a5e-40f2-a84b-d6f0a91437fd", "sighting--869b6f85-af1e-4a34-aded-8673919d62d7", "sighting--1f66b256-9350-416d-95ce-bf9bce7771e5", "sighting--bfe919e6-3a5d-4429-a10f-c1393048e53d", "sighting--9c751e51-31e5-4dc7-885f-c312c0a04a62", "sighting--ac5ac39a-ac1c-4570-9860-dd943b4a9913", "sighting--d3a06bef-b5ed-4d1a-ba5b-0eadc22a4363", "sighting--c5e5c999-8fd5-46b3-8b15-288dc8757c38", "sighting--9bf711fc-5016-4c26-9200-233d525f0b5a", "sighting--1f00753e-9ab9-4d80-87bd-ee4fb60b9d33", "sighting--acf2a942-8fe4-4cff-ace2-349b145a4206", "sighting--49e94511-cbde-485e-aa5c-57fb0fb6ebce", "sighting--f3604425-0679-4c2f-b21e-269cf4493386", "sighting--e8c1ebc7-ef87-48d8-a5de-0c5cdce7a53f", "sighting--8c49cf3e-c7c6-4cdf-9f8b-e38a138bd34d", "sighting--76d03f4d-720f-459d-9e35-c88a0ba2dee0", "sighting--77cb931b-947e-4f9c-bb93-7c04e8b26fcb", "sighting--dd9daf99-27b0-4e56-8515-a60da908f250", "sighting--41014337-9d20-45e8-8fe4-fa0de0d60c90", "sighting--e305cbe2-407a-4a16-b84f-d2a15916b4de", "sighting--6703cb03-b8b1-45c4-9a90-dfd3e2eec809", "sighting--9ab621d1-8e29-4c53-8680-4856649c6a68", "sighting--7178def7-e333-4b27-a935-1ae3e7864fa6", "sighting--08cba607-49f9-466a-85db-f8539c437b4f", "sighting--424de722-ad5c-4031-9b76-9c7f81c732f8", "sighting--af529015-7e79-4b68-a45f-cdba4592a51c", "sighting--abcd4620-3fe3-4eef-a79c-99f6964e8459", "sighting--e5f01a3b-3aa2-48f5-bb77-96a09ba1bc34", "sighting--a1db77d7-e9d0-4389-847e-22b2d1f07b6d", "sighting--5bd2b4bf-2c74-4617-8af9-096dc0300c79", "sighting--6df23440-25e6-47ed-abe2-51bad1739d81", "sighting--ee9b7d99-9581-4bd4-9829-604393ada5aa", "sighting--712635ee-6e35-43bf-98b5-d3663ed823dc", "sighting--f92081dc-bc96-4e12-9fa1-588e2737e9a0", "sighting--6c21de0c-b6ba-44a3-b0c4-d710f38c7582", "sighting--a4d2fad3-bdd2-4896-9cb9-a29913c22248", "sighting--ad6a0895-0014-4f84-91b2-bdaf04d71aba", "sighting--df456b50-a98d-480d-a746-63c506d87303", "sighting--f64efd9b-482b-4698-904c-4448423eb2dc", "sighting--8e11d71a-d299-4ec7-ac4a-3a45d1bfcb5b", "sighting--70c6b6c9-35e4-4217-8949-fda58761ba2c", "sighting--7402edd7-0a30-4301-afc2-c4783bb2750d", "sighting--207a7744-2f08-4603-96a2-173e74b96ad7", "sighting--83e94847-4ca9-4e93-8198-2460d1fc0139", "sighting--35edff14-0c19-4236-9b5f-9d0d68e0ba68", "sighting--a7958c4d-c37d-4e15-a34c-946c5008aa7c", "sighting--9ef1f35c-b8ce-4f4d-9560-6833bd95f206", "sighting--0bd96414-e3ed-4c27-bc66-01e9e5b2603a", "sighting--a42bd5d5-6875-447c-9655-31d0b9368801", "sighting--1ed972b3-468a-4ac8-b482-12f64a3228a7", "sighting--49c52609-4196-4832-bbda-fcc640fca6e5", "sighting--c0ec06e3-4e4b-46aa-8d6b-9064a4bfdf8b", "sighting--19b9ecbb-032e-4ca3-a2f0-012418cd5c0b", "sighting--4701f251-d622-4fb1-8212-190245d1cb16", "sighting--ed649e46-c355-49b6-bb85-57b6dddad2eb", "sighting--c9d2332e-3fb4-4583-9e61-105860c55030", "sighting--f85faa81-0e0f-45ee-ba31-9eed5c7ef489", "sighting--674bee2d-b5c1-45b8-b615-0fd5eb7c9330", "sighting--9b89e126-2d16-45db-b3d3-1e0e71d49fdf", "sighting--3e152b85-3134-47b5-9705-c8fdffc85a45", "sighting--7cbaa007-b001-41ed-a774-0b511d89350c", "sighting--caba5a4e-27f8-4b07-b261-2b3d5a08785c", "sighting--c6874411-93b9-4909-a591-7d081cd8a20d", "sighting--8ab395fd-e954-49ec-b479-21d666c20f27", "sighting--68eb91e0-fade-4036-9fe7-a677399fd39a", "sighting--516b69bf-7a55-4116-90a3-9376d7c910e0", "sighting--eb7b01cd-aa38-4f47-9b53-79594c048a19", "sighting--9216afac-4c46-4e27-b33a-74bdd72df2c4", "sighting--ae94c28b-ff31-4996-87fc-ed84db64ace5", "sighting--8bcff337-da94-469d-82d7-c64754329a8c", "sighting--e76b07a6-083c-4443-9229-1376fff1db6b", "sighting--2f26aa63-44b9-4a2a-97ee-dd680c61fee8", "sighting--aadc43ac-65d9-4f61-9901-fe177815ea57", "sighting--42f81b65-7507-49c9-a03b-04d761cdd0da", "sighting--8d3f30e6-0e00-4147-8b3a-04f23670970f", "sighting--d9c143b6-28d5-4789-a54c-e8f4c79df0a1", "sighting--367416c3-3bf7-405b-851c-905a115c945e", "sighting--d690f64d-4760-4c8e-bf9e-084eb34a0545", "sighting--19f40093-0714-4823-a341-e0b70f7a36ea", "sighting--39e5522e-6dd3-40c7-af11-480e09a1a4eb", "sighting--5bb685a9-6afd-4390-b64a-0e2b00771016", "sighting--717ad432-8fd0-49ee-a852-7575473785e8", "sighting--4a31ddd9-8c67-42cf-a9cd-aded76c15480", "sighting--adba48f1-a35f-4fa4-bad6-c31313e92d43", "sighting--d3f6de7b-8033-4955-8bb9-0377eb6c2aeb", "sighting--e3e73876-ded3-4b63-adaf-b0287d0f7bf8", "sighting--2c8039d1-5cd2-4581-90f2-e48a0a0fbbc8", "sighting--578a3f4b-b2b5-471a-940c-0a93af63e299", "sighting--0509ab54-0380-4a6d-9d4f-ebfe4a76a744", "sighting--0aca96dc-0254-45bf-95c3-f552c2d5fc99", "sighting--22fbcde3-474c-4b23-871d-15fcbf38cf77", "sighting--9e1ba22c-bea6-4c60-be9f-9a8c9b77848c", "sighting--04a42eb9-de59-46cf-a26b-e9f000b6b318", "sighting--ff721cdc-05c2-49e9-94b5-7fdd2287f6ec", "sighting--0a72a53f-1d78-4f0e-9171-417434a131c6", "sighting--98fed2a3-788b-4eca-b46f-bd37f9326b26", "sighting--5a2c674e-c71f-4b5d-aa81-2975f7162000", "sighting--dd1aaad8-b097-4bc1-a23e-d07bd0e179e4", "sighting--ec074578-31d1-4ed6-bdee-e2c76003b974", "sighting--27941392-e16e-418d-9e37-330ecd18fa75", "sighting--c5bed886-5190-4aaa-94b8-d589d1a81565", "sighting--00d9e450-39a5-433f-b70d-d9934cd87966", "sighting--ea7861b6-137e-425b-b5c7-6bd1a5e297a5", "sighting--6b9c79cc-43b8-4e16-912c-6d2fbc615194", "sighting--3e24b0cb-6c4d-4e4d-a11a-f07c5b3e75ba", "sighting--8a506806-4638-4ab4-98ff-4710eaa42484", "sighting--86614f70-f640-4936-9001-a10fefe8aee8", "sighting--f328b6ac-590c-4fff-a853-b0298cb43b6c", "sighting--b34be93f-c5ab-4996-84db-d90b457f73f1", "sighting--89ece9f1-2bd7-474d-83dd-a64d2d285c24", "sighting--db285532-db9f-422c-87d5-e37f523eba69", "sighting--318ff2e6-8d96-4279-be45-21ef06ae0ce3", "sighting--adcfac58-1d34-4811-92a3-c8778e2cdf95", "sighting--d2966f31-d3fe-4cf7-ac3b-fcc0289e82d9", "sighting--20946243-58c5-49a3-9dd2-5b5b7e441b96", "sighting--5831d547-c976-4fc1-85f6-fcd2adbb533d", "sighting--157686e0-a178-4521-9e68-bbcf4362f415", "sighting--bd53caea-d819-43f7-9ce8-717e55f56875", "sighting--87749389-95ab-42ca-b391-4caf03f7f24e", "sighting--c554e1cd-5687-4126-bc7b-dd8bee9a722a", "sighting--addd6515-236d-4fe4-9766-f67055e44535", "sighting--90ac75c3-7a2b-42a8-86cd-d7d00925bf0a", "sighting--2aa80816-b416-4084-8860-212001d81c52", "sighting--469825db-11c9-4b7a-8d2d-3ac5d529ab7b", "sighting--962f9941-a458-4c0d-80cf-3a0fb696617b", "sighting--09486979-8db4-4940-9289-aee04c922b1f", "sighting--84bafe4f-d9f7-48a0-941e-d3e4e3c07e80", "sighting--75b10380-bfa9-462d-9b05-4dc7f66727f3", "sighting--e0bc2561-f9b8-44ca-8f08-f101d85b1c09", "sighting--d743bcf1-7e20-4a6d-a7b2-659c12277bd8", "sighting--d8466205-ecbf-41d9-9fd0-7b2096326b63", "sighting--7495ac54-b341-40a2-927e-0eac195f2a13", "sighting--65106329-a139-4d7b-990b-8ccaa0f9546d", "sighting--f4490496-38d0-4843-9cf6-6c81e7f999c8", "sighting--cb093d4f-371f-4308-a398-a662e713eebf", "sighting--9379c5c0-a511-4471-ad6f-19ff2bf1e21d", "sighting--03b213a5-f09a-45be-a520-dfe1f10891b0", "sighting--da722b7c-8148-4c1e-a384-d2980fa850ca", "sighting--49aee6c2-1078-4038-a9c6-db3c5bbb17c6", "sighting--8801a106-9459-4599-8cae-5e9331e4244d", "sighting--a545c845-e4b7-4e1f-aa11-ddf7fa95efdc", "sighting--43503d93-ca98-49aa-85f3-d56b31e6a441", "sighting--1b7692d5-83ae-4337-9338-c8317b721ddd", "sighting--098e4be7-df0a-483f-8454-b61e9e5f27f5", "sighting--0c8ef636-3e07-4ccb-83f0-901f5c021fb1", "sighting--6ac4d617-e8de-4126-9862-2f6d5c250416", "sighting--0180e72a-d1ff-406f-b865-dfc710968c75", "sighting--c291fad9-4d64-495a-a81d-7f06f36f0019", "sighting--4396d414-f556-444d-9a85-843da5a4e7df", "sighting--eb60c5f1-2a9b-426e-b2fd-db9774a71e9b", "sighting--92375b04-cb4b-4b6b-a5ea-f011accaaa2b", "sighting--adbda360-d68a-4d0a-be2f-7e665d59182d", "sighting--bff18dba-5998-4ac8-8d21-aa41181aa45c", "sighting--181aaf97-59b9-48c7-b3cf-e74177a9b7f4", "sighting--747b28a7-3864-4cb9-9bc9-ffcd301de6fa", "sighting--294b2c6c-0e22-4c99-838b-9aad0724a59f", "sighting--893a56ab-05a6-4b48-93d4-0d002790a71a", "sighting--de7f9fe0-546f-463a-93f6-89c360cb390d", "sighting--5b61539e-51c9-468c-82f0-cb13689a8e6f", "sighting--87971575-b8aa-472a-bc61-5c92c030ad3e", "sighting--414bcc36-d286-497b-a1f4-a6bee38d23e2", "sighting--38a05992-0e3c-4b6c-ae96-b884056cbdc3", "sighting--9dad8004-a7f5-4a0c-bacd-a163e75d6fb2", "sighting--c926502a-4da0-42d1-831a-feed62391e5b", "sighting--b9ce0205-7b17-4849-8c40-a63d37b63bd2", "sighting--99c69060-86e1-4067-b932-d3d6f8d5293c", "sighting--e0d28a7b-6fcc-4d8e-b125-510a55d0b270", "sighting--d3ec76ab-3553-4ce8-a078-4a6aa23e2caf", "sighting--30f210fe-31ba-43d5-b97f-aef55151f17f", "sighting--59f4f25d-334f-47e5-9004-dd394de90f23", "sighting--38c6567b-d679-4af8-bff5-389d04df59ec", "sighting--59d8db12-8d09-4735-8086-6f50995f1bc9", "sighting--6dc39ef6-fa8b-43cd-b983-7efaec10bc56", "sighting--c2a2b73f-350f-4345-b78a-24bf1abc4630", "sighting--28009599-0135-4be8-b788-c9e493797342", "sighting--f955ae2a-e451-414f-91ad-b43271584c51", "sighting--7242da56-b274-42a8-ac90-86fb056e810b", "sighting--b79e4106-468a-4b91-8144-c77900179315", "sighting--0c2ce434-2a0a-44f2-82b9-ce926281185e", "sighting--1142badf-8937-4a5f-8a72-675d8d458503", "sighting--5bbfff78-a72f-4375-9a86-0879f31cff8b", "sighting--d829f36f-0c4c-4e93-bf92-f68b1002e28d", "sighting--7ec9f214-3fe1-4da1-9674-9ac46bf7da38", "sighting--01237ad3-4c0b-4bcd-b618-d038acfcc5b0", "sighting--23d50508-53c1-4fbb-b65f-632dc45c8104", "sighting--e81c7aff-2129-4d4d-933b-63318ff91c6e", "sighting--ee41c15c-5b97-4df9-8726-9c496397f16c", "sighting--1dfd90a5-8066-4d64-bb47-78298abd76b4", "sighting--4ebe4c23-132b-404c-a8f4-807caa1abfd1", "sighting--c8edf0cf-1310-499c-8620-44b7eb3e00dc", "sighting--420a726b-2131-4589-bae8-926c5f4d00ec", "sighting--93bfccf9-1a1c-4045-b704-dfc4903850c9", "sighting--fb81e398-fac3-486e-84eb-1c613124941e", "sighting--85494a75-372c-4ba4-9628-d8d6ff5f868c", "sighting--2c7398a1-de4d-4fdb-8b08-4b0997a65ffb", "sighting--b1c2bc52-31de-4ba9-96d8-5dfd7b4f5df2", "sighting--794a90d9-1b63-4b54-a568-91c3328465cd", "sighting--527d56c1-df22-4a56-8384-99adf39bbc49", "sighting--ead12d3c-df8b-4d89-bfd5-f20bcd95a639", "sighting--5150aa52-7847-4074-b277-fc3153b1e252", "sighting--ba5c3183-007c-458f-a535-8ce5f9b29d71", "sighting--04e5b174-c045-4f78-97c8-8246023cc296", "sighting--490ab9ac-d392-4734-a18c-d3124798b58c", "sighting--721cc4a7-2667-4db1-bf3a-ac4332ec20e3", "sighting--04e984b1-8ab1-4efa-83f9-cbc098b04e44", "sighting--ace01fed-6c6f-4b98-a4b1-3d323ae863c6", "sighting--aa515ceb-e5ab-4054-b9c9-954973dd83c8", "sighting--d1cfea2c-8e20-4168-96d6-8616092a4046", "sighting--5c05ad0f-6cd5-4b07-978a-09d28bddcced", "sighting--7ad49bf0-4cc2-47b9-82e8-4401e5cb30b0", "sighting--79b8ded4-fd37-44f2-90c6-caa706965a1f", "sighting--ae8bd5bd-8ce9-4437-9bf2-0224cf27df10", "sighting--f8ce5401-1da1-4e64-928e-154c90ced289", "sighting--872a1c82-aba7-475c-b6c8-64b32fd71bad", "sighting--8baf60c1-4e0c-42e4-b4a6-f54bdcfc3f70", "sighting--2eea1cec-3567-4914-bd77-f746442f8a0b", "sighting--c3184450-def2-49f0-8a86-77b0ee21bcf5", "sighting--44c72419-d11a-46e3-9c90-93179fa9c0ef", "sighting--b3b039d6-cf7f-4f82-a51a-3f3b1f5459e3", "sighting--c749c0f0-c73b-4096-be94-8b1fae4a1ab3", "sighting--0698a7d1-f505-41a1-a42e-8858e1dcfc17", "sighting--e8e5a151-3407-4509-9933-68fb12495bab", "sighting--4cea6158-8374-4d21-9234-7d170ba63932", "sighting--e4ca6f0e-3c4e-466e-ac10-d99c06a6f663", "sighting--9058846e-fbae-4ab2-91ae-78b1fa2ba9a9", "sighting--6422477b-2989-4fba-bb7e-681ce542bb54", "sighting--87be0b81-5dd4-4c89-9519-5f4bccf34240", "sighting--797d7e79-8250-44a0-bbb0-73e1991af511", "sighting--638c07e3-3926-45f5-bf2d-99d2d0df7979", "sighting--1ccd164d-e9f6-4d26-b45b-45a65e2eaff0", "sighting--1bb95014-c45f-4a92-8561-9c34e89cc2d6", "sighting--3ac59660-f6f4-4794-a149-fb89d57389bf", "sighting--ef0a9412-40de-429d-bbe9-586ce78c04fb", "sighting--9a899b21-8aba-4172-9db1-77dae9b10e06", "sighting--4b8135f6-02b9-42ce-9da6-5890a3dcad06", "sighting--65bc1b95-dcec-499c-b9af-d09060a9dd32", "sighting--319ab347-46dc-4ca9-8ce4-6776eba19d5d", "sighting--65d76a27-663c-4989-8ba9-99a13d9a6215", "sighting--1f4fe7c2-64c7-4bf7-afcb-2e07ff0aa314", "sighting--01059ace-70d8-4012-895d-ae877ff4c2e2", "sighting--659efffe-effe-4e3e-a668-fe28e6df1af7", "sighting--1c5540b3-d02d-4c15-bac7-1cf47b229b45", "sighting--e3c62ca0-e0ed-4efc-a5d0-33e0f2849b31", "sighting--aa119c58-0bce-4c02-b17d-c49e2f3ea255", "sighting--69e89108-b055-4e15-be26-88fcc0f9f0f3", "sighting--ffc864e1-0fae-4f71-b31b-26dc606f7e90", "sighting--db1e4ca2-2821-4635-a469-4cf28b6d93b3", "sighting--d93d5b8d-18c7-4507-9d33-b3d49c454c1a", "sighting--dfac61da-3345-4c8f-843e-af3baa1d7f3e", "sighting--6058ec45-faad-4d5a-ba5e-6f431bcb4b4f", "sighting--282f4e72-692a-46e7-bd5f-8a9265675b1b", "sighting--c3dd71dd-4e85-4001-b844-6a220afd3040", "sighting--557e248d-9032-43ae-b13c-de9cf68fae21", "sighting--c7ebb5b0-1242-41cd-9398-d219dfa427bd", "sighting--9542c510-accf-4ecb-849f-f26dabf65368", "sighting--8b510179-714e-4eba-a38b-db2a792bc9e1", "sighting--d0f607ba-6311-43f9-96ad-c235a838e04c", "sighting--37b67791-eb72-4b8b-962e-1c8f8c044f10", "sighting--46d6184d-ee99-48f4-9506-06b7f65bf6cb", "sighting--a8e1870b-267a-4026-bffb-d5d6c63fd10f", "sighting--443d2854-7647-4a9a-834e-449fdec5c05c", "sighting--f2e3fc6f-fd89-4a12-a27a-8776b2e2c9db", "sighting--597ac661-96b8-4914-a4b2-89b0f194ca71", "sighting--55c9338a-408a-4cb4-940b-0b232c97b402", "sighting--5b2b8520-c2c2-4649-8017-13fe7af14f91", "sighting--715a97b3-0309-4701-b13f-87b14e708f2e", "sighting--001b6bc2-086e-40fd-9d2c-a338268243f2", "sighting--dde3dcb1-5d0c-42d9-b50d-677bf7b079fe", "sighting--d8c4cc4c-8169-43ee-b098-2307c428cdf9", "sighting--80d322ee-41f4-42f0-a2b1-2f1db5694bc0", "sighting--c3ff6811-4503-4c0e-b521-c1e12d79a63d", "sighting--514d9e8a-6c53-4e41-bc71-30b7b0db3be3", "sighting--f8b25c19-3af2-4512-85f0-374f68518002", "sighting--e5a0857e-cf71-48de-9ab3-8b8188da5675", "sighting--19fa1cb3-9b46-41b7-898b-4ced19fd96f9", "sighting--c48bea98-d428-448e-86da-66415c162eb2", "sighting--5208f415-9eb2-4dbb-b6b5-2728d85fa05a", "sighting--f581d4a3-eca0-4218-81aa-036fb409f212", "sighting--8f1328d0-a435-4198-9959-5e4e8a583c5b", "sighting--31731a15-1157-4be7-a578-9f3e180e4119", "sighting--da419ca0-04b2-4824-9eb0-6a703f61fd10", "sighting--3de5cdd7-d5f0-472b-ba24-e91938aab95a", "sighting--8307e039-b992-4d6c-9ce3-c70751d013c0", "sighting--2e2d75f0-11fb-45b8-8431-0500fc3cf893", "sighting--3e1eb130-6318-4096-8822-87fcc0428dd9", "sighting--601afd03-730d-4dbc-b03f-530c6cbf5b00", "sighting--f130ea14-6836-4dad-89e6-621f41c79da6", "sighting--69f96f9d-fd95-47e9-a26d-edbeb909a16c", "sighting--f26e638c-f948-465e-8171-f0fd84c95fe2", "sighting--8ce18d54-e592-483b-af01-49adf5bb189c", "sighting--3c1753a4-33b9-4ee0-80b5-231d93f360ff", "sighting--fdda7981-62a8-44ee-9637-f49dffde0db3", "sighting--debd4ee1-0d56-4a3d-8269-af34ac2e707a", "sighting--4ef9b0e6-ab35-4607-8a47-26a03c60d6bf", "sighting--1f7ecff2-27ef-4e02-91d0-da74c00ff07e", "sighting--3fa8043f-10c8-489a-8941-e22d57f9633c", "sighting--20c6e1dc-8c6c-462c-9289-32dc6e751dea", "sighting--a2d5c46d-5ab9-470a-808d-69b1ba031377", "sighting--97c613fc-dff5-4769-8050-8dae26f1ebfb", "sighting--f915fdd2-17f5-468b-ad76-7751289b2b88", "sighting--c461638b-aa6a-4780-8363-f6197c0ba656", "sighting--84c03c37-6214-475b-a99b-1483f4821944", "sighting--aa2072ca-4a82-4ee3-a6ab-01f454002939", "sighting--66b6d9d4-eb52-4777-b3a3-f9cd188ccac7", "sighting--f0a9f9aa-1d45-44b3-9cde-2767d0b3e46b", "sighting--f7b49622-2cd4-4c0d-a67c-c37b0e39d029", "sighting--fe7a10ff-a2f1-4ab2-a669-c4721f54c66d", "sighting--5c700c59-0ad6-4430-8d6d-9973346dfc56", "sighting--900b3e70-e88f-475b-bc0c-490b3187edcb", "sighting--42ca9d97-40f3-480f-bceb-ac2dde1eba3f", "sighting--0b704b4d-2af5-4c46-a793-5e77b0fb81cd", "sighting--d57b3ad1-324f-4ec2-a10a-761bec27a2e8", "sighting--71c085a4-7774-4a78-bead-5bf8b6593e69", "sighting--b97918cc-4576-4f5d-89c9-1a10a2ca5055", "sighting--5ece7c00-8123-423e-9da4-015e83087ca5", "sighting--4e580a12-342a-4789-af8c-04f43d1930bf", "sighting--2ad36b96-985b-47df-929e-b6d7fc7e274d", "sighting--f3821d92-294a-41d8-9092-fa2c9857a3f7", "sighting--bb33648b-5eaf-4d88-aa39-2cf1b0a83343", "sighting--7a0fa1f2-3802-44ab-9210-759ae1eea3bb", "sighting--40c21fdd-20cb-4b35-a8fe-693f91b49c0e", "sighting--55a50ae5-870b-47db-b1bd-0c564c7f6583", "sighting--8600e81f-8b09-40f2-aa5a-cd14a48c1e2a", "sighting--541cee26-f591-4586-9a8e-175232ed3551", "sighting--a44fdac7-0810-4cbd-93ae-9f515ad20b56", "sighting--2e67a03d-9b6c-4879-8f36-9d598f15943a", "sighting--0cbccbbe-5e50-4f4b-9fc8-56766b8e46c4", "sighting--7c962216-f05f-41f9-96d9-c5b4a898dde3", "sighting--0ed39102-f663-47a7-84f2-8b99ccc4bf54", "sighting--efc1abdb-7753-4067-85cc-2f13e0044063", "sighting--8fe0a639-1fce-4c9b-998f-30bb3437d419", "sighting--3efbbba3-9628-4ced-8e66-f927cc10d667", "sighting--9a7462e7-bc85-4e66-8540-b023d0c528bf", "sighting--48664610-2c55-4d88-9c4e-269ddaf1dd4c", "sighting--6ee6005e-02f3-4be3-ba90-be570a8f81bc", "sighting--b84d368f-a883-483f-90eb-9093f3675a71", "sighting--73387a9b-8c15-4c1f-8854-dd2157c1a4e8", "sighting--75aa6d51-04c4-491f-bac5-8dab47283a3e", "sighting--e0ba32b1-6b9c-4e74-9ed8-f669003052fe", "sighting--00f2b280-5cb4-4094-a2f0-af92502cfd1e", "sighting--4b0bb184-76ae-4840-8160-57f04cfa70b3", "sighting--0c80a93c-2633-49d4-9344-e6f5486c1fa9", "sighting--27db953c-f7e1-48b2-b295-c2486aa9f467", "sighting--c56ca125-3c18-4f7b-81bf-0966ac34da58", "sighting--e934462f-c518-4e3d-b2c7-a91f505540cd", "sighting--e05333ed-335f-4fe9-b71f-a8e8ba8ad52d", "sighting--3e3d6d5b-2992-4857-a43b-28804ad8d917", "sighting--a4ec30d4-390d-4933-a2df-df49bc265127", "sighting--953853ae-4e8c-430f-bcc6-4fad880e3723", "sighting--a55ad8cd-f037-49d0-bfa6-ff689ac8af28", "sighting--9cc255e0-7492-4c08-a271-3f22d372891a", "sighting--f3531971-982d-4e4e-a794-6fa3836d3794", "sighting--a42c44ae-174f-4edd-874b-5ad41b8570f6", "sighting--033f6644-8df7-427e-b86e-8147e621e5fa", "sighting--9106300f-b480-4706-a147-da2e2c3fa492", "sighting--0d34378f-ebf2-458c-9c41-4725f44454b3", "sighting--fee00663-925b-481d-affc-1c2d8d5168ee", "sighting--f11244bd-8ccb-490e-8a36-f9ac123e05e1", "sighting--aac814e0-ce83-499d-b359-e703f48e758a", "sighting--4dab2b57-ebb6-4e45-a4a0-ea610f0ba6a0", "sighting--13f2b7e1-9f20-4578-b96d-6a53d14730fa", "sighting--87d745af-d116-4628-8630-9e07fc18d1e1", "sighting--a474deb5-dce9-4e8d-8a9a-256ef4aea27e", "sighting--326282fa-7f2d-4a25-871a-5f5f2790b818", "sighting--d67c8015-8203-450d-bbd3-e0bcad80f167", "sighting--5a2cb91c-e0ef-4183-8875-d686d5eec351", "sighting--3f157c6e-7c56-4b49-b5a8-d51c83eef4c7", "sighting--8fa911ab-3609-463f-8618-c86edb73211f", "sighting--06278539-6ea5-4c91-834b-ee180fd4429d", "sighting--66eecd72-843f-419b-a078-fa88af3e763e", "sighting--572a9f5d-4a14-4f50-8477-82d3c87cdc38", "sighting--14a110fd-c5e9-4c08-b7c5-c232d8673736", "sighting--d70ed2c0-7435-4ba9-8f2a-537f68d1d0e3", "sighting--34f30b5f-d8d3-4714-b6be-9c7ac6e06a70", "sighting--f17c81a4-aed2-4bbf-9794-653abe2db383", "sighting--736e4075-92b2-4287-9a8c-e9c8aa4b142f", "sighting--67c35531-e45f-4266-a677-a2caadf7ef66", "sighting--1abb073d-9db5-49d3-80bf-ff427563010f", "sighting--a896993d-addf-4ede-8c45-8b2c4007223a", "sighting--664e83d1-05de-4bff-9c54-85503f199b68", "sighting--d35cf509-98ea-454b-89cc-70b1c0e08566", "sighting--324ba482-3871-4d59-a143-f99410754eab", "sighting--24224102-46a6-4e16-9181-1ea8696702ef", "sighting--894832c0-4619-4a05-a272-2aeaf5bbcc99", "sighting--efdff459-b7fc-4656-bbde-0352b694f17e", "sighting--ac01937a-2b50-43be-a1e7-4e8f4fa4187e", "sighting--6e564f9e-3f92-4344-9d02-d1561dc8369a", "sighting--7de74bec-6d34-40bb-869f-bd29c7eb9544", "sighting--edcca90b-7d6d-4873-ae73-ddbde345f39e", "sighting--76055106-e372-4e1a-a9df-ad9e13c5d077", "sighting--a75d2fe1-6e1f-4161-b2fe-0403d0c4cf89", "sighting--5e2408e7-c111-410e-92b0-601e3a17593c", "sighting--a3ee510d-4a96-40c0-b489-e8fd4efd2975", "sighting--a9c47f1a-76ad-4b2f-ae32-ea4577cce60a", "sighting--1a05e0a0-45a6-48d0-bc39-9eca8f798f20", "sighting--5db1f26a-b9ec-4406-85a6-0dccaee31bbf", "sighting--0ef636d3-2c4e-490b-9e88-cb2232129cfc", "sighting--3b66f986-e094-4109-80c1-066a8ac0cab0", "sighting--1f88e65b-7bbb-4352-96be-f60d2f6622cd", "sighting--65cf672d-3b63-4cc9-8737-401ebc56dd55", "sighting--7cbf0dd0-3527-4773-bb35-966f589973e1", "sighting--29589a61-5787-4399-9819-332ff7c90b01", "sighting--a8fa63cd-72a6-4a48-abf8-a7fb772148ef", "sighting--871bd241-14a4-4da6-9be8-12624a190aa4", "sighting--df2b9c80-01c1-4ded-bc40-aca79289d4b1", "sighting--dd65f2ee-ee5b-4948-b0bc-794cb043a3a1", "sighting--351528de-c841-4049-9b1e-7e9ea85013fa", "sighting--65647c09-a60e-425d-bf8b-14c25ee67309", "sighting--8d1a2bc7-bfa5-490a-8ce3-02ac069cd5e3", "sighting--ece696ef-3725-4264-a2ff-dd285ed7f8ca", "sighting--39d56c51-5941-415b-8046-f325862acb8d", "sighting--7318f8ad-995f-45f2-aedb-2564d04ec12c", "sighting--23a0879d-5931-4a9e-8987-4416502e9340", "sighting--b53102d7-386a-4c42-b0e7-0b4ef0f871ad", "sighting--14dbd875-8f40-4981-bafc-41b4aa62ab70", "sighting--76bff4cd-3205-4b21-8bf7-f194acdc4130", "sighting--217caebd-2f08-40b5-93a8-22e317366ebc", "sighting--8554e5d8-6a3c-4754-8088-756987dc894e", "sighting--6bf10c38-5713-44a8-8195-f21d67d71dbd", "sighting--b919af7c-fdf9-450c-a5f2-907b4f318fee", "sighting--b03631d0-913b-4ca2-851c-768af965c6b5", "sighting--c73cfa7a-5dd0-402d-9494-476b215f03c0", "sighting--18e23759-1313-47b2-baf0-16809ecaffe9", "sighting--27c7616a-8bc2-4027-9980-b7c63940e444", "sighting--14fb5b14-92d5-4eeb-876f-06dee78539a9", "sighting--902e5c9f-099e-4ba6-9584-f9ddec6a14c2", "sighting--ebcd141f-8c3e-40a4-bd0e-2ef32768a7d3", "sighting--08e2a422-64f7-419d-b749-75600ce59e23", "sighting--72fef51c-a579-4860-91aa-a918e186e962", "sighting--85fe33a9-fd3c-49c8-98a4-79fe563fa56d", "sighting--e698e752-b541-4c08-b678-930724fbe4af", "sighting--3cda831f-a7b8-406a-b9e7-e04318a55c08", "sighting--9b3d1a1b-cb59-4b6e-86de-eeee90983723", "sighting--dfce9bc5-f0a3-446b-8088-c1724f86162e", "sighting--ce21896a-ae1d-460c-8121-2a28687e9266", "sighting--10a63f65-ee9e-4e23-9644-556b3ede4d92", "sighting--ed3642d2-d5d9-4b6f-96bf-61dd255c4efb", "sighting--8edfa8e2-8c7e-4457-a5a6-506e09385b3e", "sighting--437e6732-1731-478c-8743-cb40e953864c", "sighting--34936a44-90c7-4967-831d-b3c8139d636c", "sighting--79a1047b-07d8-4339-89a1-07b81e2cb7de", "sighting--9ad03120-3f78-480d-8187-99ce0258a3eb", "sighting--bd9a06cc-8fd0-47f0-b16e-164e18b33f9e", "sighting--f8f8a698-85c6-4180-a69a-39d309d35cc5", "sighting--5818d960-c64e-4f8a-a1b6-df7394b0a2e3", "sighting--05b8738c-a87f-41a7-92cc-91d60265a887", "sighting--008938ef-8e68-4f97-8951-eb4cdcd5c6bc", "sighting--2da40be6-f0d5-4629-84c8-983c32a4319d", "sighting--d611fdd6-459a-4b60-a281-898e0c33e671", "sighting--bb3efc56-6008-498d-be2a-fadb90e99ea6", "sighting--90eee761-7e05-476c-bc21-0241c57761d4", "sighting--4559274f-979e-4926-924a-59c6c07b9371", "sighting--9b37a31f-7637-4c90-84a3-e98fe9a7b94f", "sighting--f9389140-37ff-4f7b-a724-eba687579863", "sighting--c0448066-7247-4abb-a57f-09feeba52ed9", "sighting--3aa795f4-34ed-49e2-bfbc-4ca699279d4a", "sighting--dcc0e6b5-f6a1-4ccd-8673-05a52e3c2130", "sighting--2225ad23-6764-4890-9a9a-bb8600fb3054", "sighting--44e1b862-e45c-4441-a049-2b1e0c6cfb04", "sighting--3107337b-9b67-4f5b-89cf-2d1b2b3bb98b", "sighting--47761090-53e7-4956-9c32-b5d174a2cc09", "sighting--f2123808-f1da-40da-81e1-a3940e6ea55e", "sighting--68471bcc-73ad-4ed5-add5-89dde142ef6c", "sighting--422086c6-92e0-401a-9f6d-5b27eb6116f3", "sighting--1a56625d-0cce-42dc-889c-2c5ecf02a323", "sighting--a00eb0db-a7b2-4826-8a5b-31433099061a", "sighting--337118ea-45fc-4b6d-88b8-5b15391013a2", "sighting--ce215330-7072-4484-b8c4-7b4865cf44ab", "sighting--10b5127f-60d5-413b-b8e6-2c62d434d0dc", "sighting--f03c9e77-cdfd-435b-9032-170a748c6865", "sighting--98ac56b8-bcb3-48fb-941a-30169819e833", "sighting--ab195a46-21f2-47b1-94c8-f7e33abe144c", "sighting--4baf80ef-8706-4359-bcc2-6b3250ca9355", "sighting--18c43db3-b829-44ba-b839-3dfa7c22af37", "sighting--6f057116-dbfc-41ce-91d6-2001ef11537a", "sighting--e16b68e6-1ff0-4446-a0c3-891074fa7549", "sighting--f6dfd6b4-9a7d-47fd-8d84-ad473d13ab20", "sighting--70c7d9dc-3d95-4b64-850a-fdfe8fe9a998", "sighting--216664c7-0339-4483-9cc7-93537d2f82bd", "sighting--b179e2e0-382c-44a4-bf4f-deb239c1515d", "sighting--9df1e26c-6146-4975-8936-d8357eceb9aa", "sighting--e3675ed8-7b5c-4173-b6d6-3557b64325da", "sighting--e0755659-f1db-423b-9b23-0e26cd394d6a", "sighting--980921c5-a168-4153-b335-8c6871dfdf56", "sighting--670268c0-6684-4751-881e-7ad22450e746", "sighting--e46f0481-422f-4e9f-b49e-bff6a29b2805", "sighting--20993c93-9635-441d-927e-7ad79061ed31", "sighting--ad3aae81-c819-42c0-821a-3702944c8522", "sighting--fb260980-9c63-41e8-957a-17ae83f72132", "sighting--01a65bd7-09d7-456e-9469-938a6cf2ea37", "sighting--eeb29937-59be-4883-9725-2a06fe5884d3", "sighting--e39d7ad4-feb3-418a-a9ba-b8ab0aca19e0", "sighting--4723f10a-af0f-4804-a11b-b84184613a49", "sighting--33a8ed81-9356-40ad-8e14-ff452e86b291", "sighting--b96d5ac5-1b34-4638-a959-137ff3dec72f", "sighting--74512a44-4f47-42fc-a5e7-4ec7823f2aed", "sighting--3720743f-df84-4351-883d-5f83bd70ed68", "sighting--54d58f27-2c85-4e1a-8d67-73e4eef9cfad", "sighting--66ccaa29-40db-45bf-9f72-0822e5d40680", "sighting--4ee20524-effa-49e7-af07-e8086eae2712", "sighting--8d110185-6316-4173-86fd-35410547182d", "sighting--1cee9dfa-efb0-4aac-bb16-571c0f8d17b8", "sighting--9f4eae34-957b-46dc-b4e9-d9dd0e4d771b", "sighting--e8f43c4d-2588-4617-9f12-535777a3b38b", "sighting--74ada09e-68b6-4970-acd4-cb18c5cb4287", "sighting--aeca559b-d85d-4a82-8d89-c5066d553288", "sighting--a2ed240e-04d5-4569-8360-7f575c2762b6", "sighting--45282c66-29ea-4faf-a628-1064c1ffe59a", "sighting--c1955fc4-8af6-40cd-9ae6-4a7e93efd7d5", "sighting--c53bae1f-10f2-4c6d-ba7b-27b25446f2eb", "sighting--593df9e7-18cb-4df1-bb2b-0de99a067d8c", "sighting--288eabd4-4f0c-40d4-ab64-90d29c9a369d", "sighting--8456c1dd-9604-41f1-8fbd-15c8e20186ff", "sighting--d0314122-5486-4d84-a43c-b6d221866860", "sighting--0c7fd1a4-522a-4449-9acb-88578e5cca27", "sighting--09eb8ad6-8d04-410a-a835-9a5a4c491f72", "sighting--d6b447d9-4f85-4b2e-8d0a-88193f4b9dd8", "sighting--998282e2-e22f-4b94-892d-c67276c968fd", "sighting--351b0f22-4859-4cab-aff9-c9fee034f2ad", "sighting--fd80cdaf-501b-4c42-87d3-324dbef47918", "sighting--e230f236-94bd-4749-9c8f-d5823a377ac8", "sighting--46a5d3e0-afe3-450b-ae3b-d20aea0273fd", "sighting--719af436-c3c0-412d-b105-cb64f101f0da", "sighting--b7abdef2-dc31-4c0e-9a2e-49618aec8599", "sighting--d07a72b5-c952-4c64-9abb-9e07423082db", "sighting--290c7771-0b6b-4919-bb27-7f44ecdbac07", "sighting--5aa35ea2-4ee4-4880-bed6-2f85da6f5379", "sighting--2cc49117-a00f-4dab-afdf-b1c14f775470", "sighting--f2915bf2-9b8d-4ad4-80c5-c3885be2fcf6", "sighting--75936e39-4d87-4637-9f8e-6f458e0989b0", "sighting--bfafeec5-de3e-4e6b-ac96-5d3578341e48", "sighting--3e0e5d28-dd9d-4b38-8056-6c2d5dc37cc9", "sighting--c2062eae-4584-45f0-8a3b-35bbbd21492c", "sighting--8e292c56-5ea6-4c18-845d-bcc036fbbee0", "sighting--4c0eb454-be6f-4b4e-a91f-61ef0b605601", "sighting--4c754368-f896-489e-839e-7d47ec33ab15", "sighting--433d320c-cf10-4f61-a908-e6536a0ea002", "sighting--12f3b566-8993-40b9-9db5-d770d588192d", "sighting--c3d0251f-fa10-4590-83fe-dd071ca748db", "sighting--c631281a-d91f-45a3-a296-5dc2b0fc4b27", "sighting--e23a8e37-261d-4562-8c78-e06633cbfbec", "sighting--e342a90d-2d05-4501-8a1f-fd2d51835abc", "sighting--3a1f071e-baf7-431a-a7eb-0fb0c23811ad", "sighting--67220d38-07c1-420f-b735-ea8ae7fd3998", "sighting--f23fadb9-7810-4beb-88b0-c6ee01e0bdb3", "sighting--e080bf33-bffd-4f20-a279-c6eef6f5f6b2", "sighting--551f7a26-c1e9-4dd9-8208-634f6c729e96", "sighting--9fc7e92f-df32-4f37-aa24-8ee486e02897", "sighting--2fe348f3-4e47-4576-9253-558b10ffeb5e", "sighting--648a972b-ffbe-4218-be51-03c7671b4034", "sighting--fdb79c78-66b0-4c76-a7a4-ebeb2e5370f9", "sighting--ce0e03e9-c4d0-4758-a0f4-c9f755b20309", "sighting--dcc1c5f4-f384-45c2-9af0-9848d758f590", "sighting--e5446b12-c9ce-4182-aa34-5584bd706207", "sighting--8379cec4-3a25-489b-9241-3206d021c544", "sighting--e015b844-1575-4487-9f1b-b0085d4985a7", "sighting--3dd9f9ac-a5a6-4cf6-a96d-e859df773db8", "sighting--5234b12a-2d1f-408a-af07-2efb76a00185", "sighting--69602f0a-88d4-4f37-a279-d6677a42ef8b", "sighting--fb883792-4efe-4098-99e9-b0a6c169c144", "sighting--01eaccd9-dc19-4848-b18f-260b8dc56761", "sighting--8ca21020-118c-4613-8585-9fac59fa7ef2", "sighting--9dd6f108-5f8a-46da-ac6b-f72ee2ac5626", "sighting--16a41867-c711-4184-9f4f-262656c758d9", "sighting--2cfa85c8-a419-4428-af5f-52443520cdee", "sighting--7c0bce02-5539-4067-9207-68c806c66222", "sighting--203b5854-73ce-4eef-a024-012c0b7750dd", "sighting--7c9cc2dd-076f-4083-84a6-ce99250a7057", "sighting--e95df1b1-1309-4a38-b87c-67d154789a0f", "sighting--a5373b87-386e-49d1-8853-01597172baeb", "sighting--e987b818-1575-4594-9568-eeade816661a", "sighting--e9c60f9c-543f-4606-864d-af3f2befda04", "sighting--8fdd0a6b-cd66-4d8d-9089-e9100b62bcf6", "sighting--a0517f9f-9784-4acf-a7d9-f73ac5c2140f", "sighting--e38c661a-c9c6-4251-9612-be2e770e6b1f", "sighting--19c45cb7-3abc-4c5a-bceb-b25c14fa46e0", "sighting--fd4b457f-d440-49fb-a243-9b6743924ab4", "sighting--612f7456-ff43-4eb7-a4b7-8b606e1c7abd", "sighting--c386f647-c5b2-4170-a1ff-ab013ddf70bf", "sighting--d28503de-9c2c-4a55-834c-d9a36c003d89", "sighting--7c114ab9-86ac-423e-ad5d-d8d86685895c", "sighting--9ba5c1e6-f5cb-46b4-8f76-8167dc6864dc", "sighting--6f407b1b-4e52-4de9-89db-0e6c3172ab72", "sighting--eef617a4-3efe-4b92-90a0-bfa444697149", "sighting--c2305e47-1657-43cf-9785-5707f7dba3e4", "sighting--6fe0b69c-4905-4418-a4a3-f31a37823bde", "sighting--439c0e2e-dfb7-4455-baed-c5a67f445a20", "sighting--5df9c409-fa0f-4c7b-9869-05a78bf1a237", "sighting--f62e95f8-0841-4342-a692-19a29743455d", "sighting--366056b5-d177-4e10-8d67-9fbb555db468", "sighting--05ebddbd-1be6-45e1-9639-12bfb95c1aae", "sighting--e7979804-d1f9-489a-89f6-10e75a583a18", "sighting--41f90b8e-8c9a-460b-a7be-d976773ac0c2", "sighting--e9caf0cc-13a0-4132-9318-c14bd0d5884a", "sighting--9d5bbb1a-2044-4400-98b8-128e67181552", "sighting--a55f4d73-fb2a-464d-b30d-f563fc7960ba", "sighting--88ba79cc-b772-407c-8f9a-a23036d25715", "sighting--cadd4997-fd54-4d16-ae59-c4983d5b92d7", "sighting--1508e97a-9c28-4bae-8c2c-1825d47bfa62", "sighting--822ac4ea-a610-4b12-bdc8-1ab108416d43", "sighting--a5d28496-79cc-400e-b53b-722adc7027e1", "sighting--774f04f0-8418-4895-9309-816ffb528c79", "sighting--240cd6f3-23d2-447f-83bb-2c21db8cacdd", "sighting--a15d5e26-4738-40b6-8c4e-f412e74b4e52", "sighting--f8ea66c2-a688-4a85-92fe-58fe5b9aa4cb", "sighting--51512ade-0339-4eda-aeb1-6c5b4b4e9c85", "sighting--815bc6c1-7ff9-4d2e-a6e5-ff69ede8931a", "sighting--14fca589-2fb8-48d0-a2a7-79ac059fb4a7", "sighting--07070ed0-120e-45a9-990c-f66f140af4c5", "sighting--59014721-1fb9-4358-909c-fd96bab05b4d", "sighting--7c01a1f0-0827-4fca-9edb-d5161f2b0171", "sighting--88fa148a-818e-4315-8ddc-7286cd33b5e5", "sighting--ee04bf6d-f5f2-4ae1-9998-804b16143cbd", "sighting--6de777ab-a518-4c0e-a884-4e7de0496869", "sighting--379b44f3-4619-4835-9030-18fea181c12f", "sighting--913aa70e-f179-4274-8d7e-8cea30ac4124", "sighting--a877b059-12c1-4f08-b490-e2979870d118", "sighting--f34269f8-de56-4dec-bfa0-1970c80048e0", "sighting--1e7227ce-2f7b-4a5d-9a53-2fc930cb138d", "sighting--91078c24-db41-4c3d-afcb-629f5c89a49c", "sighting--b65f9c11-102b-48b3-93fe-cf309397e5db", "sighting--2c81f5e8-f7d4-4ca4-9965-d020a642e60a", "sighting--838cf378-6821-4f32-b265-4007e013a717", "sighting--4d994870-a0d6-43c6-86e3-f3596292fe3f", "sighting--02567754-6a26-42fe-8469-f024862da21c", "sighting--63516025-4fce-49c3-bd8a-5526457df237", "sighting--eff8948f-7697-435e-89f3-7ef65a15ff2e", "sighting--3352da01-1985-4f49-93ad-0a9e0d164f99", "sighting--eacd281f-aa0a-4e8a-bc94-3ded48ae2c27", "sighting--6c1ce0f4-2d75-47a5-bf33-51155a4dcbc3", "sighting--f61ca687-9b36-4c5a-8519-97cf4ec2c914", "sighting--c4af6fc1-afa5-4034-94b3-6595bfb086c1", "sighting--0348ad00-2ef5-4580-a3c5-86aac8e332d6", "sighting--5da6166b-c620-4af5-81c6-13101fff9288", "sighting--35b881e3-b6f0-4cc2-a403-40f5bd1e80db", "sighting--a93dfa55-a7f2-4aeb-ad56-fe8e46c6057f", "sighting--9494de99-2735-4d23-a477-af3825f8c457", "sighting--2364b5ac-cb01-4417-a0a6-9f56abd39564", "sighting--62e609af-9eb3-4d28-922a-6155d72cbc7f", "sighting--3cc16188-b1a5-4e72-ab2f-f2ce0a418eeb", "sighting--98c7f089-6572-49ae-9d99-d0ceeecf020b", "sighting--4a1a3d9f-dbe6-4b97-abc4-6a0d30df9900", "sighting--4bdf780f-3bc2-4044-85e6-207a620d2aa4", "sighting--c9552576-912a-4644-b248-e4ff33b235df", "sighting--b924f009-3194-48af-89fc-746fe598ed39", "sighting--5d6d2a13-f42d-4695-9dbf-e1edec68b41e", "sighting--b2b6d8d7-f820-4c2c-b1b4-6f0ead5a2130", "sighting--b4d5540f-b793-4f8b-9a15-2ed65bbddb2d", "sighting--0787eebc-8ded-4151-9d62-b57b4207eb92", "sighting--c817d6ee-f6da-45f1-ac57-45a2298f29f5", "sighting--aba48b3e-aff3-4bb4-907c-05f20f4a7bc3", "sighting--5b98d29b-a604-4a0a-8fde-7eb3296f19b6", "sighting--88756abb-4be5-41e9-b23f-395ba983035d", "sighting--0b4e23ae-6903-4b30-bcff-e870c2496f03", "sighting--9c071670-e35a-4ca8-b91f-42a59d779a2d", "sighting--5abd9008-8420-4731-b23b-c74c4f70a2ec", "sighting--e8c1112a-76e3-4bcd-91fd-1171c83ed1c4", "sighting--5eaeffdb-a3a6-4e34-9101-7fdbffa17109", "sighting--06b71fb7-fd4a-4196-b1d3-2ba50853396f", "sighting--815e0b85-d2e0-4c3a-8ed1-e58efa660b25", "sighting--90dcb56f-6e67-42c4-8383-b2eb17116616", "sighting--d124c346-a79e-4093-a1e7-afbbae83c27e", "sighting--2d56a554-6cb5-4f2c-90e0-893fe70bb20c", "sighting--7f040606-6636-4712-8a69-7984d1cf6d00", "sighting--c3b26c03-55f8-4de8-898b-0fd809324d0c", "sighting--04f15aea-2ad8-4de4-8f85-622fac4581d6", "sighting--52847cea-4017-49bb-bee8-0368f6fe9165", "sighting--ebee7662-d2b5-4ab9-982b-a3e1d4797f27", "sighting--6b957603-9f83-440b-a5ef-222de6541dcb", "sighting--4f995898-dbed-4b7e-8ed3-6ba1585960b6", "sighting--3c01e9f8-08dd-4e91-9fb3-3594835f0c4c", "sighting--e3046208-aa0c-4aae-94d0-f5330aaa9006", "sighting--f1da0c16-02da-4ea5-a09c-253177c7bb5a", "sighting--4e8633d4-e7b1-436b-8b94-5faccf5f57f3", "sighting--8e6ba3c1-5b0f-49a9-852c-4cea4678e5d3", "sighting--8c86069b-058e-4b94-8a21-9acfe49b8c43", "sighting--e72b7ea2-1a34-43a8-a4c4-fbbe3e80b984", "sighting--ad5ec493-2e66-4b43-bc25-07727cafe2a5", "sighting--bb1f9645-5edb-4ca0-83ce-63224c0d8407", "sighting--6f1f09a9-cf48-4cce-95b7-038465f8fca7", "sighting--58453cc2-c869-4360-ae28-afe0be8b1070", "sighting--8e2274a6-5b11-4648-8ae6-dc6e13b066c9", "sighting--e91aab9a-481f-41ff-9916-62cfcb7cd452", "sighting--2dc03b75-f7e2-4d03-a8d4-9407cbd65895", "sighting--e1072f95-4307-4885-b3fe-9af26582b6cc", "sighting--99caf77d-49ca-48f4-a2a5-a26e19baa86f", "sighting--d2ed8cdf-1271-4ac0-87f9-e8e1ba4dcd2e", "sighting--7fbfabfd-8f4c-4471-a8ff-02828595ae4b", "sighting--de7f3c01-5892-4199-9c81-ac0c4347eb44", "sighting--c1401320-fd98-403f-ad58-39a4e9fcfff5", "sighting--2649f714-98cc-4936-abc3-38eb982fae8e", "sighting--778963b6-ef17-49d1-a1aa-f4afd053b538", "sighting--0c81fc7b-a5b1-4eaa-9af7-0a2ec39262f2", "sighting--bc82848c-9d6e-4b08-b02c-769b38f97b0c", "sighting--738203a3-0d6c-4776-9d49-cd0dda79e01d", "sighting--4a8e3557-ee3a-44f9-81a6-35656918861e", "sighting--984f017c-379f-46ea-b9ee-1208aecc04f5", "sighting--09a391ed-5a9c-4830-9ebe-f7de42a9b5bd", "sighting--082c7c94-cd85-408b-b11b-e661e3044245", "sighting--c31dcec3-42f3-42d9-84dc-1d81b8858d9e", "sighting--1677f11e-8cff-45a7-a5b9-0678e982823d", "sighting--b85ea82e-d325-46ff-a682-fa6b608d892d", "sighting--d2df4f83-d4d0-4630-b41c-081b7e57326e", "sighting--9040dcd1-b863-46a8-8b51-5d75c004314a", "sighting--fdcd6a80-5728-4d2f-bfde-735deb6f8f95", "sighting--c42fc4b3-1b93-41f2-af36-6e815a0f9320", "sighting--6c48872f-de8a-4eb2-a008-4878f30ed294", "sighting--e51b8189-cb0b-42ea-be16-9a38c9581fa0", "sighting--ce5b766a-0c92-448c-af1b-f0069ce91ef0", "sighting--d5ff68a5-91c7-4f73-b399-0811ec24ef19", "sighting--aa1928f7-1507-4ac4-b99a-2177a29309a0", "sighting--9bbe7d82-429c-46d2-ad8e-03b8d30865e1", "sighting--9ca2c8ec-2b77-4c56-bd25-80447cee5dde", "sighting--10d26af4-cb78-4d67-8c37-105fe2b07b06", "sighting--c36a00a7-209d-4a5f-b71d-3e39242282de", "sighting--dae5c5f2-88f0-4f74-9d19-311b380b7d31", "sighting--5defd1e8-bada-43c5-b931-871ff2007072", "sighting--aa87a6fb-6a82-49b5-88c8-4c8d2c85ff9f", "sighting--b791cbeb-d152-4a45-9b45-ebb04840b2e3", "sighting--1cd57b3b-7015-4143-bcff-f55864d99310", "sighting--b09a5266-5618-42e7-b546-d6bf644d28a2", "sighting--77d54001-c226-4fda-861f-7df63e5c9133", "sighting--abc41a77-563a-4845-b16b-c5e092da9149", "sighting--136a9900-68c4-48e5-97e8-e8a7648048ed", "sighting--54a82829-be10-46c6-b2bf-bec252e260e7", "sighting--75f0f9ba-6d3a-4516-b50d-ce156cebcce4", "sighting--b5bff024-c3f5-4edc-a139-14c0d392479d", "sighting--763d14e3-11e1-4d27-8306-e1e437c07d38", "sighting--c61cdb9b-785d-4632-a9f9-9370d245d444", "sighting--c1599575-a8af-456b-8650-d85f31911774", "sighting--011882d8-1e62-48e9-902a-3f73f97fe338", "sighting--2216d98d-ce21-4661-9a1a-ee851d31f71d", "sighting--3e949837-46b5-4317-95d5-a7370194394a", "sighting--7525e60c-7afc-4254-a0ea-19229b149c66", "sighting--4c0ace73-32b3-45bf-842d-ac019c59b3b5", "sighting--71bdfdf9-e858-4dae-b1d2-bf27d79d76a4", "sighting--6f6c80a5-9146-4a96-b972-8373ea7c298a", "sighting--5e8b2f3e-3c2b-4d5b-afff-19a4b6e0c73d", "sighting--fa74b2e1-90c8-4b7b-bdd2-b8fd9530e99c", "sighting--e98cbdfa-63c1-42b4-947e-bbf3c7721efb", "sighting--beb3b3b7-c01b-42bb-9946-428607e2f4d8", "sighting--f6fa632d-0be9-40d0-af9a-292b2488fbdb", "sighting--f467d94d-4fc4-4860-8fe9-19c0fc1d6e50", "sighting--7929fa7f-d398-4c13-8371-e99ac9b65f8c", "sighting--7eeefc36-417e-4ce9-82cf-1504a4980702", "sighting--7de672ea-76ac-40fe-81d2-f54269326753", "sighting--c02b782a-24d7-4be0-ace4-10dfa474a8ec", "sighting--698e0a93-38e6-4df8-808b-026f1a7b0511", "sighting--d215b4c2-4c83-423c-a9ad-ef63a69687c6", "sighting--a4b03915-56c8-4c9e-bdad-915bc1666d80", "sighting--f117ca9a-3f0c-487e-a3f3-7fc9a9f3a404", "sighting--6cd7b910-1aca-442c-8c7e-66239110843a", "sighting--aa978578-4f0f-468e-9846-80a6067ae510", "sighting--bf1064d7-0aee-49e8-b9eb-c4b8a52397fa", "sighting--de3385fb-3266-42cd-b09e-682d04973a67", "sighting--9fd93e1e-91bc-4478-b5ca-830d337a67d1", "sighting--338a537b-60aa-4887-8aa2-d937454452d2", "sighting--16d125a1-7b65-4df9-95f4-5ed94d26475f", "sighting--56990448-29ad-425d-91ed-64db770a11b1", "sighting--b824b5e7-d9a4-4c3f-bbe6-d3bf6ca91ffc", "sighting--6fd21e4a-2aba-42aa-996b-9fa42b6f5078", "sighting--fd2abf8f-54f3-41b5-8bfb-ee5824c59c1f", "sighting--b933bccc-6fdb-4163-ad9b-7e2b5e8d607b", "sighting--c48f2bd6-e0ad-44a8-9796-62486f281749", "sighting--215a38a6-2526-4be9-814a-4f671c986587", "sighting--fb1ae2bb-bd14-44b8-88fe-d8040fce0aed", "sighting--1dc09e9b-f8cf-4179-a05c-06e4ea3308de", "sighting--51482d80-e307-4b8b-a3fa-85f07e85b938", "sighting--46f31862-e2c9-48d7-81fc-086a9f85c0de", "sighting--29cdd084-751d-4595-9b7f-e3f55c3a3db5", "sighting--39d9574d-8843-4d51-af2b-bab8d716dfd1", "sighting--53eaa7f8-4d51-4335-bcc1-2c0bbf390349", "sighting--43eeb030-12be-43c4-9e56-bc71f8afa604", "sighting--1adb193e-0d76-4686-ba59-9ce32d300668", "sighting--f3550c85-31f9-413c-aa7c-b0454518d3da", "sighting--2aabee21-e5f3-42be-86a5-53f60ba22c1a", "sighting--5413169c-fe70-4128-9265-d5d3db9d380c", "sighting--1a2b588e-aae2-4014-9d37-0c8bf6a57784", "sighting--f588d24a-44d4-4bed-a87d-d7e83bffd516", "sighting--973d21a0-c273-4f86-b4cb-757aa2c0b726", "sighting--954d68a9-c486-4595-ade0-809c72e93897", "sighting--3d64a35c-976d-4dc6-bfe6-54315b1f219c", "sighting--aa7a7535-bec3-465c-93c3-59c510dc063e", "sighting--64092cdc-b2ca-41ed-ba6d-2ac8fcf73031", "sighting--3549140d-c533-4564-8103-bef237221b42", "sighting--c2247517-e2ee-48c2-810b-d54f3bf52737", "sighting--7e77e4ce-ac8e-4578-8b99-99f8929ebc41", "sighting--ae4fb1d9-4325-4ba9-a27e-cd0e50c8f76c", "sighting--6df7aeb7-6979-4e19-8795-7bcda3e0337d", "sighting--8cfc0899-b0a8-4bc2-b727-2c23ca923a29", "sighting--6ffb4f48-0529-4e4c-98a8-5c45355d1aed", "sighting--0e288b66-6227-4a95-a2f8-aa3005d6cf68", "sighting--f06afce0-5791-4e71-9c82-41bc9396cd1d", "sighting--71a991ec-490d-40d8-b752-f7e16fc62112", "sighting--6cab7814-d2d7-4c75-9c2b-e827a5f179f0", "sighting--56328f88-d95e-4ab7-9dca-6b30aaa6b0ab", "sighting--dee599e9-2030-4535-bbf1-08a9f196f1ad", "sighting--ffdfd91a-9340-4f22-a045-2b15d87e9414", "sighting--09b299ab-4870-47fd-820b-b2bd5c4173e3", "sighting--0d71e5ac-9f88-4358-97cf-68b8cc3e29bf", "sighting--b6eba200-577b-4bce-b712-67f99dbc9da0", "sighting--706e29f4-0bc2-4f72-9abb-87291bf73238", "sighting--c9b37917-b0e2-47c1-9705-36769b3b2584", "sighting--d6790987-40ff-4c48-a242-4ff9e7cb960f", "sighting--6588feb9-606c-417c-920d-df89ec00126a", "sighting--cfa521d1-1f90-4a36-9169-c458a21a27d4", "sighting--8f9e1324-b99d-4f1c-81d0-b96d836df8df", "sighting--857e709e-2afa-464d-a800-4b3ff9d1125b", "sighting--f5383164-3db7-4fd4-8aff-6390e16c8001", "sighting--13cd5a1c-16fb-488f-8823-c206a99de3f9", "sighting--e81a0b0d-40f0-4864-8170-3d84475e9a47", "sighting--be6ab5f9-2ef6-426b-8ad4-013411ced27b", "sighting--84839c3a-dba7-45b7-8d79-81f6e30ce488", "sighting--0dfa8f9a-a90b-48bc-9403-25c005476903", "sighting--3e2f0793-65a7-4eab-82ed-f39e3596d0ba", "sighting--a2c2ef7e-912a-46a0-a165-8df9d2647e47", "sighting--b00a17f7-cd57-4a20-a6c9-b71c7b6186ed", "sighting--01dd8740-b2d3-4e80-b6ed-a6ebbd271fcd", "sighting--a64ffd6a-76a4-4e0a-8869-76e9abfd7bdc", "sighting--771041c2-4645-453f-aed7-67b6d2dbd60b", "sighting--a94a641a-a03e-451c-9422-4ad1d9ed70ef", "sighting--527abeb5-7b7a-4f73-af2a-3bb014eb0120", "sighting--c78ff642-dfb3-4532-872b-7658b153eb3e", "sighting--eb2c2d85-38e8-4ff7-bf5c-698da16aed96", "sighting--2bfa6f2c-e599-4703-b80c-85ce639efe86", "sighting--8190ff15-ef7d-482d-a8dc-4884dabb731b", "sighting--402cfcd9-2230-44d1-9397-2d5d4630ceef", "sighting--c2f6f30c-8398-4a31-8138-2363a2790e80", "sighting--c131d772-4a45-4175-bfe7-0e07df631c30", "sighting--2f880989-ef57-4e1b-a088-29cb4ca7eaeb", "sighting--14ce732f-91ec-42db-9984-c8df20c2be58", "sighting--88f96ec3-3d86-4043-bdfd-7a61114e98c3", "sighting--e12ee778-a98a-427b-a49a-62e49766074b", "sighting--c5cf9174-333f-411c-b2bf-6e7769020e2c", "sighting--2160fa2a-d150-491c-9864-19923f1b8015", "sighting--51cc9dec-c036-4989-b992-8a9646b565de", "sighting--dbfe77b1-c827-4973-86cc-554daeb45ae7", "sighting--87cd50a0-da17-4d16-ab40-4ee1391b59f7", "sighting--7a64b772-2e49-4ce5-b8c5-9c36fb4abc5b", "sighting--093349a1-f478-480c-a79a-186ce7c7bd24", "sighting--dec5f926-d028-42a2-9cc7-eb7087c671c2", "sighting--da27525b-0ed4-47c5-8082-68fd77c5b91b", "sighting--5553022a-e91d-48b3-966d-adda2b92a436", "sighting--18a04f81-ea1d-4099-b61e-5d3f0d19c804", "sighting--e7069724-707f-4eb0-ab1d-94580490e7c1", "sighting--66a10739-5550-410c-a63a-b553c8f4854b", "sighting--d4bae905-ff87-4562-8af6-e5c3d68c4d18", "sighting--51187506-aa7d-4e22-922c-bbe2a399d3d4", "sighting--309cf6e6-3ad5-4015-958f-e080ebc14f2b", "sighting--af73c285-038d-41d0-9823-53ebdd0a7520", "sighting--523b4202-df4d-42e2-a510-b880575b7c6b", "sighting--dbbcb27e-ed64-4bba-a823-a7dd6421eed1", "sighting--c3431f4c-c997-4601-a650-da452cd613ad", "sighting--8e56fe94-30ea-4501-acd3-c140868e86f0", "sighting--2b42c995-03c6-4bfa-ad52-c7bfee4fde7f", "sighting--4b788765-c37b-467c-b42e-d71fdeae3c81", "sighting--f8829bac-4a97-4769-916a-e123b904e326", "sighting--d97a7f85-df97-4aec-ae9e-2e215e4f16c9", "sighting--51c49e9f-b4f0-44d1-a560-a1c542d3e00a", "sighting--5110cc7f-5016-4b3a-b551-7fd4ed62d723", "sighting--a45cf835-f639-4824-b1d0-559ca6f4337a", "sighting--09365117-4201-4a63-827b-f251d9729fdd", "sighting--38aa09f0-3d0f-436a-afc0-fe796387af64", "sighting--1669a51e-371c-4a3f-bf72-d19102442b28", "sighting--8ddb3860-0972-480e-8ade-9da349693674", "sighting--970658dc-3e4e-4d44-8130-61da7627c2d4", "sighting--21fac2d6-a46d-491d-a34e-f2408cc2a9a5", "sighting--3ad9774f-00e9-436c-bd64-0b331e50491c", "sighting--af71267f-acfb-41b7-838b-a634b8b421aa", "sighting--d7b32ecc-b5d8-4684-a8c6-7f3454b471df", "sighting--63eed04d-acb3-4335-af99-99e508f51d9f", "sighting--cef6141c-b6ea-4c60-9474-2c8a35d70ee4", "sighting--9d8de31a-2ca2-47a2-8879-9e2385484031", "sighting--dc4dd6a9-71e6-4083-a549-e125f561bdae", "sighting--6c4f9969-57ec-4777-a93c-f9bf2e2ca010", "sighting--6db5ab11-505c-4a1b-8d62-e23b1b777f62", "sighting--a5d5f4ef-be5b-4d9b-83cf-4f4a9e3f792c", "sighting--3ab84e64-9a04-4c1a-8c7e-bc884bd45e3b", "sighting--c07b252b-054e-43dc-95bb-a57ab7548d05", "sighting--3f07e683-18d9-4a8d-b2e5-cf1630c0c3ab", "sighting--720f3a37-0958-45e9-a5a5-405e93431dc3", "sighting--4acd8547-154d-4a60-96aa-4da933d408ca", "sighting--e6d0d6f9-4a04-47a6-84d4-98f80afcd74d", "sighting--0688216e-2120-4a18-8623-8f0b23d2b8fa", "sighting--18874af1-bc11-45f3-9231-4387a2da348b", "sighting--93f27b4b-fdbf-4fd3-b9c8-200433c326f8", "sighting--dbde5231-75ce-448b-b72f-f88b68b6e9d6", "sighting--b94e1c30-5894-40b7-8629-115e091df372", "sighting--4674ca47-d5e0-4711-bd0e-dd09f38afc7c", "sighting--0e00fd99-9d4f-4cca-94ff-aa519ea540b4", "sighting--04008c9e-3dde-4005-8b2e-d027802b335d", "sighting--ee0d4c89-7d26-49b9-b14c-e1a47f3a0161", "sighting--754659e5-ab6a-4ef9-8dfc-f40edcb1d85a", "sighting--c38559dc-ddf5-48c7-8056-0dd9d5e56d72", "sighting--9141eab7-31ed-47ea-96f8-7caf58b6706c", "sighting--08745fd5-6a75-40ae-95d8-fb84dc018dcb", "sighting--d67d8d8a-e880-457c-bf40-199292457495", "sighting--50f982ac-38bf-4f19-9a01-ec373ca780da", "sighting--8a6491e5-e8db-483d-9bf1-1a64acfbcb41", "sighting--ddaff9c2-3d4c-42b3-bb4d-a6a773230099", "sighting--6192d241-c07a-4677-a1f5-8474aa6503e5", "sighting--567f28e7-f0ed-4dc6-99fb-d436ef645da4", "sighting--bdffb215-f476-4a2b-9668-0c720f92005a", "sighting--2a26de09-381a-4ca4-983c-f4affafe9ac3", "sighting--e000dca4-9340-4d82-b34c-ab30d988858d", "sighting--146e18b8-f069-41be-aee3-c2cebd0196c0", "sighting--afffcfb7-3009-413f-b92e-4dc716782b7a", "sighting--94b7e356-82ca-421a-a212-628c3415e846", "sighting--9fa70dd1-efed-4b76-8307-44ea5ce36f1b", "sighting--a30b8ead-6d46-42c8-aa67-af9198a5d2db", "sighting--0e94ed9e-939d-4a60-a939-86d177dcae7c", "sighting--d7528253-36b8-4af6-b864-507f998ca8de", "sighting--827e7af5-7aa0-4ef1-aab5-70d1a0e7f224", "sighting--871b156e-521e-4470-bacc-5904e0c7097f", "sighting--751b2845-b038-423a-985e-3c6c25f116f2", "sighting--388fd9a3-7077-44f4-a1b4-31d066550ffb", "sighting--941f234c-0ed2-4d81-bace-9df06c5614be", "sighting--908c4917-c069-4e29-8f1d-863333097856", "sighting--1376b27a-d448-4ec0-ae3d-e9f4b29d7a0d", "sighting--f8841692-e812-4a05-ab64-fea4b8923e08", "sighting--45a0e5c7-b62b-4ef3-b934-65b546925d08", "sighting--fd62736c-c3b6-4ab6-b0de-81470e8ef381", "sighting--24f525b4-3394-4cfe-bfca-819ab8cb6a12", "sighting--c3ae6ce0-e8c2-4c92-bd34-4593474bd7f1", "sighting--c9611924-bcf2-4ea9-9f20-3f500060f5d7", "sighting--62d8a5ec-53be-4621-a8bd-2dae42c765e7", "sighting--b9ab20a4-fd3e-4162-9c51-9db6f272904a", "sighting--fc20d50d-7d32-451e-9d62-a5f7ae1c808a", "sighting--ff853163-404d-4820-8d3c-2a00c61f75b4", "sighting--01e7aed2-2e46-4137-857f-49f1ba74f711", "sighting--0816040f-0d9d-40e6-9390-d995913b1899", "sighting--2e4b39ca-bf0f-486a-b499-4617b5e66ec0", "sighting--de198e15-bbda-4b7e-8a4a-cc7dd656ec53", "sighting--db4df75a-a0b6-4dc9-9d49-ccf0291e5160", "sighting--db0ada5b-5101-45be-8d81-d068be46577c", "sighting--728c2faa-d2e5-4073-b590-43fc21132e26", "sighting--f1612282-f7be-4670-a79e-8a5c7826ccd8", "sighting--e591aeac-ef22-47da-a123-feee2526e637", "sighting--b6092d8a-35e8-4659-861d-b4d02c40b2a2", "sighting--6f46e69f-db87-4ba6-a09a-4ab74fe13d57", "sighting--5a84ecee-15cb-487e-b53a-6458afe23622", "sighting--905263a6-2fe8-44c7-9bd2-24b6a1c5d215", "sighting--0591a344-85aa-49a5-a295-0e1b0ed4303e", "sighting--735ab368-736c-441e-bb73-30f209befe6a", "sighting--7e07aef3-8f84-4ac3-bec2-ed2ad8a72726", "sighting--519780cc-ce47-4bd5-8ef1-de640e69a5c9", "sighting--1ba558ec-5799-4fa8-8e30-33185e211bec", "sighting--ff6b7539-6da3-4161-bc40-43af932ca8d0", "sighting--2d7cd2f1-d5d9-4487-961b-97c069662bc8", "sighting--ce58bdae-e411-41de-a6dc-c7a65c5013f6", "sighting--ad62f7e6-7c8b-4b02-8d63-614b21f226c5", "sighting--04ad4ea3-5d95-4a1b-b676-9ce32a82b3a5", "sighting--9d1402d0-2623-424c-bd6a-686a9b94de82", "sighting--894e54c7-498d-4951-b646-24565aec75ca", "sighting--32bd61e3-28fd-4ffa-b4e5-7d1db9e61f68", "sighting--c67fc193-ed41-4af5-af09-b551ddaa1160", "sighting--bf9359b3-cb6e-43bd-b1cd-6df7070a5759", "sighting--f7dc1a19-a3d0-4d1e-8ba7-d84ee0ea6db5", "sighting--a62346b5-5c09-4741-a390-33e201c5875b", "sighting--e8f7942e-278a-4c69-8632-dbb01cfdf9fa", "sighting--784cdb48-fe68-4f65-bd5a-a50b350c2836", "sighting--a9328975-6df1-4208-81a1-d3cef2a5665d", "sighting--020e0a5a-679a-46bd-849f-60000792e79b", "sighting--dc304180-a67b-4ef5-8481-a86568549e17", "sighting--b9716de5-9152-4966-b6ad-d88ddf13309b", "sighting--a3f32e29-32aa-43a8-8555-8f01b72735bb", "sighting--ac82bc60-6ae1-48ab-8b0b-21c77b05c657", "sighting--224f95da-78ef-4a17-a70a-9439a17bc1b7", "sighting--d4769ba1-5083-4848-bd75-0a9db8e63481", "sighting--551650e8-3ce2-4758-ae8b-bf073781cdb5", "sighting--2a4dc3ae-ebe6-43aa-9fe4-22645b9c0f08", "sighting--dcc01ad9-8c19-4280-9c52-0cd3b2800d89", "sighting--2b4e9958-0242-40bf-b999-bb0c68804c76", "sighting--662d06a4-deb5-4989-9f64-e1a23c8e21c2", "sighting--5bef2d95-5466-4c45-b96d-ea8a8f9a60e4", "sighting--599f9678-6a79-46b5-9be4-12fc244c2a7b", "sighting--648d4240-cafc-4bd7-bef2-32c3bf35a46d", "sighting--2c6d8a98-384e-4657-8d13-e2ced7e9d6ca", "sighting--8ace7ec1-34c3-4552-901b-abfd7dfef8a8", "sighting--020e2115-c44a-4f9a-8a36-3be7d611c813", "sighting--efab316c-cd73-4662-9e53-e22ba20102c0", "sighting--ca1e88a0-02e2-41f2-9518-20a73ceb68eb", "sighting--3cfdff82-edbd-40ac-95dd-fba2c56c7709", "sighting--9b571a50-a061-4605-b24b-e6f5f47019ff", "sighting--58a895b7-a77c-4837-be9a-ed2bbfdf23b3", "sighting--8d28db86-ba7b-45d8-8d79-f5c4e98bda62", "sighting--b3483d2f-1973-4f49-92d2-b98bbe80ce33", "sighting--c76eecf3-c7bc-4534-a66b-140fc5030962", "sighting--9116be47-b48a-4106-aae8-a65eee3e4521", "sighting--2253a971-d126-4347-8c0e-d197ef433dad", "sighting--fa0c7997-2493-489b-90ee-c88a2702f747", "sighting--53aa56de-304d-4be2-8c39-6b4f514acd7b", "sighting--464778b3-e4bd-4cf2-b2a7-5678e792953d", "sighting--8bca9137-6a2d-4531-82f5-3c54a644a89a", "sighting--a8d049ae-31ce-406a-9e8b-cc36464198ac", "sighting--981e2e16-777b-4504-9a27-ab80f66cdc6e", "sighting--c65052a8-86b5-4f91-959b-2618a5812056", "sighting--375c30f0-a43e-40c5-b609-3142442db05c", "sighting--d7f6d095-98e4-4b35-9c94-0d117b569f37", "sighting--b615cb2e-56eb-4639-853b-8d9dc3a2226b", "sighting--a437950f-ae4a-4b24-b1d1-ff5d37b70e1e", "sighting--69cf63d4-8d26-4972-a357-15f7218898ee", "sighting--ee01dcbd-5e6d-4ff8-ab56-1c6acdf88de6", "sighting--a4d16c54-1fa8-45bc-9206-30c0dca6349e", "sighting--7efb5b7a-f83f-45fd-83e5-3336b8efea17", "sighting--394846be-9a26-4523-9d49-29102fe89441", "sighting--30505b1a-0708-4b3b-9dcb-5f935247e0a7", "sighting--c4d1731b-9fef-4d1e-a273-34d47d25105c", "sighting--2f4a5f6a-ba01-4dcf-8f7c-d1e840691d90", "sighting--8abd6b4a-2e2f-47f3-8983-43c4d3c722d7", "sighting--145b6c36-a7fb-4db7-aed7-a8ad96e1bd79", "sighting--8602a511-016c-4597-9670-8727ea0e5ba4", "sighting--1e16207f-a6d5-4d6e-96bc-15521bc0dccb", "sighting--5f6e1aed-82e2-4fd1-ae18-0f460730a02d", "sighting--46c3ce46-3e0a-4afa-8abb-0c38a740552f", "sighting--6fbe8687-07f5-4c45-801d-b09dc52e5b89", "sighting--1b870f77-3682-4b0f-9042-16fe26274a76", "sighting--dbb18c93-7c25-4fd8-b2a1-abe3f36fafab", "sighting--42dab293-5ba1-4857-b758-fc8d4b2143ad", "sighting--86af6469-30e7-4d3f-8dbe-2f2213d0abe0", "sighting--87a3c868-43a8-4cf8-b3de-d145dc77e6d2", "sighting--f5da1885-6da8-41e7-bcd8-76d024e0d599", "sighting--bc492e21-57ca-4fef-8f96-dc624120f529", "sighting--36e5acee-2c46-45b2-867c-3c4db88aa216", "sighting--15ca3e11-fcab-4ef0-a39f-682a7a191b4b", "sighting--16fc971d-d7bb-4bbe-8188-665758fda049", "sighting--b35d4305-5887-407e-9533-f0f1e4ba859d", "sighting--44522542-ee1f-44d0-81a6-adfd151325b3", "sighting--7e4cfefa-98b9-44d0-9da8-49ea074029c2", "sighting--500e327f-e925-4ee5-9203-e17c468a45fe", "sighting--f1655cd7-26af-4254-aa08-7977e9a3d3e0", "sighting--a438e512-d2d5-437c-86b0-e477fa6e09b8", "sighting--6f586758-b44d-45e3-85d1-fbc699df76de", "sighting--8a7920a0-94b4-4f72-b27a-cf79ac3e1f3e", "sighting--69ad7f55-9717-42f3-9369-682cf513fedf", "sighting--4206c21c-3838-4c25-824b-3bbf7fc6f363", "sighting--a6138e79-921f-4f4e-bac7-92a0a2a5767e", "sighting--a6383274-58e7-4afe-b68c-c011a5e00918", "sighting--18f23e6c-44a3-44a3-b485-33e323bb3558", "sighting--cf41fc4b-0568-4654-8da2-4e7d55eff38d", "sighting--5b3337db-c12d-43c6-bbea-3a843d6e0c7a", "sighting--16fb5e7e-f4e7-43ba-a838-378cb02adf94", "sighting--d607540f-a6e8-49ef-a8bc-19cff53600ad", "sighting--a193dbb1-26fa-407f-ae63-72cd4170d987", "sighting--8cad0dc3-33c7-477b-b13c-6eeb320751ac", "sighting--26ae7c05-2e6d-4771-8602-2bb357ba7085", "sighting--6f737de9-5556-43e8-ba22-53436ceedef2", "sighting--4b5c761a-293f-42c7-a2ba-3e89bdf05c3e", "sighting--c1718720-3220-4e55-90c7-6217d2a90c4d", "sighting--86692bc0-6ee9-4f22-8960-560514a310b8", "sighting--3b6dbdf7-e677-40f8-8f33-241189fbb970", "sighting--0ce0eb85-ab80-4da2-82ec-d361fbd35357", "sighting--426daadf-e880-4342-bd4e-e7fad5d18252", "sighting--e9fe39b0-401f-4813-a34b-117b010141b3", "sighting--689cd18d-47e8-4268-8f5a-d2996b9bf2ae", "sighting--dd6618d8-33ec-406f-b9ef-d596f2bca724", "sighting--d59e42c8-3a88-4c9b-908d-5bcf747e8f01", "sighting--1671bdc3-bf05-476e-95a5-42e2efc40175", "sighting--e20d332b-f4b0-4ef6-a12c-f5ead16dbab5", "sighting--3aa624b0-5474-4d2c-8bed-cb3cd5bb3d4e", "sighting--9a3a6301-f339-4cf2-baf9-ad188525c8dc", "sighting--daf26e21-436b-4ea8-9edb-975c2e144aa6", "sighting--a85e83ca-8c82-40dc-a722-635b89f9352c", "sighting--3778cd60-1fce-4e71-a88e-c0d5fecde45d", "sighting--50c31086-78bc-4ee1-bf2f-8f3b5954ce6e", "sighting--2e102b48-3440-4b14-a922-e8c7ecf21e0e", "sighting--e96edc7b-a3fa-414e-9de0-8ce46aa0a85f", "sighting--4b1b51f6-9b80-4e4b-8485-04990a3a85ff", "sighting--5414713f-740c-4fd7-8f73-16ebef8787f4", "sighting--7c99a605-007a-4250-830e-25c7aa07ef3d", "sighting--126949aa-894c-4fc6-bb9b-7c8ac82e7967", "sighting--0f28d6a4-af2b-44e0-8b7b-ede1e95480b7", "sighting--8a4890b8-1b9c-455d-8e19-7d99f29cfbe0", "sighting--f21ec1e1-4b3d-4bf1-8684-4a81aa715860", "sighting--477a505f-61b9-4248-a0d7-78f183aaf6fc", "sighting--534a4539-d7ee-4600-a9c1-75e1ac4eaa68", "sighting--438974b5-31db-4e74-a061-19d5809ecd9f", "sighting--9bd910ba-e884-4424-a31b-7df3cfb804c7", "sighting--2515b41a-ddd6-49ac-a72b-c2dc66b97b87", "sighting--4d0fe6ff-5b21-439a-92c5-523df4b79f65", "sighting--119fd01a-0863-4ac4-8864-a7d2ab8b30df", "sighting--2cee0ef3-6aac-48b1-a05a-a01996e4eece", "sighting--31fd9599-4a6b-41da-a045-b297b87d009c", "sighting--6826667f-3078-456b-8bb2-4eeb7a9eed3d", "sighting--ccbb6f9a-c8d0-4f21-a941-24a16020b5b7", "sighting--394580cd-ac9a-4645-a217-e007d5bd7d53", "sighting--536db189-7196-4414-adba-dd86c4f263e5", "sighting--4659177e-9173-4495-83ce-78e584eaa789", "sighting--ca487d1e-5b13-4f51-8d3a-b66e653e4bd6", "sighting--fbfd644b-1498-48d5-b310-d50e4b297f88", "sighting--4faf9af6-dd66-4276-bec9-db7e45ded077", "sighting--993baaa2-3948-412a-b8d8-234ce4d5610b", "sighting--60070113-657d-4039-ad12-5df73f52607b", "sighting--852f9ada-7949-4381-beef-fd0257dfdcf7", "sighting--127295d0-0060-48e4-a67c-ab148d27f88e", "sighting--181cc7fe-2cee-4e30-9c25-4e9caf0cb4e2", "sighting--9f948e60-3fde-4333-9ad5-9499d9c9658f", "sighting--d5cc17a4-a7d1-419c-a67d-ca3b232fd632", "sighting--4d8e3ef7-83e4-47cb-9a10-88b3f78dbc52", "sighting--3feff23b-5628-4381-a921-3c4e8a2b5d53", "sighting--1867dfa3-c704-4359-bed8-60e932e5478a", "sighting--efd4e033-bd20-4856-8183-b74e7ea41b4e", "sighting--8087734a-5177-4c2b-8be9-3c846ee9a0e0", "sighting--b33d77f7-9cc3-4d62-ae7b-8df00b97b411", "sighting--9f6955e7-df48-4e85-8602-a879f096e66e", "sighting--7b9ee5de-bf0d-48aa-8ece-f853ca5e5dd5", "sighting--38b4e1b8-42b7-4498-bb93-2016d216a8c2", "sighting--685fae6d-a305-431c-9516-337308e1f021", "sighting--b7ae2358-8b78-4af9-9168-b736ea276d03", "sighting--48db0ade-a297-40c5-b9d1-1188f1e8c5bb", "sighting--26379769-21e4-464a-bc71-ddca190b36c8", "sighting--c95f3a95-2fd1-4b1d-9784-d75b8d167653", "sighting--4dbea3d9-6866-44d7-b23e-dbbd19297650", "sighting--ba1df630-2b92-4c47-bcf9-5def2759eece", "sighting--cc97639a-f858-4c95-a16f-173ee32c5232", "sighting--b89487a7-e720-4dee-8853-5732bd996c18", "sighting--74699a2d-1fb1-4580-ad76-3913b18d941e", "sighting--d47523cb-2da8-4591-bcb9-eca8c8baaa1a", "sighting--3500439f-de85-4bf3-a3fd-d7448d3b0e71", "sighting--e542b28b-5874-4d99-b3ac-9b388e9759e1", "sighting--abe71bcf-43c0-4de8-b6af-be9da397e675", "sighting--61ee4a38-4f7f-402f-afee-ecb20b8c425e", "sighting--927bf190-c150-4e85-a8fa-feec5e64d54b", "sighting--2c7690b2-c9d0-43d6-8f3b-16bf26b9452b", "sighting--0369ffbf-feb8-4387-9640-3df0c396cba3", "sighting--8d2e7e9b-8540-4c5e-9c51-631e183b4151", "sighting--7144002d-b829-425e-b884-5a8de3046597", "sighting--f3f5d9b5-c362-4295-bec4-a252591c8d11", "sighting--0ed6dc6a-97fc-41f4-8a10-0de013b73e57", "sighting--2f3a96ce-7205-4001-b611-6af93e3196cd", "sighting--6497e757-642c-4eb2-9fc0-d03cac5066ef", "sighting--e0dc1af3-fc2a-4e83-b4c1-07f48d0f848d", "sighting--7b5daea1-ad16-4254-98a2-264e138a558a", "sighting--2885cc44-4f9e-4bc8-ae76-d9b9a332d95f", "sighting--24e562cd-32b8-4315-a4cb-b6c87245ccc5", "sighting--1744f760-fd7b-43b7-a6f9-e942adbf6b59", "sighting--2fcd944b-d5db-4c0b-a2ad-d1994f24483d", "sighting--091ecadd-94cb-49e1-acd5-76523d6f39b6", "sighting--34bf8c7b-a3e6-4be1-82eb-27bf72f05925", "sighting--3a6699ac-c702-4471-9f56-4344a4d520bd", "sighting--252d6c57-ea16-4647-87d8-57705bc347e0", "sighting--7e18e68a-b086-4ac6-ab9f-dc04b4060e36", "sighting--90eec2a7-88f6-42ae-b0f3-377a3ffb7ca5", "sighting--e7d258a4-d86a-4a83-92be-0fb47d22fbb6", "sighting--7656f084-babf-4699-b168-66de15aa0976", "sighting--1b485b6f-13ed-4d17-a4ef-34abe45f322a", "sighting--49105029-84a4-469d-b981-aa962fb0b3ab", "sighting--2f408db8-65af-4fd0-8330-037d1b63c4d1", "sighting--ff07e041-3d9a-4738-a26e-540d7adcb73a", "sighting--fe40acbe-b8bc-4c91-838f-d9ec66bd3222", "sighting--68134950-409f-45dd-8860-fef39fdecbc0", "sighting--82b341b6-fd98-433e-81cf-6073e563fb75", "sighting--055425a1-56c4-427b-9bbb-36f1768c6e40", "sighting--65396f04-8cfb-49c4-8ad2-12f4d090483d", "sighting--83a6627e-8315-4a54-8215-35fd8edaf841", "sighting--8704422a-a78a-4d5b-9901-95358ecb44ca", "sighting--3c63dc98-ead0-4bca-84fe-e53f1ba54965", "sighting--9638a946-7944-4811-8135-e5f3e08ff151", "sighting--ebb93067-5c22-4650-8508-25a1e1b52a09", "sighting--1e17dc57-782f-4adb-b827-1307791b85e2", "sighting--11b221ab-897a-4837-8ce8-9ccd2e2f213c", "sighting--1d9389ca-3b88-4e19-b1bb-d7307ba6326a", "sighting--e4f61068-639f-4c56-bdbc-7d9252dca549", "sighting--2082e06e-c033-4437-965b-d7dcbd2d3ffa", "sighting--cb6f40cb-4688-4170-86eb-4e80b2a6e7c3", "sighting--a134716f-f0ba-4b64-bd34-ce0418391896", "sighting--72a159e0-f2ba-4d5c-a384-ddf7045e7c2b", "sighting--b6511fde-652b-402a-bdc1-ae964debc08d", "sighting--cdc8513e-5574-4b70-a720-3db4f9e943b3", "sighting--5fa00224-3268-4e33-9b5b-433b7527899f", "sighting--13d7349d-20b1-4062-a5d5-37a0685f3f13", "sighting--52fb1739-dd83-475f-977b-8683fb3c283f", "sighting--32d7fbcb-053a-4602-968b-1c980ef97140", "sighting--3f5871b9-bc40-4016-a351-be63ab46e9ce", "sighting--0f66a685-cc8e-41b6-bfb1-da0a029f5304", "sighting--9e032458-5ef9-4267-8167-33a74342e7e1", "sighting--c4b97435-d65e-4369-8b35-1f7041d8d93d", "sighting--08a185a1-31e5-4738-92bf-74b891de83d3", "sighting--d9eb8d00-8637-4659-9a8a-1e260c35fc4e", "sighting--17afbac0-7554-4370-9e15-314a98f65aac", "sighting--e33747cc-4388-46c5-8211-841b622ed6db", "sighting--270d3e9b-ec7c-40a4-a73a-7185485daada", "sighting--72daa8af-6c0b-4f9e-b56c-4c90a457b87e", "sighting--b7eb67eb-ef98-4766-82e3-680042254269", "sighting--207a5c25-2e97-437e-930f-993ed4c3f105", "sighting--182d9e75-e361-4591-9ec6-8d0db0701ed4", "sighting--16d6f2a4-676a-41ba-a92e-19c4ccf6d018", "sighting--4dd2e9c1-2148-4042-a461-c9b51d53f3db", "sighting--5d7e76ad-3f67-4d1a-9916-47b2dd1c59f8", "sighting--5d0eb4af-b531-485c-80a2-9d0b0fc40ef9", "sighting--53947c0d-42fd-426f-9b09-9c618a46ca6d", "sighting--510e56a4-2c84-43c3-bea8-147bcc5b84db", "sighting--b97026fa-ded2-4a4a-9113-c0a2caacb72a", "sighting--02989ebd-4c56-4965-bff7-17c54f5b262b", "sighting--8e2f7b76-7ae5-405c-8535-6c1e049c0c6d", "sighting--5fec4d86-aa20-4be6-874e-2a9acaf809ac", "sighting--a43c59c1-2505-402d-a7a5-5da839793d12", "sighting--7436f13d-7511-40d3-b35f-519d85c8baab", "sighting--2ee383e6-2a35-4f8b-9281-06680dbd8ed0", "sighting--52f0093e-63be-44a0-a539-1be615f68853", "sighting--b130c142-0656-4385-9f97-10f7dfd8e74d", "sighting--627da6ad-8173-44b6-abd9-c4633cf9b378", "sighting--45bdd40b-2bde-4068-afc9-6eb9e20e6113", "sighting--2d3c176d-0db1-4f8a-a05d-33e4cffbe386", "sighting--0d7d5469-fc11-48f4-b78b-6ce736c6d037", "sighting--844fa155-89fb-4621-9c5e-3d8982ee5b1e", "sighting--b5c85388-5aac-43d6-8b70-63a115608091", "sighting--c01ad131-f3c9-4280-907e-44ed2c11fbb0", "sighting--a0315197-3a79-441c-8cc2-8c3d94f9dbca", "sighting--c5b08882-37c8-4e4c-a444-dfa249262ab9", "sighting--d0e73cef-51f8-497c-9dc1-a94b3679a617", "sighting--84c5b7d7-8eb3-44bb-9f62-a8799be81a6a", "sighting--8a7fbc06-b9e6-4213-8b16-eadc73302f46", "sighting--5a56d66e-95c7-421e-842f-33a23e0f3a74", "sighting--2669040a-99a6-4aed-86cf-86dab54dfa03", "sighting--c7a3902c-d1d2-44da-8369-e84a7ad42734", "sighting--41f372d7-a5b0-426e-86c5-0862d227402f", "sighting--eeb12877-e568-404c-9e83-773285a13b04", "sighting--90a0a6b2-1500-4096-9866-14195ca3aef4", "sighting--22a48eae-32da-4d2c-8e4d-eecd825698f7", "sighting--9ce3945a-1eee-4379-90bd-894435757709", "sighting--456608fe-5216-4a52-877f-c98cc38d6c67", "sighting--5719f247-1a3c-4f14-b09a-3044586e2ac7", "sighting--ffc91a5f-53d2-41a5-859c-f09c532f7e59", "sighting--f5236104-b393-4c69-a6d3-c650b03563f6", "sighting--36166fc9-3f15-432b-a9a2-4994506df511", "sighting--1dcc506f-f9ac-4937-9c36-22a630a7f299", "sighting--97030a56-5337-4a89-8952-fba41c5a16f6", "sighting--d65cc86b-9f22-4dcf-b531-b538876ac343", "sighting--5ef274c7-780e-4eff-9e0e-08742645f078", "sighting--f7254c1c-8063-4d1c-8332-4ddf8e3aba19", "sighting--90d17277-2b6d-41f7-904e-57dfd72fe3a1", "sighting--df16f543-3580-42f8-a614-85ad9d576212", "sighting--6315c23c-ab93-4051-92ec-4e7c21789e9c", "sighting--6f58dbc1-42c6-4be3-a69a-029b91ddc22b", "sighting--1d109268-9f11-4bd8-b3fb-30933e736ae8", "sighting--f69c73e2-f844-456b-8b44-3bc6d4ae4742", "sighting--1dac734f-a8cc-4526-a788-c8f18d3789e9", "sighting--c3cf26c9-63b5-4c2d-96ae-77b4fb664c7d", "sighting--584f1ae3-2637-4b62-9161-ce3fca07ac11", "sighting--d67270f0-e4a9-4bde-a6a9-c874b4e3d941", "sighting--a814eb13-cca4-4bac-b1f5-9bbac591c6a9", "sighting--f1676952-9ce3-443d-a9ec-b1141acd9413", "sighting--6cf25fb0-5a47-44dc-8db0-65b4fa1728ba", "sighting--db22ada4-40f6-4fa5-a1e3-66a1ae8fe91c", "sighting--142bdca3-8fef-4491-bab0-206abf7a5868", "sighting--a348a9ef-16ac-41d0-8661-1aa80a867519", "sighting--088df601-3055-4eaf-b2cd-70c1447ff9ba", "sighting--5067fb9c-9c83-482a-9116-a42dd0497c1b", "sighting--cc4ccfed-6adb-47dc-bae6-37307e6bb5ec", "sighting--32001433-5bf9-48b2-9ded-2937af462b36", "sighting--0e998ff4-a205-4794-8d68-7e13e992c71d", "sighting--a2c98991-413b-491e-9876-f738f43bdf43", "sighting--74172170-2cec-4e9b-9cc0-86e044defeeb", "sighting--6e71702f-c0ef-4669-a127-bad1769f5287", "sighting--ef3f52ac-e24d-4baa-bc41-d88f42f53f79", "sighting--63e8af23-2751-4d0f-affc-56cf9b9aa84e", "sighting--fb258a58-812a-46a9-933d-0a7b78f2d977", "sighting--828e31b8-5501-4f2a-81eb-98fa1493dca3", "sighting--f54ea0cd-b3d1-462a-8377-7cc7892d4080", "sighting--939ce47c-ccde-4dbe-97f4-465a86940121", "sighting--aa651bf4-9ff4-41ed-bb93-16fae5fe089d", "sighting--c1debe5d-7ac6-426c-b2ba-f3d5dab86ea6", "sighting--cb67c684-b01f-4e59-b96f-a3bd83168906", "sighting--d80c77f6-a106-43df-b7a2-43d1c1ced7a3", "sighting--48525f54-6c61-4637-8fac-dfb77b183ec9", "sighting--245549b0-0ee2-4eae-840a-7fdf9ec5b37d", "sighting--2ba5f13a-4b62-453f-bb20-0ee6f5155989", "sighting--e816dec1-143d-4af0-b6ce-43689d0c257c", "sighting--87784012-ef29-4d75-a7c9-13162b296fca", "sighting--382c071d-f0b7-4a02-9bf6-0754af85f4a9", "sighting--2214b573-f90e-4ae2-9d7c-0c6611e1d4f8", "sighting--54aa410a-2e4a-4e60-87b4-13ffd4bfaf3a", "sighting--68af0451-1c31-4643-bf42-f8602107b986", "sighting--58972044-1aba-4cd3-bd8a-3ac8f1f2d00b", "sighting--4fc5774b-b839-499e-889b-0e3ab6e6df35", "sighting--8350cc2e-1f85-427d-b99e-c53e2a4e08db", "sighting--4b01b97f-35be-4608-ada3-23d92cc79af2", "sighting--43c8c6d2-ea55-47ef-9c69-39eff5347fa8", "sighting--18b7f910-07cc-4122-9053-2b7712f40bc1", "sighting--fa28d71b-cb12-4a73-97f5-4ed26a0d3662", "sighting--394e16d2-b532-4286-ad09-4b09a973c3b6", "sighting--d14cf43e-e8fe-451e-b8dd-711241eff376", "sighting--6a78e897-63ef-434a-94d8-5310543ca93d", "sighting--9ef126cc-79ad-4084-902b-983101812435", "sighting--168db339-414c-4729-922c-66436952897c", "sighting--9507efc0-dd74-442c-916d-e54e16b6613a", "sighting--984a35f1-9667-415b-9e3d-30de9b505f82", "sighting--eb9a8747-f95a-4ab8-b397-5fb51bbfc951", "sighting--fd143a47-1dba-4af5-a764-54202f7f49a2", "sighting--526e458c-f276-4616-b6fc-df74fe5b34e3", "sighting--a514c2dc-45e3-47e2-90c3-863e589c3078", "sighting--e613c2c1-06ad-4a1d-abbe-319b563ef51d", "sighting--b12a296a-9e7d-4db3-a3d5-1ac0d14077a8", "sighting--72ad2e70-b48e-4764-a6f6-ebf2212c5678", "sighting--b61328bc-2d4f-4bf4-b8dc-4df282732582", "sighting--e9f0dc71-e61a-415c-bb46-76b05fd49369", "sighting--829c33b1-b8f8-4909-b480-d81a0c5b3dc0", "sighting--feb9da1e-7049-4892-a5bc-55413dad3d96", "sighting--17e463ee-0346-4083-9d1f-cb699a45ba76", "sighting--00e2bf33-8048-4e3a-959b-37e2ceaafe42", "sighting--f43467bc-6306-45d0-b26f-e9c9d3d72b46", "sighting--da8e85be-5cb0-4848-9246-6ea7d314b26e", "sighting--0eadc4bb-2a57-4a6d-88ad-5447cbb3e025", "sighting--d56ae5cc-1528-4431-acea-2c408b6d2ed9", "sighting--944fe5f0-bd03-4d3c-94b7-675d856f3e94", "sighting--a738e57b-11f1-466b-ae61-fb8d14ba0688", "sighting--8db8f244-3b46-4650-958f-c3bcbacc084f", "sighting--92ef6da0-ba3a-4fed-ac44-f6d16e4862a3", "sighting--51c052c7-0658-4003-9acc-28e5f428b310", "sighting--bc1d87b0-0655-4f16-a962-6e6004857f64", "sighting--66c45511-bcdd-492f-ad19-8d54edd0e254", "sighting--61c907d1-6832-4265-be8a-796c5b71804c", "sighting--8acb2dd9-2bd5-4698-a09f-bcf2eb52ba3b", "sighting--a9ce4a9d-8c8d-4862-90dc-b5618fad477a", "sighting--497b36e4-fad3-4b6c-bcfe-733f03186517", "sighting--dc23f7ae-808a-4930-b335-e7764d7238fb", "sighting--7a99a769-54c9-444b-a855-d2b3c00fea24", "sighting--1cb1a016-8f55-47a7-aa8a-de8b876031b7", "sighting--27ded907-d925-4b7f-a2eb-3cad24bee834", "sighting--9d0b9b22-a73b-4bab-b002-3f6cf511e9e3", "sighting--62a1311f-bad5-4610-8657-8d60683e69c6", "sighting--7af3dde9-2dae-45a2-a5d4-81252b1fa07f", "sighting--9e640a66-5780-414e-a023-356cb1fc8b51", "sighting--9b5ae535-9903-4dc4-a201-2750cb1135a9", "sighting--435f1db5-5ff4-45ea-b249-021aac4f5100", "sighting--cba52084-4b07-4fbc-93f0-c342f0046530", "sighting--45828093-fd79-4e79-b29f-4606ea1c84c8", "sighting--b54e3b09-5927-45be-b7ea-805233253a4a", "sighting--320a72a1-8756-40f9-84b9-72b16de35be7", "sighting--90f87a06-ac81-4838-bca2-58856bd0fb2b", "sighting--f46e0c69-3eab-45ff-846c-5a6036167cad", "sighting--aaa82032-015b-46ce-8e86-88f1b13831dc", "sighting--68bcc53b-881f-470e-8242-2426c7852009", "sighting--ddd9fdc1-f48f-40f6-87aa-5350f4806acc", "sighting--b0dacdb2-76de-419a-859b-e7d881a2ed04", "sighting--f8499015-d88a-45dc-bcfe-5221b4dd4e6b", "sighting--561c6760-5b0f-42ae-89a3-cb29e30bc4e5", "sighting--4b95c57c-e946-43ca-be52-2241342492c6", "sighting--3ce6139b-d671-4634-8f19-a4cd53c75c47", "sighting--094ca096-fe75-4dfc-9f99-67f490f0351f", "sighting--1041ee73-fba3-4659-b858-746ea62d4fd5", "sighting--d649f3cc-d779-4946-bd18-71e2b4d22d4b", "sighting--88eeec7a-d420-4993-88eb-b8824a78bc27", "sighting--f16f09e9-dda4-41d2-bbe5-9937285f65cd", "sighting--b7a7e6ec-5776-4fe7-b7f7-bd81743c8249", "sighting--7f2aef49-e853-4921-8d1a-41080ad4d5a7", "sighting--5d4b172e-9cea-4516-8a12-eb2470f6d225", "sighting--43aecc00-f6a9-4a01-88fd-18de71514d10", "sighting--9eeaf37e-eb89-452a-85e5-e7bdd4e4d23e", "sighting--8cf67fc9-21b0-4394-87f6-59fe9ed2058e", "sighting--80545c15-7843-42e7-bdcd-131d6bf91bcc", "sighting--d5db496c-438f-401c-a96d-0ad278f5ba65", "sighting--82a659e3-6b48-484a-b22d-14167290edcc", "sighting--04c3161b-6fe6-44fd-ad0f-014ed8798904", "sighting--735e88e1-9670-451f-877a-5ac77309358c", "sighting--091bfd7f-6236-4474-9e56-d7e5c60da379", "sighting--ec98f749-8c7d-41b8-b2e9-c7f19ca435a4", "sighting--e5c9d70e-5dda-42f2-a680-0dcbb6f785c9", "sighting--70075f55-1dac-4709-b1dc-b4a33d91964e", "sighting--96fd224c-792a-4fea-a9d4-83d2236e9d89", "sighting--f5f065a4-3e54-4588-a1b9-9879173efd4c", "sighting--bc484587-9ef8-485c-85aa-7942d853f0fe", "sighting--9916a25b-5c70-4a7c-beb1-50f42cb89f5e", "sighting--747047fe-2b46-4776-87a6-c79f1a02849c", "sighting--e478f183-e614-433a-9d59-ff135176a10a", "sighting--49704d47-acaf-4b1d-b46c-413c46a8f29a", "sighting--7b2c49c6-0322-4bd1-a6e5-3895c22d69ff", "sighting--dbb35c3c-086c-491f-b011-6a62c5a248b2", "sighting--68a5dc79-7515-4c28-a2e8-f633ccf02caf", "sighting--03d165fa-27c3-463a-b369-b305d8165408", "sighting--2b8e5ec3-ddd3-41b6-85ab-daf63686b63f", "sighting--1e736671-e25f-40ca-bbb1-c66a1a526869", "sighting--43322399-2d64-46c9-bbc2-07f4b9893249", "sighting--5e3374a4-ea5f-468a-9645-8deb17b284b9", "sighting--f6ecf606-a0c5-4c75-a7e3-6b49db273118", "sighting--24cbd34d-0348-44b4-992f-0a6b8a24322c", "sighting--62b74047-0051-4c80-9e30-a9a389e855d5", "sighting--d7a82456-95b0-45e8-9e29-03484d9c1f04", "sighting--1c7afc23-8508-4ccb-b27e-9bc090e6d60b", "sighting--9a370cc6-af60-414e-b6ae-1c0f252485f2", "sighting--03af451c-80e4-4feb-862e-263a28c1bdc4", "sighting--696e5aae-d5a8-4848-aced-d8bff626e702", "sighting--f31bb28b-ac82-49ca-972e-9846459a9017", "sighting--6ce3e5ba-d528-4b43-bb9c-5ec801e317ac", "sighting--558eb87d-c9fe-4d2c-b884-9352f838405a", "sighting--8d2baa10-f327-450d-9f2e-92d0483d599e", "sighting--29fab8bb-b64a-41d1-b230-3f355ad35ef9", "sighting--fd6a2733-178f-44a5-be7f-f0c3a67e245e", "sighting--6f897d0d-96e0-44f6-a080-7047bee20b26", "sighting--0759bbaa-4c11-4ae6-826e-444e5bdfaaa1", "sighting--29f24531-b7f2-4b66-8e4d-83d7f9a4259c", "sighting--c0861632-ea06-4c22-8e9d-5beeffe2ece7", "sighting--1f2d90aa-0f6c-456f-9c13-c93acc1b7c39", "sighting--c8d85bd4-04c5-4382-8c11-f726e1e6ecb4", "sighting--8597e882-57cf-4374-93cf-8f524366c618", "sighting--b70a3f71-33de-4ab3-814c-94045c2bf725", "sighting--98df6883-54b1-430c-9b54-71979e2c6708", "sighting--debe5344-cdbe-413b-8c9b-fecf6e43296b", "sighting--29f184cf-f026-424f-b763-3924f193695d", "sighting--19bc130d-0019-450a-82be-909290569a35", "sighting--a81e031d-df5b-4faa-9102-a7136b198c8f", "sighting--f7659adf-2d80-4772-81d2-34bc933f6865", "sighting--b037b687-7adb-40c2-9de7-3c36ec9e9745", "sighting--c8697c9d-ffc6-4128-9180-8d377f82eca0", "sighting--e89f6c15-a07a-4d63-bc84-a632a5aaea10", "sighting--e6f0057f-3eaf-4896-97ca-711c8cd2ade6", "sighting--2b352585-701e-4228-80c9-31a678403bf2", "sighting--4df4bba1-2aa7-4dba-9311-ebe2f957ad44", "sighting--2b6e0557-86e3-457c-a2d1-b72f5211eda8", "sighting--7fa377c0-b51c-4210-941a-63e8a0035e1d", "sighting--af2d0ae4-c549-4df9-9639-79cb06a9a547", "sighting--4eb804b8-2f99-4e85-8678-d4f1b4484751", "sighting--60faffac-caf0-4d65-8d21-c95e4e2f44f6", "sighting--8e396944-68cc-44d7-ab4e-daa9db192660", "sighting--6379cce4-6025-40ec-8174-47ae20f96367", "sighting--62fd2cba-89a3-4b28-8291-74f7e8f9ff5e", "sighting--25720a66-860f-43cc-9df4-9cbd4f596d89", "sighting--f2546e6c-72fc-4968-aa7a-12784e84fbc0", "sighting--da541b53-1e73-4dbd-b7b8-debd79a44fa3", "sighting--5556f722-905e-42b0-9771-1567564b1d83", "sighting--e4ad5017-3839-4076-935e-d64bb13dab82", "sighting--010baa47-2e03-4b21-b4bd-7ba9e35c6c4a", "sighting--96a75a24-ec7e-40c5-9bdc-f898f4b3b63a", "sighting--ec350a4d-5fcf-4114-92bb-b4192d2513ab", "sighting--de51e224-0a8c-431e-9298-aded2c398e65", "sighting--6781071c-0888-4f00-ad69-99e0acd40ca2", "sighting--771815e0-eceb-470b-9011-aca4b4042a0c", "sighting--eb41b0e4-8cbc-4994-8003-3f13498ac644", "sighting--61891ecb-9e15-43ef-ae29-bd6580d0d98c", "sighting--beaac3f0-6728-44ad-a748-93e875c18c7d", "sighting--3e560705-f496-4922-850b-0e540bf17a40", "sighting--d3c3693b-e028-4be5-aeb4-c5918387d2d6", "sighting--643e4011-6873-47f7-addb-b0227b3b873c", "sighting--6311e0e1-e771-4189-b505-5325f0364542", "sighting--00d52e0b-ab13-49f0-95ac-f53fbb0edd11", "sighting--9e2fd315-85ef-4030-a210-eeef2070e97b", "sighting--9bf8d9f4-9e91-48a3-a091-4856b4d0dbe0", "sighting--69dbf7fa-3dfb-4228-8faa-6b15241f9c33", "sighting--cc479389-bee0-4fa6-aee8-041ac54a700d", "sighting--ef91f0e2-d90e-4617-9a45-4f01e5f405f4", "sighting--ccd70562-e97b-4b15-a94e-f23c96d1bd04", "sighting--66388633-752d-4781-93af-be242a2d51f6", "sighting--f7f51426-8aa1-47ae-9ddf-39ea7a9e47ae", "sighting--0584b03f-164f-40b3-920b-b3761719ec0b", "sighting--20e66e34-aa57-4052-afde-97ee80b4d973", "sighting--63c57e3d-30af-48a6-9cfb-6eda7b032cbe", "sighting--278e39e0-60f8-4ec0-9be8-63cf6ce75287", "sighting--adbbaea5-8121-40e6-8dd8-8a5da04513a5", "sighting--ae015f1d-b76a-4305-aebf-b03c461e5686", "sighting--0187e1ad-4572-442f-a299-321698667ca8", "sighting--d017cd7b-1eb5-4b2f-bda7-f751f673d76f", "sighting--81549a5e-8adf-44c1-a292-8ca5248bf2f2", "sighting--22945ce9-48b8-425a-a1cc-f66bb582a9b3", "sighting--b5d2c44e-df9e-47e9-b056-210faaa418b4", "sighting--3c01e852-9034-4c8a-a357-7533a71427ec", "sighting--1ec3ff6e-cf2a-4bb4-a89f-dac749e3c215", "sighting--df36fa23-8460-4605-93ac-f1158e8b3d9c", "sighting--0d6de2c7-9f2e-4ff7-aace-4558be7e9dda", "sighting--c67f6acf-542e-429b-9e19-644c7ec14bf6", "sighting--f140ae98-a4dc-4f85-8acf-0716c82f7520", "sighting--6b5a389f-25e5-4208-8c02-f9db0f3955e7", "sighting--deb488ca-7f5d-4f72-b1e6-1d893be5238f", "sighting--81ad4883-514b-4bf3-b821-d7c4f295922b", "sighting--be886787-b1e6-4bd9-a2b8-eabc28bd40b6", "sighting--3beeb628-ba73-4f3d-8424-78eae593b77c", "sighting--09395e46-e86c-4e73-9a63-07964e751fae", "sighting--e2127bd5-ccca-4b2c-a667-caae69ea8b48", "sighting--9694737a-da32-46ae-b8f1-2cda23fde58b", "sighting--05960f02-727e-44b5-a25f-830080c832c9", "sighting--f6f29c0f-d0ef-4843-91b9-ad716d7b038f", "sighting--b8ffe2ff-bee4-4a86-ab5b-ce607e3465ec", "sighting--0fc85a72-5ad6-44f9-8753-17c88bd05c93", "sighting--5d8f262d-fdb2-41a4-a0fe-252fe019ff87", "sighting--e2786830-e1b8-4dae-a355-42eba031fc8c", "sighting--febe5868-7334-4275-8e7a-eeb19a5eb982", "sighting--5e74d5db-81c7-430d-9b29-a32a3300eb01", "sighting--96cac3d8-b0e6-4997-9818-00d5161e3cad", "sighting--2a991e88-2e65-4db1-925d-8cd4124b46cb", "sighting--034a79f8-1208-4c1a-a437-f5a8e345e044", "sighting--fc771b96-c9f7-420b-9a01-8b1be3139627", "sighting--fd914832-933c-43cf-ad86-ba4878a6c506", "sighting--5fea103a-fdbb-4efc-b632-c6f65c68de35", "sighting--801a735a-ea8f-4f28-acf8-411f4fdf4b5d", "sighting--afefc107-b814-4656-9541-87a2a3baacb1", "sighting--4214b100-0c27-4f8b-b769-9d5ca484a22f", "sighting--c4879647-b2e5-4504-8b32-75ad29a03afa", "sighting--afe8ffd5-1a9d-46d0-a364-8ac3aeef10c5", "sighting--a6b3afbb-2c11-4bed-84c5-cfbb2fed408e", "sighting--1ebde09e-8ee4-4807-a2b6-9583117782da", "sighting--dd175ec9-907b-47cc-9b9f-f0e67f5c2c67", "sighting--08bf459b-d912-4a5e-ab88-17af332c1919", "sighting--caa8157f-2ee0-440e-b2ad-143bb3a65d9e", "sighting--0c943d5f-6eb2-4ac5-a7b8-e0d079a1ad91", "sighting--c827b355-c320-41e7-8400-4659b2dc4697", "sighting--c0c2f65e-f927-405e-83c0-7784b1001056", "sighting--8874af76-7e10-4fda-90fd-a57362525182", "sighting--55ded35a-92ca-4cf4-bc54-048350fcc4ec", "sighting--9fb565e5-051a-49f0-8a93-a56f645dbda7", "sighting--1464d466-4ab2-4015-b4e5-4e798aa46742", "sighting--449bfc82-6c52-47d3-9486-f1c777758ff6", "sighting--b83e8617-d3b9-4626-aa7f-c2a6f4892f68", "sighting--636d803b-aaa0-4679-b84a-f354d4226477", "sighting--cde60f91-705d-4bb4-9880-9d18eba77513", "sighting--9d4aa72f-6b0b-4bbb-ae94-659e623ab5fc", "sighting--87eb488e-6fd4-4c82-ba3e-89c094ae4ffa", "sighting--18d0d718-4190-4eaa-aad2-bf00f32756fe", "sighting--aab865b0-36c0-416e-9b23-90cd0559584e", "sighting--732e1053-52a0-42dd-8191-5d0a48ae4fe4", "sighting--4cc3cac2-d8b6-430b-ade3-9de23a0da315", "sighting--d3fff04b-07d1-4d2f-b7ba-98b1348660be", "sighting--a136f0f3-3eb2-42de-a15a-8f2bd4f917b6", "sighting--ebb9d2d2-4b00-41ca-aca9-3b68a419a3e0", "sighting--c7386a95-7227-4f80-a840-4349174d27da", "sighting--2f1e8d23-c2b0-407e-9813-df4012d0c942", "sighting--2327e10e-7d4a-42a2-95bd-de57f3872b19", "sighting--d94735b2-622d-401d-a91e-1034d624103b", "sighting--d6f8e2c4-f518-4cde-85ce-a369dfd77a2f", "sighting--6887b6cd-d7d0-4f9e-ba32-18f2cf9f063d", "sighting--063ac11f-214f-4550-b7af-9333ddb809f5", "sighting--a5374ed4-9024-4a20-8da2-8901cdee0456", "sighting--00038e3d-88df-4ed5-831d-68d5701c2f96", "sighting--59dc3d3b-12eb-425a-8179-b67536f61f53", "sighting--5ef1e9ff-6972-4030-a197-bdf43c949dfc", "sighting--f0a8208d-bdb3-4fe0-a060-0483a3033be2", "sighting--c818d393-bdad-4ec9-8a2c-01d57160a513", "sighting--eadea088-ecd3-40ed-9f4b-659cf38b5c68", "sighting--be1c4fd3-c1ef-4746-9504-54a63f8aebf6", "sighting--bc7cc36e-4655-4ea4-b0d8-3ca7e55598aa", "sighting--b0ebcecd-3ff4-4a3d-8762-9326b14a79f0", "sighting--57636700-4752-425d-b7dc-daaeff02cbaa", "sighting--6b295e77-4425-409a-be32-ecfea152130d", "sighting--30ec339c-849b-4ffe-9fd5-82b305e5c08b", "sighting--03a2a2b3-37f9-4939-a920-479e76725d0e", "sighting--0f691aed-7763-4573-a853-7306008cf169", "sighting--073638eb-bb07-45b7-9363-3457b15a5ffd", "sighting--15ba737b-a71e-4529-84a1-0a1a15dc0379", "sighting--7d12f8b7-260f-47c6-aae3-f759c3fab6ca", "sighting--c429fb11-d1d6-4e49-aada-a6cdb567f5c0", "sighting--04e8e844-df23-465f-88e5-b3d01d6360d8", "sighting--5f735c19-f771-4e3a-be7e-ea2bb33a7d3d", "sighting--eb716b89-6bbe-411c-ae1b-35e2aaeae094", "sighting--877124b7-88aa-47a6-af03-94f574cd9cea", "sighting--95f6bda3-ef6e-4986-991a-fd2e5622c476", "sighting--a135d87a-0c64-4c21-ae56-f0dbf67821b8", "sighting--5be81772-e92f-4ecd-b4e3-3d675663ca02", "sighting--2b4ab5fa-8546-47e9-8b86-0d43d9f39780", "sighting--26f3ec3d-4957-4cbd-a179-4ddb8a31e4d8", "sighting--fc5108b4-81a9-42f3-a51a-56f3f927ae78", "sighting--0d8a6064-a472-4104-bdef-c8683690cfc6", "sighting--35738391-b5ad-46eb-9730-fea218bf21e5", "sighting--92cb4f5b-8a06-4d0b-bb3b-618d27e73681", "sighting--a6583d17-772b-4e24-aa03-f3744d73ad89", "sighting--2a5dca17-4812-4c37-ade6-5995431a7e74", "sighting--9f95e30a-f5cb-4316-bbb7-f5c081720858", "sighting--fe79556c-1a7d-49cb-a089-bafa9650f975", "sighting--566d9142-cc82-449a-a9f2-595cd5550554", "sighting--a71eed6e-d3db-4d63-a56f-1c265f602a97", "sighting--6bd69b1e-393c-4cf2-843a-c3ff30435dcc", "sighting--82d9879d-6912-40c0-8add-a530ac0dbf9e", "sighting--35fba738-ccd2-4c1f-8019-1bf71bd1a3e8", "sighting--7cc822aa-1707-4fc0-8d71-c35e611374ef", "sighting--7375f102-63c0-45e7-9635-1b4df4414d8f", "sighting--3ac4b996-bc64-4e39-a08b-fc496653ccba", "sighting--49898bd0-eedd-43dd-9454-ae6ade4187c5", "sighting--f68c125a-fda6-4535-a9c0-daafcc725a77", "sighting--369b81e0-a3da-409c-a81b-e0bb9c8a0253", "sighting--93fa6f20-c5c7-4f97-9d54-2d0db3414dba", "sighting--3d77132c-7d10-4c36-937a-e395c3c8f24f", "sighting--3de9ebf7-76fb-4605-950e-a0daf1c4023f", "sighting--49b8de55-c2f7-4f48-90a0-faaac089341e", "sighting--aa123ccd-197c-4a25-9e2d-16f62c30ffeb", "sighting--214c48c0-67b0-4ede-b494-d721cc594cc9", "sighting--cb231315-efd6-47c4-baec-2f51c06f932c", "sighting--facfff53-ec0e-4721-b3f3-27195baf0da9", "sighting--58c1d017-bec1-40ae-8cf6-f024b438010b", "sighting--d544a7bb-f364-4fc9-81b0-31cedf5bdd18", "sighting--13d6f0ff-448a-4ff4-b556-5f803e40da2d", "sighting--7d21c84c-6aa4-473b-86f4-7d86c19a3dcf", "sighting--975e7420-0797-46c4-b795-8b3625bf789d", "sighting--35e25db5-edff-4332-895e-df7c47168d48", "sighting--b9a9d0e1-13e4-4230-b040-757151d0de56", "sighting--f9c04356-e265-45d3-8995-af1c23753b74", "sighting--8ea13ac3-23e6-4302-9f44-6c887f30a3a0", "sighting--3ab0a319-daa7-4cbb-9e80-4752203e307e", "sighting--c3041631-5ec2-45db-8f8b-92ca99024960", "sighting--c4a809f7-e2f7-41f0-b175-891f7b8bcdf8", "sighting--79d2cbcb-531a-473b-abbe-6e5cca494f97", "sighting--413925d6-69e5-4533-a7fe-68d4f9bff9b2", "sighting--911af242-cbf2-4970-9979-a67d87a1c881", "sighting--4b5ebe53-5e2d-4d48-bcec-fe9b21fbd2ac", "sighting--2a91b0e0-817d-45d2-8eae-95b994253eb2", "sighting--afda6e0e-67bd-4c11-88cc-b009f87a2c1b", "sighting--38866735-f69c-480e-8bbc-6a410c57dcb1", "sighting--0f4e5186-ff14-4b16-9d90-12a0111b36b9", "sighting--a143d670-3f33-4c2f-8067-f7a68d2317ad", "sighting--5791676a-4d86-4f79-bfe5-d9be02216042", "sighting--1c9a03f1-8687-4183-8d97-ebdb8a50d6ba", "sighting--8796dd67-9c5f-4ca2-9bfb-f512695f9375", "sighting--730ef23d-57f1-44f5-8f2b-a1f8c5aee789", "sighting--f5c68ad6-341a-44cb-a035-6fddf21ba1f9", "sighting--eb2afeee-4e6a-4302-ac8a-9ee131dc67ed", "sighting--6c8c7e58-a0a6-4df4-b99c-537d31786ed3", "sighting--927681af-12b5-484e-ae51-20ae83d99454", "sighting--6d81c231-fa8e-407f-915b-b3fed02530c4", "sighting--a90a587a-c801-42d0-88a4-115f9548a3a0", "sighting--71556ec2-c8b2-44f2-898a-a037b7ca798a", "sighting--5508208a-dc8b-47ed-ae34-2855dfe0bb9f", "sighting--e0f683df-4330-45a2-9e4b-5740b4b8a6de", "sighting--2aef5b96-488a-4ef7-84af-973a25472241", "sighting--ba0c1cad-0a74-43a6-ba04-9add4c697f72", "sighting--36b0e90c-e7d2-4cbf-a909-5ef51c6b4a89", "sighting--4fdfff42-c354-4607-86cf-848fc0138e65", "sighting--78aec94d-d9f2-415c-8142-3acba100da32", "sighting--08f31636-bdf8-4b9f-9a72-30274fe736fa", "sighting--5a0c9c2b-a932-4614-943f-8fb01e174072", "sighting--c9e40a89-4bbd-43b9-8e17-c57033486ce3", "sighting--ed53f7c2-2638-4ea0-86c3-b1fc626fbc6b", "sighting--dd26e3b7-8510-43a7-9d90-0e91a58fe442", "sighting--c9dc4ef8-17c3-40c5-b947-aaf13716178f", "sighting--45ea2d0c-28e1-4af3-a3fc-4e9b553670c1", "sighting--8ea20cd1-d3a5-4bc8-afd9-2bf30483dc6d", "sighting--b24f65f2-9d2e-42a6-ace9-5bdca35c532f", "sighting--cefb586a-0f94-478f-88ab-6179d6f44a03", "sighting--01a077dc-41a4-4a5d-914a-376fdc486111", "sighting--1cd5ae76-f2a5-4ce2-8674-b76371e96756", "sighting--f40a3eb8-59f4-4231-82b3-8ab4cb84f2c9", "sighting--d64c7fcf-268f-4004-a1dc-48591f9403bb", "sighting--caeef780-177a-4768-bf2f-eb26c6dec54b", "sighting--51ecd074-7966-47b6-aa84-783e46e8e4d5", "sighting--19b0e07e-cd4e-4be3-a59f-2c0d2109ad50", "sighting--a462a4e7-d582-4501-85d0-e4f20c7c4a4c", "sighting--8bfc9c9d-e313-4209-86c6-1f74ccbfb270", "sighting--d9f82348-432d-4dba-9e99-9a88701bf58e", "sighting--277ab4fb-e721-438a-b440-95a608835703", "sighting--e95bb244-e971-4554-89e3-03b684872ac2", "sighting--6f1206e6-4b41-4362-bc5f-b2c97f3ee80f", "sighting--0cb87835-fe81-43f3-bd91-e928e1ebbd4c", "sighting--69151aa1-c340-4496-b5b4-2d8d7309dfeb", "sighting--5d599ac9-6153-4b6b-9301-abdbea483425", "sighting--9b1b1e3a-a8a6-4cd7-90f3-058815a3178f", "sighting--76b89d37-2708-4b4b-bea3-305ca0836299", "sighting--65a362bf-935a-4a3b-bb8f-5a564d4e874c", "sighting--d1bb506a-8c9e-455b-b271-65abf65f9826", "sighting--4b6d709c-ba90-4bc9-9198-786b0a4be928", "sighting--f9eef759-b32d-4d0c-831a-4741f6af84af", "sighting--44a87f0e-b947-4f13-8945-519536d91aca", "sighting--f01b201d-9bfb-41e8-84b4-3e964e8e61b0", "sighting--354a3505-f630-420a-b0f7-9b4d48eca7af", "sighting--f2b664e0-7780-40ac-92eb-1dda921b59ab", "sighting--15bfbc15-83fa-4a7d-b480-409e63ff52cf", "sighting--db1719b4-29d6-463a-92af-7584d6c519c0", "sighting--b92c40ab-ca44-4ee6-b891-08d8b21be7db", "sighting--15655def-28b8-44b7-8088-4f0b269b22c1", "sighting--7fb53e67-bf6d-4c91-bae5-671f6c07c50e", "sighting--a6982dbc-ac71-4148-9c0b-bff3f21ae0bb", "sighting--8f218bca-0304-479d-9eb1-929043130712", "sighting--6b17ce79-0569-468f-a126-920e9ee4f52b", "sighting--6adb7e80-cede-4867-b655-88833d2af426", "sighting--28a2ef8d-08d6-4628-bd41-1865833dfcd7", "sighting--d436e3ca-29dc-4b83-be7d-5f2e793bb174", "sighting--62365a08-5bee-42dc-b92f-fd33ed30b19b", "sighting--26aca09f-29d1-4893-996c-710328d0e24d", "sighting--5078760c-4539-4974-941d-80c1dec51c0b", "sighting--ecc28586-6567-4500-a485-ea524067ed10", "sighting--cba29502-46dd-473d-8708-6dd7f3566be9", "sighting--59e7d3cc-ca50-4bd2-b2a6-05547cbde490", "sighting--4a569522-cbac-4217-bb4e-4d89325c9c56", "sighting--602925a4-fa02-46fd-b754-ec4efefd07d5", "sighting--df65c902-fbd0-4a35-840f-6ba561d2459b", "sighting--31e51912-72fb-41f6-a7da-19776e185e33", "sighting--8826a508-3194-428e-bb97-9462b1ac1ded", "sighting--61d20223-720b-48aa-a372-3cd4f49872d2", "sighting--3f7ee1d9-4a46-48e7-93dd-6c7ffe5ab392", "sighting--05537a11-aef9-4c54-b58a-0da6d8b704ca", "sighting--e4e5623c-a1ab-48e3-95ba-49e4539c9ab6", "sighting--01f49f52-2569-40b6-93fe-3a87fa333cab", "sighting--b20737ab-7ef8-4210-b7d2-098d1130cd92", "sighting--77c8bd89-e57a-4659-b32f-ff422f07cfec", "sighting--74fe660d-667d-414c-bcb6-d0644000ac17", "sighting--00362795-2598-46c2-adee-6ad935a4a679", "sighting--958fba41-9b32-4aa8-8f1e-0b1fa5065756", "sighting--ec64ea91-8db2-4774-a81c-1abae7d3dc2c", "sighting--f6cf0347-46b9-453c-bf10-89146ce6a66a", "sighting--cde88781-8fb7-4056-83ae-2a2e0aecba21", "sighting--4f6c620f-625e-4e07-b967-f0d46664a1cd", "sighting--ad3c66c1-78cf-48d1-92d6-e08ffacb86d7", "sighting--fb38d0a3-5907-4788-a4f1-7a034c82debd", "sighting--18b18869-9e89-4226-ab47-b739fb21776f", "sighting--d2920e94-41a3-407c-a3f5-8cb4b0404b96", "sighting--b1cec8c2-0a1d-4e62-91e2-1c9a6ef3d8ac", "sighting--c4e50f54-5faf-4b91-a140-1e5b57574a25", "sighting--3f080e0b-229b-4da3-bbc5-b56281ee9fb0", "sighting--e850e534-f841-4ac7-bead-bde1007290a3", "sighting--0065b462-ca7a-4d5e-86fa-61217a2a4af1", "sighting--fe2acaca-adeb-419a-9594-bfefc4fcab42", "sighting--5821adbe-f814-4c71-917f-4f86ff4da037", "sighting--ec0c051f-9539-410e-b3b4-deb21c3f379c", "sighting--b0f6429b-75c7-407b-95f3-f55d79618cf6", "sighting--41ac1f17-804c-4377-a638-4e8158ddb9f4", "sighting--7e62a275-623a-4e45-9c0b-45c9bdbdb817", "sighting--e0e70bdc-2d75-43cf-864c-e4ad7a512b27", "sighting--d009b20b-5d0e-4623-9829-60ea493b3573", "sighting--2fd05eac-55f7-4587-b631-8a16bf88ed67", "sighting--6fbd64a8-591d-4bfb-aef7-8db109731fc8", "sighting--7a1f9c8b-38a0-474e-b27a-d2166bf58a42", "sighting--0b20c854-e1a8-4e3f-8a76-22559230602c", "sighting--433fc69b-af29-49f2-b110-e8259b5088f9", "sighting--dba1be07-f8aa-4b60-8e34-979c454415b9", "sighting--bca4d6d2-8b40-4e07-8114-0bf69a754a5b", "sighting--564fb612-7286-487b-9ff7-5b69569417b9", "sighting--f76e1de6-7c7a-49db-9bab-e6f4b0f82d17", "sighting--18655b09-64c1-44cc-99dc-0579913db19b", "sighting--ed22ede3-d699-47b8-ad00-ca8bf21d9af5", "sighting--6126b0ad-dd41-4251-99b1-e377899d3575", "sighting--877ff90e-b703-4129-b0ef-1629d0c67eef", "sighting--2da2cd97-b8cf-4b82-a4ac-38fc16f47040", "sighting--a4c71308-2b33-4360-8e55-8867fed2c8d1", "sighting--c0caf86d-4ed9-403b-8b50-59d11f219b8a", "sighting--c2cf2a3a-1539-4eb5-a62f-f7622ae2b071", "sighting--cca3150c-54f9-402b-9ddd-44f7e6f0fb06", "sighting--c0e6dc31-40c1-4473-828d-acafb6a89264", "sighting--4b3f6a19-8e4b-40b3-941a-56606d878018", "sighting--b915b37a-adf9-41a6-a68c-021e51c69959", "sighting--d728d4c0-00f6-4e90-88dd-b37b0af661aa", "sighting--160247ac-9a25-4d74-ad4f-2a7001aaf92c", "sighting--0281d702-25a3-4a11-9498-ef10d4738e79", "sighting--79b7bb71-dfdb-4360-9c91-b734b5c997e2", "sighting--a68b3854-63eb-42fc-a4a4-05e15710b641", "sighting--c4a5e52a-7fcd-4876-8449-32c7d1cd0ce4", "sighting--9556f476-6f37-47b0-8d30-c4872adddb36", "sighting--cbd705ee-4144-4399-b946-18a8969e7b88", "sighting--cda77aae-a587-47d2-a25a-d82aeeff3bab", "sighting--95b72986-6b02-4782-af6b-f729ef7077a3", "sighting--5bd4db19-96d8-4ee3-a58d-870f4da29b21", "sighting--e45960f0-4684-482e-8cc7-7391a00670e3", "sighting--3dd548bd-c708-4d45-8088-d4cf903557af", "sighting--af637190-9c72-4fb6-a7d6-4de87b8d6007", "sighting--5c945d4f-1b02-472b-8363-85ef0bc1a375", "sighting--50303a99-081e-486f-9718-59136ae781d5", "sighting--73485db2-884f-4b88-9091-1fbb0234906e", "sighting--8a5fa650-c58f-406c-85b4-905f39ca6c5a", "sighting--9d79f04e-79bd-45fd-bc1f-ce4fefa54401", "sighting--5e6010c9-77ee-45b9-9ede-a51a0a6869f8", "sighting--36b12413-0723-44c5-8dc6-e3212c860053", "sighting--e57615e1-7565-4e37-b890-4b8372d83720", "sighting--1d756bcd-84bf-4021-a69f-66b8323fd586", "sighting--3b2a7221-f988-4c1b-b496-bcb91efc9d40", "sighting--553ee4c0-d4ce-4db2-97f4-7dc4905c5a24", "sighting--3283007f-faf8-4233-8b99-eee2d1ba6c10", "sighting--4b02006d-83c7-45a1-b449-f920403f2c06", "sighting--f6005536-122f-425f-9ac8-88613c0c03ca", "sighting--fc78812c-ecd8-458f-8482-ce10f2786276", "sighting--c5eae187-bebe-431b-a965-b2cbb4a04502", "sighting--9cfd56f7-76eb-488f-a7fd-55061fcca4ff", "sighting--cbdfabb8-99be-4a8e-9621-614454a51420", "sighting--512db073-cb27-43e7-b9b2-e615b953eb8b", "sighting--c5626d9e-229d-4ebf-9f3a-8ae96663e460", "sighting--a2c87b20-9205-4e61-9401-b48b9d05eee4", "sighting--f4c3418c-0b8a-41cb-b833-28b0288d74af", "sighting--1eaee402-f83b-43dc-9050-44af63f88479", "sighting--5b9ad1a4-e568-4850-aa4a-7096afc5c4d8", "sighting--fa23e7f0-dd88-43e3-8cdc-39157bd60080", "sighting--3f342ef1-8bf1-4db2-8146-9448f350d179", "sighting--819a9688-8ed7-44ea-b0ed-e362d04ac4c9", "sighting--c48f6cda-ffa6-4607-b272-5ced4c19f9cd", "sighting--c5ee507e-d09d-417f-a0f2-2df7bc374f51", "sighting--c82e8824-2f99-4739-ad45-bd3052f59755", "sighting--c4776639-cb2b-4e30-a659-13b709bbd114", "sighting--1eeff9b1-0e6c-4185-a5c9-6f90ccaaea2f", "sighting--23bb0bb6-5121-418a-a9c0-f51ec9aa7265", "sighting--73ce1b42-bdab-4713-9af7-f60fb12d6c6b", "sighting--2e4481cb-13be-44fe-a2a7-9c02135b6255", "sighting--1cfc2be8-9c1a-40c3-b42a-15296f1ad6d4", "sighting--c02be9c2-9286-4f9c-9256-d345a62680ba", "sighting--75a6297b-bc61-47a1-acda-cbff82554206", "sighting--d6737670-7d19-4490-adc3-d7852d2c95f6", "sighting--9bf6fae0-49c7-4330-94c1-b7cd40e67fde", "sighting--67e5b40e-96d0-446e-a958-f3f488b7b8b2", "sighting--a048f1b8-6e9d-427e-8d47-6f7e82a96730", "sighting--2ff16e71-9dcf-48fc-bfe7-b42f9a3149da", "sighting--69191fac-2211-4ff8-a0be-e98c7b1eb36b", "sighting--51503567-a784-47aa-821a-697b35b68778", "sighting--ad7cc9bc-210e-4466-82d5-0abb06547883", "sighting--636034fa-8557-4fb6-8ab5-237c1d8a9668", "sighting--eb083f76-d79f-4308-89fe-8e001a6207be", "sighting--157f788a-0b60-4456-93b9-feb3a2bdd50d", "sighting--2ee1c4d4-192b-4852-b0e6-f4527c40a7a1", "sighting--2ad6ef9d-568b-474f-951f-aeb47dffd85b", "sighting--1df5ed3c-3ffc-4b8f-842e-5cb0749cd20b", "sighting--767f7049-bcce-4189-8722-ca6b0f0ab7cf", "sighting--85a02a0c-d737-4e8d-bc10-be427f78bd08", "sighting--9a81b7f5-a069-4fcd-9d1d-b423cd386c50", "sighting--64189260-fab7-4609-8af0-f01fbfd5a00a", "sighting--491c8a3b-4710-483b-bb35-1856e80a3f03", "sighting--2e5f7345-9c2a-4433-bfaf-4bfc408702d8", "sighting--e7d4f5d1-5ced-4ec0-a7d1-11149ebb8d66", "sighting--4867ffa2-4c77-4b44-9b52-86b504e2193a", "sighting--dbe6e38b-8119-4276-9f4d-1ac9cc6b040d", "sighting--27753e91-bfce-47cb-8151-70c16b47921a", "sighting--0e2d34c6-af3d-4aa1-a3ff-947ecc517d62", "sighting--88a2c84d-7b33-4c40-8493-31083d229e1e", "sighting--99c6ecc3-54dc-4a6b-9bd0-489978eaac96", "sighting--b56f6cdd-74a4-4faa-aed3-e239a727633f", "sighting--51faf296-8bf0-4843-bf84-687ab124be0f", "sighting--42530e02-15ec-4dd8-89dc-37d60cb15fa0", "sighting--deab6856-5626-4479-8558-b209aad7537f", "sighting--10e275d7-45ac-4071-80a6-11ac0f4da7ec", "sighting--4ae59b40-078e-4de9-9d15-127709348082", "sighting--bc290de0-33f0-4d8f-92f5-66d09a9b4399", "sighting--8e6ff9c5-237a-4b89-9527-f072d60a40b8", "sighting--7416c5b5-431e-4436-9eb2-ec93af5a0559", "sighting--943fbc5e-3481-4b70-824c-62171b3f21ee", "sighting--fb467882-5a3c-4afa-9a8f-20fdd7e0dc2d", "sighting--f64c0570-b3dd-4aa8-ad7c-50e4022f4a51", "sighting--e92f27df-0a90-4a79-9b66-64c85a5f5a7e", "sighting--db6072e0-1e44-4bc3-a50f-01ddff26af81", "sighting--6c9b62df-d963-4785-a74c-d407804e8755", "sighting--39a9a9da-9f09-4f2b-bf81-f1ad54792a69", "sighting--176fe6c8-bdab-4932-a4da-ca96b72817d2", "sighting--62c2dfe5-f42f-4e2e-a70f-9a60e5433b38", "sighting--3dec0626-af09-4bd2-a9c1-32f4390de9fb", "sighting--b7730e4b-b0b7-4b99-b3d7-4857823e2f32", "sighting--83b5446c-bd4d-422d-9b9c-ae5f86b77c9f", "sighting--6eee684d-fa2c-4566-8c2d-5bac824b63d4", "sighting--19a05fe7-b3ef-4b75-a517-a9cbc6ec9c0f", "sighting--e77baa07-d3db-4824-ad34-1d575ce91857", "sighting--a0f88fae-14ca-4841-ac0b-8063478ac2ac", "sighting--14734992-8437-4c8e-87cc-677f22ba45e3", "sighting--17160c64-46ae-4ba4-bdfe-a89d8bc1d431", "sighting--b1ae7d05-9c67-46b0-9018-80bd28f4f681", "sighting--a29586c4-c513-4d46-8190-4b310be0ea65", "sighting--e8d5c526-41d9-468c-b24d-48f65d455380", "sighting--7f13ffd0-05d6-4529-a3c0-23049daba452", "sighting--8dbf0490-fb2b-4ca9-9261-b9f86c87386a", "sighting--7a9f571c-9bc7-4735-95af-277421e73bdc", "sighting--1b3b6562-2729-4783-b181-94a0611f5e60", "sighting--91995a67-6d87-4471-8133-70fe50aa8f1b", "sighting--bfc2eb53-b25b-45e2-a964-5dff1e343bbc", "sighting--cf102684-b2b3-43f5-bc4d-dcee72a8878c", "sighting--e143d92d-b86c-4c52-9bc2-9ac505c2a3cd", "sighting--e4a898ff-b07e-40c0-b5b7-bf0ae0c04c9d", "sighting--40fc2c2c-1c90-4adf-830b-a6a0e375095d", "sighting--51b0b46e-b953-4800-8004-905b32520276", "sighting--bd4bd7e7-497f-4e7c-a723-2d4bc0e82c0c", "sighting--8eeab0e1-9908-4063-8aef-f7dec8d3235c", "sighting--ba1fd20a-4104-4d4a-8623-e8f8006c3432", "sighting--ea277652-7d93-422f-9525-475e1fd1c1cf", "sighting--e1b5608c-ba53-4a22-909a-dfad5f3d7db8", "sighting--cab135f3-c032-42b5-8894-fe4f9f4026b0", "sighting--6af423f5-4b60-4f97-87d6-bbdd0416fbf2", "sighting--c956d967-0c22-436b-b0bd-418df1de361f", "sighting--62b8984c-6e0f-4b94-883b-e161dda84727", "sighting--927ccaee-73e5-4da0-a691-4423d7c480e0", "sighting--9b312205-1440-477e-bc7d-33b9ec51861b", "sighting--34c4352e-08cd-4754-bb37-85937afcd909", "sighting--173a0c7a-ca16-41de-bfae-25f9b80e7d6d", "sighting--a24a3e50-368a-41b7-85fe-c5341bebff0b", "sighting--a486e1a1-a133-4fe7-8137-363ab93ee64a", "sighting--957432bf-5041-4265-b8f0-88406560da96", "sighting--899889ec-dba3-474e-8655-6791487555b7", "sighting--5323f424-ddb7-4491-82e0-dc1ce506b403", "sighting--6b24465b-ed9f-48a8-9001-874512f8aee0", "sighting--8a8fd8c5-5968-4935-a362-42265ce14e20", "sighting--aa287eba-205e-4b3f-9526-1862838202ad", "sighting--76764f4a-380c-4a28-bc7e-2bcd324e32d4", "sighting--d56a944c-689c-40b2-93b4-c4a14e519946", "sighting--5daee413-306b-4428-a910-a0064bb9c272", "sighting--9a86ea5c-058d-4f9c-9904-0465b8b068c8", "sighting--97c9e250-6960-4dd0-8730-d2c626c7ef2a", "sighting--e306f94d-8a02-491e-8bad-fd4c1b085100", "sighting--bd849064-c0f9-49d0-be20-4a3422787c05", "sighting--c5738263-ab00-4655-94ce-9afc93c047ee", "sighting--309e6ba0-fb98-49ad-b064-75a6e168d50d", "sighting--a0df4c1d-ccf8-478a-982b-d4a779fb602f", "sighting--85ebde36-1f56-4c90-ad09-767b73f9719f", "sighting--00806f58-8404-4f44-a18c-5f9140efde94", "sighting--e03bf74e-0a8d-4d06-9c9b-e812f36d8a5f", "sighting--213fa7ef-3e09-454a-9e29-5cb34b4ba560", "sighting--22d6db1c-5fbd-4edf-a202-cc57fbb2c8f3", "sighting--d01bbe41-5cf1-4cba-93c7-e566edd1e631", "sighting--8f739600-85bb-4db6-8f8c-1bc50e0eb675", "sighting--7a6096f7-68ec-4fcc-821e-b5e790d0154c", "sighting--04650663-91b5-4be0-933a-be878087b8b1", "sighting--664cffd2-9ce5-4989-a964-a16c261eaffc", "sighting--ddd719cd-013c-400c-92b9-523748328498", "sighting--81fc7b46-235d-4d5c-9035-51c7d133986a", "sighting--73242c87-d979-43a3-bd73-12410480c7d3", "sighting--b9d94629-1666-4870-8fd1-2306ba2d0a37", "sighting--c1dd2eed-9927-48a0-934e-27958a4df2e3", "sighting--6d3a330f-4412-4c39-8c41-dd59407ad64b", "sighting--a415c567-6f13-4a1d-815e-c3b981be0eb9", "sighting--d8e898ca-95ab-4915-bd60-a2e4f7e8debd", "sighting--7cc1fff0-0039-4cf4-bb2a-458ec8a2cf93", "sighting--4496a3d5-d054-4d40-b5ac-d73d5a3cbfa6", "sighting--4ac44b72-42a4-4301-a808-fe05686bd6e2", "sighting--5e581297-3c10-4440-a61d-7f07bae868ad", "sighting--12ddf855-7be2-4cfc-b873-7deca4f9656b", "sighting--516ccfc4-7135-44c8-8751-cb44cb2abac5", "sighting--437cf722-f359-4d14-87b1-67b49264f143", "sighting--315f549f-14bf-479a-93ce-e973b25591f5", "sighting--eb23a4ad-021e-4b86-a5d5-880bb5b0298d", "sighting--9183b231-0316-4399-85d9-0d01b9caecac", "sighting--975c6c3f-6a9c-404d-9ac8-52fdd3a0b158", "sighting--8f402921-0e48-4bb4-aacf-23c5e0e92999", "sighting--eeaa32e9-9540-4d07-abc1-9344e21c73b4", "sighting--08612967-3213-4220-81b4-5111b0f53966", "sighting--5c03f799-3c77-4b7a-83be-bb7df5751239", "sighting--510ef448-b519-4d98-add8-8dbc316d9945", "sighting--74cfddfa-db4d-4c97-b063-361c659a501c", "sighting--956157f2-ba91-4cb3-8865-8cc92fe7fb89", "sighting--f780b137-02ae-489e-ab93-efb973e81c58", "sighting--09d03df2-9b88-4f14-ae05-2a848058e622", "sighting--563d4286-8897-481c-9ec2-f5b40fdf9d36", "sighting--008c23c0-3186-48b3-9c45-57f48bab8ebf", "sighting--227ed168-719e-4c66-9a11-182423f361b7", "sighting--06b556df-00ff-4437-86b1-f2fe03fb9aa7", "sighting--4a6ed41d-58fd-46d0-ac95-e5adf2354c39", "sighting--a22a170a-623b-4c5b-9424-16eed563cb64", "sighting--ecd5c5a2-6fca-453b-a6dc-8c254436c083", "sighting--faf5f002-0563-4de3-ac3e-5e8620a2bb10", "sighting--39761c48-f5f9-4712-99e8-aef4708a416b", "sighting--16ee0651-7343-4324-bb69-99b5ac1e4b26", "sighting--c4c116d9-63bc-48f5-a35d-cf0142186d72", "sighting--46770f2a-f4e5-4ff5-8d11-afbcf6d9bc8b", "sighting--7064f1bb-3a81-424f-b677-938e30fe4850", "sighting--7a2a1606-7e04-400b-897a-6a2f12c0c433", "sighting--7bb2c221-01b9-4406-8eef-0aec512b8df2", "sighting--d73f1d29-a082-4bac-b4ec-e34a1ade3020", "sighting--341aed91-d1ea-4140-b0ef-cd72d2cf24fd", "sighting--3f34c891-6dcb-4a3c-86f4-1c45716a4e0b", "sighting--7ae0d6c2-a4a2-4b97-a575-4ec7426d4bb1", "sighting--b851b10f-1325-4a4f-bd41-e6614f58e8b7", "sighting--ed90d7f2-97a9-48fa-a137-a9833c0706fc", "sighting--59498000-e5d4-4847-b691-ed17fd526c07", "sighting--6b2626fb-3408-4d35-8623-b9ce6cacee0a", "sighting--f9852477-e964-4bf7-998c-2707837bc330", "sighting--0615a7e2-c119-4d6c-a2f5-1d0cf93cf044", "sighting--c38b2df4-4ae1-44cc-8a6b-c8964eb94424", "sighting--9d7ea49b-1589-4fbe-8cbd-d0b04768b604", "sighting--54ca7502-8afa-4ab9-831a-72784a5fd0ba", "sighting--5ccbc8cb-f9ae-4da4-9c82-c7795ae6ce59", "sighting--2e8cb9ff-aac1-4562-8c1f-8b89da4da079", "sighting--2ae16398-2c26-47b8-813e-1cd3c70b4b93", "sighting--53d1c2a2-7981-4552-8a58-c7cba4263bb4", "sighting--6332ad11-407f-40ad-83a3-356a616243ff", "sighting--fca33750-f6d5-49cc-b1dd-5b88d4a69995", "sighting--7fdb8a2d-b5df-4e3c-b6ef-3eb043537673", "sighting--4937e06c-958f-4843-adb7-b7a15b0e7111", "sighting--957f9a7d-865f-4282-859f-ea8bdd6605a0", "sighting--8ce37fd4-449a-4d26-91e5-9d478c347222", "sighting--e0b08dbc-b91a-418d-a9b4-3bd7201d4081", "sighting--920dfbbe-4bce-4c44-afa5-d295847510e6", "sighting--5c5319d1-0ff0-45c2-acbc-967c95d7cb44", "sighting--206309e5-6269-4495-b998-cf34e1947f64", "sighting--90ee5df5-8a26-428a-a67c-61e644c978dd", "sighting--1e381cd3-a004-4ff0-b09c-31be533f900c", "sighting--e0cef57a-380c-40b9-8fdc-18a689bf22fe", "sighting--643878e4-4a30-4ed7-b57e-c32728ebfc28", "sighting--ea85adb8-7871-4c8a-85ab-6b23229d10e7", "sighting--a33c5ced-f5e7-4795-b966-036ec495d244", "sighting--36746802-344f-44fe-af68-431ad09038db", "sighting--e164528a-4cfb-4e4d-9aa1-f812e31945db", "sighting--05fcd9a9-03c8-4a50-b4f9-a054fa7211dd", "sighting--0b35908e-419a-471c-8ca6-c89bb03dcc4e", "sighting--fc0776a0-a95d-4e59-9828-597a91973a4c", "sighting--c376b7ee-040e-4ded-8b42-f99a2626e3d8", "sighting--b39eb8d3-5678-41e4-aac8-079363cf16b5", "sighting--669c0b11-617b-42ea-8fef-d6a1a011b3b7", "sighting--a64a64ae-e182-464a-8f42-b6b1fd07d403", "sighting--08ac9aa0-a171-46c0-8776-3ea6f64c3365", "sighting--82a05a48-3795-4e1f-a102-325ec4391e75", "sighting--a2db7fc6-936b-40cf-abd6-d4972a5419b7", "sighting--1c6dc83f-d772-43d4-ae04-3f249ce26f8a", "sighting--db51bf93-7780-4e1b-bdba-6fd63a999164", "sighting--aeed62b4-c30c-4d7c-9533-d2b2e219c6bf", "sighting--656d957c-9414-48c5-aed5-2455770e7e4b", "sighting--e989a488-c440-40f9-a875-4a439daf9e93", "sighting--cde24e1a-bcd0-4548-a1e6-8e9ad1d99ca3", "sighting--46949530-7352-45bb-8f70-6dd3d8d67abb", "sighting--e0300ad8-5c03-478a-98cf-9e3943ede44b", "sighting--05a481a9-e93f-44a8-9cfd-1b4953d7c36f", "sighting--941e2032-3c6d-4ce7-9327-6c5eab786711", "sighting--272e48b3-1885-48da-b1e6-f5a85b0dc7ee", "sighting--762cd7c5-fb1e-4708-84fb-cece2cbb2d1b", "sighting--1f38916d-afc2-4c87-8666-b7dab7e6135d", "sighting--7215e5ed-018d-4ab5-86c6-7c46029ac3bc", "sighting--707b8e57-add3-4df0-92cd-3e327816f5da", "sighting--5521a180-dcb6-4686-951c-824b601e4ec4", "sighting--472c743d-160c-4842-8cac-6ab0fbb82d5e", "sighting--f0dff7a2-d474-4d43-bbdf-1e4f7087de6f", "sighting--c436ff57-606d-47ca-807f-4eb59b4823d3", "sighting--7e11fda0-eb51-4ecf-ac8e-6c5ab3fb1e97", "sighting--a9cffa5e-1d1c-46bb-a6b6-834cba102d77", "sighting--338fb06a-b752-421b-813f-bb5f13a4c4d6", "sighting--cc236910-30ba-4cbb-b966-a6a052282232", "sighting--eb774cdd-a17a-4820-88a0-43849756f1b6", "sighting--dda198de-26aa-400c-b4f3-9a866fb902f5", "sighting--d08a85e7-00ba-403d-8d7b-86ae7b7f8087", "sighting--b2b580cc-8324-4af3-b7ec-cdbab70be736", "sighting--0db9caae-3291-4192-b61b-2564411ae6f0", "sighting--f91f69f2-1a43-4624-bd45-d6a8a7a65093", "sighting--738806cd-fa09-4b43-8039-51960fb6f19c", "sighting--aa082279-913b-408a-81c6-be3698455804", "sighting--ca47cc10-d18a-42ef-99c0-4bb99468221f", "sighting--b10d69c2-6936-4990-b316-9d9ee1e12c0b", "sighting--2ecf7eb4-29c8-4a33-9f19-cfa6ded15d26", "sighting--d938e9b6-8bd2-45cc-a7d3-1cd88d95da5a", "sighting--d73c0079-290f-4396-936a-3f8965d19ec3", "sighting--0e765a25-af64-4249-8638-1def9e0e3de2", "sighting--2acfd0aa-27e2-4c55-bc7d-6b5446b487b4", "sighting--cb54e9b8-a47d-4cd5-807c-e8fc0d6e5a09", "sighting--07b3d8f5-6779-4189-9ff9-8c4ff6c753a0", "sighting--b49a6d8a-c207-4ce7-bca2-3dfce64f756c", "sighting--721181a5-69a3-4154-948a-cd19f2bd50c4", "sighting--1025b0fe-99ce-48d7-a42b-6a6e36413d49", "sighting--5b07182d-4f04-42d4-8982-7a7061059ae6", "sighting--f010421f-1c18-4bbf-b381-ebb48c03012e", "sighting--0465a22c-4876-4fec-a25c-4ddb0978e1c5", "sighting--19038a77-b75b-490f-8d60-f7d9b6e431d3", "sighting--c5156542-2ac2-4f74-a30a-4c872decd157", "sighting--ad20149f-07aa-40b5-888d-1d11efd13c18", "sighting--77bf6e10-3d72-47f7-8fb9-2f2aa4b3c2c0", "sighting--d59d71f3-2921-40d8-b644-c1113fd60b32", "sighting--dccc407e-17cf-463e-9050-7952e3fe4e0c", "sighting--e1fbcdb6-5fde-4ce0-9b41-4a9a1d40d3a9", "sighting--4d45a9ce-4cbc-4851-8107-15c184159c7f", "sighting--19af5887-5076-4023-905d-c42b2ebbb27a", "sighting--8772ffd1-1c54-4e84-af3c-01fcca78e556", "sighting--57274968-5abd-4be2-8def-083375820892", "sighting--e2d02194-e92f-47b2-8815-5513d52cee01", "sighting--69d5b35d-18ba-4294-8fb6-631735dbdbca", "sighting--3f1c8e95-1ace-4c29-a32b-8ef8d84b19d2", "sighting--5cf1c632-c39a-4c62-8023-1a86c30e0ea3", "sighting--7316574e-d41b-4e9c-8eb1-0c06b214c2d4", "sighting--ccba3db5-fa2a-4b91-bf55-a206e5c80301", "sighting--30d2d1cf-0b75-431f-97be-2bb34b59e69c", "sighting--de646c22-4d45-4449-b293-ba96be63b45c", "sighting--43f3ebaa-ead7-4d2f-bd49-94d0a3579864", "sighting--6c57376e-5bce-4dc1-b6f9-9b12b548d184", "sighting--4459d8e1-aa4d-4026-a25d-1ef1d17614a1", "sighting--bd46ffd6-6b04-4136-926d-3fd808e7dc29", "sighting--30ab900d-0018-47d5-a963-c800f0202010", "sighting--ac12d154-10b8-49f2-a032-6e0fc99abf8d", "sighting--55c94ebf-78db-41d5-9f36-8d8da756be7b", "sighting--761240c5-ebe1-42da-8099-4dd5d711eae3", "sighting--560123e0-b4b8-4ea3-92c4-addcbcd33836", "sighting--dd8db5c7-8973-4e29-919d-1c7a09ab6b0c", "sighting--72178faa-0160-4ec8-8f1f-e5250d5fd209", "sighting--49313d92-e63a-4085-bafb-fe00ec843522", "sighting--d9851c11-6df3-4a33-a95a-c57ff29570c0", "sighting--295bddb3-7321-4bbb-998e-c0978db2b079", "sighting--9531e5f1-6d4f-4c67-97cd-b775915d2c23", "sighting--00a9fce9-a457-4545-b88b-ba3c65952c85", "sighting--bf4e9bdf-acd9-4e86-97a0-f61be825da8a", "sighting--70262ed4-4976-4e61-bfe6-ec057f3c965a", "sighting--46f2b65a-0cb1-4ca8-8c70-01b0d7ca50a7", "sighting--c65d7331-a5b4-4cfc-ae6b-e43ce12257e5", "sighting--d2871f57-59a2-401a-9ace-0e6997b35b94", "sighting--14392596-f884-4638-b6d3-c257e1dbf791", "sighting--e2c6d5a1-3181-46ea-8d83-2f48c94af3ea", "sighting--946f12d1-dace-4260-b084-30b1cfd7ccf9", "sighting--14a43ff6-775b-4119-90f2-b97520787146", "sighting--86202deb-9e2f-488d-974b-363ccb9f5aad", "sighting--ce12df01-2be5-467e-8ad5-f09a4e445ca2", "sighting--79d19b92-9957-44f6-b3b0-abe425477f9c", "sighting--e6f8350d-a488-4cff-8195-26ec6678387e", "sighting--9aa692f1-e707-41ab-b827-026de97dc316", "sighting--f1ce22e7-9200-4af5-bff8-f2a34e7f8559", "sighting--ddddca8b-8d5d-4fb5-8002-fcc9eada02ad", "sighting--46339eeb-f7fd-42f3-9f16-fc36e0621f0c", "sighting--bad47457-144d-4438-b455-5a57f4118fce", "sighting--9eb7ae1b-aba3-42e7-92dc-77e30586d7ff", "sighting--09e242de-a4ee-4595-b086-bced261d600d", "sighting--856f1614-f034-4c1d-9ccc-075e84152603", "sighting--f86f24f2-509a-44f5-8ec4-a5de3ff5dc3a", "sighting--029f3cee-7404-4636-83fa-b3cd90a3573a", "sighting--b5e3306c-5a60-4b96-bfa1-41cc764d885e", "sighting--23e1bcb2-8d20-41e2-a24c-707382d77dbe", "sighting--486067d5-ef21-4e61-b183-2b3cbcad196d", "sighting--dff9e862-427b-4c9b-a9db-72c2e6b52f42", "sighting--65ee5a60-824e-43ef-80d7-8313b9c72d5d", "sighting--42f8ff25-7727-4b73-b304-8dd948e7f715", "sighting--c8386523-0943-4dbf-8364-6a5570e5f50e", "sighting--dd5e4319-8aaf-42c3-8425-3b3e1ed82194", "sighting--83060b4d-9f15-4af7-9b6f-d3c2b0ed7dd1", "sighting--6fc3c44c-94c5-498a-9a90-f43b83c14ccf", "sighting--badcabf7-d1bf-4b29-a525-5300d3cd039b", "sighting--2763bd8a-fdcb-46f3-816a-0a2d16568293", "sighting--2514d45d-fbbe-43e9-8418-4fa310a5641e", "sighting--fe31800f-630c-4e25-acef-c299aabe2220", "sighting--044347aa-3f19-4828-8207-d5a61eb59d74", "sighting--80d8c36b-4ab5-4eb1-bc3b-cc768f2b414c", "sighting--b767885f-f5d0-4148-8681-0d0beea4ebbf", "sighting--9414a719-8219-46d7-806b-1b29f88af11f", "sighting--174b9cf3-8a5c-457a-8381-814cff8b3d2e", "sighting--98fe1596-fc08-440d-8123-36f19985bb37", "sighting--e32be539-c8da-4418-863a-11a2efdf47cf", "sighting--0e8c212e-7774-4524-a38d-ebea3672c680", "sighting--54154aaa-7ad0-4c33-92f1-a0c8df9df19d", "sighting--5390fa6b-be6d-466c-be5a-3fbf704b355b", "sighting--677dd9c4-050b-41de-9b00-4f6860eedfc3", "sighting--850bde8f-0917-4e6b-8d9d-edc42206d505", "sighting--1d2a0bb3-f4c3-431b-9075-a0fab46fa660", "sighting--6a9e5084-f7ea-4cf4-8f50-c584b43d1f22", "sighting--b5d68f2f-eb0d-4a07-8632-57d2e866354e", "sighting--e3fa059e-55b3-4741-bc0f-252105226861", "sighting--5934b64e-551e-47e5-875a-f88ec6e4b6a8", "sighting--7353de04-219a-4d06-9973-8532179dd7b5", "sighting--4902fa34-ee5e-4463-b4c1-ba72d4f3e1b2", "sighting--087556fc-efbf-4406-9389-a4ec9686c33f", "sighting--bd2db44c-30bf-4119-85d2-3e9ff57807cd", "sighting--009c698f-2e01-43f5-a21a-aae474099ef2", "sighting--7eb3d723-f6d5-4e74-820a-c235fc9177ac", "sighting--82ddd6de-29f0-4aab-a292-604551050ff2", "sighting--9e6c36c5-e60c-406a-9c4e-67fc9d292fcf", "sighting--d4815819-431a-4906-ab20-7832cbfee964", "sighting--54c1ec1f-c7a0-4b55-a04d-be19525aa7f1", "sighting--1c4424a9-4ef3-4f48-a349-64c2dae888e4", "sighting--62e7a9fa-e98b-4ceb-b0ae-8b9941c9b463", "sighting--d8c2f216-0a85-48a3-bf65-7e80d5d2784b", "sighting--5a482db0-0df8-4c2b-b225-51b21d721643", "sighting--ecc6b24b-f0de-4879-a10b-4e636b3f6748", "sighting--29f0d9b5-85d8-49df-91e8-5a225981b758", "sighting--f863a844-9975-4d0f-a62d-e333f5acd594", "sighting--0572d509-dbd1-4a16-bb5d-3d1c77455437", "sighting--f4d96787-e0e4-4e82-b906-0f3553bb4804", "sighting--273c5bb1-258f-409d-8fe1-45f96b7e38a5", "sighting--9b62e919-b1a1-47e4-abb4-f00431f6350d", "sighting--c78294c3-be55-48ed-984e-59d7691e55b5", "sighting--b41e7dd0-50c8-45d5-92a8-2c921c065b83", "sighting--298a192a-89e8-4f3c-9e49-a893eb4943c0", "sighting--5fa8082a-bde4-4834-91e6-d86c281290d5", "sighting--6c6a10c0-470a-4fdf-97ea-e5aa37361a4d", "sighting--facefc92-ec17-4b4c-a7bd-31ea8cf4eb72", "sighting--8a509976-44f9-445e-9737-def484086a20", "sighting--d7c41d6d-b384-4039-ba39-ab573bacc368", "sighting--adb826f1-a655-4f26-abc5-a0aab154e729", "sighting--60cfc472-ccaa-419b-9dfb-7f96cd3e91d2", "sighting--0f0aa365-8e72-4c5d-808d-879aa23953c0", "sighting--e936656e-e12c-485f-8854-1faa159a7359", "sighting--55faff2e-5ecf-4290-a72f-df522c371fdd", "sighting--443c29b2-f7d6-4c8b-b1f6-6592d4f133ce", "sighting--2fe44d92-ea35-488c-a3cf-5086dac0fb04", "sighting--bc181584-0972-4fdb-a3b6-9618dcdede3b", "sighting--8641a27a-b730-4cb3-afa0-bc5b7784c76b", "sighting--a3c1aa52-0f76-4087-810f-9a29fdec93c2", "sighting--90867df7-33a9-46be-9191-2e868efa2d0e", "sighting--dcb80263-5bad-4fd5-927a-acfe3645fa88", "sighting--be2787b4-9eaf-486d-b0ef-067b973a700c", "sighting--74f19321-3000-48d9-8527-de39dcd6d316", "sighting--c90bca7a-8846-46ee-a04d-264b0ab12c94", "sighting--55478c6a-2c1f-4264-8b56-3e4ea4c712b3", "sighting--f8674260-d380-45ba-b237-33afafa19f04", "sighting--ec23eec1-2118-4747-99b5-a8e1860dc7ff", "sighting--d1c6040d-e671-4b60-8985-4af51289df47", "sighting--da6f0ee9-42b1-4cde-bbbd-8707b7964b9c", "sighting--1faa4957-e916-453b-9378-4b945c44461d", "sighting--cdec56d6-acb1-4f57-b386-98c7f1d4f1a8", "sighting--77cdaf34-cf07-437e-b118-98acdd587328", "sighting--59d0d4b2-bfb6-4d59-a847-8c6244e2ece6", "sighting--b918dd41-aaeb-44b1-a5d7-8117ecab754f", "sighting--d4a260f4-2d0b-45c5-90c3-8d8d49ed3501", "sighting--798d81b4-49d2-4ce2-bc36-e13753ea5928", "sighting--0642c449-48a9-46b6-abfa-32d460891636", "sighting--b0d07adc-759d-4610-a93c-ca9e408afa53", "sighting--a014a9a4-cf8d-4059-9efd-c51549339c83", "sighting--e72364de-6121-4dc5-95e4-164a281d31aa", "sighting--1ef9fc11-94d9-4dba-b597-5022e5717502", "sighting--398c1e91-75c0-4cb5-b2ca-657a47139335", "sighting--bf22753b-706c-45a8-b854-40b1323fb5f5", "sighting--a0e938a7-fb8d-4447-866c-132f30aee2ef", "sighting--576afd05-9ba6-475d-9f44-78c7e3fce489", "sighting--1eb2425f-bb0f-4d75-a21e-c1e96b51efee", "sighting--42887c6b-4d91-44e2-a0b7-960560d32447", "sighting--03cd1652-19a7-4893-a4f9-a7ac8321bab7", "sighting--c5dbba88-e322-4da1-ac11-ca00207f1cc2", "sighting--b4dce1e8-2dcd-4b38-8979-aafc391f0d51", "sighting--96ad560e-8337-413d-b7ec-e24cad40d5dd", "sighting--e1e45431-681c-4dfd-83db-96a1f29b9dd8", "sighting--cef1ebd1-018d-4c81-9fc9-19e8048cc46c", "sighting--49b0222a-a3ec-4dcd-a95e-446d19f0b4ff", "sighting--1d7df22b-523d-4d9d-b459-c62cd904397a", "sighting--06fd20e4-31e3-483c-bf70-d7b265e9e85a", "sighting--2bd3e4f3-bffb-4af8-92ad-b3a9ab378c5c", "sighting--5ba80f49-6381-4f84-a06f-8a03ac541621", "sighting--5aac80d0-9b42-4fcc-b813-245760ee6f4f", "sighting--a19acdc0-b244-4994-bc17-be68de347bcd", "sighting--3f70ddc2-57af-4381-9ba2-5e7ea59714f8", "sighting--08579803-d046-49d3-bbde-56ccc5a1a7b4", "sighting--78d037bd-b112-472b-b3f3-6ac09a5df609", "sighting--2fcedfab-571e-4b1e-b201-2bcab44ccaca", "sighting--4e65f13c-8e4e-46d4-92a4-49f1b3a73c5c", "sighting--911db53c-f616-42ae-bd32-7c1dd981dbb4", "sighting--fb5b3942-ca63-45cc-bcf7-28544b1a1c40", "sighting--877ca2e2-985b-451b-869a-342d7335cae9", "sighting--3a200728-4aa2-4f70-a926-be552af5c995", "sighting--1e7cde4e-2e38-4872-868c-9a347a364102", "sighting--9792f60e-94fe-47ba-841a-8f13d846d30f", "sighting--16d38a0b-cdde-4684-86fc-73f7beef8505", "sighting--5bb44002-85cd-44f4-9db0-b2d2fb4c360c", "sighting--be5bcbb4-c401-4531-9244-2a1ca3173896", "sighting--1681d908-972d-4fcc-bb41-db69890914a4", "sighting--305efdea-9272-429f-bc2f-fa6d9efe91b0", "sighting--8aeff91f-b3e5-4957-b555-16e8ab6597d8", "sighting--e373fd24-193a-4f5d-9d0f-3e8bb9962ddf", "sighting--340aefb1-b2e7-4ee1-9d09-261cd0f39d00", "sighting--79a64c7e-2257-44b8-9b29-64fd27f76f0c", "sighting--d13e089a-96f3-4042-8c40-402b9c869ae3", "sighting--52c9b58d-3593-4fcc-b4e8-c067bad9df4b", "sighting--deeaa64a-9c68-40d2-9432-34d42f8c196c", "sighting--5c3ddcd1-26fa-47f0-a841-2d711bd79bff", "sighting--a7632872-3478-42a2-8d77-fc8444178af6", "sighting--80c83f4a-163c-4c3c-840f-10762f7e93a2", "sighting--3e564e9c-eefe-405e-9633-a6d7ec1b33f4", "sighting--cc3fe8d1-e7bf-4529-a733-1f7c284b24fe", "sighting--deb3f4ee-ec30-4330-b7d0-f3d358ab8b07", "sighting--378c30fb-4147-44b7-a7a3-457e3d154ecb", "sighting--0607f51f-eb52-4680-9b00-5f0b07a88440", "sighting--ac0a8af9-f4d7-4c06-949c-68973c6e0863", "sighting--8a4d9a4b-9a31-4ff7-8b95-6a3dd34bc45f", "sighting--3c2b0346-ba5e-4bc6-81b3-e78f69033ad6", "sighting--1df6dabb-75db-4ae0-8b25-64293e4ae620", "sighting--380a242c-cfb6-4549-aad9-a7fdadae144f", "sighting--f91d3cc2-1490-424f-9531-83a46e2a6974", "sighting--1db70131-ae67-40ec-a41b-0a4e0bf58f35", "sighting--e2d6879b-1b41-4e0f-8e54-2a228a8fa168", "sighting--b711b521-f47a-4f59-ab3f-51a0d0b00469", "sighting--6a5442ed-2db8-4ae7-89bc-dab73a768851", "sighting--8d458254-cd41-48e0-a85d-8cbd1c789609", "sighting--e692fd19-c1b4-402b-9751-7807bf2c28d0", "sighting--df9ffa76-c7e0-41fb-a9e7-2869bdfb6ca0", "sighting--31009073-ec78-4cac-99bd-5cdd276f4aa8", "sighting--bea18b33-291b-4d78-94fc-6caf5698b7a7", "sighting--48456332-9341-4663-b570-258e9eff768d", "sighting--8dfdc088-8496-46cf-8363-424b05ceed08", "sighting--abd84ea7-4183-4dc8-83e8-7af102767774", "sighting--fb67eb47-f765-4045-a962-1659edba5a1c", "sighting--2f5d11c1-87a5-4044-aa53-336713aaacf6", "sighting--4a7bf5d7-2292-4273-a455-0f52d79f43ee", "sighting--7ce2af71-3dbd-4c04-8248-0903418a0f34", "sighting--733e6a0a-23cf-4936-bdff-38e7d64d38a0", "sighting--662dce03-359c-4285-99df-19c979aead95", "sighting--1455d37b-e604-42cb-97e8-94afd0ff326b", "sighting--99f7fa93-51f3-4163-af20-18c8c04fddf7", "sighting--1d371117-3021-478e-b9b9-f287dd562c04", "sighting--162428d4-d134-4f21-a6c1-207dcf8f2dfc", "sighting--cc6a313c-e6a1-465f-be1e-cd6ceb19f6f6", "sighting--95341e12-afe6-4bdf-a3bf-302f1276ff91", "sighting--f55ddf7e-8fca-4a9a-9a04-3706566b79a2", "sighting--f9c362ce-2232-4cf0-9ee6-0eb4802fe71b", "sighting--b87ac1c9-e7f5-4bdb-8548-2d242f10f310", "sighting--f87a5ee3-0e37-4f7a-b858-92f715e0f53f", "sighting--71938cf5-8904-4818-b2eb-83385aa1efeb", "sighting--39b89153-fc47-48ae-bd8b-27f01e70f4cb", "sighting--8631c961-7ac0-4f47-97ea-2df250063dba", "sighting--c0087273-288c-415a-97ea-9ac460196f07", "sighting--a23ed969-f8dd-4c35-b334-abd034718c6a", "sighting--6a5a3e7f-c9c5-4a72-ac1e-4e029ea5cb5c", "sighting--2c29a463-49fa-44fd-b995-863ec4bfc9be", "sighting--fcccf44a-cfd9-4999-a285-b3ba4dd2436c", "sighting--261ff0c6-ba54-4eae-a87f-53626b5ab210", "sighting--230594dd-6001-424e-b6cb-8adee96b7c35", "sighting--a8e166fb-f198-4110-a0b4-f0249ed2ad09", "sighting--e402b19e-70b2-4819-ad64-36898157d073", "sighting--30d9882a-81f3-4217-92cb-70a7d9167c4e", "sighting--27d43740-85f5-4d92-a734-d010d1570ec6", "sighting--276287de-2df7-4de5-be5c-1f6827035762", "sighting--c1f6b2d1-3d97-4c8c-bccd-341493c09e64", "sighting--7efad316-9846-4604-a6c3-9cebd8f9e1de", "sighting--0881f917-2903-4928-a08a-ad7cc2a2e321", "sighting--2762c9c5-1e84-4324-bfcd-938bfc39c1bd", "sighting--9f54c2c2-6174-427a-83bb-59a2a57d4a83", "sighting--deb70571-0a8d-46b8-a876-8fe12588fef8", "sighting--ecb8e9ab-f4ce-4b98-93df-665e098c25ee", "sighting--52318007-29de-44be-a747-0718cd2ce956", "sighting--28afd2ff-b501-4e19-a4c2-5d336cda4dac", "sighting--8ccb8c01-d08d-4fa2-9876-37807fc056ed", "sighting--276a7f53-d52e-43ab-b43a-22b648f6c348", "sighting--412469a8-2508-40ec-be97-c60f75b02c11", "sighting--7e41288e-4bed-4ee8-8476-a1a1c66e5ecb", "sighting--d854b646-2449-44d1-a199-851389ff9218", "sighting--d90afce2-2c57-4bf1-adf2-f453d96bbc5c", "sighting--33b5306a-29aa-4586-977f-d5d9a17d6ad0", "sighting--b765a0d5-3024-48bc-badc-61c1e2605f31", "sighting--0d5423ca-d445-4ca1-a11d-e7caa9b62c72", "sighting--864e2398-2c68-4584-aa39-061985c3441d", "sighting--91cd5e44-278f-4d77-b676-62fa8d3ac405", "sighting--e99c082a-61fa-4bd6-8c80-6450fcde40c9", "sighting--380c54c2-6d5b-428f-a98b-863317954933", "sighting--76c2db81-e12b-4347-b4c6-5eda0a39d022", "sighting--8763d63f-b680-440e-9bfb-4f1fa7af303b", "sighting--ca7a9c9f-b6f6-4e17-a7f9-67b9aacc035d", "sighting--f075f45e-cf28-4c01-9ddf-d32c966632de", "sighting--e08db20f-bb49-4519-90fd-9a481af8b24d", "sighting--f8eb95cc-d334-476c-88a5-d993c60a1822", "sighting--ab15df26-0eaa-4ff8-9a3c-97e03c9fde4b", "sighting--267ef22d-a063-47e9-9ac9-6e1ef1b2e89c", "sighting--58e0f55c-e119-4690-867b-289964d2b014", "sighting--a78cb6b0-b2ba-4b6a-8f3d-f3eb5ed35b94", "sighting--88b82f2f-6f9e-475e-b0bc-ac433ab7a7c8", "sighting--99b54172-4818-4f92-9eb1-f08664125b63", "sighting--a3e63641-485b-48ed-888f-056bdf0bf7e3", "sighting--91e6aec6-7cad-4974-b8e9-a369532a912e", "sighting--ed9d7d79-4ad6-4d82-a758-ce277222d177", "sighting--ad079538-d023-4648-879e-7446f024a3f2", "sighting--bd599837-4e35-4057-bc43-0c193a441605", "sighting--5d548301-1b4b-4070-ab67-d7b81f9e9d46", "sighting--774c1898-3f7e-4b0d-9b18-6eeb80eaa6f8", "sighting--e48a5cb4-7ff2-4855-b49e-0a7c37fa744f", "sighting--ec5691fb-e89f-48cb-a423-e926dd8a541a", "sighting--b70cad2b-a543-45aa-972d-6582ef0ed9af", "sighting--b9f88bd9-7c04-4dd8-8d10-33ff99405ca2", "sighting--895a1915-200f-46e5-b032-d0d8bcedea02", "sighting--60ca4f9e-8b8f-4306-ba9e-ea31e8387906", "sighting--017d7a6e-615f-485a-b47e-11ced764b200", "sighting--8a35a657-53c6-4041-83d9-2437cf6b7e3e", "sighting--40a3770d-905f-49ed-90f8-b94604e124e9", "sighting--0fa93ed8-9397-435f-bdee-b9fa02120697", "sighting--5df84295-392f-49c2-ae73-0156b978884c", "sighting--fd157e6f-8df5-41d2-aa5f-0b628605232f", "sighting--f8d2e59e-36c3-4f9e-997b-7119c2ec11e1", "sighting--9ac7ffb0-79c4-4b6c-83ff-961a20b1839d", "sighting--54cae32a-78be-4361-981b-68ae5eb5649d", "sighting--3d7f42c7-cc61-4724-8ff3-d4a0ae1bc5bc", "sighting--464db1c9-936c-4321-b604-95577406d3e5", "sighting--45396a7b-f0d4-4e59-829b-36a779097c04", "sighting--93676f31-df92-4d82-ae91-ac325b2dee25", "sighting--5cfe1775-4d36-4449-a9df-6f9745eeba41", "sighting--56d76d4d-f2c7-4dbb-a1ce-cf8e02f89b5d", "sighting--752a95ca-d83a-4a3c-bddf-740ba845c73f", "sighting--f46f9839-86d9-4272-8644-b6e7fb3cf7f7", "sighting--a70e5936-df30-4634-9cc9-04b220c645df", "sighting--83c19317-0817-437f-877a-d8946ce190d9", "sighting--16c94027-5122-44db-af7c-8880c0b6a17a", "sighting--0bac0836-8f49-407c-b543-162a92cd1ad5", "sighting--e08a7c8a-5bc1-46a7-a931-7af980596f75", "sighting--82eec4d5-4f33-4772-b380-968649d1706e", "sighting--c8afdd4e-f67c-435f-81b2-b69169fef7f0", "sighting--36bf97ec-4fbc-49cc-9e64-631961d1bd12", "sighting--0f8901b9-e8fe-4b60-a7fe-c99e6293ab30", "sighting--6035d7cb-79f9-40d9-bbc2-fa2cd1630653", "sighting--ebf0c2ec-7cb9-4126-9071-467dc369feae", "sighting--f178a08b-7488-475c-b675-039708305019", "sighting--398fa4d3-30d6-4764-a71e-536d811e05fb", "sighting--40f9cea1-4343-4874-8557-52eae611fcc5", "sighting--6ef31f5e-8e35-4b03-b0f5-4dc24cecac7b", "sighting--2c3aa1d3-c0e5-42be-8f71-3d18aa85e68a", "sighting--e872e62b-3a09-4093-9e3d-7489509e18fd", "sighting--0efa34c6-03e0-4a86-b823-c2b443cd3ccf", "sighting--dfdb30c2-ea11-488d-95a0-a0a68a0fc89a", "sighting--a95991be-8a4a-4d6e-8790-99f7a6de8730", "sighting--6ea1a027-2a0d-40a1-82ea-b961397e2b7c", "sighting--0099a422-7bf1-420c-8e9a-3043dff5d71b", "sighting--d8a2a29f-658e-4330-bb62-0e0f92cd6df6", "sighting--3d8c4e99-c086-4841-b826-900d7af5c390", "sighting--cfd2827f-4bb2-4799-a6fb-b020e7651f0c", "sighting--16cc88cb-94f3-4c3f-a1dc-66986deff0ee", "sighting--39e44adc-ac54-4090-9dd8-464ad66b50e5", "sighting--08166a7e-f004-4911-a2f7-b8a379d82716", "sighting--cf8ffa92-f4e9-4a2c-846c-17648a0ae0eb", "sighting--e8adeb75-6fd7-4114-bf04-d11a37979c26", "sighting--f50ac114-974c-405a-a63b-31731f0d607c", "sighting--3a5111fc-bb64-4385-bbca-3ebfab756d80", "sighting--c4d3f2cd-7f30-43c3-b791-5987df8c12ed", "sighting--2786c369-20a3-4bb9-aa77-95852b75593f", "sighting--e2bc47bd-b63c-4f63-b68e-fc40c730334d", "sighting--e63b7076-7733-4ef2-94dd-762ab23cbae0", "sighting--4e0da334-1d33-4b32-a8c5-8a2d83f10a76", "sighting--4735ec29-0a95-4443-b70b-c99817e7f5d8", "sighting--0c9ab2b9-8bf5-47bc-af01-ff8ce93b420e", "sighting--022e18c9-2e66-454e-8784-8db98658c89a", "sighting--329337bf-dec5-4331-948c-0d2dd15fc586", "sighting--66d092b0-45c2-4f7d-888b-dc2cea622584", "sighting--020be580-9e8d-49a9-913a-c97a59a2b140", "sighting--d0b63675-fd51-4e41-a66d-9198c7bc1736", "sighting--345ec6a0-f6ff-41a7-905a-4cf8b2b4f619", "sighting--8d656b70-29c7-4b04-8f01-3283aafe44a5", "sighting--b7b6e4c9-57d9-47b7-874d-5e6dd2103b1c", "sighting--ae1bbee7-2f11-4780-b584-8f4d63f4e55d", "sighting--1aac5c13-b665-4c2f-a3de-eeba21527691", "sighting--391f6e09-3205-436f-93bd-35c7a9f8591c", "sighting--bcc79fbd-2150-4867-b1f1-915bec89bc5a", "sighting--658cd9e0-b51f-4afd-ba62-ea323d4b51d9", "sighting--d4bf0cf6-943a-467d-b0ed-c1f032db6a0c", "sighting--3313d980-f438-4318-bc9a-aa5bfa77c935", "sighting--7a13aac6-0a35-45e2-bb51-4b44934f4998", "sighting--26c5e912-96e5-4985-bf8d-fd1854238000", "sighting--40eb27ff-5569-4437-8271-6eee686b4e1c", "sighting--436280cf-b56f-4c17-bb6e-dd70767c7d54", "sighting--38bc605f-b110-441e-ba38-3957d76a7f6c", "sighting--66fcc166-48a5-4344-b167-ed9fdc0b8049", "sighting--834194a0-c291-4391-a6fe-a028e046cbb3", "sighting--aaa3e22d-d04a-486c-bc56-3be7ca97a461", "sighting--a34e205c-ddb0-4fe7-a87f-a9ee03925e36", "sighting--d4cd546e-aa9a-4e05-a38c-56266e5f0e09", "sighting--8a1b6e60-6547-49ec-a232-02ff14a39d32", "sighting--aa07337b-787b-4092-b742-b85763a5c217", "sighting--751ad3f5-8e43-4ce9-918c-f2f7fcef75d1", "sighting--1cb85119-4955-4331-9242-3f560c24c4ab", "sighting--1967596f-15d5-45bf-b8d1-7b8465d5cf37", "sighting--70010d48-9b05-4034-9b19-b49bf8b28cc7", "sighting--66b7ee90-2e2f-4874-9fab-8cfd1c6afb32", "sighting--7efab105-3694-4bf2-9279-d5bf1238b283", "sighting--316d321f-a473-4ab1-a878-6065dd8407df", "sighting--819a73bc-76ad-4f78-8e6b-22e748a9cbe2", "sighting--7ae2f0c7-feea-4901-b1b5-9aad21e29f6e", "sighting--87481b82-4cac-4887-a32d-b7c575e2bd85", "sighting--36a233eb-9d58-4080-8b75-4a8de494d9ce", "sighting--9ef1e600-b201-4178-a412-564b23d2e766", "sighting--d2e3a379-ef6b-4e0b-a20b-b76c6a590584", "sighting--fd41cf05-dd2b-45eb-8b05-fe0d74d407cd", "sighting--189aaccd-955f-4acd-bdaf-f644bade66c0", "sighting--97fdd4ed-5cdf-4769-bc35-989a3be291b5", "sighting--e7b903b2-91ee-4cc5-bd93-bcbeda16eb30", "sighting--e7e33b60-4282-4271-a644-b93c8319186d", "sighting--93f4eee5-d3a1-4000-91e3-e2b7ab9b6029", "sighting--e80d0055-e873-478d-81d2-f0aa1691f1fe", "sighting--a230264a-b791-48a7-a38b-7a710fa13275", "sighting--17312972-ebbe-4a8a-ab43-c354b37c5da6", "sighting--df77bbb2-9f45-4dcc-a56c-95a88265980e", "sighting--e61d3aa3-e176-4eeb-8e30-40816c07b26e", "sighting--01901586-0073-4ffe-a6c8-820ad33e0307", "sighting--0593883f-8781-4cf4-9f79-2eb315faf3ad", "sighting--24d33350-e1da-478f-a29b-1278cc36d3f2", "sighting--450fc373-2f97-4b90-b617-0b06708c1760", "sighting--6b023605-fa16-49b2-82a6-26fde172a427", "sighting--73fd9680-c3e3-47d9-81d5-923433e2acf3", "sighting--8e7770e7-b54e-41a7-9db3-e9b28b5b2219", "sighting--2a9d9fc1-4c2c-4ebe-842f-eae645fe21d8", "sighting--3feaac8a-4b23-4f6e-b8a3-27dca1d7554d", "sighting--a7aca882-49bb-40cb-b21d-c85b9d254dcd", "sighting--4dac5a8f-4af8-4c10-b6e9-3adb9896263c", "sighting--b353ecd6-7f89-47a6-afe2-ee0aa806e546", "sighting--4e0ee29f-5350-4bae-aeef-2cc3c00ef20c", "sighting--6c4c6bb4-e531-4b41-a84d-10877211af64", "sighting--af5aa043-8150-4a7a-aad2-9f6899ca711a", "sighting--b9615a5b-8bd6-4806-b056-1a1e51da6436", "sighting--690c1013-1f46-45c9-a3c0-95f027610728", "sighting--dcb17129-079f-4618-a077-00031e2f66fb", "sighting--fbfdcd83-f058-43d8-8492-cbbc7d883236", "sighting--4fe9ccf8-b015-490d-92eb-52f235d92b51", "sighting--177c2d72-d6cb-429b-b042-603c8b937381", "sighting--595d78eb-c534-459f-ae88-c8a41451c842", "sighting--af10763c-29ad-4f00-ba2f-a0a490d826a5", "sighting--1b242408-8878-4697-8c8c-94925b7c8f73", "sighting--3aad47c8-6e90-4d00-b39a-94ec3b7cb329", "sighting--f5448a2f-744e-4f30-9bb5-11bd35fe28d4", "sighting--e698c477-6926-4cf4-abd4-b45da807e38c", "sighting--f96e3a4d-5baa-4390-8798-012dd69923d1", "sighting--2e8a6475-b865-4345-b2cd-8eb1bbcc6a09", "sighting--60bd11e2-ea25-46f8-a325-b29e13152d57", "sighting--a838c69e-ffbe-4856-b3c1-17ba4226e7ac", "sighting--bdd368e4-3df7-41ee-b108-a68dc0312a88", "sighting--f3c9aff9-a0fc-4745-a218-75e9a776fda2", "sighting--c6ce95b4-fb41-4586-af1e-2ccfdf93c7f5", "sighting--5f433bca-3a9e-47a4-9b9a-9190a724fd5a", "sighting--67b1e89f-8aef-4aec-8b2c-24d62d703e4f", "sighting--8bc4367e-8c30-43ae-b4c3-7b0a843ba55e", "sighting--34fd0a47-285b-44d7-ae85-7f9715474338", "sighting--8e1e1b8b-4ab0-4821-be4e-12fc6d4656b4", "sighting--f7091949-fca2-49c4-bd2d-556f095c8ef0", "sighting--e6af255f-ac5d-441f-abd5-c6b98e76f758", "sighting--898bf98b-76af-408f-9d77-be81d943e8bc", "sighting--e4cc5137-e6f4-4f3c-a299-80cb8dd6b1ee", "sighting--7cce31f8-7e53-452f-9133-963bed0faf7b", "sighting--9ecd136b-2f99-4734-a9d4-b4987371d31e", "sighting--6354237d-b297-407c-8399-3d0c8ccf86a8", "sighting--002b5b3f-45c1-4c77-87ad-8e21783756ea", "sighting--de45035f-82b3-470d-8560-19d417090d18", "sighting--0cd20d1f-fc06-4ab3-8482-0f61b4ed9f91", "sighting--4c4a8418-2b0d-4cee-b92c-906a67bf82cb", "sighting--25533009-cc76-4352-8f65-4e6abb88bcdb", "sighting--712c6c1c-6b48-44a0-bf00-7a11a3204a30", "sighting--bf200af0-c51e-4dfb-9add-a4461a19a212", "sighting--a86a3bdf-2d5b-4e31-9fb8-bad44020f922", "sighting--bc6a5929-a6af-40ee-9fea-e64bc83b100e", "sighting--815225df-6593-41c2-8f52-1a90124f6d94", "sighting--644a2e6e-1a27-47ae-a44d-2cca2e4a302c", "sighting--4bef20e2-8316-4d2c-94cd-bbbfac9675a0", "sighting--292e04d9-6646-423d-bda5-2d68b3dad27d", "sighting--fa36fe87-5003-41a1-a44a-43a16feb4784", "sighting--bfb13174-c39f-4760-9a8b-5a80d4a037b2", "sighting--6d0d170b-7b2e-4d60-a084-463b5f999582", "sighting--671873ff-972f-47d4-ba60-f58a5e2e5a5b", "sighting--43b5d7e5-abf4-47fd-80dd-81f543def4bd", "sighting--94f731fc-9ca2-4ec4-b54a-a1ca07a2a1fb", "sighting--a0cb8e55-7ec2-4a6e-8ff2-c2841756b3a1", "sighting--18d9fd1d-bbe8-4a4f-a51a-650f784cae6d", "sighting--e9c77725-a0e9-4ec3-b8f0-279d4c96ee94", "sighting--ffe05093-6918-4a6b-bc8e-ed448b6e2290", "sighting--deaba4af-eb56-4d5a-899b-4d571fcec051", "sighting--24aedb0a-c085-4d95-acf4-37d8025db4bb", "sighting--248c03ff-4a27-47fb-a21f-7f5e01a69136", "sighting--d0103941-f326-4eb8-8544-798c6351abba", "sighting--905f39dd-1d24-453e-ad53-98c74e5a564c", "sighting--070dbb18-8469-48f7-9a08-c1bbb94b5792", "sighting--b1c60a7b-e50e-408d-ae65-3639d5946426", "sighting--23fef22a-37c6-4116-aeeb-f8fb121fc24b", "sighting--ade81150-2d41-4c7e-a1d4-128b1f8760d2", "sighting--b6d5dcb8-e71b-43a3-a6c3-875ba8a496bd", "sighting--65ad7399-fff3-43b8-83e8-9cc94db7730e", "sighting--9613cf25-1abd-4c56-b902-8649e2593570", "sighting--9c3828ae-80bd-4bf3-835a-4a1bbe412049", "sighting--6991ffe7-ffe3-4feb-9914-0ace9cec1566", "sighting--7dfb2791-6cf3-4ade-a19e-4e0a8baf9c3e", "sighting--93d6bb23-8724-4939-af4f-79a16cc76da7", "sighting--b3a25bd0-f536-4d58-b796-e3b0bd9489e2", "sighting--c14d47d4-719c-4f29-9bfa-286f391e6ef1", "sighting--e982777c-4c0a-482a-863d-9a1c3df39a8a", "sighting--f02119bf-add2-4921-861e-687608a8af40", "sighting--3eed30e2-f377-469c-a19f-3753edb6a427", "sighting--9631c843-f13f-46cb-8694-cd0366e96fad", "sighting--689b2a89-e64a-40fb-b278-9dcf79313e54", "sighting--0b07d5f2-aa7c-414f-9de3-d81ad7682f88", "sighting--9f9aca66-1107-4309-88dd-c4a514cdbfb7", "sighting--990855cc-93f2-43f6-b1c6-26c1f2b7f6eb", "sighting--80e3e870-2cc1-47e9-933c-9e2248a0e7ae", "sighting--00aeb123-810c-46c0-9118-6a5b46ffa56f", "sighting--960e90bd-fcf2-4a2c-9ccf-24c8ea6151cf", "sighting--03781855-6f42-49be-b4a5-d9855e577cb3", "sighting--a9f2cd50-441f-4d6e-a452-f24f2a2e7fbf", "sighting--5f0c8c33-6456-4022-a8d8-ed7aee277949", "sighting--d7b98232-7e19-4cb2-81d7-7e3cd43166b6", "sighting--5cf09863-f0ea-4713-bbba-f3bbdba98857", "sighting--8cec686c-b7c8-4881-834c-71622c71fbc8", "sighting--cfcbeaff-7856-4214-95c7-b7fec7004b4d", "sighting--1cfa87d5-94f5-4ada-8bb9-13c5f44e2659", "sighting--1a483cf7-af03-4200-a881-814586424beb", "sighting--a1416b9e-c841-4a3b-ae4a-5ea2d14ff2a0", "sighting--4bfb1656-3229-49f9-bcec-21fc05a029f3", "sighting--70703757-3822-43b3-abf4-ef4e6592457e", "sighting--e54d1644-2dcb-42b2-8513-7c55d539df61", "sighting--9b67b45e-a924-491a-a56f-cdcbdc1c61c7", "sighting--a36aeeb4-f090-4862-93c2-2acde638acfe", "sighting--2a1f48da-771b-4701-957e-97b758fed57e", "sighting--7bbdf084-ae60-4c64-bd1f-2114e3cef622", "sighting--d0472551-3013-4186-b50a-1cca40e9e098", "sighting--e58c14b9-ba77-4ddd-a40f-af68081eb837", "sighting--b8523c2e-706d-481b-b7bd-d8689bed5781", "sighting--bbbaa32d-bc91-475f-8fca-40fb437e3528", "sighting--2911df6e-2b5b-4d27-a092-c847d1de3280", "sighting--fb8e10cf-b9ad-48c6-83cb-e6e2723f9709", "sighting--25f8dab0-8563-4a75-a39b-41af3a5ab3b0", "sighting--81f77764-6117-437e-a0ae-77bc1bdb308e", "sighting--ddaa864c-fab4-46ee-a340-a434a2ccca35", "sighting--48895d71-5a05-40c1-8cbc-7c715a58c730", "sighting--33b14bdf-5bb6-467b-9758-9e71e545247e", "sighting--a310eb77-93a3-4009-8691-ec57cc312b35", "sighting--e20f140f-a394-4eff-b571-3c0f6e39e007", "sighting--03dcd368-0acd-4fdd-84d5-50406c7431c4", "sighting--149c1491-c04f-42b3-a177-9646f4ebc21c", "sighting--dcacd812-461c-4f76-80dc-ee7027e739d0", "sighting--5e7c4538-8100-4d94-b49e-2fc737a898c6", "sighting--ec07272f-de2f-4253-9bff-7fa38d7f81ba", "sighting--a0ba7605-5022-4517-bdd5-7353b29729ff", "sighting--ee6a5fa0-1291-462f-bdbf-7af6690dcfd9", "sighting--c5a1ab5b-f8d9-4be9-8c88-6d867dc34fa7", "sighting--6001a95d-921a-4032-aa2e-772b3ce078ca", "sighting--6e1afa7c-2664-4976-a871-24b45ffc1ecc", "sighting--0ab985ec-123a-4da7-b9dd-91e7bab6b6fc", "sighting--bee4524d-0731-4575-a14d-badb48089f82", "sighting--0c608f91-54ad-4733-9e92-e492d19016d8", "sighting--ef9218c9-8c7b-476a-8323-7b2eef693cdc", "sighting--c4dd27da-e90c-482f-8b91-475db0e007a8", "sighting--fd03dbe9-ddc3-4b69-93f9-97ba6b6ccd62", "sighting--aed0676b-5845-4315-8506-5bc4e9d977cf", "sighting--a5d90c34-71a2-4479-b2ce-83378a63554b", "sighting--9c406ba5-7950-4ece-ab4e-d97d8f80e73b", "sighting--21f765b6-642d-4ec6-8bf4-70b34f5229e8", "sighting--fc8cde23-dbe3-4c48-8ec8-7f389fa6bdc7", "sighting--06c728a6-04f3-4943-ba69-1fb36315b1a5", "sighting--213f4ba7-7db5-4b5d-a432-0ce334b808e4", "sighting--ca5882cb-57a6-468c-a722-cb86b616dbea", "sighting--4ce8ba48-0a32-4c11-aad9-6e29cc0a89f3", "sighting--8f3fff17-832a-4ae9-9ff2-2db04c693b4f", "sighting--0a93d762-b193-4bae-be20-67a3d69e6751", "sighting--304fdd86-2de1-4e21-902f-d61af7bc858e", "sighting--6f3c56a7-f85d-4daf-a859-59fae34316b8", "sighting--5f6c7355-b1bf-4503-a8a0-8fc22bb1c403", "sighting--3290b0b5-ab7b-438c-860c-d54661a3bb50", "sighting--fe269504-5598-4339-8dfc-4ccee92dd1f8", "sighting--589f2a43-36c0-4dc1-ad1b-410fc9e06f35", "sighting--ac74477d-acf7-424e-80e0-a2c452139bc3", "sighting--4485afa6-5452-44cf-9f88-c6d6e0d75cdd", "sighting--25d5375a-451c-49b0-9003-2572343b3e14", "sighting--6064ab57-ba40-4294-9386-6bf75938a1c1", "sighting--affb49b7-d9d9-47a7-b2bc-6a74437f8dae", "sighting--a683cedc-792b-4238-b89f-117c4b0a8663", "sighting--9ec47bcf-e288-4458-bd73-412fc1e57927", "sighting--7c5e9bf3-b011-4cfe-8f06-5172e099802d", "sighting--fc22fa9c-3058-4baa-a295-2ef88e2614c1", "sighting--20c205b2-42e7-4d27-a7fd-dcf29e6fbb6f", "sighting--be91614e-c5eb-4833-a9eb-c440b19436e4", "sighting--bf0608c8-7fb1-489e-a18d-776237e829c7", "sighting--2b209c75-53d7-4609-ba06-d9ddd5839fbc", "sighting--9043cda4-f6ce-4ff2-a2ae-aabfcdd9b0e0", "sighting--3d089e9d-11d8-4eb9-b9eb-d276651882dd", "sighting--23999650-1d93-490a-9b77-44abfbaae58b", "sighting--ee2a54be-c07d-4069-97e8-4159e358bda6", "sighting--70cf8b9e-1616-4d76-8d90-c661c66d40c1", "sighting--85d60e74-6a92-4026-b20c-c9fe45474690", "sighting--ded24f09-df02-4fa7-913c-a48d3f7449ef", "sighting--d5bd2f33-6ca1-4406-b47e-27761cc41899", "sighting--21571ccf-9e19-4815-a97b-730fe39fad6a", "sighting--5887cb01-03d4-4dd8-80d4-f5e31cc5bcff", "sighting--49f43a02-27d7-4c11-ad8c-ea7f36cb066a", "sighting--cde95748-dcfe-44f7-bdf8-94e10913fd81", "sighting--5e697561-2dce-4dc7-afbc-49e729c1a591", "sighting--f9e2ba59-ec95-4f88-9a87-fc9f56217a89", "sighting--5499e002-6679-4cce-94bb-ac63fa45e99d", "sighting--4ecd6f9e-1c8d-4130-823f-4085c8b6973d", "sighting--f204e5f0-c2e7-4894-b714-7af533fccaaf", "sighting--89c16e06-c410-41e1-9903-3959e223d5f9", "sighting--5f07cfbd-446d-4c0a-b5c2-2c33aa9f5ac7", "sighting--0dfb4570-b3bd-4f7b-9de4-fbbe4572c91a", "sighting--5eeb76e2-5780-49e4-9974-74083b1ce0e2", "sighting--3d76e894-649e-41c1-81a3-a8273f79ddc6", "sighting--2f46dba8-011b-46cb-9dc6-a0d048c10406", "sighting--1cf81c05-7ae3-4cf3-9890-d5f4953fc9ea", "sighting--600d86e2-96aa-4baf-b8f3-a4bf33899208", "sighting--e19d2e72-7927-4641-838f-8e9d2e9ba456", "sighting--509c3854-7fc5-42ed-a17d-2f7b90d3f672", "sighting--af073cfb-7129-4025-8cf5-c9825141196f", "sighting--c6d67489-adb6-43f7-bf1c-0bdd333de21d", "sighting--b4bbcbb7-9b3b-4ee8-a8c7-3c82e378f223", "sighting--a539aab8-b193-447e-9fab-38415572425c", "sighting--0ac9bcfa-7c11-4687-bf5b-a6ba32a95b4b", "sighting--0232cf24-b3ee-4016-acfd-6a60e26d7634", "sighting--0b5d94e7-f9b8-470d-8528-ef653f70b6f8", "sighting--918cae6a-1e76-4de4-a428-63d91ce6c8a9", "sighting--ea2136fa-0f8e-4fce-9aae-9e628e60cf50", "sighting--a1e76e67-de44-4327-b21b-1f49af9d128b", "sighting--bcb1df9d-5d24-45b9-b06f-79cfab2fdadc", "sighting--d5050daf-d947-4d6b-86c7-15b955dbaab3", "sighting--7c638470-f383-4722-a201-f010f5b12354", "sighting--1537e184-44c0-427f-949f-4b5cf0b8d71e", "sighting--c602cb57-90b1-4d34-ae39-df88717e54f1", "sighting--917caaa3-624e-4476-8ceb-9ee071579015", "sighting--0e8cb679-61ef-4494-989b-ef9ab4bebbeb", "sighting--39c5b0cc-4ee1-4a43-9e5c-f04c8f6e11f5", "sighting--8287e436-652f-4f35-8a70-47a0711f4306", "sighting--1520c3f6-bd17-40e4-8413-1407cdff63a7", "sighting--8c06b196-a9c6-49ec-9fe4-f3624483112e", "sighting--4d0210b1-d4fe-4f13-b3f7-5fa6b05bd8a8", "sighting--b2448971-7dd5-4c10-9327-cff949aedec7", "sighting--0b388b5c-01a7-47bd-883f-899ceccffd01", "sighting--cd13e6f2-d4c4-4694-9f8c-1b863bde6dec", "sighting--f2e37f71-1ae7-4721-b33e-7bf633e68a56", "sighting--5d4acade-ee7e-445c-b738-29eaa59450df", "sighting--b2e36d8a-9d48-49ae-b44e-b0a955576aeb", "sighting--86015b14-1022-444a-8f0f-bf34807d61d2", "sighting--83ad86c2-a079-4ef7-b06a-07d8ddf3d2b3", "sighting--7ea95732-9461-4c72-acd9-c7c3ce7aa8d5", "sighting--1b07406c-195e-4131-a4cb-e442c173a3f3", "sighting--ddcd6b32-7c3a-4968-b16c-98373f03707c", "sighting--1f705e74-7ad5-42a8-a4ae-a03081b2f3e7", "sighting--b18f1e0f-63ee-4fcf-a293-138d05997dd0", "sighting--b6a122d0-279c-4977-99cd-ad6ce9cfd293", "sighting--b7b65fe4-9d08-4384-88d9-a2376f065822", "sighting--49c7fc57-b2c2-48c5-bc22-27f15928f7a3", "sighting--1570987d-503b-4676-be87-746203b24596", "sighting--db306c2a-e974-4c70-9a15-07e1fff85dc1", "sighting--b928eaf5-b38b-44ee-8f4c-5900c3a66b8c", "sighting--d890d74b-c516-4ffb-8639-dda1c244eb43", "sighting--ace1f20b-968b-40cc-9665-a4a424b7756f", "sighting--1dab79c3-1af4-4bb9-82e6-5737d197657a", "sighting--829a02a2-b680-4421-8746-d9aa652c4e0d", "sighting--9a4c97ec-2cd6-423e-90f6-d9abb731196a", "sighting--fc128cf3-f81e-4e48-81a0-ad4cc17382a7", "sighting--200bbfa4-99e5-4cc5-b9ed-6248d520bc73", "sighting--137f3673-e3bf-4667-be47-63c0d5c102e1", "sighting--3bf88739-1577-48f0-ad9d-f496a0b8c2f6", "sighting--31e4d37b-ec1f-419d-8abc-1d27e15b5a09", "sighting--a02e70ba-3e18-42f6-8bbf-afd0a234d0e6", "sighting--727b264c-52b5-445d-8479-4dddef94e465", "sighting--d2c118fd-0e72-41df-bd7e-e027653e2755", "sighting--dbd7016f-a39a-4fcc-9510-182221683010", "sighting--4743a773-7e1f-4b9e-a08a-4735c7237281", "sighting--421ca36d-ae73-468a-94f9-ed11d4afdc8b", "sighting--fee9c9fd-bd39-40b8-aa90-c9462d05ce06", "sighting--d2397d3b-6677-416f-944a-9c969b367d69", "sighting--a819cb73-b835-4ae3-8dd1-6c007e48195e", "sighting--695e483e-9e05-44ed-b109-e318f0d4857e", "sighting--2ad7814c-0447-4a29-8939-7f860ff7588d", "sighting--ac1bc81b-165d-4890-8e4f-5e7da7596f30", "sighting--a4c7f5a3-2d9b-4360-97a4-7ddb5d33d33a", "sighting--5ba6afa6-1f95-4b40-8e97-ff9d5ac50800", "sighting--17f358a0-0c12-4828-b0a9-0977edeb508f", "sighting--aed87a49-4ed0-41c3-a4fd-e9cfc38820fa", "sighting--3e5180a6-8d99-48fb-92b2-925e1fade826", "sighting--bbeb58bc-1a53-427d-bbe6-cf64073a2bfd", "sighting--11d5a56d-c8c6-4505-a81a-f5b1fe7a0e22", "sighting--50966d45-6b98-4df0-b7d4-33b8bfc5580f", "sighting--f97d4621-4c04-411c-b34e-ce70830c2ed9", "sighting--80379919-74ce-4e4d-9f47-237f2dffb1a3", "sighting--4681eead-8d10-4c2f-8afa-4198d0a7adfc", "sighting--9a31bb40-0e35-4db4-939d-9dc6c0efcff0", "sighting--03b4cbd5-72cd-4a18-b384-a592cf1d0371", "sighting--4496e237-10ba-4bf1-ba02-a5b031c196db", "sighting--6bdf7244-f553-4e95-a219-b46e813e17b0", "sighting--53dadc5c-8ac5-42ac-9d8e-1d2569d38f8d", "sighting--19285f3e-2e1a-4e88-a7ef-398bf27559d6", "sighting--80260bfe-d378-40c8-8859-a3fe47a99223", "sighting--63ef3ee8-3d19-4dd3-aeae-e654eaeb8182", "sighting--c851fb3c-1362-40e2-9bf6-9b26172bd263", "sighting--7e41b15c-d627-4021-bb67-10409ece68b7", "sighting--9ba16e3c-3938-47c7-a46e-bd74b97bcad8", "sighting--6dff855a-56fa-4de0-b089-2ae405d92a17", "sighting--8304979d-42c4-4204-9254-e521f3707c69", "sighting--22e79345-204e-42c0-afd3-4a116febe5d1", "sighting--84373475-2c64-464a-b426-3e92362201af", "sighting--8fad0f73-b881-400c-b10c-50bc74c532c8", "sighting--5f2de918-00fc-44b4-b7fd-f5f3bf9381d0", "sighting--0e8bf608-8be7-422d-85a8-af74c5f9f6ca", "sighting--a556ffa3-50f5-47af-87d4-269b4d2aab66", "sighting--70b30712-5837-438f-9a4d-1432b26937fd", "sighting--42f79bf6-49eb-4bb4-8b24-995b2fe46353", "sighting--1c82e935-ab33-404e-8729-6b9cbac90182", "sighting--a2c7b2ae-ed8f-4636-848a-46108d121940", "sighting--1426bc6f-4c24-4e2b-8da3-34da46d13c7c", "sighting--a0be1fb7-12c8-4e4b-9c4f-480c316b210d", "sighting--fbd54d8c-27a5-4c44-80a6-dcfe1db57a9b", "sighting--619f4163-cb2f-4cf6-a675-35a681da8c26", "sighting--b838cf73-e237-4309-adc2-83429f7bee28", "sighting--5535bccb-c7e4-47a5-b482-35c2047dfc5b", "sighting--38cfe016-519c-497a-a1c6-264c884b94e4", "sighting--d468a7a7-f071-4b92-9b0f-f8cfa21378dd", "sighting--dcc1bc53-e727-424f-b0cc-99bc2a843162", "sighting--ed20237e-a501-4920-8bc3-43b33b3b1029", "sighting--4c9fe7ec-ea52-4e6c-9d89-3edd039a9f2f", "sighting--fff760ca-f1b8-4613-8bfa-7b2376846734", "sighting--07340a01-50a3-4670-b2ee-e93005fff5e2", "sighting--c9a73101-f989-4a7b-81f1-f840a7aa70d7", "sighting--f648b649-e52e-4275-902d-3688c2904888", "sighting--7079af29-2a46-41a6-9686-dedf4c2eb539", "sighting--4bbed0dd-3734-4633-b22f-bacce5a86568", "sighting--0c7e456f-c9e6-4212-baef-3e0a8064e207", "sighting--8f3d81f3-a27c-4ff0-9f15-034f01a06ec9", "sighting--0c0617c3-3dda-423d-be0f-6600768a3897", "sighting--94fe1f57-1ece-4a68-ad71-b14455a10468", "sighting--0592f335-bfc5-4c1a-a0a0-b22f6b143e14", "sighting--6322e1cd-42dc-42f6-9c9d-fee1fe4de7ce", "sighting--3d1e2f97-48c9-46bb-8d1d-338a80ebc6ca", "sighting--b9bbfe96-1001-479a-ac20-a9b9d082f64c", "sighting--cb4fdfd7-33ff-42a9-b28e-0e23190bfd57", "sighting--a342cd12-8929-41c9-8341-1a23660f3926", "sighting--2b8e27a1-716d-4b79-9d4f-034aa1373e86", "sighting--02419b29-6c19-4788-8d7b-1f85357919f9", "sighting--6a58fd04-8dae-4cf1-a4f0-da202403c8d5", "sighting--daaa0182-026b-4dd1-bf14-2dfc1e68daad", "sighting--b948cbee-a394-4f06-9f0b-f54c25604973", "sighting--12660902-f8cf-4f8c-b077-e5aa5a1f5b4e", "sighting--85431d28-2aca-436b-b96f-f7f86385d0ac", "sighting--4987f570-c539-4cb4-b76d-452d620ab28e", "sighting--c7c53d90-492a-414a-ab17-fc3a771dd92a", "sighting--37a77359-da9d-47c6-ad5f-ef8623328cb8", "sighting--80225e04-68e2-4b40-9b75-0a47d71426e9", "sighting--6678c0b3-4874-42c2-9e37-2c4881f04832", "sighting--6be92db2-bd2f-44ac-bb8d-4ff4cbf9c5f7", "sighting--be1d261e-074e-4c41-8465-515bcfd69c79", "sighting--5553608f-38c6-432f-b376-7d714c84754d", "sighting--1fcbbed7-12b2-4578-902d-b303b28ea4e4", "sighting--16d3176d-6f24-4026-a25c-c3285e2595a6", "sighting--ebf55c2b-ce23-4073-9821-e926cae328e7", "sighting--ff21ecad-d3f3-4355-96c5-4f09e730d0b9", "sighting--20b7ca8c-8482-47c7-af0b-dc27805aa118", "sighting--badbdc62-38a3-486f-a5c4-73983d2b3f38", "sighting--b5b1215e-c41e-4e6d-abdd-00253647a0a0", "sighting--ff175b53-f73b-419a-ac81-f4879556e225", "sighting--c9b2b521-0878-41e8-ac4b-9950f007f4d9", "sighting--49e13f6d-1e85-4b88-960c-6c51284fe52e", "sighting--c3ddd012-9d17-47f7-a4c8-1beac2466caf", "sighting--1f9dd7b4-ccad-40e8-93b8-41b8b4b514f6", "sighting--3a1d31e9-c73e-4417-8d46-c2a9a8e02fe8", "sighting--f147e4f9-bff4-43fe-8a7b-d16cd2438912", "sighting--dc7cb7dc-3a38-49f5-9742-290183b29e07", "sighting--4155855e-88f6-48cd-be7f-61927d86d3f8", "sighting--a82f7e19-da36-490d-919a-5918664d28d4", "sighting--d493badd-0e8e-4d4d-965e-6aaec78f6dc8", "sighting--bd22aae4-e97b-4007-8232-ad422089088e", "sighting--ec795221-c074-421d-8c10-2a8e7187adf9", "sighting--8cd008da-fd12-4931-8d5a-d095188ddeb4", "sighting--94cbf287-aeef-41e1-ab0e-d66dbc712b5d", "sighting--00ecbd08-add3-4919-b7f1-ab10a1ac5320", "sighting--861d700a-7523-4bda-b6ac-4579f141b162", "sighting--145a39fd-7d54-4ee7-aa60-8eb4a7bb9703", "sighting--a5da58b7-d0b4-4967-9d05-45d6d74959d9", "sighting--836dcbb9-4cfc-4aec-9ab3-0ab88a3e0364", "sighting--db40d270-0efc-4925-a5c7-93d7d75e4f8b", "sighting--b1b96973-a1d3-4713-9f41-f9d12d4a3eb0", "sighting--48549771-dd9e-4339-86b6-240f0a3e5300", "sighting--d2c4b467-dc90-45f8-838a-611f8c8083de", "sighting--995c4c51-dc92-4f4a-b51c-76ac01159aa6", "sighting--69a24f91-1b09-45ef-8248-c102879cbb38", "sighting--094ec988-338a-4af1-991a-7e18a7b55b7a", "sighting--dd7c89f5-fa03-4491-a28f-d39365b959c4", "sighting--33dad05a-98fe-414d-b38a-cdb1bda0627b", "sighting--0417133e-0dab-4996-9542-0ed513873bc3", "sighting--83357d7c-1993-4a86-800a-37483692f93c", "sighting--9b737299-d0c0-4394-a37d-e2ed7c3e046e", "sighting--6376f02b-7a35-4e9a-a20d-d2617826103a", "sighting--f3dbdff1-b238-4c54-841f-72f935f4c928", "sighting--fe4bd3ea-bacf-46b9-917c-e562deb3d694", "sighting--e007b401-809e-4441-8c92-7aca78caa8b4", "sighting--05b0e1f2-bfc1-4943-af4e-4767c63b0aaf", "sighting--57509e73-c0c2-4b66-97f9-752156724ae2", "sighting--c3f7f993-9767-4a53-a088-9bc02a3553b8", "sighting--0bae5893-1c4c-461f-af2c-5332602b1c19", "sighting--94f6736d-0f1f-4a90-bcd2-70770204d76f", "sighting--ffa97289-10fc-4403-90c9-5da927080c75", "sighting--fe6ee2d8-4e36-405d-ad00-27a0ddf05173", "sighting--65eec1c6-e382-4a94-a46b-594a83f6a4dc", "sighting--887a1c64-ff9e-4266-9ff5-a34a6203fe02", "sighting--8b859900-a2a6-4a12-96e5-47ec30294c16", "sighting--b84a2478-ac6d-48a7-a9a9-88e5d1406b16", "sighting--e0373e82-9a1d-430f-a114-ecfb0ae96316", "sighting--24fc4765-3d6b-4824-a287-c446e29978a9", "sighting--68046298-a26f-4b54-9fe7-929d509f85c5", "sighting--8d36eb29-8a49-4b64-8123-e1260886244d", "sighting--7647b8e0-5c7a-4c78-8d5b-be8f74119cfa", "sighting--828aa47b-e2a5-4176-92f3-f57749d213bb", "sighting--17f2d3a1-6ab5-4e08-b763-9335fc7fd0aa", "sighting--2a027ce3-0e12-4009-9a07-b5f9eb2af8d6", "sighting--57275886-c5d8-4fe8-9db2-9c14f4fbf77a", "sighting--d0d62cb3-4822-4b23-ac66-a495b28c5a26", "sighting--bde349c8-9671-4b42-a251-be526fb8590e", "sighting--87f8ddd1-b79f-4d65-b1d1-255358a50f01", "sighting--ae1c068e-9046-4892-b409-fadf641d0e89", "sighting--5de5b77e-61ad-476a-b065-62d77ac4d2ee", "sighting--2408f60a-e184-4237-8740-6b96efa5d67f", "sighting--0afec659-06fa-40dc-b5fc-f2f3dc2d6910", "sighting--ed8148d9-3a95-4bed-8f14-3e1ca3954d35", "sighting--3135cb2f-d20a-4fd1-9ab7-3aaf623a2f4f", "sighting--95d24dc1-0282-4cee-af99-babb5a2de2bd", "sighting--8a542545-aab4-4902-81d9-6aa9a9a314e5", "sighting--65fbbf04-f818-4462-873c-56d289c8ce9b", "sighting--827f3e53-c528-4b42-9d4d-e1907babd9d3", "sighting--ca0df101-d377-4e33-a7de-bf2711dbb593", "sighting--274defa5-cb10-4c36-b0f6-960effcda81e", "sighting--740c1b4a-b277-4dc1-904e-2bb8301c06e2", "sighting--0633156b-c07b-4312-8c79-872183dc7e52", "sighting--62ee38ad-9711-4843-8f89-5acea38abd00", "sighting--44056eaa-c119-447b-bb5b-c2e600e59ee7", "sighting--d3627ed1-f8a4-471a-9370-bd4407395bde", "sighting--6940411d-b7f0-4a1e-b8fa-0616210d3b47", "sighting--9721790f-aff2-47ac-af16-4f866d5c2557", "sighting--be3ec940-f990-4d51-a589-fceeadf1e753", "sighting--b0dc1b63-d1a9-43cf-8ea1-e71ef259108d", "sighting--7f05b737-8861-4b0b-aacb-a5cb3c4d8382", "sighting--c0702c68-e15f-4400-a3cd-f4d875207ede", "sighting--0e0229a7-091f-4d41-853c-3042c2f36a44", "sighting--5303bdd9-a916-4965-91cc-c35d0930f6e0", "sighting--e962dff2-ad75-4bb2-a94b-49ba27553504", "sighting--ad2e26d6-7257-4af8-bb69-1720659e9f91", "sighting--2afc6f54-671e-4cd6-bb95-9e7ce91791fc", "sighting--a63d84fc-07aa-4cf4-b78a-a2db2c89ce9e", "sighting--8506c681-a5ab-4d60-b8bb-d0ad07dfd3d3", "sighting--19a09809-689f-4243-82de-ce8ab88ccfc6", "sighting--44456d77-e8ea-4025-a82f-86fa3f07d7a5", "sighting--58db97eb-35b1-44a2-a9a1-2e5580e32912", "sighting--103567d7-c9a4-4f89-b4e0-8789e9dfc7ab", "sighting--41d969bb-35e5-4cb2-a382-33f26d077f1d", "sighting--29562888-77c4-4689-af4f-4533b585315a", "sighting--a84bcf9c-cb14-407d-938e-cac61c377ac3", "sighting--3bfc89e8-5361-49c5-bd45-34b4fa158ee8", "sighting--9d7984ba-ae37-4ce5-ae5a-c013430ccdfc", "sighting--792db590-5c45-4e77-8700-aeeee1a59678", "sighting--53d25276-f5b0-46be-9c61-5b494b5c7287", "sighting--5d3ebf13-3350-49f2-8b3b-58244cabeba2", "sighting--1633b4d2-b998-4386-8713-0609b84533d7", "sighting--62eba907-5951-42cf-a83a-3458e5587efd", "sighting--170d6054-2a02-49ed-aa97-0394c4d9012b", "sighting--90267392-507c-4998-9aae-8539d982978e", "sighting--f1fff1c9-b73d-44b4-ae72-239dff4e3150", "sighting--9f399ca8-482b-43cc-ae6b-13cbcf9bddd9", "sighting--b90084b0-2d3e-44aa-b864-e09332a2b933", "sighting--9c6cb14f-2854-45e0-aa9a-c5e57331f91c", "sighting--ae2e8f04-7980-4741-bba5-11f0e6c6584f", "sighting--940c43cf-b97b-476c-b6d3-e37864a7fcce", "sighting--7515d9e6-63a6-4aa6-81bd-1c729f5f7a31", "sighting--444d0fe8-9d80-420b-8f83-65e96ecdd14f", "sighting--18312849-8e04-48fa-bef4-dc65f8c69765", "sighting--6b64a5c6-3663-4559-8631-6b404317c214", "sighting--10908383-e263-4b2b-895f-fb6dc51c3438", "sighting--4e18ee6c-0eb2-4d80-a19c-842e93f2c6e2", "sighting--51e79ea7-ecce-43c2-9991-82a80870278b", "sighting--a02b4f9a-28ab-4622-b73e-cd3f7fa9047a", "sighting--a23da8ee-8689-4046-ad25-2e8e276be164", "sighting--727c9459-4081-46c2-a2a2-62c5e8e72a06", "sighting--384872e0-156a-40b5-a1b7-da0f264cb798", "sighting--020adf8a-02af-4dca-9fa1-c8e3950ddaba", "sighting--04a0b87d-3263-43a4-819e-98083d43675b", "sighting--36204acc-7d64-456f-828e-986b8d7263bd", "sighting--92bc4746-2bce-4ac0-aba4-1327358a3400", "sighting--56f38e5a-470b-4125-a163-4349c8408f4b", "sighting--632afae8-9c48-4167-a547-55b00c48c800", "sighting--294be681-0c26-4aa8-924d-4daf6971f50b", "sighting--7500ee31-5ef0-4e22-97d8-bcd45b69aed0", "sighting--9be69794-acaa-4f88-b9bd-2761061af4e2", "sighting--25b2b977-3130-4fc2-9358-5cf36ea57b93", "sighting--704b53f4-3891-4762-aca5-cfa7ccbc23db", "sighting--e1071db5-a138-4d25-a78d-d982e88a2acd", "sighting--b024407e-6442-4af8-a836-0ac71f8c6980", "sighting--b233db4d-c8dd-4a7f-9107-a40da8e1b9b3", "sighting--10b4d489-3dc5-47c4-bd9e-142d33e7e8d2", "sighting--a4a844a9-64a8-4500-9e04-589a39ae1041", "sighting--34d57c37-427d-4441-b409-eb2223d0f4b2", "sighting--ad580508-eff4-4fed-9126-48ba4f40961b", "sighting--7ebf3c3d-c873-4f70-91cd-617f7cc9e5e1", "sighting--010933b4-ceb3-436a-a8fe-aacaec8a068e", "sighting--f0034671-9210-4e35-9daf-060975a512b6", "sighting--c18e2e08-ceb5-4645-b871-d7e599bd2800", "sighting--6288efd2-8988-42f5-9abc-ed700002346c", "sighting--8406afbb-034e-4276-966e-57ba9c3ad53a", "sighting--7f79aecd-fd0b-4228-875e-9687fd178be4", "sighting--d7e7f501-43f2-4269-b328-9bf298c75db4", "sighting--466781a9-ad81-4370-bebb-ea9ab8b019ab", "sighting--24449eca-499f-42cc-9177-c4d8b82f0a9b", "sighting--d21c0f1b-24b5-4fe5-b1e9-9b5ea8d10768", "sighting--26d77c00-7231-424d-bc72-1561eb630e69", "sighting--a1b77ba4-545f-4ce9-aeb6-b74694e7e2ef", "sighting--72fbb171-9c64-44e0-8a1a-2506eb5952e4", "sighting--8f168b1e-89de-476e-9664-c8475ca94f2d", "sighting--e23bac80-dc05-4864-a531-b9d280070268", "sighting--f93cec3f-b7e6-4e93-9562-93f23989f3f1", "sighting--aacb4d19-0c3c-40f9-ade9-585475990027", "sighting--4d4ef500-f76c-45e4-9c88-02f29c3ca898", "sighting--079b805a-e44c-4e4d-8cf8-1e979ff06e6a", "sighting--17873155-6ddb-494a-b390-779991b59278", "sighting--c4846647-1729-44be-a9c4-5ed5f1670cf1", "sighting--f29f95e9-18a0-41a7-9243-b4cb6bca4d89", "sighting--6f3e466a-3b3b-4a58-b75d-56a2af1a4cdf", "sighting--25916931-d496-42de-a5da-1ba0541eb380", "sighting--c37ca6cc-69a5-4a9f-90cd-4e06be5bead2", "sighting--cbe63036-3025-4b36-b9bf-233443068a2c", "sighting--b2c63d60-1b73-44ac-8227-722fdec21f97", "sighting--2028a009-dcc7-47d1-9f85-4e5cdea083c7", "sighting--ce08187b-b43c-4e48-bbce-b7437580f88a", "sighting--18afb806-05f3-48de-ae78-07b0197e971f", "sighting--fe221681-fd67-4da4-8b6b-ab3cbbe93fc0", "sighting--3aecbd82-846c-4081-b077-5dc077025348", "sighting--461ecf97-affe-46e8-aca2-b6c363ec1159", "sighting--6fb953ce-5ed5-450d-84f8-227ec48c2e60", "sighting--d197ab3c-fd99-468d-b735-17456fe80443", "sighting--551d7bdb-38ea-46a4-a922-fd690b1e3985", "sighting--a6ec2a7b-dcbd-4ba2-8e85-87820a2ee6f9", "sighting--9505658e-e42c-4e77-9d86-9fe560d125d8", "sighting--0f385224-23fc-4c21-ae69-d2a5029b8f8d", "sighting--4a24c266-1131-47da-8b9e-27cd6386b1a3", "sighting--a17add16-fbd4-4825-84bd-28d1cbf8c0c8", "sighting--b4b5f1bf-aafe-4959-9afe-e2c9266f7eb9", "sighting--fa7d464e-6fe8-4677-a9fd-eb563f9c89ed", "sighting--04a43883-ac5c-46e4-9840-004f5cc3425c", "sighting--3602ba2e-078c-4ff1-ae03-a7c6fac72dd5", "sighting--cc3d9fb3-63d2-42a9-a2b7-4dd505d45a57", "sighting--749c232e-924a-48fb-a560-9dc09e37935f", "sighting--edc9b91a-4769-43d9-8933-801284d3592e", "sighting--1c80c17a-bde2-48d1-b633-c2f8612bc9d0", "sighting--0ec4901c-3f02-42b2-bd9f-8e996d892eff", "sighting--384d722f-7a09-4018-bb90-29ab26a4a071", "sighting--2f74b40f-e082-4a6c-8f96-86b404a207cd", "sighting--128c9678-c7b6-4853-87fb-5a0beec198db", "sighting--d3bfbb04-5412-4992-92cb-4e0e9482756d", "sighting--ba8c3ef1-0c69-49e2-84e0-b258320132e4", "sighting--83112b33-0812-43c1-a20e-b80505c82944", "sighting--698ffd07-7bb4-415b-ab9f-edd89f17dd5d", "sighting--c8bab304-cb3b-425f-ba2e-4d5ef673d3ad", "sighting--c0919056-1628-45e9-bb7c-b47859093130", "sighting--10160e12-7d05-4a1d-a7db-982e198ecb1a", "sighting--ba6db9f4-ce28-4b6e-be3f-b3b06f0216b2", "sighting--49142aa5-2875-4bc2-92ab-aaaf279449a7", "sighting--65fe6b76-156c-4157-ac2c-cb535a95175f", "sighting--e429eb50-3aae-493d-8f57-1ada3ac4a4cd", "sighting--158775d3-4c57-4bd1-8cac-2b2892794aeb", "sighting--4d72808d-5d15-47d3-8527-a34d3ddff667", "sighting--2853c82c-2a11-498f-822a-4e9d62aaddff", "sighting--56f09d55-518f-4cc4-a341-f5a5d9751a06", "sighting--d0a205f9-8a35-4118-bdcd-16dad7d3ff03", "sighting--40e774a1-ef53-4e2e-9d64-202748ec0a6b", "sighting--4ef034bb-413f-4b4b-8d4c-1ce54f6b655d", "sighting--ffeebc2e-9836-4e79-ade3-50d89cb7fec9", "sighting--33089449-c48d-419c-b87e-94dfb4f5e3e1", "sighting--80a65686-1763-48f8-9f71-53dea54f52e4", "sighting--81b7c0e9-60a4-4a98-9e48-b0c6ff9bec21", "sighting--054da4a1-7e7c-4a7d-9a21-45d8ba3effa8", "sighting--244c208f-b0c7-44de-a329-7924150eecad", "sighting--82a930c6-9818-42c5-a639-8316df4e0d31", "sighting--85a7b9e9-4fe6-4ffd-9085-bcd3f2384838", "sighting--8be9a51c-fb03-4dc4-9b70-f95722f8ca71", "sighting--fbd36f73-1d00-4c1e-94af-26978c5622d7", "sighting--f3584dc7-52d6-4628-a6f4-a82422ef7564", "sighting--1f6c2373-41bf-4b0c-967b-033a45b45d72", "sighting--b7f2534a-aff8-4614-9bdf-0620fa79e909", "sighting--95965f66-62bd-4b9e-9fe9-35fd178637c4", "sighting--45d75204-0319-401e-b2ad-bfd2f34ea207", "sighting--a1f473cd-3b70-4619-b55e-ec0786774edc", "sighting--ecd8d4d3-5a7a-4ed5-be20-feac86d9a531", "sighting--181d6c3f-e1f5-420b-b60f-25f4a27e770a", "sighting--145a0cf3-6f67-4328-9f23-3377ad1fbdc1", "sighting--9807d423-0ec7-42c4-959e-303a0de1526c", "sighting--091bb43a-7688-4fcf-b861-8c97cba32da6", "sighting--d1ac0465-657e-41fd-98d5-d726c246e67a", "sighting--5b523014-ae89-439d-9df7-0c68f2f741b2", "sighting--c1e77fb8-431c-4af3-bc29-02367f15ca8f", "sighting--67e476f8-c53a-4576-8a0c-9a66b5225ed5", "sighting--694270a0-5e04-4863-b8db-cdc8dc6a369e", "sighting--d41a35fb-4a4f-4908-b29d-6a83050806b9", "sighting--e80b2c94-d18f-4f9d-9642-886495563e64", "sighting--9b8c67d0-43bf-4bd8-91e8-f408aa0ac8fa", "sighting--0f469ca3-23f5-418a-b010-6c8a98b82d06", "sighting--b415d335-abe8-413a-8e73-5e117349546c", "sighting--ef0e1420-8d77-4bb5-a372-904ebbf08e56", "sighting--25db4af7-936e-451d-b325-a13d69a9fd32", "sighting--1bbe38ac-b24d-4013-9949-dc7ed9cdbd9d", "sighting--ab7b9243-d4c6-4213-b9bd-b15722245d9a", "sighting--81b6a77b-6d42-4cdc-a888-6339856285f4", "sighting--20b82d1a-c33c-43ca-a270-6f5f64aed890", "sighting--6f3a715e-0fb0-4a65-a4a8-06fab5d382ca", "sighting--64b63daa-9400-412a-b0f8-988b4203a890", "sighting--16866807-ddf6-4c7e-a65e-8c920d4ccc89", "sighting--defe55a9-1cc0-497a-9d72-a5a6c89e850a", "sighting--229ce7fe-4cb5-4ccb-812f-c0b535b4e291", "sighting--d0e3f578-c7f9-468d-ba08-19b74d523138", "sighting--b236908f-22c6-4f68-badb-272ccc61a5b2", "sighting--e00420f9-c25e-4a28-b0d8-c647e8b7d62f", "sighting--263379fa-3734-4a31-90ae-04d0139e2a64", "sighting--5cd72e70-7bb7-493b-8f97-833328828883", "sighting--97ad09e3-8d92-40e1-9a82-09ccc09fb673", "sighting--1c42a9c9-ac8a-43fc-ae13-4a3d6fea2031", "sighting--fe63beb6-efc1-49be-8a03-43bebeb3db48", "sighting--1915ccb6-0ed9-4cdb-bec6-688dfa2527a3", "sighting--357e8434-8261-42d4-82c1-f5a077d201c7", "sighting--3d466dd7-dfd0-4149-84ea-fe048c0bbb82", "sighting--c5c456bc-150e-48e0-a94c-172e39d40fe1", "sighting--0e35fbfb-f27c-4e2f-bd12-c4fbf57bc97c", "sighting--7cff972c-68da-4e0e-bbae-1e1f4089d0a7", "sighting--c6bb227d-72fc-4ca4-90b6-d0ed81851040", "sighting--2f5e2e2e-9a50-43e8-8f5b-d679f2644263", "sighting--dee3886f-4880-4323-be54-12750e19ede3", "sighting--c3e49e03-f38b-459f-b6fa-7ee42a2cf397", "sighting--79d1bb57-a09e-444b-987e-57d298e6d5ea", "sighting--1b964cc2-39cb-486b-8364-fe15a648c873", "sighting--e62904a6-034b-4b1e-9895-23cadac94d64", "sighting--a5c64e4f-bc46-41be-992d-aa44526d9a59", "sighting--e35af62c-120c-454e-8ee1-297de8e8e5b6", "sighting--5c24ffd0-91e8-4e68-9ae2-80d484e54897", "sighting--450712b6-c1fe-4384-8a3a-1058daa760c4", "sighting--9392f53d-6e12-4703-9564-b4e5a46306aa", "sighting--3b9ff64b-e531-4b20-a8af-db4c7449607c", "sighting--8eff60b5-2285-4a4d-8085-09a203e39229", "sighting--fc82f172-becd-4def-968d-b89133cd98b0", "sighting--6f88b0c7-cf32-4dd6-a569-e1c0adf79646", "sighting--246306c6-74c9-47cc-80e0-514a61b77e9c", "sighting--311e807e-01b4-4ae5-9da9-71a521e6ad2b", "sighting--777dacb4-6a28-43b3-bc8a-4a048bbe733b", "sighting--1d02f200-4f84-4a3e-ab95-616e6eac70c7", "sighting--1c011c68-9175-4e53-a5fa-7fe4fa54a630", "sighting--2482affd-1d46-49bd-aa3f-c45f00110690", "sighting--8d8c6be2-1834-44f4-9ff7-16fc20f21722", "sighting--15765949-5540-4888-be34-95d6a3fbc888", "sighting--d9f303b5-b4ee-45c6-b2fd-7c4062d42cc1", "sighting--345ef8ba-da52-4b34-84fb-e8dc2209605f", "sighting--a6c45e89-3fac-4262-a7a8-572ba00193e7", "sighting--cda90dcb-bac6-47b4-ab6a-64d0262c5295", "sighting--3ff44c89-ab9c-45e4-bf75-d2570416e79f", "sighting--0f0e7298-d87b-4ce4-b654-83ef8f74c519", "sighting--cb722708-6c3d-4afd-bfb5-c37f871deb17", "sighting--617f651a-3840-476d-a079-6a7751010e2f", "sighting--b109acb8-73b3-4612-aab4-3d589354838d", "sighting--2b7db245-4483-40cf-a663-c02cdc7659bc", "sighting--c6661445-7043-40dd-b412-9abfc639d8a0", "sighting--24f517ee-947c-4349-9196-bc9b56ef1cd1", "sighting--7f205ad9-1808-439f-8aa7-fa11b98f1cf6", "sighting--fee972e7-c62b-40fd-83d3-1b02136f00c0", "sighting--d6c64466-a17e-4be0-84cf-ef4b57c40eb7", "sighting--d19fb03e-799a-4b71-a24f-6e04b099d09d", "sighting--5423a1f0-6ff2-4a14-bfcc-4532cda55db2", "sighting--c2e01aca-4070-4063-9ab5-7bed4bc8293d", "sighting--5be3f1bd-4f67-4ee6-bee2-d15040797386", "sighting--82fb8198-5318-4f8e-8dc8-36474f3c3c7a", "sighting--4fa2d24c-aa1f-4798-a83e-d7e169c08df1", "sighting--ff898e3f-b645-4819-9ea2-99d0f3e5a9d0", "sighting--c5bc49a6-285e-4d24-8b6d-4be6acbf6d8b", "sighting--71dae9ad-ebde-428c-b519-00b0fe151473", "sighting--88f2fc68-f7a6-453f-9669-4f670679cade", "sighting--c5f9e917-47ef-4c17-b92d-253c193cf0d6", "sighting--2fed750b-4261-439f-82ae-594da8fe8d42", "sighting--b6719fe7-ebb8-41cb-84a2-7b4804e4b28f", "sighting--a750d368-0cec-40eb-b06f-7046c5d941b6", "sighting--e029af1b-c5cc-4b45-a404-447b3a670b4b", "sighting--9d137d3e-2671-4c0b-9605-f6071a9a3a64", "sighting--67f32d66-5b0b-4a30-8edc-d844e381b006", "sighting--a6a3d8e7-7f88-4494-8921-13b8dee5c89b", "sighting--50109edd-f000-448d-8335-8a2bfd65f160", "sighting--2e5998f6-5727-4a0b-9b0c-8ee46ce810c4", "sighting--d7bd1e18-1d8a-4c4d-a1b2-ba8bb5a9674d", "sighting--f087e929-3da9-451c-bc12-de7068044ee0", "sighting--360b2940-5176-4603-a33f-b9a3e8689755", "sighting--04df8aa3-1ba7-4d55-88eb-b0e7def776ef", "sighting--1787fadf-6caa-4091-8dc5-aaf65d444a58", "sighting--f2dee74e-20d2-4969-8191-ba18e7faeeb2", "sighting--0b9a0e99-ec9a-43eb-a8f4-e6c72c4801a6", "sighting--aaf261d7-acf8-4bb3-a6c9-5b6b084c0bfc", "sighting--fe98e70c-2ac6-4472-a22a-885fe6efa3b1", "sighting--1ab837b5-dfa5-40e3-8114-8be6c7f80bc9", "sighting--c4847d13-a432-478e-8658-45cb87373595", "sighting--bce48431-73fb-4b4b-9cac-fb11983beb3e", "sighting--070446da-897b-4549-89b5-cfc674a1e2e1", "sighting--01212073-d7d3-4e34-9375-3c455446562a", "sighting--b5294cd7-51c6-4f8b-847c-461e21de4912", "sighting--3d77ddc0-ac58-4dbb-9291-56762b3b68bf", "sighting--b9ebb0ac-5362-4ede-a348-35c2061a3b2c", "sighting--994367e6-6eb2-4912-a536-c14ad21fff2f", "sighting--670b6fac-e5a2-4d95-8c7f-e09ebec03e5e", "sighting--0d86ce7b-775d-4431-87b8-74dad6f10d89", "sighting--6666e1e3-1dea-41a9-988a-bfe74d0271c8", "sighting--01c1fdb1-c2e6-434c-b2cf-0c89490150d4", "sighting--488d3c15-07a3-4216-aee6-6c600d0e8e3a", "sighting--1fce30fc-a23e-44a5-a6d8-6e1631f73824", "sighting--61f85c4a-43df-46ee-af66-b72a8abe0b97", "sighting--55366520-3f3d-458b-9285-0a5ac1ae40ae", "sighting--aa2444f7-ba88-405b-8f73-14530f894fad", "sighting--57b56e7d-2b5e-4d03-b65a-e21819080602", "sighting--e41e55bb-a3da-4dba-9082-1f5caf11984d", "sighting--1f78918e-63ff-4654-a69b-a33955e06bfe", "sighting--55dcafd4-73fe-46e8-9606-773afc045d7e", "sighting--7c745598-6afb-43c1-b51c-bdecb23caa84", "sighting--a361bade-4786-4b97-9c1a-fbdd4b457b70", "sighting--5802bbdb-3d8b-46fa-a3f6-d3d20c56f966", "sighting--7ea054e1-676e-492b-800a-1b9e590e6d81", "sighting--fb91ae7b-9d24-456a-8dc5-1c03f5fa125c", "sighting--5962171c-4102-492e-a6ca-a834e9359842", "sighting--9e4a456f-1b61-48cf-8dcf-b43dc7ff9d32", "sighting--6448bed6-c054-4cfa-b659-afb7b55df58d", "sighting--6fa05946-4d62-40ed-94bb-5ad4239a30f0", "sighting--9569b70d-9f98-42af-b146-2ccadd0b415f", "sighting--cefa4643-7c76-4b6c-87f4-95c6ebd80fae", "sighting--4fe22d8a-361e-498c-9556-1d480b2ed71a", "sighting--d55caa92-dec7-4ca9-b419-c7a357c46b76", "sighting--05b76bc2-e31c-4f6c-a993-a2112b6119cb", "sighting--55070b7a-b195-495a-8420-acdec4f24d8f", "sighting--e1a9d43f-cbb2-4200-b20f-dce5236664e2", "sighting--114ebbb3-9198-406b-aee9-ad96eabb655b", "sighting--3b575889-8032-4a59-9eb8-2e7f0f13f72b", "sighting--4d8fae67-2246-4f1c-a3b8-b6a5281fdea2", "sighting--72e1fed5-d590-4eee-813e-8b112addc735", "sighting--c010f6c5-348d-4ca6-bfc4-ccbe2fe8bdb1", "sighting--9419ed35-2362-4492-a014-cc63f5191b7f", "sighting--9da7b3a2-efb8-47b5-8bc5-95fded6a6dbc", "sighting--832765fb-349d-4fa1-afba-6058c07a9161", "sighting--2ef6b261-c67c-4153-bba2-f19bf0dc1d41", "sighting--6e4de86b-424f-42ab-ab10-8f0da02fd632", "sighting--4a13cc16-8d03-495a-821e-1421c3ff3328", "sighting--6e4cc793-8525-43e3-ba71-c41aa3f10b37", "sighting--a17b2f60-6e36-4b2a-b639-bccfd676c95f", "sighting--3d85f624-5437-4a65-bc62-ff7543cffff1", "sighting--3ee31027-528e-4e85-b9c6-586da2fe8351", "sighting--02f8e6dc-589d-408f-b8fe-37a2b518279a", "sighting--9f21b331-5d25-4ec4-af2a-56c1ce888e32", "sighting--b8cc4a60-45ee-4e4b-9053-a2a7ffcfd171", "sighting--d9041ae8-b010-4ee5-8ea1-8b7d67671ddf", "sighting--7a66fbcf-12a2-4caf-b695-bb64578e8aed", "sighting--b5840613-db0d-4cef-9859-507df7028fa6", "sighting--1e5a906f-bb01-4f55-8f32-e6afda134eb5", "sighting--34c88997-974c-4ff7-939d-8a09cd1e1ba7", "sighting--7cc67aaa-2d1a-4086-a40e-518052425e98", "sighting--2ff416b5-a536-494f-a6b3-3b1f7635fe7c", "sighting--c9b3630d-cb3a-49b2-a8e5-91f44f5b11c4", "sighting--38c93199-333c-428b-81a4-04e25b9da2d5", "sighting--a581de61-7f35-42b8-b426-3fbc55061a05", "sighting--597c26d9-643a-4003-8d69-3e592292be61", "sighting--46141125-181c-4ed2-95f8-cca24b0eb954", "sighting--a8615806-f482-4059-b69a-63c97c448069", "sighting--e1bf6674-ecac-45d0-b022-a12de69b5f27", "sighting--87629602-d768-4a31-9148-fcec51f53e09", "sighting--e53e9984-f8c9-4d43-8632-c59280febb74", "sighting--34a4b4b9-7f6e-459b-8b5f-0c94387b0606", "sighting--fcc17d56-5a87-4115-a469-c08acfd797a0", "sighting--14bd4c25-751d-402c-b25c-a955376bd047", "sighting--41c04326-54fb-4564-b32d-b658d108233f", "sighting--ade481c4-013f-4451-ac90-5a6d17030954", "sighting--abefcfa5-f4b6-4199-89ca-5012fc4b44e0", "sighting--b60e5369-952a-41f1-84fb-d6d85bc23fad", "sighting--3ef88171-88ef-4181-b390-80f853029f42", "sighting--c1d61786-6ccb-44b4-897b-89896193a9ce", "sighting--f0c3a009-51ae-4c6b-b184-a31855748499", "sighting--8595a4b4-0a58-407a-b20f-fc30f0e641c7", "sighting--537b57f2-909b-475b-89ca-6d9e6e5a29ee", "sighting--0c0a2cee-0ba4-46ea-9376-3ae44a1fdc0b", "sighting--914d6be9-8f0f-42d4-abd4-885448b92ad9", "sighting--8f1e6d4a-6865-4f13-b3d5-1df8709a68f5", "sighting--64ea67aa-8ac4-414d-9ad8-dd8e35f3ffdd", "sighting--9a43f49f-8f0a-46e5-bf47-d6989efb2e68", "sighting--2c91d9e0-33c6-4831-854e-56710d792960", "sighting--909cfd62-0970-40ee-8b4d-c805f144a569", "sighting--a693cfde-fa6a-4607-8b2d-5f6a62aeb107", "sighting--8ebdb5f7-1bc3-45c2-b706-d79da708fc80", "sighting--92760b2e-72c2-44c1-bf7b-314b6f45b2b4", "sighting--7980cfda-da8f-4372-bd79-bcf71c08d268", "sighting--d382a557-e16e-4d74-9f54-2f6e5547b719", "sighting--dda4ac92-101c-41f4-b90e-21c864d116dd", "sighting--7696f307-7ab6-42c2-9ac4-4ab281dbeefe", "sighting--2ed6208f-69ff-44fa-8f70-b5a3e853ae8a", "sighting--ec7f9a8b-0209-482b-bfa6-9b68b3dad756", "sighting--e836c05a-7017-44d6-be93-4e93043ab8a6", "sighting--20628f7e-d7c4-4146-8ddb-1bf191be93bf", "sighting--efc8f5c7-a42f-43ab-a08b-feaa5679baaa", "sighting--b3f9a744-fe45-48c0-bfdd-10f8e2708c06", "sighting--b8a02fd1-2091-404e-8f2a-b305a9007cdf", "sighting--84f98f53-d287-44fc-ba11-056e6bd43c81", "sighting--eed5d026-796e-4ff9-977b-cdad75da9d19", "sighting--e0e0d619-c6d2-486e-9b4f-ec53720e4a59", "sighting--ece973e9-de15-4c8d-822d-41432498c06f", "sighting--8321da1d-b37a-4976-8418-43cb0759158f", "sighting--84ac77a9-87a8-4835-a889-cf0005905ce9", "sighting--46ae5feb-c980-4d72-8581-8c7555d5a817", "sighting--5ff81af5-52ac-4926-8d8a-251468f156f2", "sighting--75feedad-2a7c-48aa-96b6-65ebf7f2b8bd", "sighting--b589dbf1-dd43-4ebd-803f-72a81de861d0", "sighting--0ba486df-1591-4728-a714-8f8c0403c80c", "sighting--ca6ea89f-3cc0-4fce-b767-07e92210707e", "sighting--91ed985a-d754-4abf-a80a-25d04daffc79", "sighting--db92e355-870f-41b7-b73c-edcfa8e7c683", "sighting--776019b9-af5f-416c-ad26-47dc3fc2819e", "sighting--a4bb3d6c-e7b1-4da7-b353-690c992e9526", "sighting--2aab9687-92ce-4343-8b98-f010412a7850", "sighting--cf2a03cb-40c4-4254-8931-1b05daf5b765", "sighting--74da0532-0fc9-4304-b7a6-40638c9142fa", "sighting--20f5cee2-2af4-4570-99be-6cc4d50d6688", "sighting--977a0586-82ad-4143-99ac-82a4e9e6566e", "sighting--cb63d133-2350-498e-8832-3439c77f1ad1", "sighting--9bb0f9b3-67ef-4d21-a345-fa455cbdafdf", "sighting--0f17ffb3-47d7-43a0-904f-ae537ed07f50", "sighting--a5f9ffba-fbec-466b-8e36-32ed7a3d98e0", "sighting--96cfdd4d-fb2d-49ad-a246-72e93ff8a0ca", "sighting--fc215f00-9c6a-4699-a712-044f9ba9d39a", "sighting--01568190-a8b4-43ce-8da8-6d695aab6410", "sighting--73593b8d-0274-435a-93f2-29a420fa6329", "sighting--cc575719-a032-42e8-82cf-5b9108437269", "sighting--ffa7bfbf-1d38-4671-b0f2-408063edb7f7", "sighting--7ce036b6-aad1-4636-8d92-029d0e3d3c76", "sighting--5b2e719d-53c9-4d20-834b-832b726dd084", "sighting--eb543104-3851-4b21-944f-458c86540946", "sighting--a5ef3fa9-c8e2-4e94-a7cd-9b820c314d8c", "sighting--7bb904b4-5469-4143-ad5c-d8eb3565b27c", "sighting--65ee3cfb-f056-4212-9087-3d028b0096ee", "sighting--75ea32c9-c222-4552-a546-ad19cf096899", "sighting--769af757-6ac9-48d1-9114-3ec63792f7cf", "sighting--28b69232-1eb8-46bf-85a3-4cbf127e9136", "sighting--22dec5f1-17b2-4330-9532-2e85c7c4fb5b", "sighting--0b675e1e-1853-40c7-9977-8e15de28b8a0", "sighting--35288c32-4089-4c65-a270-f1a3cb58a17f", "sighting--aa1644d6-9e47-4e2d-b6e1-767b4bf8c0f8", "sighting--c2499108-0934-4513-afd5-cf9e40345deb", "sighting--1a2bc6f2-e5e0-494e-ac71-b8eb55544c9e", "sighting--784f48c1-3a9a-4e1f-847a-dcf2f1682790", "sighting--e61232a6-5085-411b-a9b7-618643cc9630", "sighting--2bca1852-5793-419f-9ca7-37f3f33c3daa", "sighting--9c8a0afb-72f4-4035-b3d5-f63e206be189", "sighting--6e3a8124-2969-4b1d-97dc-dbcaa5ec0bc6", "sighting--9070c280-7c19-4e79-8979-0127e3bae9eb", "sighting--7b93992c-3a00-4452-bab2-be6dcb5b5c75", "sighting--c05bdf17-98ac-441a-ba0c-e5894a6e8ad9", "sighting--20196f82-da46-415c-b4c3-add131e91b7f", "sighting--e4e41399-5947-41d9-9eb6-4b37dced804e", "sighting--9dd82528-0e87-48bd-baa2-f5ab315ecc5f", "sighting--37b18bad-4245-4d3d-92ee-02abeac8e0b6", "sighting--ef8018d9-bb0c-4b7b-b60f-def7274da708", "sighting--92be00ac-745b-488d-b921-7258e5353934", "sighting--a31f556b-b6ad-429a-8802-ff838c30afc8", "sighting--8e098441-92dc-4401-9646-878d1f67b859", "sighting--f178f341-b7b3-44d1-8f7e-d6d8dce2c126", "sighting--2df23788-664e-44aa-bf04-3ec32bd5ba0a", "sighting--4be92753-039e-4d80-8deb-94530bc409af", "sighting--c1b51c2a-7bec-48f6-b1c4-29d9ef4a3fda", "sighting--5f1b9f15-1312-40ec-ab74-a283cabe5299", "sighting--f592dfe5-d04b-416c-9774-12af45b6ea52", "sighting--de4aa94c-3a90-4d36-b97b-f0a525bb6464", "sighting--2a874c45-f220-4e1e-9214-d2b6758be182", "sighting--7badda05-b5cd-47c9-a671-41699739b601", "sighting--a30c5689-7a87-4d77-8ca5-0d86e5113f92", "sighting--e59d0749-4c5e-46f1-bbdb-f77c7f3038ba", "sighting--a687c1e4-4446-4af9-a339-ef877a67af3d", "sighting--addeee53-ba7f-45f5-9bf5-40b78c8062fa", "sighting--28d0c675-a65c-4944-952a-a813a87fe5e3", "sighting--b725903d-7f73-460f-bc76-a739ffa37062", "sighting--0fdfb1aa-35a3-42b9-8f79-d54336749195", "sighting--01629217-82f9-4edd-919e-07506917ee77", "sighting--5d761dba-65a2-4698-9a05-d780ec2c150f", "sighting--09bb131a-12b1-49fe-a83c-67387e555805", "sighting--71d47d7e-2360-482f-ab30-da3fc4c78fb9", "sighting--7dc27eb6-f12a-4171-9bed-6eeefb589195", "sighting--48321335-35c5-4cbe-834a-1acdd19d5979", "sighting--eb113b9b-5e15-4259-ba2c-75f66a219db7", "sighting--01ff9cb5-c291-4a26-87d3-944084928d8e", "sighting--8d60c4b0-1e4f-4453-93c2-88f02bed6016", "sighting--8581326a-d8ac-4187-9194-27227fd2c00a", "sighting--c44cf554-66c7-474a-adc7-aa50a14b1fac", "sighting--f63f0e10-bbaa-458a-8b8d-cc99b3a6ee01", "sighting--ccff63a8-ea29-4288-bc06-a9c5feb4ab4a", "sighting--ddd13157-336e-4a44-9432-23bd3579468b", "sighting--5efcf0cf-bc3e-490a-9d51-d77d817f5744", "sighting--f04fb85f-ee48-4cf5-98c0-2c57a9bb62bc", "sighting--5fdcadc8-60e7-42d9-a5f0-83ddd0e88b88", "sighting--70f7e198-b64d-40b0-9d51-79202cb0cf8c", "sighting--c346efda-5370-44ec-a85f-14828903e98a", "sighting--9dea6fbc-c1c5-418a-b6ea-8cb03923a818", "sighting--6df781fa-88be-4920-af09-e9b2c8166abe", "sighting--56e93bd0-51cd-4c51-962d-755ea96a4beb", "sighting--00004543-6693-4c77-9a02-6e2efad75b4d", "sighting--9dbad954-389e-441f-b796-8d02cd84b353", "sighting--592259e3-32d4-44d2-97c8-601832fbf47c", "sighting--ad2cf1cf-be6c-4b02-ac54-9df27e49a4d3", "sighting--767aadd0-ff45-4ecf-9dd4-a0e6749ba8d4", "sighting--3d31f4ea-b201-45ea-bbf6-c200a0133cff", "sighting--54565a0a-4b26-4116-bdd3-df3d6c40a953", "sighting--ff74b71b-67d1-4ced-9c87-810c6bb2324f", "sighting--6d7eb423-146b-4213-990b-cfa1202d1838", "sighting--31d13479-a85b-4996-9a06-82ae915be09f", "sighting--0d34bdc1-df33-4a9a-a6b3-896a46d279c3", "sighting--803bc6db-0e5e-4856-8a31-510a5509d80b", "sighting--3e637d64-f38b-4608-bcd3-1510b739f54c", "sighting--eaa265ae-c898-49d5-ba0b-00647888e2c9", "sighting--37effbe5-b743-4ef2-8fbb-921b0ca2c28f", "sighting--490863ba-c1fb-4d0a-85f4-8871c400dba0", "sighting--94a76d1d-0ac8-4df4-882a-e918ecab453d", "sighting--fea7ad0c-d1b5-4b48-b83f-82bc9d225689", "sighting--243cc462-bced-438b-9119-4df5dbd6c51f", "sighting--d364f19a-25bc-476d-b2ec-f47776a17f30", "sighting--22273b13-bae0-4ff9-a600-b4736c3a11df", "sighting--0664c3df-c887-42f0-8a3f-a284bb1bbe8c", "sighting--20c8fbd1-9973-4a56-8229-ccceba0e4ed1", "sighting--acf5f85a-10a9-49d3-bf0b-b8aaaf10a4df", "sighting--0353ab85-2671-42e4-9860-556e2015d4b5", "sighting--b18965de-f087-4036-bc65-6d273463cfaf", "sighting--b2c89cb9-7eba-49e9-9811-980d8ad89821", "sighting--8fb92b26-a424-4020-b92c-3936cf9fe12a", "sighting--b9026801-c48e-4248-988b-c98586e7b7bc", "sighting--280cd3a0-42b5-45fe-a513-44d13f44daf2", "sighting--3f8681d1-be6f-4ff0-8d4d-5621c62c9d76", "sighting--bfc664a7-0a4a-4c71-a93e-d78f7f55af92", "sighting--046f35fa-e933-441b-a755-26596e35a6a2", "sighting--0c2b3cf2-70e9-456e-ba8d-17629a5d40a0", "sighting--5999d8a2-cfbb-4281-b218-be791791f321", "sighting--5ee62f84-426f-4a5f-80bb-81632583e7bc", "sighting--fdb12617-6ff3-4639-a697-b83393803d0f", "sighting--7bdda3db-155b-4656-8302-5fddaed444c9", "sighting--cfecfdcf-c987-4a04-9eca-4560dfb7b0a2", "sighting--7c8606f8-6a96-4c5a-b8a9-d6699891633b", "sighting--69e8b87e-c895-40f4-9804-397d74c0a001", "sighting--7ce0c40b-d70a-4408-9c3d-5c5134ffcc1d", "sighting--bbacbb9c-8339-43f6-9b78-4f71c8f2915e", "sighting--4391ac9f-75d3-4424-9239-e1b94b790cee", "sighting--2c649ec7-644a-42b7-8b40-6deabca111a0", "sighting--6e30073c-e783-4db1-a8cd-19f6a7b65873", "sighting--4b91900d-f4ae-4e39-b19a-70cbe4548c1f", "sighting--6d63da74-c486-461c-ab9d-ba226b226a60", "sighting--d84be1fd-c6fd-47c8-a3d2-e9844c8b64c2", "sighting--bcdf37e9-05c6-47d3-b713-24899d7bfeca", "sighting--35967c27-22f8-4caf-8cba-30cedd8c1376", "sighting--24d20444-c43e-4b55-8247-468171eda8a3", "sighting--8b159b8b-196e-4470-82eb-b30c8c3d5d2a", "sighting--e4f6dcd7-58b5-467b-a1ce-c4ba53433cb9", "sighting--cae63c59-e51d-421f-83d1-7bb084434bb9", "sighting--6f10d150-1c9d-4651-ac2b-0dc33e7cdc68", "sighting--478be8d0-71da-4a7b-b8f2-8dae30cfb5a3", "sighting--0837cd04-f29f-4baf-b816-9f13ed2128e4", "sighting--787845bf-ed08-4378-8bba-f2deb589f7c9", "sighting--6f767908-2f2a-4b1f-94a0-731548fbd435", "sighting--003723ba-6f32-4f8d-835d-0c08b9c38338", "sighting--0acee7c4-3065-48e0-a41a-3eba8e8fb777", "sighting--092e20ea-1299-4d83-96d1-9789fd226f85", "sighting--0b7693f1-ca70-4164-9262-48e80bd079c4", "sighting--0f40b59a-8511-4b2c-9276-5e1729cc5a2b", "sighting--ac67581e-2513-4272-b919-45def5d5e5b8", "sighting--10e7565d-ce66-4ce4-b2c8-0dac89dde322", "sighting--ce5813ab-5d58-47ec-9b9f-e0504f9ec3b6", "sighting--51fd1875-dbfd-478a-be50-6fa39913955a", "sighting--8dc958ec-40d6-4a55-b85a-4493fbd3c9c1", "sighting--d5f70fd5-e426-4b14-936e-218c0ed6152a", "sighting--0d8b0665-ba45-408f-9e12-7b83fb23d296", "sighting--25b53dd2-6876-4b1d-a3d7-64d090c3406e", "sighting--732be2cc-6313-4848-8085-c43bc96b96de", "sighting--02b9da19-d0aa-4e9e-94cc-3f6b8ab82e7d", "sighting--89c7eecb-7da1-4199-bb6d-286deaae30a5", "sighting--c0beb6f5-b8bc-462e-bb88-720bbdda6d31", "sighting--e841f37b-62fd-46f3-8895-70dba5a25b30", "sighting--2191f675-027d-4355-a6d0-0620d9174193", "sighting--26606547-85e2-41b0-9011-642d0957afda", "sighting--92cee8b6-0c36-4f41-8207-5554ecf00456", "sighting--7455534b-5299-4d17-b6a4-46301e9e7410", "sighting--447c8d16-0674-4b58-9309-f8008973015e", "sighting--8d2d4fb4-2e16-4a0a-b749-eb5537663b50", "sighting--e1ecbfaf-d021-47a1-aaf0-07eb44b35300", "sighting--55eabc2f-75ee-4493-95bf-59da8dfe3622", "sighting--129b8e22-23fb-454d-a2b2-95371f06f2d4", "sighting--0ecb4026-22ba-410c-8367-588dfb6e955b", "sighting--7aea8162-0251-4a46-bb2a-30c56fa8044b", "sighting--0ec3d3cd-4b4e-4bb3-b4c0-03cfcc16fabc", "sighting--f7191771-3550-4f81-b0a1-9aef4f78f054", "sighting--203317c6-ebb8-4fba-8b35-f76005ac27b8", "sighting--52224930-0ca7-493a-9755-e8c62da32860", "sighting--5e6edf69-d650-4bbb-b03a-9830bd18b5c5", "sighting--1408084d-0089-4243-b7f0-da45ea8ecef4", "sighting--bf92a722-3d14-450e-88da-4bea432b5927", "sighting--478a2c12-3c9c-47c8-95a5-61b78f57a7df", "sighting--51eb8877-7562-4948-aedc-83868d6f52a7", "sighting--0e78567e-03f9-41d6-a424-eb3bac250f62", "sighting--f6c05bb7-c39f-464b-807b-dde59012b600", "sighting--03e2606f-a3a0-4342-9cbb-1292b16a88fe", "sighting--61518987-df1f-4b0d-90b1-67e008b9ed71", "sighting--01ffb41f-d94a-4005-8eff-cbba26eacc77", "sighting--ffdbeb32-79cf-4590-8990-a4cba0a6ae6d", "sighting--9dea6365-b768-4a1d-9868-6483233d4214", "sighting--018066c2-77ce-4ab2-bd22-f8bba5383338", "sighting--7bdf377f-41f3-418f-bcfa-0821a3eb736c", "sighting--b67a3e73-350a-465f-8c74-c47c6f574474", "sighting--112394e8-d742-43f4-84a8-df0785acbeb2", "sighting--a0c6600c-35d3-4da9-81ee-e332f26a670b", "sighting--9529ed12-58fb-4d50-ac59-f1996a58de9e", "sighting--6c78ceb1-49c1-450e-8a72-5c6bdf523a93", "sighting--0242c730-880a-40ee-a442-f7ab07ec6476", "sighting--6333cfbd-adf0-420c-ae4e-10477a51635d", "sighting--6cb3e5bc-8bf6-4bd8-94df-74e81a95db96", "sighting--34249069-eed1-4ad2-8b7c-055f08c38de9", "sighting--2522e44a-2353-4364-9d1c-04331fea5d08", "sighting--346810dd-c28e-46f8-9f79-0e8cdcf05cb7", "sighting--38853a01-8b5d-4509-b18b-bf273a07e86a", "sighting--3659b0aa-1bdc-4839-b141-66bf6c351db7", "sighting--d51e93f5-dc7b-4931-9f11-f1e4dab13997", "sighting--b38f531a-28fc-4dac-ad1f-40d5967df8cb", "sighting--38c1d17e-7ece-44d8-ad57-dce3538833e4", "sighting--4515f9ae-7c59-4ea3-930b-7681eafec541", "sighting--fcf7fd74-33eb-4b29-9331-8a811a41f3e3", "sighting--a4fb9bdd-af28-4ece-a2a7-72facfd41f67", "sighting--37e9e755-154f-4bd6-b279-0704ae4a5d22", "sighting--2cfb4525-63d0-406a-b2d8-f3f09a879701", "sighting--aae1fd38-1f6f-4c8b-8a88-0c13804780b9", "sighting--5cd3af6b-2480-4116-9b62-99ea81be87f1", "sighting--78161489-24ed-44ad-9922-0b6e0e39e126", "sighting--09856301-38d0-4fc8-841d-3f566ccbe2ae", "sighting--96afbca9-37fb-42f9-b649-fc70972a698c", "sighting--4cbb3122-bd75-400e-b4d5-81e3f020882f", "sighting--4f193f71-39c5-4e3a-98f9-6703a76e2282", "sighting--c4ff3f34-d74f-49ba-978c-117db58e6315", "sighting--2dadcca0-94ac-422b-9ad1-f4c129bfe136", "sighting--b637e0be-f888-47c8-b2af-58675bf03fe8", "sighting--36008c5e-1df4-4827-8056-8b42a5186a2e", "sighting--85d19d94-02fd-46c5-a92e-d2c7eb45c020", "sighting--150e10b9-b6b2-43bd-95f0-48b4eb2d828b", "sighting--fbc309a9-555c-4b3d-bc5c-4b6b69e1bce2", "sighting--57b43bf2-dd4f-4bb1-957e-008e957b7714", "sighting--5afbc1de-e8fb-4e53-b871-e6b8446c5dad", "sighting--88d23631-8036-470d-b08c-a54362e9c111", "sighting--ce92890c-af87-4732-aec4-e877fcd1ef1d", "sighting--cdf89dae-f46f-4028-b8a2-a1a56c3126c1", "sighting--79aacda5-06b0-403b-8866-f7ffb094f26d", "sighting--3c31b2cc-5e36-4446-b0cd-75fddc2e68d7", "sighting--6e756f16-3d41-4d43-8658-9a4a18a36e02", "sighting--d112823e-2c38-47d6-a458-4d0c848723cb", "sighting--839a8f35-8dc9-4c95-8c4f-0b79162763c5", "sighting--490f7c67-f327-4400-9cf3-4d665b2660ef", "sighting--338263a7-36f0-4af9-a3f2-d92ca8235989", "sighting--c3b3e79c-4ba7-4e97-a08e-45d94374d6d9", "sighting--a00f791d-56a8-4cdb-8bc5-ff088cfdaf90", "sighting--2535f23d-8834-491c-9673-5629afcac3eb", "sighting--c51325fb-306b-422a-ac40-337433a41037", "sighting--e7d2d3a4-5346-4917-bf3d-0a83b803c869", "sighting--b46a3e9d-a647-4424-b5c0-9c3a09ad1cbc", "sighting--84b189c9-804e-4e32-9a0f-d2782e03722c", "sighting--92fff4e7-fee6-4d58-b7e4-61b076e6ddb7", "sighting--957340bc-1963-4599-b6e1-611f52df462d", "sighting--261be8d6-f492-47cb-9b35-35b9bd6773cd", "sighting--33b4a0fa-2def-4d0b-b66c-92e2eba5ca1f", "sighting--386006f5-30e5-4f44-87de-fd142cef8ff9", "sighting--ab644a0b-498b-4365-862d-395f0be1d9f8", "sighting--a0d58568-154b-4ba0-a32d-683c19a73187", "sighting--b34ecf72-37e3-4652-8875-65a5584fe336", "sighting--1f0dafc8-c0f1-49a4-8893-0fef3ffd2dc1", "sighting--54400b70-e959-48f1-a4d0-98eedacada43", "sighting--e43c1844-d20b-4134-a312-7be0c758cd2d", "sighting--c83e81a0-421a-4777-b423-19463b6aef43", "sighting--2174311b-5f3c-4518-94b6-1e734265e7b3", "sighting--89c6a78a-ce58-40ad-9b64-0515a7bcbc4c", "sighting--7d24dbef-6984-4cde-a34c-03c428d1dc83", "sighting--56a5cb3a-e87f-43f4-9440-7e35c8de2fd5", "sighting--7f201db2-88d0-4416-95e2-abc084fb13d2", "sighting--764cad76-7a5f-4f46-9439-72d51cb70fa3", "sighting--1d0f289a-1a73-475e-8dbc-1ec0b412aa35", "sighting--94b1c9e2-a159-46fa-9ebb-ab6465a24dc1", "sighting--448371fb-3be0-42bb-a0fc-7768198823b2", "sighting--ec524f15-32a5-4397-b879-f9ca80eac9b9", "sighting--220b1c2c-6e1d-4613-b63a-310616004447", "sighting--832e12ec-ebc1-4cb7-a16d-2cbc55d77968", "sighting--3c8229d6-f50e-4055-ae12-5893b5f053b3", "sighting--2bbb2619-0e3e-4282-ba61-583b6060a23c", "sighting--fde6bf4e-a667-4c2c-ba54-bec34dd9ce8b", "sighting--2876235d-af94-4014-ace5-61ea2343698d", "sighting--87ca6468-234e-413f-a60c-4f8ab0ab891b", "sighting--87f908e2-a1bf-4a0a-a9a8-f4516e3670b6", "sighting--b53234f7-4700-4e99-b5d1-9974b9f49a95", "sighting--7d16040c-1ddb-4d8c-9499-38da81b07bf7", "sighting--1b5e311f-b38f-4009-8d43-b85cd355fbf1", "sighting--a003dadc-a6f0-4796-ae4b-fb569dca9119", "sighting--63bdd810-9da0-4892-a471-48f608f293f5", "sighting--2c0c2ecc-5885-4edb-9633-27604e5ae04b", "sighting--31f2b209-df31-4488-a381-c7f13bfef718", "sighting--56916e66-86a6-48bd-92b9-ed30fdd1181f", "sighting--7f4c5f8c-13ab-4d8f-b703-d0501ba323b1", "sighting--45f4bc1e-a4ee-4220-af7e-0d5505a9a9c8", "sighting--a7ef9e6d-92ae-4945-bfa5-ad5dd296567b", "sighting--6497ffe5-c8fc-401a-a5f5-1527a23da2f5", "sighting--df636901-955e-496f-bc06-b201b07060e6", "sighting--95d04807-5224-49ce-8366-6d66a3fbbe1a", "sighting--bbcad7d3-4e7f-49a5-a4e8-1e526c69fbe8", "sighting--21a18552-2fbe-4bb7-b8f3-0789baa49428", "sighting--ce49b190-1e5a-42d2-a787-2f9ea065b8a2", "sighting--87e9fc3d-ac6c-44f4-974d-0ae773835860", "sighting--821c8601-ebfc-4ea0-a18e-d18bb459d98a", "sighting--ce16cb8a-65dc-453e-af59-760f0fdbf8ab", "sighting--a41126c4-2d84-4781-b94a-724b89be2781", "sighting--a9a6728f-d164-45b2-aa1d-9caa10aafd20", "sighting--0f4aa695-5fe4-4525-96ff-41965e14ecd7", "sighting--1377b649-ef8f-4d08-bc18-92a3094945df", "sighting--108fe28b-3161-4f04-923c-9fb7fa5cda38", "sighting--355febf1-78e0-49fc-9172-f352aaef466b", "sighting--ad593628-cadf-4520-99b3-2edb298b9e4b", "sighting--fd8d14ee-ed1e-4d63-aba0-766f92904697", "sighting--e69b2cec-85ba-4091-96bc-3717f0c05013", "sighting--87d21ad9-7781-4d0d-93e5-4a27be277987", "sighting--90371aee-b77d-4685-b75a-90ce1da0ddd5", "sighting--c0f9d171-46e0-423f-acd5-3a62b3b52167", "sighting--bc930640-5247-4760-9bd8-57ac06fb150d", "sighting--974dc675-05d2-4cb4-810f-79445861377e", "sighting--374af184-d23b-427a-bdad-79bf29fd0c5c", "sighting--a807ee1a-4e32-4460-989c-bec4c49e1a64", "sighting--00318417-f850-48c8-bc09-97f2ab7c7ac7", "sighting--087c1da3-3793-417a-bba4-f72e1223c46c", "sighting--e2a24d74-374c-4ef8-aecf-f1ffea4c1090", "sighting--2af4decb-2249-4098-a11b-61b80d5d070a", "sighting--cf1368ce-8088-4aa5-9c04-52af855f6242", "sighting--03bab1d2-f493-4b85-ab6a-c8dfd279fc17", "sighting--66359e41-ef48-4852-afb2-934869d12e69", "sighting--b7cc7c47-e991-4784-80df-0d114e370be6", "sighting--4a139a79-f3fd-447e-a3ce-8c1d59a04b1f", "sighting--f6721893-5293-4443-a9a3-56bf14ebce48", "sighting--d759e510-4fa9-4f20-a8be-3948ed51c667", "sighting--1d68b910-bfdf-431d-a19a-54c2c06a3ffa", "sighting--5c5f5f32-6a54-4594-a8c9-69e6e9ed287b", "sighting--4d972926-3057-44e0-8426-8969dc2b1b3f", "sighting--6decbe94-bf06-431c-b2b9-46079ac4fb44", "sighting--fe32a916-4bb3-475b-9b69-f008f940d127", "sighting--1c7eaf82-5235-425c-a5b5-152d8cf7a427", "sighting--cff147bd-56b4-47d8-b709-e502f6425284", "sighting--8ad59442-034e-476c-a0ec-76fd8e7ac79e", "sighting--b3284e6c-8802-4783-9fec-b7d165a41407", "sighting--24f426c2-6a0c-4879-a23f-84bb3b850e02", "sighting--2e85302e-9699-4989-abf0-6d4696a507b8", "sighting--29658c98-fdf2-4042-a72a-f5f8ec66a985", "sighting--9a040e04-3174-4b3c-a61a-d168734ed96b", "sighting--7603c5bc-dbfb-4e8a-aa84-762fd26cc89b", "sighting--e7d60617-559b-4358-8c12-7c77d00313c1", "sighting--9ad3ad93-946f-466e-98d5-9c6db8ae2656", "sighting--21cb6f5e-bccf-407c-84f2-f9424e14aff8", "sighting--8b4cf455-7659-4f15-8280-f66c9aa39a96", "sighting--ee29e037-3bb1-4d04-87b2-23eab52776c8", "sighting--4fb874f4-d1f2-4d57-a9bb-d4770518c6a3", "sighting--ffd1df23-f84f-4407-bed8-fc7fd0a40001", "sighting--f7394fa2-a758-403c-be19-e4adb2906bdf", "sighting--1230f7cf-fa28-4c8b-a690-32a6bec96e22", "sighting--361cbdbe-0104-4a67-b25c-474db9e2e330", "sighting--15a9502a-1f34-46bc-9cf1-99ab005b757b", "sighting--2fb025db-61e3-4ef7-ba9e-4df54bc2f640", "sighting--d5aa3065-f592-4dea-a47e-1e8aa6584664", "sighting--efdb2ea6-3d6d-480d-bb02-035ab6a8ec43", "sighting--4bd43e35-d345-4efa-8c44-3a50a45b175f", "sighting--ab1111cd-2aa2-468a-8c47-1458acbc7288", "sighting--ecf3775f-946d-430b-9b79-0e357e834237", "sighting--54859d4e-8158-4de5-a624-9d8a19d09922", "sighting--081dde88-fd8f-4785-add3-cb8eaaafd217", "sighting--95ff3ddd-506f-4f95-9eab-23618017d188", "sighting--39128580-48b5-4302-8eaf-5047ba3dda2e", "sighting--9863cfb9-a4f2-49c5-b7cc-d1e816c7a792", "sighting--18c9a961-cb8f-4b58-9b2d-8fd18af31871", "sighting--f3156231-9188-4fd5-a561-d8bf9ccec8e6", "sighting--b04cdcef-4149-4a72-b849-8bb073da1041", "sighting--58a6da68-d70c-4561-8ded-38fc4bb97cf1", "sighting--454b4b31-cc68-4a83-9b99-615fdee3c227", "sighting--baebddbd-7846-4c41-bfba-b97da7421974", "sighting--7f6fa7be-2a66-40ad-a5b0-96b82152b261", "sighting--64d4f731-7dea-4e40-8e10-ed56ca11e98f", "sighting--ac9545d2-4f87-4027-bb6d-89d900ab1750", "sighting--fa0858a2-0056-4537-91c9-fa044b049da6", "sighting--7547b978-68f6-4faa-9010-fb4eeacbca9c", "sighting--d64c7561-d67d-4e2a-a9f2-1362be21d237", "sighting--130420cb-72c4-4862-9da4-a5a142dddae4", "sighting--0823c825-ca4c-41b0-a9b7-e870e028b43f", "sighting--1b0170b4-e5f8-4a13-894e-e464520d27fa", "sighting--e8b8d9dc-a3f4-4472-9076-b4b765a30706", "sighting--80e120ac-3950-4383-bdfc-9d6fd933ed07", "sighting--379fee70-ae7c-4af0-85e7-f3fd13c7a199", "sighting--6ca40d0f-0d83-4298-b06d-57d3a6de8aa0", "sighting--5b5248b5-117c-4232-9644-edfce66a5120", "sighting--54a70352-f694-4820-bb37-6e04b83621bb", "sighting--76a7cc75-bdcb-48f8-af97-2001ebb0b719", "sighting--559ade55-bda5-4bf3-bf75-7e7845cb20ba", "sighting--9250e3b3-8d2b-47c8-be5a-f56da3e163f0", "sighting--9ebbd257-7e92-41db-b3ea-6f34af1fe29c", "sighting--b2ca5b83-28e1-4b66-865c-b2dce39ebd1e", "sighting--0a3aaee4-ae4f-4b65-a702-dbc96c1e8ca7", "sighting--873d0193-24f0-459c-aafb-4263a6c0995f", "sighting--a933d323-1ee8-40c0-80a3-f23640bfbfb2", "sighting--2cb6d407-8285-444a-a401-8f8a19255f22", "sighting--81c07d8a-31ae-4517-94c4-a2122b44ed44", "sighting--5d052dbc-cdc1-4732-8872-d0a9b272ea4a", "sighting--c11dedfc-0e8d-4cff-b469-7931e75899e6", "sighting--5dcc8fc1-20e6-473f-9cec-837f6e9aa462", "sighting--1dbd529a-70e3-4024-8b98-7377e19f0916", "sighting--7a91da4f-5d1e-472e-b041-f0b7f5aa2f87", "sighting--7eecb757-9d17-4d37-9588-36d846f3e0a2", "sighting--4abdc80c-71a8-4f8c-bb31-1c56c9b33157", "sighting--08101bf7-b825-47a2-9c0f-1f754d532807", "sighting--9b23cd5f-35df-42c2-989c-754698f07140", "sighting--e8bb0e37-1019-4375-a3a0-52a570f430a7", "sighting--8f22a238-9a48-4a4c-8d22-5bb39395f4f0", "sighting--9b76320d-b030-44d5-bbfb-b82d67c9528f", "sighting--75e6e5c8-bd19-40e2-9dcc-3376be12de64", "sighting--58617807-8180-44e9-b67c-ddc9c7b4b4ad", "sighting--d7218d85-a531-4d38-9261-d6d70e51b5c4", "sighting--e9c05931-9d31-4ed4-a53d-c3ffce373df0", "sighting--b5f37386-9e13-4303-86f5-13a54e399354", "sighting--0ffb4176-0388-40e6-b8c5-d7dc17bcb854", "sighting--a59c0fe7-8e3b-49a5-b145-a23113b07d74", "sighting--9a58ec1f-1483-49a2-8a47-0dbe1e573201", "sighting--b6b01956-4567-4113-8dbb-be8584c79045", "sighting--0f6bb097-f604-4a36-a24a-6194602b1c28", "sighting--1d9d26cc-59c0-444e-a2a9-b2affed0a679", "sighting--7691822d-d69b-448a-a741-0a1c4bea86c8", "sighting--ddf30a9c-903f-4802-b59f-8747c4b014af", "sighting--a5cd4033-13c1-4455-b29e-b3a8560b32ff", "sighting--c20d3fa7-f44a-47f8-ad83-64c0318ea8f1", "sighting--3b0c2eb0-2718-454e-940e-aa0e9e4243f0", "sighting--d7a90506-ede4-4f2c-8d58-59b5377b700b", "sighting--69c4d4d1-e0a7-4211-b586-391fddd88791", "sighting--89412735-5c63-4dfe-be64-616579668594", "sighting--7efa4a59-cbd9-40c9-a819-20b550953438", "sighting--706b94da-4ffb-460e-9e9c-9a3054b998be", "sighting--5bc8e9ab-16b2-4bf8-8e26-826337c18ec8", "sighting--fa529930-08c3-4ef9-8d4f-4e0f6349db8e", "sighting--f5e49f38-eda8-4c46-b16b-164114af1b92", "sighting--a640451a-8f53-4833-8af2-6b7f063ef6b7", "sighting--376d0c86-3259-4413-8f9f-7d7ba67f499f", "sighting--9534abad-fa4a-475b-baaf-ebf7a5158c90", "sighting--5caeba95-9e97-4b09-a363-d0f1be0ea2ec", "sighting--1d67af6a-8f14-4d9c-b943-e71d46ffe1cf", "sighting--1222ea00-1529-4c1d-9feb-31dff7a2ba4e", "sighting--f82dfbe7-381b-4403-a12c-0073439fb8c8", "sighting--f43793c7-c61d-485f-885f-24c4d156aa88", "sighting--9c90fb42-3c39-4855-904b-ad16a7f9a63f", "sighting--f60cbbd3-bd46-4556-a987-50e3bff9b003", "sighting--0452556f-98b8-4459-b3b4-05ec06126d5e", "sighting--dfdcce0a-f75f-476a-8e45-a8ab44cbeee5", "sighting--c61f0ee7-9521-4cfb-b113-0c038fc3515c", "sighting--74316cba-8952-4fd2-88e1-7194d206ae0f", "sighting--04acd29f-b341-4bd6-8e80-ac3f7bf1d36d", "sighting--ce44052b-8587-4912-ad66-67b9417029b3", "sighting--ec977a4e-b1e2-473a-b5b9-9a4f006a9fd4", "sighting--2c5ddb01-63b0-497a-95d9-f0e90054f0a5", "sighting--9c68a4d0-8436-489c-9c1e-41c8d6aacab2", "sighting--42f64d46-5819-48b8-897d-285568a3e7ae", "sighting--d2ccaaa3-bb1f-4c5a-acf8-34a49ec46894", "sighting--0dad1590-9156-447a-92bf-64b5b42e8fc0", "sighting--ae4fe0cd-dcb4-461d-a14d-f7a86e02e998", "sighting--49dff180-7d3e-4e5e-bafa-75fc9b17b816", "sighting--a7735094-87a8-479f-aff8-e16333fbdb1a", "sighting--70c80839-fa28-45bc-a814-6b546843e76b", "sighting--2de80209-b9d5-421b-9272-3ab8014652ab", "sighting--2c97433f-c0c4-4516-9c36-e9db4c9a7682", "sighting--f4604901-53cd-428e-84ba-0137f3cc4a3a", "sighting--40173291-29af-4ba0-802b-2484bf22ade4", "sighting--0ccdf780-4006-49e2-b42c-9df8b5596f80", "sighting--2c9006e3-d7e1-487c-be1b-aeb95f4ae287", "sighting--08689e82-19a3-47a8-9c73-6a2920220dd6", "sighting--cdda72b0-986e-40f8-9215-34b509b7f527", "sighting--199c0453-63fd-4198-b0e9-7a8da33f60f2", "sighting--6f01d61e-658f-4062-85ef-391a2a311a9b", "sighting--72abab42-a85c-47a6-bfe2-66b3f21c81e4", "sighting--41ddb2db-7247-481b-b140-9177885740f4", "sighting--9edb48e4-84c8-4f22-93b1-a180f2ec94fa", "sighting--ae02841c-6623-4633-a2c4-6fc3541daeba", "sighting--7fa7fae5-c011-425e-a542-9ff440504df5", "sighting--a7365461-243a-4259-b193-97c29c77d7f3", "sighting--2eeec591-3c5c-4e54-bdd9-c840a15439be", "sighting--085d7f4b-0483-4b2f-a135-abce9956af3d", "sighting--ebdebbba-87bf-4669-9c21-0d1dc3e7a1a0", "sighting--04d5626c-72f0-4ec5-a026-8fca30712a11", "sighting--2f1d02ea-ce2b-4af9-884d-0faae657b8de", "sighting--5f36e6b0-b463-4652-8b3d-2d00d6bb3f4b", "sighting--19d04002-960e-4d96-a45c-44cb8ab69607", "sighting--74abfe60-3af4-4b7b-8a3f-8d22d9a2b1ee", "sighting--8eb62e8a-256e-4b64-b24b-46908cf2e804", "sighting--ae8be2f5-4634-40d7-a1ee-149e2b3b949a", "sighting--fe9d8a91-ba68-4457-8d29-b1f2c564a76d", "sighting--4c8ca75a-7f03-4d30-9a01-575ed0fe7033", "sighting--c4ee837f-607a-4816-88dc-32da1941602b", "sighting--bb0dcd35-2477-4630-b454-df09c622df8e", "sighting--c28e0e4b-3ae2-4818-b2fa-023ff7288ac0", "sighting--274a77a5-745f-4859-9028-296f1cae8145", "sighting--61579f1e-0d20-4c03-bac7-66feb3c34340", "sighting--cf33a00b-bc1e-45d2-8202-e229f846e562", "sighting--e54bc14d-b6c5-45cd-8076-05eb0a4d17a9", "sighting--2230a975-7793-4d5c-b8ee-f15c5ea3ed61", "sighting--3660c26a-53e0-4ce0-b69a-3823809e90c5", "sighting--c137f49b-71ae-4119-98a8-42eb931dfc1b", "sighting--7e4df5ca-e6eb-4d4e-89b7-1bb5d3349495", "sighting--35db4ae9-7f81-49bf-b26d-341048781c99", "sighting--b289201a-e18f-46cb-b28b-17dbb78ec195", "sighting--8a427c23-237e-4eb6-bcd2-e8f01666f979", "sighting--52880cbd-3275-429e-a98a-ae5646213ad7", "sighting--19134155-b79d-42ae-8683-fac1a4a75ff0", "sighting--a935b4e4-c4bf-46c3-939b-0c56aaa49b95", "sighting--8be4b472-bb73-44ed-9adc-f3f730df4d30", "sighting--ee8bc731-cd67-4684-8545-ba1f68ffeb5d", "sighting--4a574367-0693-4b76-ae6a-9fc1c349e217", "sighting--e392f7f3-d5dd-47b4-adf6-a842db34dfe6", "sighting--bd7c7622-c675-49c2-ab44-aa479ca99144", "sighting--0f1e19db-2df3-4cee-9ab7-8f093355182d", "sighting--93ff9668-7000-45ce-9fc3-6873c3f1ae29", "sighting--cc3b94a1-66bf-4ab0-982c-10c14f9ef632", "sighting--a6e9919e-707b-4337-8fdd-f7975a14f1a9", "sighting--4ee9c855-2e85-492e-acd8-6695b590ec55", "sighting--172ebe7b-1a16-44c3-9a3b-bb35bd97cc0d", "sighting--6625b96c-8368-4c36-ad29-1a9852a08cd7", "sighting--eca5b14a-4bbb-49de-a4f0-36dcf2a110b6", "sighting--a970b9fb-1db5-4481-aedd-db18b3c9b2b7", "sighting--d6b36914-c209-4815-8ae4-b075502657d1", "sighting--8fcb9191-f49e-440e-a1c5-417c54e8bbb2", "sighting--4b5d00e5-391f-4db1-bcd0-b77efda3b9ca", "sighting--2168d20a-a5e8-44da-aab0-f47daf7fccdc", "sighting--47293977-27eb-4de7-8e7c-5c68077c7c73", "sighting--7b71e07d-2545-4759-9d9f-c9ace369fab2", "sighting--2779aae3-b366-4cee-b6b6-4b11140a9733", "sighting--ff0c94db-5bf3-4eeb-9a9d-e46724a524de", "sighting--50285bd7-2fab-4baf-944f-b92ce139ed9d", "sighting--a7971ef1-fd53-4818-90eb-69357a6bc1e1", "sighting--3a924792-7b8e-4d03-a966-49e139b88019", "sighting--797a38c2-767b-4094-9b84-54d65279f3f9", "sighting--4691ea10-69aa-4994-9e68-5cd2af5fcc9a", "sighting--233cfaff-808e-4b54-b96b-e981abcb670e", "sighting--4f24f3d1-a5eb-4b51-9018-afbef3bf661b", "sighting--4bbbc181-cf06-4393-90a2-08827eefb2ed", "sighting--6b70e248-4d45-4ddb-957c-74c9ace6cb3d", "sighting--49770574-38e9-4082-8e48-6d30b8d9dd76", "sighting--75f5409e-b7e0-426e-a756-88b9169767a8", "sighting--aadbe556-a608-4e64-b7f6-cb652583e8d3", "sighting--116b2e7b-e805-47cf-8f05-4b714d82a5bb", "sighting--3d05cca4-091c-41ed-b7b0-ac8bea0ee6ed", "sighting--bc0b5313-f606-42de-aad8-8110b2c727cc", "sighting--ce562808-e5ab-4fa7-91f7-9e58931d69f3", "sighting--240da917-ab87-4825-a46d-93dd1d3aabf8", "sighting--bad9994c-bb7e-4b9c-8798-a96f8e713b55", "sighting--de19ee7b-a796-42ad-884c-971bf8d84dee", "sighting--2759ccd4-b1ec-405f-b3d6-83bbf84f816b", "sighting--03e48832-e4ef-4f64-beb7-667719470e34", "sighting--ce6dd313-4480-4930-9987-c30e0b6b90af", "sighting--e7a62167-2521-4985-a64a-1c17cf8e91ba", "sighting--57d47dbb-7344-44ab-bc9f-d83b583bf0d2", "sighting--45c63700-2e84-41b1-8452-41b11e1a3022", "sighting--ba237920-e456-4a70-bfc2-0094579023e3", "sighting--86e38ec8-4fb7-434b-8bbe-c6b8a3a7074e", "sighting--bc98c965-0799-4cf7-a214-4a55ec6b6bdb", "sighting--7f50ce79-bbfb-455d-830b-10c80a668ead", "sighting--9d211190-bda0-4147-83e2-af975c448ae2", "sighting--84fb54e4-e614-4628-a018-6bfe05400473", "sighting--de04ab8d-8875-4bf0-9c45-c46dd52f7217", "sighting--17c91687-e697-4bb0-9d5f-cc6c53d52712", "sighting--2ff2ac91-0cd4-409c-bd4f-a0de2b33649d", "sighting--2eb825df-00d0-4dca-82cb-3e9871d04808", "sighting--7c8a0f7a-291e-49f9-8b7d-c65d349cd86a", "sighting--b9c81f04-e4aa-4332-b5dc-926b61107b96", "sighting--eac0b85b-9e87-4b88-909f-9a927edce687", "sighting--f68c165d-1be4-4ff7-8350-e146ba9cfd1c", "sighting--6f5da737-42c5-461a-99b3-8f5f3ae5a11d", "sighting--2bab6266-6c1a-4357-b6f7-096b8571176b", "sighting--36224966-dc7e-4852-851b-51f421f9cdb1", "sighting--9d82883b-c238-4e40-b8b0-03eb5f5ac491", "sighting--e12b8281-bfc0-4c0d-b2fb-27c8a7de0b4f", "sighting--37188a97-120a-4a1e-9f40-e065d512717f", "sighting--1107015b-9bbc-42b4-95a7-f0e2561407bf", "sighting--26d57f88-b809-45e0-b9d7-e46aae45c6ae", "sighting--5e72d001-b4b8-49fe-8178-2147cd8161c9", "sighting--ed4478eb-cff2-42dc-ba2f-490d93e4a379", "sighting--07ce0b2f-eb96-44cb-9d37-f7aa395d0f02", "sighting--d10c5c68-1755-4d17-bc96-5c093f4c4adf", "sighting--994ab8c1-cb31-4114-8863-38c407aa2205", "sighting--5a1a00c9-a3eb-4bf2-93c8-e8c11ef95479", "sighting--bcffaa5d-27f6-41a5-9934-2c877d3aac75", "sighting--2917dbf3-f2c6-4b93-9674-1b9667141547", "sighting--df142704-beb6-4b96-a668-3e9777b02d86", "sighting--47619272-1b60-4616-a9f3-8fcbb5210fac", "sighting--5cea487d-b875-4d89-84e9-1c5aacb5e042", "sighting--8db0af18-74fc-404b-bea2-0fa1a155e72d", "sighting--d5d0daea-e9ef-4303-b0ee-478318a708fa", "sighting--454021fe-a076-4b5c-a2f8-d71efc521a6c", "sighting--5d6dcff0-2596-49f6-bbe8-4fa3f451da9e", "sighting--ee6c968e-926d-4896-8247-8d67a7696f2a", "sighting--e1f4d335-fd93-435a-8d1d-03dbb7563b07", "sighting--a4a24a00-37fc-435d-abfa-6fc629a52fa0", "sighting--54e52b08-f8a8-4f17-be2e-73fb3ac484d6", "sighting--55148405-265e-401c-b691-c5276629b214", "sighting--dcec44ab-5cb7-4d9c-80e3-39491c4f876b", "sighting--4f828f29-4294-41b7-bd39-baf7c0e9626c", "sighting--0272a0bd-b48a-4a63-ba8c-25505252343e", "sighting--847f6ade-8675-4251-aaf4-47d6c535749b", "sighting--b7c86321-f241-4f03-9e8b-0ff6f9f64581", "sighting--ad2dbcfc-9051-468b-9938-4a6df81355c4", "sighting--668539eb-976a-458e-875c-11e38f214b49", "sighting--45a02b40-03ee-40d8-8634-72aa8175fb82", "sighting--070d6647-1f66-4d0c-8aaa-7aa73b671757", "sighting--d5e1416f-38b2-442a-8381-412df3f537a0", "sighting--2294b304-4138-4868-80e8-39accd6d1fa4", "sighting--218ed1e4-31fa-448d-9900-f5046c495366", "sighting--2da7ef67-40ee-42d4-9c49-2968633249c0", "sighting--4e70f6c7-a8f0-4c34-8f58-5c20173e59b5", "sighting--8a03bde4-ab0c-43b3-8f56-6a0527509d90", "sighting--dfe8a556-2fdc-44f1-8e5b-0b2dfc1b45c4", "sighting--c1c2fd5a-e2a4-4521-ba1c-dc07ffb6ae8e", "sighting--8748e58a-2879-466d-9c98-bba96cc1f51c", "sighting--bed1c8d4-b7b8-42c8-9e82-b82cc49848c5", "sighting--1c86a8cb-f5f4-41c7-b83a-6d5a8de3dfec", "sighting--76843814-84d7-4b33-96fd-50da8ed3732e", "sighting--18226b3d-f72d-4530-8ce8-9f2831296c2e", "sighting--3079ffaf-de33-445d-8eb8-191f0cc4b518", "sighting--c08b82c3-92c4-46bc-abe9-70bb35fc3f39", "sighting--c2aa7d06-0be4-4679-90b8-e00b76825687", "sighting--cd8a7d59-12de-4087-85c0-b1b0188efa0d", "sighting--54b35f84-f7fc-4ca5-8830-0d0afa58d439", "sighting--86fdedd2-00a3-4220-9018-1ec20cac5d5e", "sighting--3dabc663-aa8b-4603-bd01-95d659fc243a", "sighting--e97fae85-f5ca-429c-b73a-e99495da927e", "sighting--e555b987-3b77-4a45-acb0-dca42e3ceda0", "sighting--2b6c806e-f298-4fee-9b40-cafeecb1ce35", "sighting--56d04519-8eee-4e60-a2c1-8bf619f65fb1", "sighting--0e9c54f1-590a-43be-b458-419a52b75722", "sighting--4194bb2b-229e-4503-9c81-83a31fd61e6a", "sighting--928286c6-a5ba-475d-b5f5-5e834f7b6624", "sighting--a94e6129-e110-4568-a41c-3b6b15e196b6", "sighting--80853fe5-12d9-46ac-a150-ea52a80b612a", "sighting--b41fc392-2b79-4a0f-b123-9a8b81ee9f8e", "sighting--01e60e51-dc81-4f07-9c12-6a6e65252e1e", "sighting--018e954f-8e98-4ff1-bbaa-560c69441e88", "sighting--d007b462-c49c-4789-9bdc-07662c3f41ce", "sighting--a3bd9b38-761e-456f-9146-fd5638a9161b", "sighting--d8da7fae-38b8-49fc-835d-0c43e1482b0c", "sighting--3ed3b7e0-5a6c-4061-8a65-66c2ddcf9bf7", "sighting--6e08b701-5b92-4df4-be0b-c896264e9df6", "sighting--cc9e7673-04e3-47c5-8bef-ae246b04c2d0", "sighting--cb5e8731-a798-4ef8-8f34-f0d2d975b49b", "sighting--92aa753f-d6e9-4f40-9c26-7a1336e3f056", "sighting--f6751696-068c-473c-836a-f9cdf013ba14", "sighting--5e52e2bb-7c2d-4826-baf7-313b6f7c6b11", "sighting--176e5103-20c7-411e-a8e2-c6582e34050b", "sighting--6b9c6e88-8ec9-4409-af9c-a8c1a8672951", "sighting--49ca5752-1fa1-4f01-89c1-e0f2891c186a", "sighting--5d8850c1-4cc0-4758-90a0-986f99835f96", "sighting--f974d310-43a7-42af-85f3-ae32bbab6e21", "sighting--e2b67311-c4f4-40ca-9936-76fbf088312a", "sighting--cf3572d8-7dfa-40d6-8569-339080fc8eb2", "sighting--990c64d4-8bb8-4493-9214-2b47804cb2ae", "sighting--04c62758-58e3-4132-89ea-2a87a823eeb6", "sighting--64041e7a-d4ff-4060-8555-3e1eb4e3da98", "sighting--79886243-b409-44bb-aa2f-10dbaf4da519", "sighting--77d7fe10-80f8-49c5-9a8f-48d8eeca3a4d", "sighting--df261af8-bf34-4673-bb32-07df9d84d025", "sighting--5c9d2eb9-e1eb-4161-ad37-816127f937ef", "sighting--c4e1d6f0-1719-472e-aeff-26d0d637a7aa", "sighting--1b28ccb9-75f1-482a-8ca6-1ef32c8e6754", "sighting--915ab798-f14e-4763-bc76-ff00eeea33a7", "sighting--f604dfe5-1af2-4812-8b1a-d38bb5d139fa", "sighting--e4a470f0-e3e0-415d-a36e-c1b8a3b6012a", "sighting--15046ae0-79ec-4010-9bac-8eddb1d7735d", "sighting--14ca6bd2-4434-4822-8444-b49a773ab849", "sighting--50d2dfe7-8eed-4424-9269-59ff2859b79a", "sighting--5c0cbf5e-393a-49e8-96ea-212e6912bca5", "sighting--afcff3ac-af22-4d50-81b3-659f13005f29", "sighting--d00898f2-fadd-4b59-bb03-d288f37323ff", "sighting--f451654f-98de-46b0-8664-f6c4ce8ffd35", "sighting--16d0600e-d191-44dc-9e21-81d5b7f04b52", "sighting--3ce6ef3f-ce6c-4d9d-89d3-dc3e9e3963ed", "sighting--b937dac8-c296-45c9-92d1-5e7ef3d1a686", "sighting--6155103b-57a3-4d38-a3ab-029a31d85c86", "sighting--ed6ccc10-f7a7-4053-8c87-4d995f7c42b4", "sighting--1f0af875-06f4-4595-991a-4647647e5f8c", "sighting--426cdcf1-55e1-4f77-8a76-184397610b8c", "sighting--600e620a-4e1d-40e8-968f-6f8ec51260ed", "sighting--c0fdb7a7-2e9b-40fb-9df8-b8d7ef7c5fad", "sighting--c7b19657-2149-4b67-aeaa-ab25ac69a8d7", "sighting--1e08d504-a129-4b91-aa75-233517fd4ca6", "sighting--cdfc020b-3736-496a-9891-0c806beb0f58", "sighting--b38fc50c-fcad-472e-bf66-03c192ae7228", "sighting--692d1bca-027c-45a3-8722-0c8f2e5ccaf9", "sighting--b2a9f6ab-ffb9-402c-8b88-3e05d56f0493", "sighting--afe5b159-2be5-4610-b097-3b4c7a118ccb", "sighting--21471c74-3c0a-40f9-b31d-1d1c800f28b4", "sighting--ee7d8bb7-dc11-4f41-bd93-57d928898506", "sighting--5d9d49cf-fb20-42a3-8f8f-bf2fb801ab74", "sighting--dca42f90-97ad-432e-9e91-413b160a5e93", "sighting--d1904fc2-52b9-40a9-b407-8dc56ab286c0", "sighting--4a93e442-fc4c-4f7f-b216-95bd6f688558", "sighting--9039a24a-05fd-4c83-92be-df3cf077480a", "sighting--23f6fc1c-6fed-4ee7-869a-2df974a8fca6", "sighting--f25afea2-568b-46ad-8aa6-1b9f08b91f48", "sighting--1e8d5bd8-b82b-4743-90e4-1de75be4e614", "sighting--64b9a71b-67f6-40b0-ada3-12b4eb81373d", "sighting--fd372e1f-fa2c-47be-97f6-e528ef98389b", "sighting--415e0929-22ba-423e-8523-781189919951", "sighting--8dadf1fe-6480-4343-adf4-32d9174598b9", "sighting--ff51e22e-257e-4bd6-8c59-f67a5d6c3fb6", "sighting--3e5124b9-8287-4e46-964a-dc961e71a245", "sighting--f4b130cf-7847-472c-bec4-9b2adde584e3", "sighting--b5c85ac8-b736-47c0-a989-1f93e837c2b8", "sighting--0ecce0e0-7836-4690-b5d5-5598da2cb5ca", "sighting--ee39a2d4-bd73-4503-be2d-8ffe1d1ec234", "sighting--d4260696-482f-45e4-9f4a-bfa2c876c9c0", "sighting--2b84d4a4-7c08-4e56-ba6f-390b0ebe4d0e", "sighting--1166791b-3c62-4f68-b6d0-224c059c6b44", "sighting--59f7c362-7b2e-4706-b70f-e433c33d17fa", "sighting--c7652795-43ca-49bc-a194-bf27bf108129", "sighting--157da64a-ab96-46cb-b4a6-397d4827ea6c", "sighting--11901834-edff-47ac-913b-08df5f8f494d", "sighting--f49cf2f4-a8d6-4003-81cd-1fdfd6dd0705", "sighting--dda756fb-4cfe-415d-b80e-768494ed712c", "sighting--1ea92e00-82dc-459c-b44f-b8372ff50a00", "sighting--c624c71e-cb27-4449-ba64-d90d11ac5d08", "sighting--b7fbbe41-3384-466c-9008-97f06fe76d75", "sighting--7d9fc886-3208-4f98-a8c7-e8128baa49c6", "sighting--f7ddff08-4d16-450c-80fe-498e7bb61ec8", "sighting--00a9e0bc-21e5-4f18-9840-94a762136397", "sighting--c70eed78-2a84-435a-b01b-f5ebeb2e78c5", "sighting--8e146b53-d9f4-4db3-84a3-67da048cd1db", "sighting--b7f5f69c-77d3-4cb3-b249-648d05e36577", "sighting--47cf51f8-3e6d-403b-8aa2-686b8312b1e9", "sighting--0b96e293-0909-4b45-9369-8425c8678579", "sighting--616bcbbc-5526-4f49-9623-7ec78243cb11", "sighting--67ec19bf-723d-46f3-97cd-05c77d638f7e", "sighting--be557716-39a3-4f3e-93eb-1c2ee7cfb1da", "sighting--286a5678-d0fc-43a7-b29e-4addc12b8edc", "sighting--86ffbf72-43df-4edb-bf8f-54e6e2a55330", "sighting--1525b8f6-3559-4cf3-9740-25dfb2beadb8", "sighting--4d6f300f-d096-44eb-a4f0-faee79ed323b", "sighting--66fb6d24-8d9e-4786-8bbe-0986e91c030b", "sighting--6f9611f6-7203-42af-962e-2a7d3bbdc46f", "sighting--5d9fe751-dd03-44c4-bcff-a5db0c38662b", "sighting--9c6175fc-669f-4e3d-a34a-a71b56795c81", "sighting--a5575a99-c25d-4257-bb1f-f1944669a09c", "sighting--585e1c91-2ab7-4e30-8556-ff0453c08e94", "sighting--9b62b900-a0d9-437b-be9b-053d43f7f02d", "sighting--7e12cadc-92b1-4097-a599-5794fcdc4358", "sighting--4c5c6d5d-0729-41d8-9b01-2a2513335632", "sighting--84064a66-c88e-4f4f-889a-8447fe035574", "sighting--6f261f97-6300-424d-a4a5-1617bcbef748", "sighting--40c0b397-56a2-410b-97e1-f34d9cbf31e9", "sighting--be1095e6-0440-4f74-8e9a-631b29373863", "sighting--58597b89-c41e-46f7-b654-bb1e7e834144", "sighting--bfb51533-beb6-415a-9abb-26ee1afe2a08", "sighting--f1d78042-6bee-481d-bd1e-252f0c68a40e", "sighting--29da013e-056d-424c-8c3a-0d78b82043d2", "sighting--4b17e124-f619-436d-855a-b2d990e262d4", "sighting--8fd1eca8-1f0f-4241-a3f6-1316ad110a4f", "sighting--dfa68af8-f29f-4f64-b896-db7723c38825", "sighting--304e6e8a-1ee0-45af-9b8d-b96d51b34010", "sighting--8be79a18-e092-46fb-b069-029d36025bd6", "sighting--e46f36a6-b384-4da3-831c-52b09487196a", "sighting--48ddc728-907b-460f-9234-452d210fbdf9", "sighting--86d60378-2957-4d51-a155-621568a3eed1", "sighting--bd0a27e1-27bc-4fe2-ba89-1dd3e69b9bf4", "sighting--ab1444b0-1cda-4f67-8906-cd145e1c3b6d", "sighting--2fe83a0f-023e-44e1-a7b5-eaff056e2c4e", "sighting--5e13827c-db5e-4980-9e7c-a6445c01c63a", "sighting--6dd4a894-224f-4178-b864-7a935b41ce5b", "sighting--9240eb8f-1d42-4acb-9a1d-6cdaf5cc2206", "sighting--dadeb596-e12d-4c4e-8471-5d70d9c502ed", "sighting--94a977bb-0774-4c04-98a0-be283cd28da9", "sighting--43674f56-b7b8-4faf-955d-9a79d6e53ce0", "sighting--7ac8b26f-91b4-4e51-a46c-77433859e713", "sighting--d2fd7497-e1bf-4842-b038-6886d0fa576e", "sighting--63fbb869-7882-4f42-a397-298273b38c4d", "sighting--9578f942-e44e-427c-ad2b-31738e190a2b", "sighting--f754115b-fdff-4b4a-907b-4adc71d6a1fa", "sighting--d976e838-f1a6-488a-8aa3-aa7826e3981a", "sighting--04c2c159-1f45-4557-8e97-8c5b85544620", "sighting--0aa9d85f-50b6-4a76-8b23-1dd03decd0d9", "sighting--efbf1c4d-738d-42f4-80f8-af1924901ebd", "sighting--4120bf86-8e11-40fe-868b-6de56977d876", "sighting--d3a66761-6cfd-4dbb-9165-0c1fa906cca6", "sighting--4a5e8bd0-fa33-42c4-8257-dee15404372f", "sighting--2893f7ff-f594-4db6-8ca1-0be59d4c958e", "sighting--d3da73d3-846f-40d3-b9f6-18dc7412ea52", "sighting--098a6daa-1e4f-400e-888a-7779137bed68", "sighting--7f5ef64d-6d52-42ad-a430-87a7227136f7", "sighting--90f76a50-7a68-4dc1-af93-94d75f4728d5", "sighting--e741d621-bcd2-48cd-957f-d7e3a1a17ba0", "sighting--1f11c153-9a2f-4d62-8fb1-eb5a3f6bb6e4", "sighting--fb15e74b-45ca-4801-917a-d3c3c047a1fe", "sighting--5634b5f3-9be3-4829-97f2-8add59db1937", "sighting--239a13a5-0a34-4ee4-8700-bd787bb7b4b6", "sighting--0409b337-5c27-471d-ba8c-15dfe1464bf4", "sighting--3ca26a04-df17-4441-89cd-f0744f68337e", "sighting--68e92b43-046a-45c7-bd2e-85e739179ef2", "sighting--94a27743-461c-4eba-be85-884621edf7fe", "sighting--7593d3bf-37f8-4169-8bec-37f70d607c9a", "sighting--b4364dae-1693-4f73-a2f4-9b9465f3b28b", "sighting--0aafd4c6-10ea-42a2-836b-3e0f92636828", "sighting--cee16de8-ff9c-491e-b119-4899d1ba9aff", "sighting--54d15f1d-82bd-44da-85d2-156c7ab06a88", "sighting--fedd54e5-34b6-4e7f-91ff-a92e715630ee", "sighting--8020d1db-773e-4571-aed4-a89a91842b86", "sighting--a8513e2a-7e4c-489f-918f-98b7a55301c9", "sighting--bab7ea2a-5bba-43d9-8392-1139aaf61f14", "sighting--2664b2f2-b559-4200-a5cc-e3d080fb7d73", "sighting--0688efa5-e31e-4f00-a0b9-0ac020a98bd3", "sighting--f2b8678b-e0e7-4452-96d9-5eec5e3e5ed9", "sighting--dc51ce91-c44e-4102-8ee3-bceb4e99cf05", "sighting--daab4259-fd19-40ee-bc2a-3ef939570464", "sighting--4b347511-e48b-420e-91ed-04614232a307", "sighting--59a75e73-666a-4236-968a-1d746d9f655e", "sighting--2223fff0-0e5c-4eb8-b8b2-1142c6694999", "sighting--a2bd48cd-214d-460c-9ef2-a6f342970415", "sighting--4a3ee940-a646-4273-b359-2db3e42ecc53", "sighting--0e4a1707-5216-4e93-a6de-4c29b147afd0", "sighting--545334dc-cbd6-446c-9683-0b654b0a1c2a", "sighting--e4c4eff3-06f8-4e15-93ac-48e125051db1", "sighting--da4a8d5f-804f-4b3a-a4dc-f561ae811ab9", "sighting--332f9bc3-314a-4c19-9a5f-2e2399bdb42c", "sighting--a3a3c028-5aaf-4cf9-81d6-aeacd70dcc9c", "sighting--c8b29fbf-62a4-4a89-86cc-65373cbda09e", "sighting--f12cf017-9120-492f-8260-198d45e58749", "sighting--57191e2a-1f27-4f30-b7e5-089ef128a27c", "sighting--45c7cbf8-b474-4b0b-8284-a477bedc4ca4", "sighting--bd94e325-27a4-47c9-8a65-a0a2b62d5ff6", "sighting--6068b9b6-e4bd-4e60-9068-dba85b3d6918", "sighting--e724cb42-bc60-4f3a-bd8b-ca5e863ea704", "sighting--d9825cf2-2f98-40a5-a8d5-9ac8864259dc", "sighting--b95a45fe-8032-4765-8a38-fe44c374985f", "sighting--74c0a4cc-c2a9-409f-9443-a5115f3e6e00", "sighting--a606274d-5b0f-4288-be29-09059fbb0113", "sighting--59257b39-a7b7-4b56-ba97-4b820e4b256f", "sighting--797bc7c4-22dc-4bd0-8ea3-fa1c9d70ad2f", "sighting--fe7ffd73-3b9e-4b71-a354-16203922f54f", "sighting--efb09054-e2f1-4133-a173-a82418a451bd", "sighting--a8d1eede-0852-443f-9a60-c311ea1d3cbc", "sighting--bbffb650-8987-4035-a06c-d8d33be4de1b", "sighting--0feda619-ec6f-4595-9903-b2147beaf996", "sighting--d2210c04-805a-4559-86f1-5c228c6b3111", "sighting--ecbbac4b-0bb2-4beb-add4-705a4ec65c50", "sighting--08946a4a-5422-4fe2-b6fb-33c0bcd60a44", "sighting--11e759c3-f493-49d6-9bb9-af21f650596f", "sighting--6d8d8421-76c7-40c3-b2ad-b4eaa35950a4", "sighting--b2c32da1-cfac-4998-b010-90845ba854ed", "sighting--edc10fce-ceb3-405b-aa8f-41db8bcab3b9", "sighting--06ab7e69-ba83-45fe-9320-6ea5a26e3dc0", "sighting--f977b872-5600-41a5-9096-7a6a997334d3", "sighting--677f68e6-390c-4464-8183-6948e2595b95", "sighting--4d80827a-abec-4f31-b090-43844891fea6", "sighting--ec1c3e40-b00a-413b-a448-ef96669ac937", "sighting--485057fa-befb-4b1d-a205-cdb56e07ccab", "sighting--8f7badb4-58c3-4e6a-9781-a6cb811a0fb9", "sighting--217d5852-4fb3-4ba7-94ff-6a0f3d010eca", "sighting--6085fc30-2c79-4857-a040-e771c52e1598", "sighting--d0b16e00-c455-498f-b390-253632df97b3", "sighting--f8d78fa4-645b-4729-981e-6290090f2934", "sighting--ac1aba0b-3cb8-45f5-bf88-324520fa3247", "sighting--7242abc1-823b-4bde-b19a-b0c38445e4f3", "sighting--01e4c74c-bf68-438c-a610-f002b09d960c", "sighting--9620d305-c8c7-42bb-a536-e888d152c3ae", "sighting--ce295981-490d-4856-9f67-10bb48c90a0a", "sighting--12d2ac91-651c-45ba-8e87-a3c4443ab68e", "sighting--145a9e85-6b13-4653-a8d4-0e490cd03acc", "sighting--31d3346e-9040-4348-a7a7-97d3470eb89a", "sighting--ef377be7-5a89-4489-a8ef-0dd0c1ea8b97", "sighting--d9267258-4b89-4a5c-a948-555754e662d3", "sighting--01e21db8-f467-489c-b565-2ec927a7de09", "sighting--063df0fa-6ddf-4088-8205-259573772992", "sighting--e812fece-1679-4e81-80de-30049a22d98c", "sighting--b7c5b751-d9f5-4100-bc8d-e7b238b4675a", "sighting--c7fc434a-bf5c-4a85-8e47-e8ab5779986b", "sighting--86c78e56-0757-4177-9de4-0bc3fed9ca81", "sighting--5723464e-1f09-421f-9630-8f3eb81af39d", "sighting--ac923d2e-a8ee-47d6-8acb-6e80c0cbcb3d", "sighting--2048b1b0-0686-4bb3-963b-0fe640ab1950", "sighting--7c09dcba-4c28-4682-bc72-7c7ca61bc738", "sighting--6e68829a-41db-49e4-b638-069680f30f66", "sighting--174c4809-3b30-4413-91ef-4d6184f10602", "sighting--a159a688-1128-4a71-b45a-ce695158d6a7", "sighting--8eb53898-4c68-4f39-b327-513c5aeb5479", "sighting--033e4287-f399-4fd3-90ba-7dfb705fc900", "sighting--b574fb09-a679-420d-a32c-7bda77d92b75", "sighting--8503f857-b3bc-4034-a1c1-a7206e72365a", "sighting--074139b4-b22f-4faa-a9c1-f03024bc6831", "sighting--104cc205-fccd-4bde-8510-cd181fa862d4", "sighting--b65a33ad-dce3-445e-86e5-c992b8de43ee", "sighting--c7024786-0ace-4b68-98c9-ca798f10f7e5", "sighting--d923c3cf-b0bc-4e03-a3a7-c2aa96ebd0bf", "sighting--412b15d3-7bac-41ab-9a38-6ded25ae9dda", "sighting--a9042e8f-1f68-48ff-b687-ce52d1f4e6ed", "sighting--c2355b21-b645-4dac-b872-044acadc9a20", "sighting--a56cea6a-4031-455c-9cdd-c37fb3049aed", "sighting--f92b7c61-97e4-451b-8fb7-a763ad98de1a", "sighting--02be4b48-6ec6-474e-a349-8dc9ba7133ca", "sighting--2b9e0ecb-48e9-4d50-8672-8f65b67872e4", "sighting--ab279a30-e245-4f4e-83c4-4411028d8949", "sighting--5979d318-2c9e-4c06-8cef-4ca670339ca1", "sighting--54663470-9921-4037-92f1-4ac42a5667e0", "sighting--14c6bd67-cc52-4cc3-8478-04a49ccbb4a3", "sighting--c062c4c5-392e-4b5d-a080-e5ea0b3a702e", "sighting--bf018ba1-582c-4177-b158-12747391ea7a", "sighting--bac3debd-65c3-4a39-b8ff-7df3804eb6a0", "sighting--4acbce39-1678-4de7-961e-22c25bf74bc6", "sighting--ca41826f-9f38-48dd-ae10-9e4075e23e89", "sighting--66364d75-747e-4ee1-b57d-8a5900e1a528", "sighting--934a3a45-fba8-40a5-8e3d-a2a419ef4b05", "sighting--fcc2a487-ea41-4fc8-ade9-f59a2b36a46a", "sighting--1b68d3e4-691c-4805-84c9-47199843659f", "sighting--4bed0d28-7641-4624-8683-14c4b99f7066", "sighting--74e33373-1b9b-4f79-b36f-a9174ded91ef", "sighting--c37a8fc3-d73a-46e5-88ee-b993f4897502", "sighting--64a191da-8bdd-483b-9d45-fa2ab432b266", "sighting--4dd22783-8129-4e8e-ba88-1d64239a22d4", "sighting--67bc98a9-29df-45ad-b52b-2df2e84818ca", "sighting--f72b2799-fb83-4e11-b725-894610573bda", "sighting--c31ed4f9-a56e-45fb-a293-447a109a197a", "sighting--e46e81a1-9f52-4c61-bf58-691cf6b4fd44", "sighting--c66ca286-baac-4830-9a8c-a68b3c2caedf", "sighting--41d30d16-9627-4350-8243-aba84762edab", "sighting--bbb8199c-820c-49c7-af81-4a348ebfdd95", "sighting--45928282-ea1a-4aa9-9204-61364d77247c", "sighting--7d874f96-620d-4017-a27a-0675f972449f", "sighting--98ce4408-0e29-44d9-823e-af542b384498", "sighting--b7a16573-8a62-423f-98c0-1b9dec2e93bc", "sighting--5a925a75-29ba-4f59-89a5-9a460b262287", "sighting--40ae1cc0-7ac8-4261-92fb-ca7108ea7d12", "sighting--8e562776-49a7-49f7-ae57-bbfd7c43a853", "sighting--3f293b9b-2984-4d5a-8fe9-55a4f6b4ad40", "sighting--ab2239c0-af38-4632-9bba-ee3ab4106f49", "sighting--34567494-9536-40de-b644-d6e80b17a151", "sighting--37370d61-aa40-4e0a-b31b-4ec939586f90", "sighting--db69e37a-e17c-48ca-b5f8-3450d963debe", "sighting--4afe615b-ebf0-4ca6-a98f-453ba45daa8d", "sighting--6836e551-be11-4529-93ed-37824a3691f0", "sighting--91140a0d-22d7-42a2-b833-13294b253711", "sighting--957f8f5a-ab47-4901-a14e-6dcf4063b013", "sighting--57878be9-a459-4e90-ae5b-ee5e287e5543", "sighting--3be0955e-fa51-4c50-9e44-b608647f134b", "sighting--958fbeb7-546d-478d-94a7-bfe0c62937e0", "sighting--a9ee4407-1e5b-47d0-9d9e-a04f725ac5fe", "sighting--31349556-200a-483a-b6ed-92b25ebf0dd2", "sighting--45f17265-75fa-47c8-a9ca-59682ed1b331", "sighting--6ad2ff48-757d-4ebb-a481-2bd73d4d1bff", "sighting--2faba6ab-b9f6-4ade-a04a-c999c8539d28", "sighting--94256b14-63f1-4775-90e2-b59e36ead403", "sighting--5a872564-c764-48ae-88ca-42cdd96eed2b", "sighting--8736ab74-1c10-4f94-98aa-31ee3b461b1d", "sighting--499ebbf3-a437-46e6-95f9-0176f2ae40ba", "sighting--f2e8483e-6d5d-4ec8-bbcc-57f5f6224915", "sighting--fa718caf-ff65-4a72-8bd1-e6ca6796593c", "sighting--5147ab43-d3bc-46c3-80ad-521f60a93b5c", "sighting--569d8963-2f11-4393-9efb-eddb04ba8152", "sighting--2270afb0-be86-4cef-9599-e69d413f5d28", "sighting--1e91c399-e731-44d1-84e5-ba854f904f7c", "sighting--fc3944be-dde4-4b57-a81b-7b3f26e6dec4", "sighting--7f10eef7-bf44-44b7-abe7-f1ee75231750", "sighting--e4f23801-6a93-46f9-b5d5-ca278f85753e", "sighting--ba692cf4-42e5-4651-bba8-8442d15a4c56", "sighting--3f4d6d9f-de69-4d2c-9fb1-c8030c47cee3", "sighting--f9b75f48-143d-4300-a35c-1f478edd03ae", "sighting--3f749bad-f4ad-4282-827f-8a09a628b974", "sighting--424fe77f-cc7c-417c-93c4-50ec0b76c059", "sighting--9fc311da-03bb-4e83-96f1-d19d793bbcb4", "sighting--65da1d71-6390-432d-8848-383f6de17353", "sighting--863d0efc-405c-4eb9-86c6-e09e9230b9a5", "sighting--a54a3bf1-a2fd-491b-af4f-c7b6a006c8d2", "sighting--311de982-c9b0-4673-a24d-0576a462c375", "sighting--a1e6a85b-ecca-48fc-a581-937d8123bfd7", "sighting--024e7d61-6fa1-4017-b05d-45a469637a3d", "sighting--00137223-690a-4c8a-85a9-2af20c471d49", "sighting--6318dcc6-cf8d-4f40-ab1a-2532236334b8", "sighting--d7776a48-0970-4e1d-a05c-f08a4dd75ed7", "sighting--23621e15-045f-4cda-94ae-ded49fae1e60", "sighting--3add42e7-98a6-4bff-a304-5806d388ab58", "sighting--ff52ab80-77e2-4f77-b768-bd6d2d3e9449", "sighting--9218411a-bf09-41f5-9911-fd7e83cfdc8a", "sighting--08e03890-585d-414b-b530-bccf37ea3d73", "sighting--157f9ef1-85c6-4891-8f8b-34c3c1047e45", "sighting--559b7b1b-0538-42bc-afd2-ee33b2ef67ce", "sighting--b3c454ad-6b07-48be-9810-a164b6f25e61", "sighting--987e745d-8f75-48d6-961b-069de2e90702", "sighting--625ce3b9-50cd-476a-8d11-d95514c44bf3", "sighting--c3b65a8b-63c8-49e6-9160-c0f375243895", "sighting--07f6b381-a1d2-43b3-b7d8-10973ebd70e2", "sighting--cb8999b3-32cf-4114-ad09-ffc9d14679e9", "sighting--0a9b2a01-a16a-4865-a703-a771bc4bfca4", "sighting--3f56e893-9d06-41b1-8b3f-07558499cefd", "sighting--e987d4d5-1926-4020-af9e-f3eca6002266", "sighting--e1c0dd17-32be-4293-b61a-b80da3126e22", "sighting--e6767d8a-895c-4469-b8d7-c54134a86f85", "sighting--78939863-7404-4c4a-a25d-774d586f67d7", "sighting--ae590933-2cde-4fba-b49e-ae7a571ca2ad", "sighting--0d345567-41b3-496d-b056-4814b02e4271", "sighting--494e18ad-4867-49be-ba31-cb83144c3c81", "sighting--939bb382-d401-4011-95e9-b4c75eaf1b0a", "sighting--51a4bcfd-998f-4c45-a0d9-afe53b09648e", "sighting--54bf738e-a9b3-413e-9dc1-8eb28a7f7a1f", "sighting--57537966-501c-4f76-b20c-ccf73f153814", "sighting--480c2a7b-2c55-4715-982f-01466cbe8157", "sighting--002726df-0b23-47b3-abc4-d58621384b40", "sighting--9c0cec8d-68a8-4801-84ce-ba80892000e7", "sighting--84a4036e-b6a8-4bac-b37f-b597c8962301", "sighting--f6c370ce-b14b-4c07-9ab2-627272cbde51", "sighting--7441657d-2017-4313-b148-856ebcbe7de5", "sighting--17acf5e4-995a-4a7e-a7c5-22b699446c56", "sighting--cd277f69-36b3-46bc-87a3-749dea9644e8", "sighting--ff0fa354-1029-442b-bdf1-2bd2da6201f3", "sighting--3924f905-b290-4577-876a-93a8694cacb4", "sighting--4dff78a8-dda4-4ef0-9b37-4db8c0d355c3", "sighting--d6da9081-bae2-417f-a9dd-45106d099c79", "sighting--00bbdddb-94de-4c72-92b2-e4d3b9e5af21", "sighting--92c0f5d7-afdc-4cd0-ad14-3f2107873b6b", "sighting--5d479cd9-e6b8-4575-9568-4f608853f285", "sighting--a4595528-8b8c-4833-a752-e56e72e962bc", "sighting--ca4e0773-2bcf-44cd-80c3-66f7b8dcc862", "sighting--046ab05f-8d85-443e-9099-424a5245f979", "sighting--84117571-2763-4bda-a30c-159efa748902", "sighting--922f6a46-2b96-4a39-9218-685be71ff514", "sighting--0809e992-e724-4233-bd0b-25c15748c337", "sighting--51592f4a-6c9e-47bb-962b-5eeecbea550e", "sighting--d2df0117-19de-4ecb-9495-0cc70d559a75", "sighting--a9dec8d2-6ed1-4747-a669-bfc70ba64e7c", "sighting--5e8d79e6-d132-44c5-8c25-5309cdffe4c7", "sighting--38287518-a997-4d87-baf2-5006ecee3402", "sighting--eeff0e94-b16c-4e27-84e2-5853a022938b", "sighting--0c27105f-938c-45ae-b384-20bdaebeb1e5", "sighting--0aacf1f1-4250-4efd-a800-5b252ff32134", "sighting--48cbff4d-d70c-4b8c-beed-fd2ac9c7549b", "sighting--ecfda0bf-f1c1-4787-9281-cc5664cf39fb", "sighting--11650cd3-7e6b-4c2f-ab25-71cc02fe4ed8", "sighting--9b7aad25-8474-45f4-89ff-db5d1518d6d2", "sighting--8f28a3f5-13f6-4ee6-ada4-cd6f664c96c7", "sighting--69236c8d-5196-4673-8e6f-f2d75d1c4252", "sighting--fa631e34-f150-41b5-b5c6-bb06b0026a2d", "sighting--9834bd2b-6597-4a65-8b42-22d531f3c27a", "sighting--f2f2de5c-0179-4ba9-b3cd-7728e02e3a57", "sighting--46d8bc09-b91c-4e89-8450-1aafa2336a2f", "sighting--3e9e5f3a-bc04-462a-a94a-d8200322ffd8", "sighting--f062f6c8-de3e-4530-8d97-3a12efa37eb1", "sighting--ee15804f-636d-4d19-a498-9e5ebc0e2136", "sighting--2a1ef03f-1313-4d44-bf2d-5ca1884ea7a5", "sighting--20055649-afb4-43d3-bfc6-ea4cfdce8285", "sighting--7775d811-9ad1-4798-a3e8-6de9a6c1941a", "sighting--d82ed35a-b00d-4feb-bcc6-73945b548bab", "sighting--3d4a9293-8163-4f23-9a64-d400c8f5f957", "sighting--ec0eef37-eadb-44c1-ad7b-9cc97e608883", "sighting--b87ad573-bcd9-40ef-9af1-a70910cec52f", "sighting--6c57e4bf-e277-4396-9783-83781755ca45", "sighting--d47834ea-d56c-43b5-b6de-8df9db3abc8d", "sighting--60c3556d-6d84-4105-bb20-2c60b23de3bb", "sighting--fc65b187-5cb9-409a-a0fd-cf9425c3d497", "sighting--3ae52576-5d0d-404c-9c27-feb54e42d463", "sighting--0e28f42c-8ccf-4a33-9624-7d18047185ff", "sighting--0281029b-c869-4a8f-a24c-f591a791abcd", "sighting--132fa5fb-c2ef-4810-aaf7-5bff4332f10e", "sighting--894a6cb3-e89d-437c-9df0-abef9ceba63f", "sighting--4c174124-7849-4b29-8ad4-25355c84e91a", "sighting--6fb52625-8453-4631-87e9-2942a8db8d26", "sighting--d7f05215-fd37-4ff2-83b7-43840760bb22", "sighting--9b2958b6-35e1-4531-9c13-22bad8996919", "sighting--e9128ccf-0fcf-440f-b6ba-f9de95a221ab", "sighting--86ce0a20-4c91-480d-8d3a-84c8dcf08ca3", "sighting--541db14a-ad7e-4050-910e-2623f0271e3f", "sighting--7a8d2fa4-bdcf-4a88-8d80-bf7ef088b9c7", "sighting--babdf73e-baee-468b-baf6-d6ad9faf5ad7", "sighting--2109da8d-f1fb-473d-b477-b438ad12318b", "sighting--24d9dba3-a053-43b5-9f44-834ed9f961a7", "sighting--8aafe326-61f2-4d96-abfc-ca19147381cd", "sighting--d0ad9abf-ec39-4b05-8cf7-6173bb60574c", "sighting--ad5348ac-62e8-4be9-b885-b303ba7bfdbc", "sighting--ea17ad19-6944-4664-bd52-c0f0c9d15623", "sighting--ad4d49e2-d9bc-4c3f-a5d5-09344b7a9876", "sighting--abe51bab-6f96-4a14-819f-87f1d828c629", "sighting--8e0fd066-ba43-4f00-a73b-09953a400bfc", "sighting--6f2e0b24-468c-4649-8b78-318c3faa1098", "sighting--3cb6ec44-7f02-4d67-8238-2f563109725e", "sighting--2b09e42e-7fdd-41a4-9803-37503fbceda9", "sighting--29ef2104-d050-4cd6-9085-1770ede05588", "sighting--8da70b9f-c4ce-42cf-bf69-40fb605474cf", "sighting--1fc99b9a-6832-44b6-a941-734f68fed008", "sighting--e2e86645-4a1b-4ba6-a315-7ccbdd3830e7", "sighting--69df1bc1-c5e8-44f6-a58e-aec3f7773789", "sighting--b9f9a982-cf5a-4ddb-9687-d8b184389d1f", "sighting--a0093920-b628-4b08-b6e2-a8f336c80955", "sighting--efd6bacd-1948-462d-8794-e971f58d7e71", "sighting--58ce84b4-5fa7-4856-9979-0621d186cbd4", "sighting--03a1cc4c-9fcc-4900-a118-b13346884d3d", "sighting--2c65ce80-d8b4-466a-b11d-39af55b3c0c6", "sighting--accedb96-f449-4632-acfe-3a0623c04704", "sighting--305c41ef-7645-4e67-8ca9-672a2d9ac47e", "sighting--c12311b2-abb3-4916-8afb-452b5dcdb75a", "sighting--19ebd01e-a002-4917-bcc8-37957b2b4711", "sighting--06c03a52-cc73-49a0-8932-8fc333059323", "sighting--4f5f9664-9381-449c-9bb4-c2bf128b2469", "sighting--bc3c6ae8-3fab-4425-a582-78efe304601b", "sighting--9b9bd91f-11b3-496a-a836-02d9362f1ec7", "sighting--44c385e9-3b33-4b6c-ad4e-498ea81511c0", "sighting--b43f242d-03cc-478c-90b5-e3f3a7ff1c87", "sighting--576f8778-e7cd-4b8c-b2a6-5d70b4bf355a", "sighting--1762d39a-ca0b-40ae-82d5-364988d17742", "sighting--c83e8c75-f307-45e1-810b-23917389f300", "sighting--0186a420-0ec9-48a8-9fd9-99d61d7e43e5", "sighting--abc35020-7c19-4f3e-9189-81f67df6a71d", "sighting--94918674-93a6-4b76-8a1a-d450591c6341", "sighting--fcec49ed-12c6-46c9-bd51-6b720a693f4f", "sighting--294e99d8-b75a-4779-8be1-ba7b574a4415", "sighting--a5272027-df12-439e-bf3c-c0cc7f052d5e", "sighting--83738dcc-00f8-4d0a-96ac-227dc35cb03c", "sighting--cca11618-6e70-4394-977f-71b9ea881021", "sighting--52d16fd9-8a01-46e7-b1f8-cb7925b4afcf", "sighting--920b79da-cbcd-49ff-bade-94f874deb727", "sighting--95083e18-dab5-4c20-a10d-02fd5d0cc8fd", "sighting--9f7e268c-fce5-4a9e-b48b-8edfa6daee94", "sighting--eadf418c-26c3-4005-99b4-bc1190606e63", "sighting--871ce35f-a34c-4fa1-8ef9-d059a3398979", "sighting--b48216b3-341c-42f4-9ca7-6ca41344c3c6", "sighting--7ce74912-0465-4280-88f6-d64232c860ce", "sighting--25beaedb-6b88-40f6-b266-f6820d8ed571", "sighting--772eb985-101b-49a3-be4f-82c281a14cb3", "sighting--06cda43d-4219-4e80-958d-44a0a4b83e6a", "sighting--2a333eb6-1127-41f0-835b-bb0cbb526cc6", "sighting--814bd59e-2694-4205-a980-16027381b6ec", "sighting--e3a900ff-3e79-4777-9663-3ef110681ba0", "sighting--085795bd-cd23-4609-bc10-1b03f468a7cb", "sighting--a9d3e6ab-bb8c-4b6d-b03e-a9bab153b339", "sighting--faf7b28f-9e3b-4c2b-b851-dda73f9e820d", "sighting--dfaf0865-aef8-4d92-838f-587e4fb940aa", "sighting--b5233a68-04ff-4b60-9b81-24adafe4d9cc", "sighting--3807aca8-016b-4e81-8bcc-19a935bca703", "sighting--fb40f976-be27-4eac-a8e1-e9ff52517235", "sighting--622d4f25-f5bf-47b1-a7d6-78789f47025d", "sighting--25caca98-f2f8-4d54-a0e9-36b926d96580", "sighting--7802ee97-915d-4589-bef8-793e79497062", "sighting--4abae181-fae4-408c-a94c-15953a40660a", "sighting--656fa133-647c-41c0-aee7-a5167dffb952", "sighting--b75e13f4-dca5-4e10-8689-1f36f8776e8e", "sighting--2daa16f4-00c0-4645-93d1-800ab5543446", "sighting--4b914ac0-c43c-4595-8748-8507becf9c8c", "sighting--fd2e849d-6e95-4d55-9036-2379534ff9b1", "sighting--ce342003-3791-45fe-bdff-14837392b240", "sighting--a1781d99-9daf-4877-ac64-77bd94badfea", "sighting--1c8ede85-8a4a-4790-be75-4b29f9b2c035", "sighting--ab6ecbf9-0f5c-4fad-93f1-a0a525a8a322", "sighting--8e42c2e5-ef13-4b77-9877-5022179ca0aa", "sighting--9953bd0e-0134-46ce-89e0-a9f5f78f4169", "sighting--38d134c8-9ed9-4b18-95bf-6c8ca2c4246c", "sighting--ed7d859d-af3c-4d8e-846d-55be0776646c", "sighting--7ab8ff2e-bb13-44b8-8b5b-32af554ad7a0", "sighting--c6d73210-0ecb-47ac-a1c2-3c1b196ff09e", "sighting--f66c9d14-b0e7-4266-8180-efe9c75a8b7f", "sighting--155ca9a0-61b3-492c-91b7-4001fe203b78", "sighting--eaa69835-69c4-4fd3-8d4c-73fc4a3d818b", "sighting--3f5f5ecb-4706-4c64-b231-d829eb222c57", "sighting--6b686397-0484-417a-a51e-e6f73891880c", "sighting--850fbb16-2f4c-4c25-aa19-92a5988bdd70", "sighting--0771a7a1-1455-4c51-b60c-80e8e8096b30", "sighting--f133045c-206b-4c58-add7-883f4ff00a70", "sighting--7c7868f0-27eb-4991-ac17-a2151719a016", "sighting--bdab4d6b-e78d-4483-848f-5f3252e30117", "sighting--6ca7114f-d4a4-4374-aa55-44aa7b56239d", "sighting--3200e3b5-ab75-4305-aab5-2d289d471858", "sighting--14b2d56a-9cc3-4b24-ae8e-54a73fa8c918", "sighting--18f81075-d750-43db-904e-c56f569c1afa", "sighting--896c65bd-f47f-4176-962a-a2aebe54e270", "sighting--f27f9679-3951-44a8-b748-fb7b5f6e772a", "sighting--665d03e6-a16f-4fb9-942b-74b80c559ba2", "sighting--f29f4645-2ee6-4dbc-a863-aea29b4c2df8", "sighting--c974f49e-f797-4fd0-9140-d4404e02d6e6", "sighting--643773ef-4a30-449f-913f-e7671b074a6b", "sighting--12d4726a-3909-4e34-b1f9-db602bc240b5", "sighting--22c9626d-5038-40ae-8adf-f9f375886289", "sighting--a836ba81-a90b-4c04-8351-489e6dfc6448", "sighting--50418b99-9585-4a62-afaa-d75028dad1ff", "sighting--53e559db-ea2f-475f-b424-e22b27d0ca59", "sighting--fe9f1451-4629-46a4-b48c-b42e7bc69ec8", "sighting--eed2039a-e2a7-4947-8580-2d7138802d54", "sighting--8155dae5-0431-4d36-9400-55e6248d6a6b", "sighting--983f2fd8-04f4-42c9-a86a-8f80922c7865", "sighting--03ac289c-7bee-46e3-8c76-c04eaf824e2a", "sighting--d271cc3a-7982-47cc-9595-b9f3bfbe470f", "sighting--8a9ad493-b91f-4661-80de-604e474b4c4d", "sighting--4d9a9b9d-4222-4265-a1db-22224fdae153", "sighting--567cfe05-ae4b-4dca-817b-ccb08cd9295f", "sighting--5d93d0c6-c22d-4842-9ce8-12cce317b4d4", "sighting--9f0493a2-65e2-4430-aef0-949836eef3b2", "sighting--891f2e4f-65e6-4352-8fa3-bd3739b5c5cc", "sighting--84f9ceb1-2c8e-4689-ba90-dcc93083d2ba", "sighting--ed405d8c-63ca-4a35-97a3-7e33d788872b", "sighting--e902f964-dd35-4cca-b629-13225cb3c0de", "sighting--472a7d91-ee7e-49d0-bf88-1c5b7f505847", "sighting--9aee51de-83e3-47d3-b4da-a8d8def28845", "sighting--52331ba9-5434-43af-b2b2-60f12f27b2c0", "sighting--21dabf59-4890-4af1-9db2-480a7be049e2", "sighting--fd66c09f-aba4-42ea-8632-6271a3fff196", "sighting--a75a3524-01ed-45e8-8e86-ff304eeed6e4", "sighting--8ccbd3c1-6849-47c6-9ef2-829c82e10479", "sighting--84e2f099-099f-4757-ad88-1ec04325180e", "sighting--730805a1-fbb9-4a48-be9f-fdfe1b1e3f23", "sighting--cc8f8cdf-d2ab-4879-a316-b74b5c011aa7", "sighting--c9870321-3e4e-4de2-98c3-58d3cac892e7", "sighting--a3c40860-c20c-4a46-812f-2dd9a1480ef7", "sighting--90935b4f-fcaf-4744-9625-613d93d7d67b", "sighting--59627491-2e42-44dd-8c00-403017b689a8", "sighting--06725e27-c2a3-4159-8f28-77ecc449512e", "sighting--88a0f6bb-beba-4afc-ba9e-ddab0e9a30bc", "sighting--88b26759-59c2-430a-a56f-1a88fed00f0a", "sighting--73f61a0b-393c-44be-9506-40bd6a6ea89b", "sighting--d1d99eae-fd5b-4299-bcbd-641accfc9e7e", "sighting--a35477af-1dea-4cb6-b336-b275b4b6cbb9", "sighting--fb838571-18f1-4346-87c9-718ad237b055", "sighting--87339647-d89f-4763-9a8d-70404eb2d475", "sighting--1ef3f97e-b3f4-40ac-b442-e3c4311fece3", "sighting--97d8b868-22ea-433e-9f18-d9a117d9cf77", "sighting--a796e1a4-0905-4872-89cc-65f0b5d0a364", "sighting--fcedf4bd-4ba2-49c8-a6a0-11eef987969b", "sighting--752206ec-981a-4a1a-b4fc-ccc09747cfee", "sighting--2cce78c5-8d6a-4745-9626-f4c8be550edd", "sighting--afeda67a-9108-4690-9b7f-3212e2668df0", "sighting--9a050784-2417-4187-9e1e-3afeb66fdaf2", "sighting--f8764a91-6240-4de7-9dbd-9b24e135a261", "sighting--ddb33a92-7443-4887-9f37-486051f9f144", "sighting--34bff9be-710e-4a84-9866-2f43cdaf6ef9", "sighting--36c36aa4-5514-46eb-8634-5afbc2370fd1", "sighting--24be122d-c167-44c3-967b-49715aadd28b", "sighting--0e495022-fdf3-4b97-9895-9bbdcf431c16", "sighting--c81ac716-8088-46ef-8f51-7b67b7996dd2", "sighting--73d263a1-4f91-42ef-80ae-4baf693b40b0", "sighting--8098a809-20c5-4cd0-a134-1dd8b05532cb", "sighting--672926cc-edf4-4537-bb9e-ea0c7ff87bff", "sighting--b3ff2642-4e21-4adb-bc5b-c60be9f34649", "sighting--26a56cca-06cc-4c0f-a1c2-8cdbae328566", "sighting--6b8d82cf-e431-4775-bfef-20b9b435dd15", "sighting--5c491421-9fb7-4a11-a0df-ec66fa301494", "sighting--08ee7923-88b7-4c57-9dab-7c171f29fd0b", "sighting--79bce86d-5c98-4766-83bd-f3c7db913af1", "sighting--1cead703-a070-49a5-95d0-4c03044c87f9", "sighting--a4feb9ff-c28d-4c93-8778-05f255607b47", "sighting--5b396cbc-3fb4-4b52-9cd3-750bed1798cd", "sighting--e368445d-eac6-442b-b4ac-0e2fc384719d", "sighting--3cabbd3f-bf02-45af-a092-494fc1595df6", "sighting--32fc43cb-11e6-4bf9-90bb-615a6f0195a3", "sighting--e730db24-fcee-4338-b577-0ff95969bf8d", "sighting--7c642abf-cb58-4b55-b50b-dc903153db25", "sighting--d08c563d-d861-4f7b-88f7-2fbd24cd0384", "sighting--732674c8-a073-4a00-ac9e-6e723a741dba", "sighting--4bb5332d-7c64-43be-9042-bfdf15c9ddf1", "sighting--cb8d8104-9a68-4dc5-8c4b-4b0f2b6ce142", "sighting--56f21e32-2ede-4059-8ee0-17cfecc09eef", "sighting--0fceee92-4950-4f2e-b153-cf5e314fe3e8", "sighting--738ce174-8fc4-4da2-bfda-090aa6d0f467", "sighting--f866636d-2b37-434d-a7ae-4925e05f8350", "sighting--1028995e-8e23-4a47-ae2f-b2c244e17991", "sighting--affbcc9a-a459-4523-9c25-2011a1f7f521", "sighting--6ff40b38-469f-48d8-942f-f40b3641a834", "sighting--2eea5b1f-adf3-4185-8557-e59a600803c6", "sighting--cda4592b-2513-475e-997a-478769834eff", "sighting--c42acce0-8b9d-4948-852a-2eb32a1e5bd0", "sighting--42444084-cebc-4e17-bdd1-a2f9630bd26d", "sighting--8e3fd8d1-8ac6-4755-82f9-cc253c43683b", "sighting--d409c1d4-0abe-4c4a-ab44-73ff4985f7e1", "sighting--fa37b8ed-9446-466e-9535-e4d30c3a12be", "sighting--12a3da9d-6371-4a39-95af-eaf701e941bd", "sighting--f1bf85ec-b16a-44b7-b102-b3a24a35761b", "sighting--ae491b6b-57a5-4086-a5f5-5de71b1b2b45", "sighting--5ae167f1-16c6-4b1e-a1dd-b6d1e585fbe7", "sighting--d443a0eb-5953-42a7-be8d-a8bbfb9d8c6f", "sighting--53b88978-8c71-4300-8766-5dedd23274a5", "sighting--4f8a72b9-9262-4ae3-9831-d5776778b850", "sighting--084597c4-64fa-41fd-8987-530a83a4045f", "sighting--39a135e7-3968-4572-a5c8-33b0074c261a", "sighting--2b0d7e42-d8ea-42c0-9214-b85bf3bde48f", "sighting--62ed94c4-8b09-4c3a-b7a2-bd1df4ac7ac7", "sighting--745b8d3b-bee0-4ea0-a69c-cd82633f94b6", "sighting--af185cd5-ea70-499f-a079-2a8eb08f47bd", "sighting--e8a6d0ef-2852-4476-93c0-d52d7aedcc64", "sighting--3ce91472-4c6c-4696-9be5-07bce8e1d07f", "sighting--98aa0d18-bfa0-4088-bae7-c6a1ffa0341e", "sighting--527f116e-e401-4503-acb1-6ea012e39ccf", "sighting--194119a5-b16a-406d-af85-53817999c4fb", "sighting--90005e26-df25-4970-945e-83670c04584f", "sighting--cf4f8d3a-17d4-4252-9ea2-69a71805959f", "sighting--86b395ef-a819-4350-b81f-4599d985585f", "sighting--3026af7d-052d-4941-9ff9-8bd94f2e660d", "sighting--3101902f-b976-4bd0-974f-668149089573", "sighting--dca0e362-b0a6-4f09-812d-de71d1d8355d", "sighting--e167caae-814c-40d5-af46-e58facc564e6", "sighting--78c853a2-3999-4bd3-b8d8-a2ac83766e1a", "sighting--16bdaa33-6b52-476b-94a9-78a70ab5704c", "sighting--50b1fd79-d785-43e8-af6d-c40268d4218a", "sighting--8fd651ff-6fc1-4c08-bb52-9291f1099c1d", "sighting--277168c4-e931-4f0a-a9fe-4c96cfa09e40", "sighting--7fc8d44c-b607-4c28-be41-3c82efb9e1e4", "sighting--10a97b36-31ff-418f-a882-2ece7f792224", "sighting--63d3e6fc-b483-42e4-890f-2aec71e40573", "sighting--5861efe2-9104-42b4-aced-f85c4509efbe", "sighting--05c39bfa-b515-4ec8-ac58-c2039600cea2", "sighting--f977da5b-246d-4db3-a60b-0d8bb68cf041", "sighting--87d3b05f-7756-44e4-8bbe-1cf544f432b8", "sighting--9781ea0e-d163-4321-ba40-2dd04965c0d9", "sighting--8e497c36-0d88-446b-8ad8-1bf0e7b514d2", "sighting--310bf3b4-723c-44a8-b4c2-c967a15ae628", "sighting--a0351757-d512-4adf-89f2-8d89dce5f55f", "sighting--5198ea00-1f0c-4ce4-9a99-0ac746ae3a0d", "sighting--dea3e6eb-a34d-485e-bb6b-2014d6277894", "sighting--eb8c1099-3a6b-45eb-b57a-da1701b98e13", "sighting--e497d438-e24f-4696-a70e-0f50e4a94e52", "sighting--097240e0-6325-4adb-a1da-546ae5506f71", "sighting--ddcbd52e-9606-455b-a5bf-64c285d88439", "sighting--8018ba77-f587-44a0-825d-c06bf7de64b9", "sighting--7118f629-a6ff-475b-9ad4-7de6c0d71c1e", "sighting--e4effdc4-3a8f-440d-ba93-e885a3b2da1e", "sighting--e6a18eec-4d09-42ec-b1f4-1308af5ede8c", "sighting--07c62184-a95c-4b5f-961b-7b727b8303ab", "sighting--799cb454-6062-42e0-99c2-f0cfd3a9cf05", "sighting--b6da3087-63a9-48d7-8be7-dcb7c64d896a", "sighting--e62a0545-8df8-4677-86c2-ea1eabc83bf4", "sighting--e8314dee-0992-461b-ad36-954dddaba120", "sighting--7b0b4a5d-8d04-4696-af9e-e448a2e40ad4", "sighting--59aea547-fa9b-46e8-878b-b10c770af067", "sighting--36089282-9653-4b78-a9e9-d33b43c0fd90", "sighting--74aa3ce9-0c9d-428f-aebf-b3361a7394c7", "sighting--e35879a2-f27b-47d4-abad-d33aa7793181", "sighting--a42d0ca2-3257-43b3-bdc0-2e4a2b983aac", "sighting--bea6907f-b3e3-4d6a-b6f7-bb58bab31a77", "sighting--85beb661-e1d4-4f5a-b46c-faa566829fd4", "sighting--c29ec301-7c74-4612-a695-190e8833de30", "sighting--e35aecf4-770b-4a9b-9e02-5548779e66fe", "sighting--f3610224-6ace-47ac-b137-c7371f2251d9", "sighting--9f5d1eef-1d9e-4128-af1a-52dc3099cae7", "sighting--fb3e369f-4a28-42d5-b4c2-1f74f975cb67", "sighting--e1c45858-a21c-4106-9855-cbfa26fb7e21", "sighting--fd9a3599-66e1-4598-b4fa-6015bc5fee25", "sighting--8b3884cd-1e4b-4988-a61a-19d9a9f188d5", "sighting--5a53adc1-7849-4d83-be79-cfcaa0dfa9cc", "sighting--ebbf2254-f637-444e-9792-0ba84361a2ef", "sighting--7b40ad80-6106-4cd1-afaa-bd60af59bd84", "sighting--719bd9d0-666e-4760-bfbc-21a0ec6353f0", "sighting--28119505-3836-4628-9d96-63a7194d0067", "sighting--c6f1fe07-7df2-45ec-95ca-8e770e061979", "sighting--94979c29-dbfb-4ff7-8c0e-273c4c2c8752", "sighting--14ab1f25-378c-4906-a41e-86e7239514e9", "sighting--2c5fd8ae-8fe8-4386-827f-a96236788a52", "sighting--90098a6c-27d4-49da-ada1-1d4d00d6b011", "sighting--dd82db5c-4916-4341-92e5-d52b1fd7f6e4", "sighting--a7cad16f-d2d4-41f8-badc-cd6e428433af", "sighting--4e63d71f-6e0b-4003-8963-8e69953b09c3", "sighting--b033ea1f-8912-445d-9432-4bcec71d0ed0", "sighting--144ed653-e00b-4463-ab80-e0cfa29d9667", "sighting--65eec9b6-72cd-4596-851e-d6da82902e16", "sighting--00c258de-610a-4a00-9187-037c56da8ffc", "sighting--9810a39b-771f-4b6e-b778-993d3cbcaa73", "sighting--4b67315e-20a5-4627-b908-40f04074e89b", "sighting--a5a99591-490c-43f9-8efb-9b4663691efd", "sighting--529336dd-7dd4-40b2-b1a3-00e456ef4208", "sighting--9bbd78f4-6288-467c-81f7-671009760980", "sighting--5fae005f-f6c7-4311-9834-7a4b49f5a8e5", "sighting--b2f24160-2d13-4e91-93e5-a878f7fcef9c", "sighting--d074ddfa-59d7-412d-9ee5-7e4c16681a2d", "sighting--d8bdef41-b3b4-4440-8695-fb2bacd51575", "sighting--62387ced-6f85-4747-9dbd-f2b083e5f7a2", "sighting--8f7a7f9a-3976-4026-8a57-872e34e5012c", "sighting--ca72a845-b371-4365-a151-8aec8fed947f", "sighting--e6d86f5c-0098-4a51-9efc-e1a4e2f3dcd3", "sighting--510efd1a-ac97-4c51-83cd-3630b00e46dd", "sighting--3c5290ac-c443-4a1b-afcb-5bab7282d301", "sighting--b09b10c4-c0a5-4e3b-93d0-b27ad2f29d7a", "sighting--184da4b0-474e-4633-a682-5bdc172e871f", "sighting--9212048c-322a-4035-90fc-10ef370accdc", "sighting--b338322c-63cd-4def-8908-160123554596", "sighting--64d4b8f9-f2bf-46e6-a4fb-499ea491aa70", "sighting--4c46ad48-a7ca-400c-af18-e86f951dc5b8", "sighting--0cb34ba4-2943-4772-88b2-be37eaa50462", "sighting--9365ec81-ec4b-403d-8589-52b36fb64b78", "sighting--c9f414db-c7fe-44cf-a077-df1a2a6b4d63", "sighting--09354d57-dc8a-44d1-9fc7-2cf97201f343", "sighting--b6a76d76-56f8-4e76-9987-24b78d962a0e", "sighting--d59fe9a4-c24a-4f4c-aea9-6a4df53b82f5", "sighting--768824e5-1dd9-4a8d-aa82-7f19f266adc4", "sighting--8daf6df9-c9e0-4f46-88a2-e0cc12bc9a84", "sighting--b44873ca-b900-4dd5-b48a-0bc53f43443d", "sighting--2c4be263-438c-4ddb-adcf-1034945b6857", "sighting--1df75544-2961-4c59-8a07-ea71e6066386", "sighting--270e4b48-c0ab-4d63-9ba5-563300eb7596", "sighting--25eceb1c-c145-4fb4-8654-5fb626d4f5f0", "sighting--9ccf5caf-5426-411b-9e70-62cdac650b28", "sighting--0045ca88-7803-496f-a24f-31fba9d1f9f6", "sighting--cdf77aab-23cc-4cec-a680-80924b9c0e77", "sighting--1ac20d9e-e912-4cf4-bb5b-4d4a0038eabc", "sighting--faa56d54-03ee-441c-ba00-3c794d62d0ab", "sighting--455683c8-cee9-4c58-946d-0d2af3df670a", "sighting--b742590b-f711-4c49-8da9-61439043e9c2", "sighting--a153f0bc-555f-425f-8984-72a0a3c230c1", "sighting--19267534-f3df-49cf-84cf-56554e095855", "sighting--11282931-1127-4468-ab8f-33e5f155b33f", "sighting--8749ba06-4489-437c-973c-cebb104a1383", "sighting--7c236763-5afe-4095-b068-b6d8a934db46", "sighting--a52890e6-7ad0-422f-91c4-288574097d7d", "sighting--5a76493c-d2f2-413e-8888-ef9416a0f5fc", "sighting--3631e35a-6540-4f42-bfdf-74ba114c574f", "sighting--b3346f3b-0112-45c4-b4e2-896d7d035a56", "sighting--bea1fc71-1b79-4584-b053-f7d9e68b70f1", "sighting--9bb9e9bd-30ac-48b5-bb99-f3a5505e9464", "sighting--7af64d75-2f4f-4626-b8b1-a27625489ec9", "sighting--8117af22-4bc4-411f-9c12-b50360854050", "sighting--b5e5c82d-8b2e-4787-9c15-1d1a06786069", "sighting--14f728d1-8080-41c1-9822-beee242a2f48", "sighting--f2a0500a-368f-4205-b1e4-d15240d335ae", "sighting--719a9339-bd78-40ef-b77f-ec1c9ad106ee", "sighting--8fc3eaa3-27de-44d5-b69a-e511f3e7ea32", "sighting--ff53cd6e-4bef-4706-94dc-5a454396672e", "sighting--f9c04b5e-6e11-4dfa-958a-77a81424f9dd", "sighting--018babb1-7013-4907-a687-d70fa747b4cd", "sighting--ba6907a4-2709-401a-a70e-2de704f4d7dd", "sighting--170bbf34-3525-489a-964c-b6e98fd96d92", "sighting--9246c809-9773-4873-956a-1b081768097f", "sighting--1c6c4d95-3eef-4f6b-bf84-ac1693162f60", "sighting--e65f87e5-695f-4be6-b5c9-1342ff0cb4a4", "sighting--4feaf6da-71d0-4f3a-a6ea-85fcb0d79d1f", "sighting--3449a841-2da6-4422-911b-242868f6eecf", "sighting--79c1b24b-0cac-4167-8093-9f7fe65c4e94", "sighting--b62dc13e-9db2-4994-a32f-59a91260a342", "sighting--b5d18d48-11c8-4772-9951-9f27cf979399", "sighting--ce72f637-8136-4be3-bbed-eda4c490bd8e", "sighting--140500a6-244b-4358-b5d1-9c7c008c4f6c", "sighting--7c7b13da-a13b-435b-b753-67827d03facb", "sighting--e5b27691-1c98-4afe-bb5a-eed8954240ba", "sighting--57af899f-67d0-4457-af8d-c5207686d706", "sighting--a80ae030-80e5-4c84-a029-3e96d539944d", "sighting--9c4ef5d9-74d2-4657-ae6f-3ad02b39a1ae", "sighting--779f82cc-189d-426b-b4e2-1d801f014578", "sighting--937bfb32-52b8-491b-83d0-115ec72e5a8a", "sighting--bc9703a4-bd59-4bc1-85df-c2daa568957a", "sighting--130e9dca-6fa0-4d7e-adf1-43989237d518", "sighting--8bbce01f-997f-4875-81fd-a69a1141e83e", "sighting--3961f63f-d505-45a9-9696-7a5a1c63beb3", "sighting--01eb7e23-68d7-4095-b5ac-59018dd6ddec", "sighting--6732c62a-262b-4ce8-8a8f-3b17e7392028", "sighting--4441e2ba-fb31-46cd-a18d-2ec738dc3c00", "sighting--ab8c9702-892b-42c2-9b21-efd7571eb8f8", "sighting--ad710da5-e4ae-4424-9457-a9eea9fa9bb5", "sighting--fdf4d9fc-3c04-42d9-8de0-db31f5d5f979", "sighting--667c2609-983f-4886-9ad0-84381b35120c", "sighting--28ffd3ab-0e29-4694-82c8-611b245ec971", "sighting--79e3d92d-4a95-4417-ba7a-185a83e2d063", "sighting--a2f6d7c2-e945-4076-b926-62978a1d9878", "sighting--72d2c180-34f6-40c8-b276-8acf2d831bd1", "sighting--32af136f-ec29-44f5-8bf5-e92d109b5209", "sighting--c2716378-8c88-44f2-8452-6f573d0447e7", "sighting--d0ef3b27-3d81-4561-803b-bebb69367cf4", "sighting--89ef3d8f-e75a-4d01-bb2f-003f1e35ea4d", "sighting--6f826bc3-cf7e-4540-84ce-fa901f6afa77", "sighting--200b8ff1-bda0-4ccd-8d73-9f3db6483d2f", "sighting--863c247d-4eec-4d26-aaee-b52b007916d8", "sighting--2b7c6f65-a103-4e77-84bd-29beb382c1e8", "sighting--36312778-bcc1-4852-a50a-4faee3c98b96", "sighting--62d35e91-9606-48cd-b4fa-60e65160209d", "sighting--f2df8e4b-1369-4157-ac1c-7ad2868be21c", "sighting--8f0badcd-4bd1-475d-b337-9df22b72724d", "sighting--ba516658-f662-4c1f-8b21-933ba408ee99", "sighting--213bf8e8-2bf7-4a73-8fd8-45fd78562fea", "sighting--18ee2179-96d1-4399-9aa0-bc80c677588f", "sighting--898beb38-fb47-43c7-aac4-5ca65ad576e5", "sighting--a6238165-686b-4291-a1c8-ce28258806bf", "sighting--e324a7a4-70b6-47ad-83cb-c871ef27bc06", "sighting--d56b3686-0b31-4d8f-8b2f-22111b0c6d7f", "sighting--09a7ac1a-56a8-4bec-974b-028e04ae1922", "sighting--892e54e0-9699-4b34-bfbb-a9e028cda484", "sighting--fa335295-96c2-4d10-a306-ae046c5ad61a", "sighting--63e69628-bed0-47fa-8570-903446150f83", "sighting--9e9d7f21-926d-469e-89f5-cc66b9dcccb9", "sighting--fcb512a6-615d-4ca4-be31-382769e35016", "sighting--a48d01b9-1c1f-4f7a-a090-d168cfde3c11", "sighting--e877d50f-5834-452f-b3e8-038f56b0aa62", "sighting--d0af6a5c-63ca-4ccc-b989-c970f82ba253", "sighting--e40b6dd7-703b-4e8a-9c42-4b953645f5cc", "sighting--6e967107-64ed-4e6f-af8e-a34786838c3e", "sighting--a2e6de74-c9a5-4ef6-a69d-3caa67fa30d3", "sighting--fc1278ba-434d-41ad-8cba-ea98bd59cf9e", "sighting--b0f3c720-a633-43ad-be35-e443f122c29d", "sighting--410b3069-3983-44fa-ba46-d37caafe2f76", "sighting--154714af-15e8-4513-8c76-f7dbfeafb310", "sighting--8170310b-fa75-45d2-b8af-f373f8d532e4", "sighting--28d7accc-4ad1-4d24-a42e-1ba1a88e5086", "sighting--d77e65a8-eaf1-40f4-981d-1bb7b0680ece", "sighting--8eb25d4b-522e-4e99-b393-37c7119a8277", "sighting--212071fa-20a0-444e-a88c-978e174a44e4", "sighting--e82ca31c-df63-42ac-8e21-85dc4f8a47e7", "sighting--b6ecd68e-ad60-40a3-9bf6-efa3ebb751e5", "sighting--3e5e028c-e524-45f1-b399-e99e7a4d55b2", "sighting--a527e149-fd95-448b-87fd-0dcc124a09c0", "sighting--c1cf5b63-42f0-4a1f-ba39-c35faaddac68", "sighting--2e115222-f619-4b80-be54-c135cb23ac59", "sighting--aa801ac3-ed1a-423c-b3c3-7573acf1aaac", "sighting--1a481b9a-6881-4567-9c1b-7ae13230b4cc", "sighting--cc697ea5-c6da-4cbc-80d1-dbe86be8d153", "sighting--e60b8b69-b158-48dd-9cc2-33acbd4fc1b7", "sighting--5dd7f03d-47de-4945-99e7-b66aebb024ab", "sighting--1387a6ec-c72d-4158-b98a-ec754ec6605a", "sighting--b5b20fb7-6c4d-4998-aa53-eac93a997718", "sighting--d3e49173-2837-40b7-834d-687ef3d9bc9e", "sighting--73b9f556-f4c0-404a-8832-fab2adb0bddf", "sighting--1d5d720f-a917-4c0f-a83a-addf3771bdfa", "sighting--2a59aa48-bfd1-493e-afa6-c981cb657146", "sighting--c3b84f46-98b2-43ea-9968-c025133d274c", "sighting--7431ef41-ea49-4754-8f0f-030faf34ca11", "sighting--7450d78f-0556-4f58-a761-51a12161aadf", "sighting--1ac98069-925e-4575-a2fc-23e3066d354a", "sighting--af694609-6d11-4d1c-a074-cf8b678a9850", "sighting--79506ec6-420b-4137-b45c-81ad036ad929", "sighting--713cbb48-5907-4b39-ace3-9ba6527a0052", "sighting--3a3e086e-b2b1-47bf-bd93-be6a343fd67f", "sighting--488f2045-4ae1-4c2e-a9c7-4029a7fa97af", "sighting--76452294-6ce1-412f-a5c5-5e5e1dbbbb1d", "sighting--022ca68b-1811-47af-9f55-355455c677a9", "sighting--4b63decb-aa62-496e-a5d7-2531c28c22f0", "sighting--15dda715-12e5-48a2-beb5-369b0e3d1f6c", "sighting--e9909b94-bad7-4e57-8e6d-218f034bdba1", "sighting--b9b04029-6a63-4b14-91f2-74afdb499c7f", "sighting--66fdce2c-9861-4852-959c-d26a3febad25", "sighting--b0a20e3f-ad17-4770-a8b7-964b1053a633", "sighting--202b983d-0edd-4e0d-883f-52be856acc4a", "sighting--6d115451-3762-4fc4-aba9-18688096d24a", "sighting--74d66f45-d224-4b5f-a82e-cf0f33fa4b3f", "sighting--4392c40f-99c2-4df6-b751-fa46bbcdac4b", "sighting--c9418bfd-d3bb-44ae-b007-1bbcec63a206", "sighting--726c7333-5ddd-4d3f-bbd8-674b4f3e8e5e", "sighting--d39cdcf2-014f-4454-98ba-4fde3872f9e7", "sighting--3ec6c660-b290-4cfb-8b71-cc67df7a6f21", "sighting--e9a21c6f-db0c-4d89-b8c6-975307c40eaa", "sighting--05e58507-22a1-42c7-8b02-88549d611c37", "sighting--d6c6bec6-93e6-4cdb-b5d7-c2e9efe28e92", "sighting--9c5b5777-cd20-4d44-b6f4-18d2b5dc451f", "sighting--53ea2b4d-eb85-4bf0-9550-ec0c3becfc04", "sighting--5812f853-e93f-480f-9508-566e1d3f7a67", "sighting--f0455cb7-4fc5-4d87-b4f2-89a6852b5059", "sighting--e71fa54d-db8a-4402-93a9-28e26b2ef2f5", "sighting--00be8862-d87e-4199-880c-a70993310d8f", "sighting--d0d0e760-6157-49e7-b906-27c85a55d5a7", "sighting--cf9cfc7d-d9e9-40cb-8284-d103d3082b7a", "sighting--8d889212-6f9d-4be2-9fa2-f7dc28f8216e", "sighting--f9ab238f-c8b4-41ab-b289-fa3f8134f23e", "sighting--48b8bdeb-5f38-49ff-8e7a-bc0bedde0407", "sighting--bf00fe4f-d9e7-4735-8786-be6ce34e6bbf", "sighting--b2813c9d-5920-461b-9ba1-590de5bf752c", "sighting--634670d0-1a0a-469c-b72b-99530aae4d2c", "sighting--5b9140bd-a562-41d0-8d35-37a3de7a3ee9", "sighting--65960214-fb59-4a14-8e6a-b3fcafd6ea3e", "sighting--d73a9389-6e4c-41cd-aa8f-ec53f20006fa", "sighting--a88a34de-f8ff-4170-bfcb-d441ed434996", "sighting--b3972ed0-bbc7-4db2-8c6b-739b0fd0bff3", "sighting--a7165081-61a5-4f89-8440-f1c7a09f60bc", "sighting--8734f86d-d8f4-49f9-89c5-243b28bbc8ed", "sighting--0840bed6-8d40-40e4-a003-652a08cfb3bd", "sighting--824c42a0-cf36-41c2-b964-84da72509997", "sighting--e8b7a01b-4b59-4d01-bd16-cd9bfa6a3c5c", "sighting--2b510ead-e322-4086-9417-f9c919ac76a4", "sighting--944574a3-9cbc-4411-9182-af25649457d4", "sighting--eafa55db-b740-476e-9d4a-ac140e977772", "sighting--23794afc-a2e1-4377-8ec1-038331d27ebf", "sighting--85dfc63d-0cc7-4f98-b2dc-c800c5565795", "sighting--05aaf326-b8ca-4f24-946d-0ca70744171a", "sighting--4cff9423-d793-42eb-9005-a3765e573346", "sighting--53929dd2-dc3f-4c78-8322-edf65c9c1151", "sighting--beadc647-96a9-4f0d-a075-9f7446a7b7b3", "sighting--51a70540-8586-4be0-9a9a-77ffca84f412", "sighting--820f8015-9985-48be-8e27-fd4b424cbc08", "sighting--fd8d3025-8969-4eb8-84cf-529da48dc8b3", "sighting--c4f68664-e2ef-42e1-91db-35536cc3f8b2", "sighting--053f1636-4fcc-4214-bbe3-801b0ad3765c", "sighting--02d6df72-43f3-46c5-89cd-7f748c50e30d", "sighting--5c040775-3287-42a9-89e9-b5900519fc74", "sighting--88c8928f-1051-4e8f-b3f4-1359358dec5a", "sighting--5a94dc53-3528-48fa-af2f-b6fdb15f1ad0", "sighting--8b0b889a-8ded-431d-a11f-f052dda5f683", "sighting--7bed2186-abc5-4f6b-865b-79dac4105c64", "sighting--effb182d-568a-49cd-b62a-3c3a9ec1bfa0", "sighting--e8246f23-22f2-442f-ab89-c981d9496035", "sighting--5daa98f1-55db-4e0a-9ea7-7487233a2abf", "sighting--dc793831-ae09-4e8a-9715-1958de7b4afe", "sighting--2840ef96-db2e-4933-a216-75b69dd367ce", "sighting--eb106749-71a7-4096-903a-85f3325b0384", "sighting--6436fa08-2b81-4068-9506-d62e3be6b1a2", "sighting--8e6afdec-1754-4606-b969-fb05a9a35d79", "sighting--4742fb6e-df72-47a8-8850-12515d260090", "sighting--ae6c3959-2577-4386-a9b1-b7b7a912590e", "sighting--efdce15d-659f-4abe-9c12-a307b177e610", "sighting--57480478-63b9-451d-8c09-29b9de603c15", "sighting--6e3e8823-051d-4eb1-8cda-44d6d4315fb4", "sighting--bebc2803-18d5-4574-ac54-a29315c06077", "sighting--9631badf-7f55-4eae-a49a-6372e49aeb42", "sighting--c9224b8e-4848-4747-ab82-4b7d1439f793", "sighting--58c6d9d7-c1d4-4526-911c-42a8c7719e21", "sighting--2175fed4-619f-427d-98c6-0fd924d11ad6", "sighting--fb8468c5-32f9-44e0-91fd-818da4034b17", "sighting--7f0e1141-178b-4fa1-a866-4cf8734a7277", "sighting--4a6383a1-c061-464b-9ddc-b8ebc053715d", "sighting--b1a9d68c-1973-4521-9161-1d1e89a5e042", "sighting--2dbbdc71-9b06-4d45-9278-a3de086ab671", "sighting--f4ba6b01-6b12-4243-a7d5-4512aaa8141e", "sighting--82c307a6-84ae-42b2-9a17-b1cf2a0ebb1a", "sighting--399c5fee-02e7-4e4b-afad-2e4b1cf46bdd", "sighting--29583806-a403-44cb-b3a6-2eff41a06ced", "sighting--58617fa2-f6c1-45c8-9fd7-b270c96c7ec5", "sighting--13a03966-66d8-4f43-8311-465369824d83", "sighting--f9adfcc4-a6c1-4e85-be47-1650467a1810", "sighting--7d2e0c34-337a-438a-ae88-bceb6675e257", "sighting--7e05f3d5-7533-41ee-ba22-8fec25aaa761", "sighting--f712071f-982b-49a1-a617-db9c2c78cfd7", "sighting--02513a82-8821-4454-a7dd-f9a601e1c4a6", "sighting--8f0af799-cef4-4526-a439-8a46da6c03b3", "sighting--afe49ca7-b47f-40b1-942f-64afa67c35c4", "sighting--5f59f00d-ee7f-424b-81ce-91c2d7bf2bf9", "sighting--5e0b4ffe-a484-4b35-8218-539ca32deb0c", "sighting--93fbcdc1-2668-4705-b84e-08591026c2f5", "sighting--f43bfdc5-3ac1-459d-8d6b-5f8ea3bda8a5", "sighting--32377fef-c413-4485-be9b-0da217c48808", "sighting--58af5d76-447d-4f9c-ab88-e3070022e918", "sighting--fc09a5b0-6479-4188-b346-d4adce8d4ddf", "sighting--5daa367a-d971-4d84-8eee-aee03a802f1c", "sighting--1691540b-81cc-4a0b-a8e8-25d2625795f1", "sighting--cf1c8646-2047-43c4-b8bd-7a7d6010a046", "sighting--b1409420-7303-4752-8b9b-f08b519cca02", "sighting--c9365d4a-6c7c-4969-926c-1128af98a8c7", "sighting--0aeb1e5f-12ad-4790-a69f-f39772ad2d17", "sighting--bce44d9e-067b-4783-8a63-146a426c7775", "sighting--cd67918a-f74f-47b2-a446-63795ba22b14", "sighting--66e97306-db86-42f6-ab43-2bed8411c4b6", "sighting--dd44dfeb-1c93-4a97-948a-e19dc87da865", "sighting--f99c831e-186a-4f8e-817d-da9f0c6a6e9e", "sighting--b409a5e5-687b-46e4-bd61-786059314dcf", "sighting--1afc0559-a93c-4afa-a754-ef54957dc97d", "sighting--66f15d22-15b6-4371-b175-ab9a6e2e2b7c", "sighting--18857050-d7e7-42df-940b-454d7da1301e", "sighting--c38139ea-f986-4cc6-9734-8f917814b5d0", "sighting--fa54b1b4-cb2e-496e-abf3-89ef5043248f", "sighting--584a0cff-0988-4c3d-9913-eb9ff54b4a44", "sighting--e731d9cc-5227-4032-8d87-140e9e3dc0de", "sighting--5315c259-e468-4bec-8b44-bb3b9f4779ea", "sighting--78a10b1e-eb1f-43df-8783-6a50e6048879", "sighting--6c440bbc-77e3-4772-a2a7-1ecc1264a574", "sighting--b22c63aa-09e7-42a5-917b-08aba9f4f114", "sighting--8296224a-f3e2-42de-8fff-c2fbf476e109", "sighting--a48141d3-a4e9-4803-a661-e05f9798cf5b", "sighting--9a751498-1ecd-4580-b248-78afb6f0a9e2", "sighting--31c0cf9a-c39c-4e84-9b16-a8477bfb9fd4", "sighting--66737f8a-b65c-457d-9fb8-29b4a5a1e371", "sighting--801ba67d-2842-481c-9553-303af2935955", "sighting--6ee2304c-574c-4718-8153-4822d33fdea2", "sighting--94ec260e-1ffb-4a4c-afe5-2dc12438b160", "sighting--28218e96-dcae-4bb9-9265-a1a7d1cf0743", "sighting--8bf94728-85b7-4246-8cb2-a64308518557", "sighting--5e74c821-0229-4a8a-9ecc-302777cfb6c5", "sighting--b9f36f2e-4cd1-4cfc-b8d1-826f253328dd", "sighting--55e649b3-2b4f-4f2f-ad7c-e3da5c4e83ef", "sighting--3bbc0d61-04b8-4220-8c16-89a768bc6409", "sighting--3f48a9b9-c451-406b-98c9-6cc9822c48d1", "sighting--23a7fa9b-f250-4af1-bc21-1102b6efbb3e", "sighting--2cc9cbea-b13e-40ee-97d0-3bf217db2176", "sighting--6f995c1c-6c75-4907-8aa9-0794f9acc5c5", "sighting--8178ff69-0cff-458c-9183-17666ab26ccc", "sighting--7367019e-e85e-4f00-b751-8d55f2c8722b", "sighting--f2cd25e1-a177-49d2-a058-9eb9f1d90ad2", "sighting--a59369f4-ad2b-4bd8-a2b4-5fa6b87a00bf", "sighting--a8339c7c-483b-4776-ad05-b69144b2d1df", "sighting--4d6a44ba-f633-49e0-992e-06970870158f", "sighting--5bae35dc-2215-43c8-aa63-17bf9227a181", "sighting--a507557a-1e7c-46bb-8d5a-b701dcb20759", "sighting--6f30fc79-b0a3-439b-8aaa-d93da6a5e3b2", "sighting--8a88f2a9-8c54-436f-98b5-31443419d948", "sighting--b25644c4-87db-4bff-83c8-8e6800836d39", "sighting--9a4cf751-ba6b-473a-b14a-a496d1fc0ab6", "sighting--b4b9eafd-5ca0-476d-859c-49caa6fe7db5", "sighting--25bd9d76-284a-45bf-a736-62368f9d8a2d", "sighting--5ec84bf2-c785-41d9-82ac-45916253e8dc", "sighting--eff6fd1d-2327-4f5a-ab6d-2c0a4f536571", "sighting--906813c4-b4d2-4a9f-9a9d-3dddc43f4727", "sighting--300e6cd0-47a0-4f85-baf1-8d8a0587633b", "sighting--4e785839-71b9-4fa6-b20f-7eb331ede8bc", "sighting--276d076d-66a3-474e-93da-d427921402bb", "sighting--6187c413-265a-4912-8cd4-9e93477d21db", "sighting--b979a62b-7daf-457e-96b6-b8f7d8a3e288", "sighting--40cd73b2-af6a-42e3-b4e0-dc7400458a12", "sighting--3e71c41c-dced-4ec5-aaaa-439bcadfff7f", "sighting--9ae66ba9-3a22-45a7-9714-58f9e8ce342a", "sighting--c18d63a5-f5a0-4046-89f4-c0714f682f40", "sighting--13531a09-9960-4322-b98b-cacdc65d83c6", "sighting--bb0c1df2-24f1-4fb9-a02d-8482298cf959", "sighting--77f0aa56-d72a-4520-b6b8-2b41cee1561c", "sighting--a5d54009-facc-4c55-8a6d-5d71f877a2f5", "sighting--3e549d08-c1d9-4e9a-9257-6163d62824f0", "sighting--554c61a4-a1b4-48c3-b6d0-176b145ce746", "sighting--c7315b3c-9c3c-4dd8-9912-fc142c0192f1", "sighting--db27684e-979f-4df4-a042-2425fa411991", "sighting--75c07552-cfb4-4206-95e2-eab313b8538d", "sighting--0e0b53eb-11d1-4fa2-98f9-140a5a9b51f5", "sighting--4b38866a-d8fb-4542-9742-3edeb995f38c", "sighting--c610c792-6476-402d-a970-c083ffc1cc1f", "sighting--2819de40-5875-4765-8c8b-ed40889dd697", "sighting--23b1f610-74f4-479f-82d9-964d9c1906ff", "sighting--486e8502-efef-4c88-81ec-83bee3efbcc8", "sighting--01d3932b-8b75-453c-9ce8-90288f1c17af", "sighting--22d4b051-d299-4b61-80f6-affe9239a4dd", "sighting--f9ba652c-3cd9-43ba-bfac-b748abd4e471", "sighting--70a76a69-d00b-45c7-a5be-b2061ba20eb3", "sighting--efcbfcf5-1722-4313-ba41-48282a2fc085", "sighting--d38597d6-1811-4399-b13f-52faab196757", "sighting--5942d4a9-5427-4430-a09c-d0a349011819", "sighting--7705ea4c-9712-4f6e-9363-7915f0bf8db9", "sighting--4eb5c526-b8ec-4cf7-bd1b-21d99318731e", "sighting--4c59e6cd-3824-4f79-a6a7-b30226b9f9f1", "sighting--e3956ceb-2b33-4784-9101-4350ce8365ee", "sighting--ca43b6cb-a246-47d7-9816-86830a591142", "sighting--7323d998-1d1e-4ca5-b8cd-07c1315491a9", "sighting--d3a79e84-d97f-40da-9d6e-46a0f5cf36ad", "sighting--779dc9e2-e198-4413-a5f0-00eb223833c2", "sighting--14fc4a07-b72d-4758-9dd6-fa1d22457623", "sighting--c4a8a8b6-57a9-4cb0-89b9-6bd01dc8d019", "sighting--898fe1ff-c083-4ada-8137-91528aef953f", "sighting--ea87184a-f5aa-47ef-9eda-c4b6a9d3a132", "sighting--a7f1c058-0978-425d-9870-b95ae8f65fe2", "sighting--d76b082d-5848-4fd2-a45a-c0bd627d96cd", "sighting--4ee83cc4-3c63-4850-85ee-95415f8c0a54", "sighting--6bc18b8d-eb53-4b5f-bf83-102da43d980f", "sighting--5108a926-ed83-4c13-b765-77ccff4b91a2", "sighting--32697325-0ea7-4f3e-b2b7-4736b017b454", "sighting--a11597e2-38a5-4b3f-91e9-5a842f33da02", "sighting--79256b81-e890-444b-b3b7-6a779be0d9da", "sighting--b9bb2689-3f82-4413-8a15-13fd21505979", "sighting--1e863802-8ae7-4a84-9481-bab8218791c4", "sighting--f105d5c5-8c9f-4b6a-a634-0530ac938805", "sighting--1d545484-da9c-429b-8c17-fc7a6a8a96aa", "sighting--259cb6d7-0955-4810-9f3d-133552ed5029", "sighting--e58d3129-cf86-4b6f-b147-f0a278141a7c", "sighting--b3b29301-f840-4fdc-8450-62cb06dcec83", "sighting--98cfcf07-6d30-47bb-afe5-92130b041cd8", "sighting--dd83d149-948a-466f-a13c-70c3c6aa4ca7", "sighting--16bb4fbf-d47e-4646-8ca5-783b4d0aa8bf", "sighting--214360b3-e0a3-4d7c-904b-c101891271c7", "sighting--e419e313-21bc-40a0-b2f9-483d880f846a", "sighting--0c146ac8-1ea6-40ce-97b0-f5fb0964ee82", "sighting--28f18e05-3d37-4950-9003-1058b6b33144", "sighting--15e73272-f7b1-48aa-af53-99577726be89", "sighting--06ced0ba-2031-43bc-aa3c-c5a615c9957b", "sighting--40d4dae8-0a7d-4ce6-865e-719574ec3c24", "sighting--5e3c94ee-9a0e-4c89-960a-7585c8f076c3", "sighting--2116ec16-89ba-4149-abde-efb0f3db7814", "sighting--1481eadf-c5e5-44fc-8580-4015960f3a7a", "sighting--c381fde8-f62d-4870-b02b-6c5bfc26bfcd", "sighting--142e93a2-5afe-4140-a0b7-3b19997cca3d", "sighting--ef010534-9857-4a18-89f2-6bb21df2c652", "sighting--56bdec89-cec9-478e-969a-a4aa1bf6cd9f", "sighting--90b66972-213c-4e52-bfd8-1a3541a7253f", "sighting--fa712ecb-8b48-439e-b488-afda4b26890f", "sighting--036d2928-586d-4b27-9405-8eab6a2f45ee", "sighting--289b54f3-ed1b-46ac-ae4f-a26527a598d3", "sighting--d61262d1-c45c-4498-a67d-6247145cffda", "sighting--68d21d44-b156-439e-8cef-746352dccfcd", "sighting--d98909ec-fd29-4de6-98c2-37eeea07157a", "sighting--067e3cdf-f5a5-4f16-83f8-9e428ef3d850", "sighting--e23b6e45-4fc7-45d1-888a-5822435f68c1", "sighting--e1a752ed-b119-4df1-9bc5-93f14dc3ddf9", "sighting--d01b375c-4fd6-4435-8960-0a8796245511", "sighting--b91eb266-3d37-4ba2-b426-11d91a731b3a", "sighting--2dba73dc-abb6-446e-8d9d-ac4b2706799b", "sighting--69d59145-9a46-4f20-b210-0dcb8b5d96ec", "sighting--f33b3082-f622-4d53-a947-a3bacabd9d3d", "sighting--743c71dc-2f51-4d37-a5cb-71cc8c52e08c", "sighting--489b6e73-5854-4e09-8232-02b51d89db86", "sighting--44add2e3-ba94-48ae-9a4d-0796a8adeeb2", "sighting--fc23512f-80ee-4dac-a502-e35049a84327", "sighting--64b2b8a2-a857-40be-8961-af2d09916080", "sighting--51a3b396-829b-4ca1-8ee0-93ed09794be0", "sighting--50d6d0f1-d47f-410d-9b46-6265384f22c0", "sighting--9148e3ac-f25b-4af4-a4ad-34234c7db0a2", "sighting--ae274566-edaf-4106-aa14-84c546e658a2", "sighting--fe968a71-f3d9-4c87-92eb-a6f16fc46073", "sighting--f6f980f2-9a8c-4cb2-a4ee-de0ced4ab584", "sighting--32a93a97-64e5-42a2-9683-4a47db81e4cc", "sighting--01e0533b-653f-42d1-9d4a-c9286d0f8dad", "sighting--6f51ea07-8415-41ea-a376-8e0a835755bc", "sighting--f27a40e7-a1ec-4da4-a54d-81844965bcb7", "sighting--a8e2c3be-cd03-4dc3-9bbf-96126ca9fabd", "sighting--d01d5228-1390-48ca-a8fe-bd40eb869d3e", "sighting--49b484f9-53c0-4911-849c-40ac4042e40b", "sighting--72ce4b00-3e95-4005-8b78-12bb84968fd9", "sighting--0062d07f-9e5a-43a3-8e04-cc3695f1232a", "sighting--62a911ca-b765-41b4-b8e9-e5413ebd51f2", "sighting--727744ef-f6fc-41a4-b77e-77bbc3539a98", "sighting--c2911d56-c418-4321-82b4-f09d1764e82d", "sighting--9291d86e-daad-4831-acb0-cedf2deff159", "sighting--f8200678-dbc1-42fc-977e-c0db70d8bd28", "sighting--3b1c2e18-e208-40c5-816e-50e6583bb0a7", "sighting--d6a6eee9-fd1e-4282-afdb-c75c7bf5e71e", "sighting--1f035b68-1f85-47f9-b0cb-fefc2210b460", "sighting--6fb61d94-6138-4755-bc90-5c36c15c1645", "sighting--99ae8798-57af-482a-934b-3f7df011ac54", "sighting--c0bc2e22-f7ea-49b2-9314-90bc70c71a45", "sighting--b1efd9be-3cb6-4f8e-906c-7582f5d53a2c", "sighting--d935271b-ae29-4ccf-9f64-d8694d7f900b", "sighting--4acc4a17-321f-443c-b8c5-60869cf83364", "sighting--cee117b6-0e8b-426a-9f81-89d49919c72d", "sighting--76e4b472-f98c-4379-b3e7-67b3aa04b761", "sighting--b708dbfd-1331-48f2-949a-221d98b805bc", "sighting--7c2e6068-db45-4423-9082-5eae77c09ce1", "sighting--80995955-57f6-44f7-abb3-a2144b28b29c", "sighting--ec8408ee-0fc4-4a8c-8193-327772290646", "sighting--72cf4c52-88de-42ed-a51c-adf3db6c0c80", "sighting--9ddd627d-28d6-4c00-af5e-069b51a11c61", "sighting--638df766-7e20-47f9-9bba-d4b8b4d24f82", "sighting--960bf314-a004-4695-8d21-f454fac6f214", "sighting--57717eb0-499c-4223-a641-ee9f076591f1", "sighting--4bb9ac08-031d-46d3-a402-4603509d694e", "sighting--f414d3cd-330b-4b8c-99ff-3fac233c5f19", "sighting--0ce56b09-9930-491a-b63d-d63a8e872d5d", "sighting--be2bddd1-4f1c-4ae9-a3ad-1070252833f9", "sighting--0ff95900-975b-4f9b-890d-f5d8779bc8cc", "sighting--6910d025-ea4e-4eef-b5f2-bebcb575a334", "sighting--c70af7d1-b919-4c95-b755-07fb407d604d", "sighting--17361f29-a723-4ba7-a71d-e2776b63b553", "sighting--9c9aee0a-182a-446f-b1ff-af1acb8e07e0", "sighting--274832c0-a11c-4bdf-bdac-208a800abf37", "sighting--22fe1e8b-470e-4e7e-9b66-2da4da4fd9ab", "sighting--75f51ee7-a5d0-436f-95cf-7940669b0ace", "sighting--73501539-f29b-42fd-8779-f15b285ae4b3", "sighting--5745e2af-02bf-47cb-a29b-ece9829d3016", "sighting--42974776-f3a3-467c-9030-b6bf26e5d1d7", "sighting--7636244a-b888-44f5-b8ef-65b58b46b2b1", "sighting--cf4c9351-24ad-4774-9ccb-e3d513d79f19", "sighting--5e880255-6612-4cb7-b93d-afe57af615a8", "sighting--8874a6be-485f-465b-8c9b-9aae9b5a6a2e", "sighting--ea98876d-aeb1-444a-bd12-42306b81312e", "sighting--e2039e54-30c0-4fec-b813-fd36a44cb343", "sighting--dcfcd84a-8dcc-4183-b952-954918559ca3", "sighting--fe6dd04a-9880-42fb-b8ce-7d4674ab1ac9", "sighting--c58e408c-d1cc-458b-a0de-1d0c03e5d7fb", "sighting--ed8c79fd-6a41-40b5-b05b-17102c24be4d", "sighting--3edff48f-742c-4028-982d-5d014ba0f24c", "sighting--4e6a2649-831b-4594-963e-8b55337e077f", "sighting--8439a14f-f9ad-4fd0-ae13-6aa14d3d22a1", "sighting--4a12a78b-437a-4d38-b928-211b3ce11bc7", "sighting--aefdaed5-feea-4cc6-b086-ce178d1745fc", "sighting--f390eca6-e853-4ae4-bc5d-6ef9dfda8286", "sighting--e16de903-3407-4eaa-9a4c-c800739dba85", "sighting--13314d6c-bea4-4efc-8aea-022e4b58e587", "sighting--9ca86aed-fa3a-416c-9c7a-368f87080fc4", "sighting--bcb9301a-39ee-487a-99f6-9dc7d65fc46e", "sighting--a24f2bb0-2d3e-4eae-b941-71d842c5bac9", "sighting--69f96d0f-b70d-4c75-bad2-b0b15091de73", "sighting--328d8c16-fd1a-4fc8-aaf4-73c71aacc03e", "sighting--2d4ac116-fd64-4ad2-92af-6ab80c80f842", "sighting--e2579539-afcd-4190-8713-19c5574bc0b2", "sighting--67df9eb1-3ec9-4409-92c0-b9d8eb17b1b5", "sighting--1146c9bc-1c34-48ee-97b1-88277b93f788", "sighting--332a337e-4891-42f4-8631-ff1efb85d2e3", "sighting--c57bf6d0-1e68-4e1d-b56d-ad388316cca2", "sighting--cbfab470-9377-4b8e-817a-7bdfd74e7c6c", "sighting--73d2662f-ba21-4028-87fe-0f94952bfd90", "sighting--e480d926-ae85-4f04-8275-c4695eda42e1", "sighting--acbc8d1d-1dc7-482d-8367-d472db78960b", "sighting--f88d1e0d-d38a-4a83-b6e7-106e5c3cb628", "sighting--08648ab4-c863-4e94-be2a-346f4b5abc73", "sighting--adf90335-04af-4fd9-9b7a-aa54482b50d8", "sighting--a5321d0d-c107-4111-aafc-9e178ddeecc8", "sighting--a706d619-f5f9-4f7b-94de-5404de82bff9", "sighting--34c15ac1-0724-4343-be06-4dc40c7c5f8e", "sighting--8acf4188-93e5-46fe-89e8-0b824dff7e5c", "sighting--698e69ce-278e-4ef5-b6e0-abf80eb29f3e", "sighting--dca2fb3f-0b96-4523-9d00-bea0155d5917", "sighting--95ac4736-c489-42a1-a30e-9e206c66b150", "sighting--bc76416e-2a3f-4416-af61-be4038f81c10", "sighting--551788f0-bb5e-4adb-9768-697775b93e00", "sighting--fa6e21b7-121a-4c81-b2b7-495044da202b", "sighting--c56fadd3-1241-41a8-a16e-047e412502c0", "sighting--23294868-c4c1-4650-9cb1-5beb86f80ee8", "sighting--41bd444c-3c14-4d24-b785-d155f9d39096", "sighting--d28477ef-1ff2-4f53-971f-9d7ad71893c1", "sighting--38fc33d1-064e-4d23-9abf-d1a293f538f5", "sighting--5703d65e-ca50-4df0-88c5-17a0b28da269", "sighting--8c32377a-10d0-4491-a77b-76738575e3f7", "sighting--ebe2b07c-f06d-4ddf-b21c-8d3e26976c3f", "sighting--1f15b37c-3be1-4a01-979e-2cf9d1c998b8", "sighting--b2304c02-bc60-4ece-ada7-e9fd1cb8d560", "sighting--2661458e-661a-4695-a2a6-42c956762100", "sighting--653b5580-83a6-43e7-83c9-5710498c6353", "sighting--4203769a-3041-405e-96b1-8e89bbcb2be6", "sighting--29e6fc42-6bef-4745-84b9-93990d10f434", "sighting--5f0921fc-7c1a-4fe4-bb38-10f697e2b76f", "sighting--5db592de-0eb1-4ea1-9ef8-36356a0cd03a", "sighting--15d882f6-891a-4a60-b554-34b17c33af69", "sighting--f4551034-11f0-4d5f-83b3-80b0d2529a25", "sighting--ecdf6557-b359-46e6-adb2-8d1579b65520", "sighting--19279248-4baf-4a14-b72a-b05f511cc3f0", "sighting--bf280186-77ce-45c0-a645-7aa5ea821820", "sighting--76456cbd-a743-4f34-8d3a-c7a0f7ccf537", "sighting--c9c65d85-400a-4d5d-95d5-11c2d02c30ac", "sighting--975c51cd-4e7e-4a8e-94e4-e1108fef5b1d", "sighting--1136dea4-5bf0-47d8-80be-723081b9a820", "sighting--cdd5b7de-98a4-4133-8b04-6641d6a3320a", "sighting--ba6f3c30-2aa7-4f1d-811e-1d32a6587420", "sighting--d953967d-d157-4643-afcb-5c26aba24048", "sighting--4c49c7e5-1032-4ae2-9246-357072ecdbd3", "sighting--31f3d0b8-2301-4aca-8e2e-88ba10749c2f", "sighting--12713ae1-c5f3-4ccd-a75d-a4933aaa961d", "sighting--820a1fc8-4802-48d0-a502-17b1f23b0710", "sighting--1c6e5827-5774-46a3-9603-bfb9fe595d44", "sighting--4a966d19-021a-4159-b642-03dd28c3e824", "sighting--5af18f3b-df02-46f2-9a75-af3c948c8811", "sighting--62626ed0-d843-422c-82ef-86ab0ead1182", "sighting--1150a070-4709-4871-b135-bfafef052bd7", "sighting--ad85a45e-fdee-4426-bae6-2c026de5be39", "sighting--5ba81828-5ddd-41d6-854d-29d6b20990d2", "sighting--aed0bf27-850c-4e50-a177-d2bd94cffde0", "sighting--0759781c-d82b-4a62-92dd-524fe6e2f7c3", "sighting--1b5ac7b4-cf59-48b9-842f-e0e3aa0019dc", "sighting--babee14b-4ad3-4abd-8ceb-f0f7a3cc4f49", "sighting--51c7e731-5bd8-424b-92ec-ac88664c3996", "sighting--f06991f7-54dd-477e-92dd-db8f3fcfa718", "sighting--b3535bb2-860a-4971-a668-733087ff5b00", "sighting--6ca108d8-7cbf-485e-9216-1b17852a6841", "sighting--c8d3e39f-cf1b-43c0-85f5-bcf203a56597", "sighting--a98c2ec0-a683-477a-90dd-7bf2f3e0f761", "sighting--6e417f46-437a-4988-ab6d-b2e31e661910", "sighting--50876e00-5517-49a9-89a9-9bd2fe87d1cf", "sighting--127b2ff9-c174-4be4-99e4-74eaa236b69e", "sighting--6fbb3226-9c3f-425e-9da8-f3bc42139b64", "sighting--672e0375-447b-4363-87fb-f0f8b6666688", "sighting--d9f5e10d-0b42-4232-b76c-60e2026295e6", "sighting--a4f16fa7-0806-4b21-8840-301c31f726ea", "sighting--4d82018c-2bc3-4770-b0e6-6d21ab4529ee", "sighting--8ae7c546-0bd6-4d3a-ae74-2b643584a14b", "sighting--eaf49d73-adfb-4e43-bf09-539f26b1f21e", "sighting--c87363ca-61d0-4d2c-b619-18e138b82e96", "sighting--a231182a-98bf-477d-b7f7-837e2bdd1461", "sighting--52b1c1a9-98dd-452a-8b0e-b5466bc7b141", "sighting--654d9cea-dc1f-47d8-b05f-3da10610cbba", "sighting--b93e744d-a49f-492a-b17c-cc3f6a3b0ce5", "sighting--05dbef87-0144-4712-a3d2-354a2f80afc9", "sighting--350987d0-e320-4642-89e5-96125194a61f", "sighting--7937813e-1acf-42cc-9889-b7515b66d010", "sighting--a1a97900-55ec-4f2a-8cf3-d59488909d3f", "sighting--b165d615-1e7e-439f-a20e-b69f95d35493", "sighting--298b054c-2621-495a-aa4b-72d6b1e6ebac", "sighting--6cba3231-9c57-4fad-b4cb-c284261a2995", "sighting--d9360bba-2150-4826-b9d3-98893dbce2a8", "sighting--19126afd-2920-4ab3-a35c-db03440275ef", "sighting--6e415dc2-46b4-46a1-96e8-8bc4b1c9c3c4", "sighting--e9302e85-6168-43b7-aaf0-8f13b287eedf", "sighting--1f62e685-0ba9-4559-b77f-608313f693fb", "sighting--72b6a759-9f24-432f-b4fc-206f50ddc4bc", "sighting--469c41cd-50aa-433c-9fc3-29b730433ec9", "sighting--6926b80a-9ec7-4e0a-b68f-377cee26a0f8", "sighting--20eaafc1-7a87-4d9e-9529-83d1952dc306", "sighting--5812838b-44f2-40de-ba54-f1c3db54c64c", "sighting--479ac5f5-227e-4769-9f2e-a8a166fe4ec4", "sighting--814530b6-e341-452b-90d8-ffaaf89f6e8d", "sighting--43a5c8e0-790c-4cd3-88f3-0ca1795cc638", "sighting--5f2f70d6-7940-4511-94fb-882d5baee4bc", "sighting--c0b5f4c1-4615-48a6-861c-465039b0ff72", "sighting--b2ca0b90-eb67-4f4f-bdd7-4268d0b41865", "sighting--e59090fd-1c3c-4f6f-bb7a-cec0be827953", "sighting--7a050212-a2d9-48ec-8ce2-6fd0cf3ff325", "sighting--efe640c8-ef31-4e43-b215-7374b266835e", "sighting--f602ed65-b93a-4778-b29d-32aeab89ac70", "sighting--3a15f009-ad73-4c90-a261-f7387a396ad7", "sighting--28570af4-1c71-42cc-b1b3-1036ec789886", "sighting--d32c715c-1b42-418c-888b-e5f8cf74543b", "sighting--2defa684-612e-4e9d-bb12-3e1c937aaba1", "sighting--7af4b8a1-de31-45fa-a3df-b266ec55c696", "sighting--12b4c661-9199-42bf-8b41-9f959ce06838", "sighting--e003aa43-f4e5-445c-9165-d1e3767bb532", "sighting--56b72686-e235-4cfe-a7a0-9b47f526f095", "sighting--b5417456-1419-4f58-8967-f1ddaafa14ce", "sighting--f2298db1-300a-49c5-bced-ea59b460ad37", "sighting--4577d9f0-64e8-4072-a269-6fd0deadcf87", "sighting--88c66601-4e4a-4e26-ac5f-601b52e7b7d6", "sighting--381ec920-49c1-465b-9c4f-3757466b6b04", "sighting--992f5165-88c2-4450-b62f-ea3061019190", "sighting--bccc4978-dc03-4b45-9e23-9fc756a09fdf", "sighting--ddf490b4-1215-48f9-8d4a-0977ce1c7954", "sighting--00a2754d-2fb3-4763-ac67-47d08c01531e", "sighting--3e24af86-7fb7-49f9-aacc-63cc8dbace4c", "sighting--a034804d-aa06-4686-ac67-fb21ea335421", "sighting--3ea310c4-757e-4f66-8bb9-bacb87d67cf6", "sighting--b4c7bcb1-5e33-4e0f-8b42-a9c39fb02069", "sighting--af8ce71f-2e62-4705-9a95-3d1e4422fe49", "sighting--ddd92113-d97f-4931-9e3f-d84479fa0ed0", "sighting--9b43bf26-5100-4377-a7bb-e91557ca016a", "sighting--1ada9900-ed04-47a5-8e5e-9e6078853aab", "sighting--374d8b22-767a-4222-bb9b-bb55d06abab5", "sighting--08fec4c3-83ae-4b23-9d05-de6cc35ead47", "sighting--a4aa5616-aa46-4072-89e1-2243410b1164", "sighting--504c4b37-b4bd-4c71-95dc-1796b9a9a810", "sighting--02662920-9e1f-4ca2-b15c-77fda93cf359", "sighting--3b3a0900-7196-428a-ac80-9f70b9290902", "sighting--cbceb979-0f2d-42d0-90ea-acbc1cee668d", "sighting--e7c69cba-6bed-4bad-940b-e6aee2bd74f0", "sighting--cc6036ca-21e1-4cbb-9de3-110dcb9c5116", "sighting--98f1e94e-ade7-4b5b-9185-7a973dae49c1", "sighting--83166c4d-6875-4e36-b75c-01f50e69f459", "sighting--d820068f-782a-4162-8366-674e979653cd", "sighting--0fa1da50-2e71-491d-9546-908baa561cb4", "sighting--a50c5059-a4b5-4a97-94b2-f2e00f62d747", "sighting--bd2e44c9-aad2-4c98-8787-71fac6cc3800", "sighting--4a6df4ab-42f7-4474-98ee-e1cb91e95ff9", "sighting--9d941b34-e67d-417c-b274-15ed2d748da7", "sighting--d9cfff4a-61e0-4831-b5cc-33b635a9ff62", "sighting--c39b7dba-966b-43cf-9a10-4efd5230e1cc", "sighting--5c8aad1b-d9e6-4d7f-bdda-c86f855844bb", "sighting--a68e06c6-d6b8-4c1f-a446-4f364e4e5b79", "sighting--c0d82e91-6d35-42f9-9c02-b11ac2f1ff51", "sighting--dda85805-d558-4219-aa8c-03b86032c381", "sighting--58360e91-79e0-4c25-940a-bd9f61e0bac6", "sighting--41ed37ef-3d6d-47ee-ae1f-af8a7450dedf", "sighting--b4d41fe0-0603-4503-b01e-35590642eee0", "sighting--b63b1fc7-6350-4610-b417-2eff3f730888", "sighting--c7eead3e-7ee8-44c8-8fcd-c43007a564c1", "sighting--7dbe6f30-7deb-47ea-b795-135e3d98a15b", "sighting--06aceab0-40ea-4b50-bdef-a232c85f5a61", "sighting--05874a72-787b-4b43-a704-7089beb2e326", "sighting--3c79204f-c90a-4b13-a277-5809fa60ddea", "sighting--3275cb92-7ba4-4666-a5aa-9c77db445dfe", "sighting--d0387163-53fd-447e-a4e5-214496dc06cc", "sighting--08e13caa-0545-4977-87b2-f48af9ef1beb", "sighting--4bd9a917-5af3-4dc1-99b1-c493adc29187", "sighting--39abba92-01d8-450e-b36a-392d813ad172", "sighting--a1e09be2-f1be-4304-87e6-3702cc3caffe", "sighting--902278e8-2c29-41ad-9f2f-679a5843f131", "sighting--9d2c3ee7-fd73-44b2-b3ef-d73052acc033", "sighting--fb6734e9-a7d0-42c4-bb84-09c8aaed06e0", "sighting--83cb7b9b-3edd-4ce7-9f18-f8c97de05b48", "sighting--d5872bc9-c18a-4026-af0b-1d3bcc54a46d", "sighting--e5c56bf7-e934-4ba5-9e22-83dc1a03a953", "sighting--9b4760ab-564a-4374-bc71-a6906b39af17", "sighting--9367c340-60a4-4bc1-998e-27ff2abfbaf1", "sighting--c4d075cc-0ab3-4796-bb97-d7f678c55a70", "sighting--384eb5c2-6bb4-4c01-a3b6-d2d78ee43a95", "sighting--529114b1-531d-40c1-8ebf-55e9e9aa1ae5", "sighting--42aa0e7a-fd23-41a7-beb2-bedb53840e6d", "sighting--8a971268-9326-45b9-90b1-6f1423401524", "sighting--84297859-549a-4ad8-b125-6d0ba98cfd44", "sighting--a15f0453-304c-4496-9dd8-a6cb9098661d", "sighting--520345d2-53d3-477e-a758-e0367cc54078", "sighting--0b769957-14c1-4d18-bc7d-f9ebcd7f1d66", "sighting--b02be31d-bec9-4fe5-9753-c0f73b6c4041", "sighting--3d7476d5-7753-4ad9-92b8-2663086c1994", "sighting--7382b0d3-76dd-46a0-8876-524654b0f0f3", "sighting--3fe8a475-ce8f-428a-96cd-8fb18abd35ea", "sighting--f386367b-27c0-4217-a3be-bf7f512f92bd", "sighting--29b1b23b-f704-46cc-b942-ba9659103893", "sighting--97ac210e-d41a-4f46-99f4-6253eb68570b", "sighting--61fd0eb7-ae50-46a6-a578-5e4783ad4a3e", "sighting--eed2df9e-3282-42e9-bc91-84d165de2f71", "sighting--5158600b-1231-4585-a0e4-a230a03fff99", "sighting--1a9fcc9c-d751-489c-b4a1-816d7dc39696", "sighting--e2c0f079-c790-4bcd-84d3-29ca3cf0db59", "sighting--1a4c9916-7743-48db-943e-d7bbead98f1a", "sighting--53461d73-e08a-4a5c-a830-88e00d5a74b3", "sighting--f04e1172-6eed-4358-b754-10da4e9342e9", "sighting--b3ed2531-6a40-4dbb-a349-31cf36a9457a", "sighting--0950376f-3dc8-4c4b-acc7-48f1b50fddde", "sighting--cc214576-3960-422b-b55c-d37b0b33d1e0", "sighting--295be5a5-79f6-44dd-b7d5-5c453d68bb22", "sighting--451822d1-2436-4c76-9845-47b5cd4a5174", "sighting--aea944c5-0097-49f7-a2d7-278aa6e909e7", "sighting--13eae771-03c3-42de-8d02-d63818ba4173", "sighting--a5cbf62a-6018-44f7-b21d-b5d14689b580", "sighting--e8e0ec1b-2e12-4fd9-9141-52f92069ed37", "sighting--1689f5a7-1c7a-4e03-b153-2ef555159449", "sighting--eb7334f9-cafc-489b-ae35-7c960fd7e5f4", "sighting--14db4837-6349-4289-9466-fc3fc6032164", "sighting--4ab26125-0c53-438e-a6ad-13d41aee7953", "sighting--dc3e6d5a-5468-4816-b357-ef83aca1c855", "sighting--e1442be2-daa9-4db1-9de5-fcc1122c447a", "sighting--19970a69-cec7-459f-aec9-671a05206614", "sighting--4950ffd8-1332-4b0f-bacc-2a252fbd9c2c", "sighting--85c24270-07da-4135-8cfd-5e687458e5af", "sighting--b0388231-056e-4a1a-a2e5-f311f1533630", "sighting--559ac5e7-a9fd-4ff1-8b0d-6b3161fd7e19", "sighting--80fc219a-0f9c-4d0e-800b-d7eb1e924043", "sighting--e29d37ec-695e-4796-ae26-51ef01129a2a", "sighting--e9afd43d-813d-410f-8501-ac3d34d6f020", "sighting--2ddd4ea3-0fa5-45a6-a492-33b0ede57f0b", "sighting--360f5f79-3db4-411c-8a54-aabf371f7f55", "sighting--ba339f8b-1818-40e7-9e12-4839ca35384b", "sighting--d280020a-d64f-4669-be0e-cc7a5ea3e8fb", "sighting--b664d777-95cf-4e7a-96b2-f7ce7d787690", "sighting--532a6d0d-4a24-427b-8b84-252589521dc6", "sighting--49ee2cb9-7c08-4db2-910e-0bc1a4638d62", "sighting--0ef31919-1e0b-44b6-9034-7e0f91f9c6aa", "sighting--bd4e1f57-21f4-47ec-bcc9-efc65e6f261a", "sighting--8efd17f2-ec48-4bf3-a8d6-d70c7b379600", "sighting--b392e5bf-8a75-4daa-925f-e568c5b41f12", "sighting--1c94fa8c-9990-4243-9bf1-1e7fc40a5557", "sighting--641fccd5-f600-4639-bdc4-dc721cce6900", "sighting--a641698e-08c9-44bf-b676-7c0be3ac19bf", "sighting--0de7eec8-ee6e-44a3-974d-37cc4e82e554", "sighting--c1e972cb-a197-491a-8c08-44d3ec18cb26", "sighting--7f783544-5f40-4c8e-bf10-725f23ab1d2b", "sighting--181bc8ec-96b4-4a06-a473-964e2f3213fd", "sighting--533b5e19-b136-4fb8-b480-3e92149b299f", "sighting--ac297085-4517-4432-8335-fef708a6b0ff", "sighting--56940036-0cc5-4a5e-ac6f-0919fc722058", "sighting--a506df2d-8e18-4356-a5c4-de64a0525968", "sighting--79f54cf0-abff-4767-b7ea-121dd6d7bdd6", "sighting--a34148f5-2062-494a-8490-90e361dfe2e2", "sighting--c2bbf36c-0bf0-4b62-acb4-9ae52dcaa8b6", "sighting--99422395-06ce-4826-bfd0-ca3b12642bdb", "sighting--f68fa2b9-e3e4-4de7-ad7c-72dee9e1764a", "sighting--03c9409a-815b-40d4-882d-5fade07acf18", "sighting--974b59b3-8ced-4799-9774-03769227fe82", "sighting--bbc035c1-cc33-4772-bb7c-3315d8d5e531", "sighting--94c99969-c696-46c7-9803-7fb7f588cdea", "sighting--e50adea0-8ccc-4dd7-a475-1501f1aff623", "sighting--56a68bd3-0de7-47c4-ad49-2b45bbc78f8a", "sighting--8dac950b-7b70-4e33-bf0c-cee9762cb00e", "sighting--ed6c60d8-aaca-4ee5-8ce8-6aec8ae7c6c8", "sighting--0d02e8ff-d512-4e25-96f5-f7346553463b", "sighting--529cfcec-df99-407e-bf00-3047c6ea0718", "sighting--864115a2-4b64-47a4-85e4-7856e19f52fc", "sighting--094ff905-c684-472b-b868-b334a15207af", "sighting--2d857d06-f8c6-4e55-8f91-d261c81ae659", "sighting--2e63d0fa-c400-4572-a92e-fbb5d386039d", "sighting--94223920-3f3c-41bd-b21e-d5a59d1066ba", "sighting--254ca4c2-edd6-4dee-8d88-dcf24cf52291", "sighting--af833444-7f73-4bb0-97b8-0a85df66baad", "sighting--1adf771a-835e-44c1-a137-5211bf21ee0a", "sighting--280615ab-672c-4c1b-890d-6d94ceed42ce", "sighting--d011836d-efd9-43a2-a8f2-311908733622", "sighting--b7d3d5eb-5b47-48e2-97c2-ac212cffbf2c", "sighting--5a7c00f8-9f0a-4c84-8b85-3346469c39e1", "sighting--5850734b-9b35-461e-b944-d87da70ed53f", "sighting--aea90ee3-b452-4a2b-9964-3bc7d814e98a", "sighting--1e6f7f88-3ec4-4459-9add-ed21c84986bf", "sighting--55cd5c24-70ca-49bb-915a-7db241cb8c6b", "sighting--7a4f51e0-6521-4b04-807f-cdca63f29600", "sighting--b428e242-5e74-46de-8237-bb7dd596e81a", "sighting--d6e1e3c0-8029-4642-bb49-946010f88f44", "sighting--297891dd-5ab7-42e1-af90-8d0a9e2edaf7", "sighting--1b5f9c04-28ed-4e16-a3d3-2df74e3a3ac1", "sighting--0fae0e52-ceb9-40e9-850d-1e2bf9d8efd2", "sighting--c000e7bc-c54e-42ba-8a50-e3741ccf465b", "sighting--ec821520-6677-4ba6-8876-1ac68b7e08aa", "sighting--a5498940-e13a-43f3-84da-b26c7404be1d", "sighting--7e70082b-1d6c-49aa-aac7-91d93c935081", "sighting--e4a7ed8f-2314-46d2-97cd-241a29b48d8a", "sighting--e5a38b88-6101-4a02-b72d-0e178563c9f4", "sighting--9ab277d7-50ef-4e37-8a51-330f33468a01", "sighting--8f707e5e-aefb-4257-95f6-e5e4f037ec3b", "sighting--f8730085-c73f-470d-9df2-3bc7f8214da6", "sighting--dddebbe9-772e-4fbf-9b35-f2cafb4ce694", "sighting--daefd452-d10f-436f-94bc-afc821689e86", "sighting--e8fa2c0f-acb2-44b4-8048-311f82528b08", "sighting--8e32767c-0b9c-496f-a1a3-1c3be3bd6e57", "sighting--6a0e573e-1045-432b-9f5a-aaa785248498", "sighting--ac7697cf-2d7a-4a3e-824a-69f17b3e0970", "sighting--ab884d97-36b0-4bb7-9fe2-40497a718894", "sighting--80a35742-a43b-4a03-a2f0-c90992edf596", "sighting--da3e5927-15a1-42cd-83c7-ddb5789e193f", "sighting--8113a834-3974-4e82-9063-0ea4ebf4bd4d", "sighting--944997ec-4254-4070-9d48-4a7f61ef4c87", "sighting--88c985ca-e6e6-4ee1-86e6-b321c98d1711", "sighting--7f8c0bf0-92be-4c0e-87f4-88faf3308f43", "sighting--e62d1d0d-e8df-4fd0-92f5-df88b867139e", "sighting--8d08d34b-2e8d-4d75-8cd8-c6dd2b3a3952", "sighting--b137784b-2dee-4e6f-9b3c-b055cc5ccfc7", "sighting--d126f8c5-e2ee-4f3d-b240-108b4fa85e8d", "sighting--6fab4b10-a2c7-4953-bc72-b9026fb5748a", "sighting--24fa7127-5b6e-427e-a287-ea3f080efc8b", "sighting--bfbcbcf3-4ca6-4db8-9a2d-eb9d10fc3166", "sighting--ad51cdb3-90ba-4e77-a6c8-57221b4ed04e", "sighting--8310b5b4-2809-442a-958d-5d6507249ea4", "sighting--6ba268d9-fc57-41d9-bd4c-1b2677e52735", "sighting--9120c753-0ad8-4282-bfc8-00cdf89a02e4", "sighting--e6ffa5c1-8d0b-4f71-9729-ca6a2e08c852", "sighting--ff0f4858-06f5-4e32-8175-1b5c74662eb8", "sighting--d6f306b3-8ba0-4a0f-8df3-e16a0394ce69", "sighting--4b7f7117-f830-40e7-b9b2-997eec6b48ff", "sighting--01eace02-2148-4819-a3d4-a5adcc42bbef", "sighting--0d3f9fdd-9895-47ef-a72b-67884fabd381", "sighting--d605bd78-738c-47de-8049-78bcebbdddc4", "sighting--13a9bdb3-4b01-476c-a130-21ee6689519f", "sighting--df0b4d8f-a71c-4939-a998-9bd63045cbd1", "sighting--fd3de300-bedc-4088-be14-5f7a22fa2a89", "sighting--d08a150c-2cc3-43e6-8722-b8ce912a9239", "sighting--4f2e276a-36d9-441c-bbfc-4cd4df5ac174", "sighting--077e3817-1685-4614-a30f-0b67795419f9", "sighting--291be019-f143-48b9-9ec0-4335291cb4d4", "sighting--1d018f06-a1f0-47c4-8011-d58c24fec7c7", "sighting--1510fcc2-019c-4e16-9de1-26c4de9b74f8", "sighting--5c785abf-6ca4-4a29-873d-11156660d7c6", "sighting--a72078c0-3d64-4f7d-b7bc-453afb2ff2e5", "sighting--2fdb5a9d-6df6-47ea-8be2-20fe0efba411", "sighting--ffe8f81c-d527-48ab-86a3-7667f0eda96c", "sighting--3282e25c-2d52-4df9-a8a4-7b2a97af8226", "sighting--2e95f84b-1d7a-40ca-b5b0-e63b9d4d5e3c", "sighting--ce2596ed-6301-4837-8736-71681c442bdc", "sighting--63cc419c-ecdb-49f5-a660-be28e7874ee4", "sighting--5c96ea99-4943-4f14-8a0d-b402064644d3", "sighting--11c1c68b-7439-445f-a582-2acd3d790637", "sighting--3658dab7-eff5-466a-a92e-9c7ee57fa47c", "sighting--21d94bed-df2a-4889-b11f-a551c307a54a", "sighting--773d9c93-63dd-413d-b6bb-740f639a275a", "sighting--fcfd3235-3f1b-4220-866a-5f7d3f57b353", "sighting--f787b313-2c4e-4027-974c-10a7e360d67f", "sighting--3ef49837-54ce-473b-88c8-a1c1808b4dd8", "sighting--692cfcea-9979-4a49-8f72-67b7d1601126", "sighting--0d9f3e47-5125-474c-bdf5-7edd887bb8bd", "sighting--da52da08-f89b-4597-b426-b5cc866381a2", "sighting--bbd35c5c-e4b6-471b-92bf-f79bc0118e7a", "sighting--00e87a70-f436-4194-bc98-a0fa56a64f09", "sighting--bca5a8d7-ec65-4a37-bd83-dcbc3ce001a4", "sighting--06ab6130-a218-4fb1-bbf4-8f8d2f397813", "sighting--9ede515c-6010-4874-b776-d8d0b7336aaa", "sighting--019ece59-6fb5-4473-b398-006e2ed4d7af", "sighting--ab4c6052-8780-47bd-b8e0-8646a86a5c96", "sighting--3e4104e6-3fcb-44e6-83b7-a6c453aad526", "sighting--eaa6a1f9-42f6-4806-962a-b14929cdc8e5", "sighting--33427a32-7950-4470-9490-67a4d219c234", "sighting--c81d9d11-ce59-4088-9a45-6de8c5932c62", "sighting--c1ac72aa-43ae-4111-9a0b-e1896803f394", "sighting--1bd2056e-b50c-4369-8938-988a84f08fcc", "sighting--7351934e-043d-4a1f-8913-9b32bd5f8055", "sighting--3f974850-e2a5-41f5-9d62-7bcd1153fcb6", "sighting--0901bc15-24e8-458c-9c86-c8911d8ac091", "sighting--3fef75dc-3b33-49df-8a93-1516c4d415d5", "sighting--a0dc7303-b07e-43bf-8c4a-41bc8f0cdcc7", "sighting--c78318bf-43a1-4329-9fa6-2792b16529d4", "sighting--0b3fe1c4-2885-4d57-bb08-0290354167bf", "sighting--f4cf3bd3-e451-4ac8-be2f-ae6bf26ff4cf", "sighting--96072356-9f91-4af9-8327-e51178f3433c", "sighting--488273b6-5429-405c-a339-7b2eae4c8ec0", "sighting--fb36385b-59c1-44c0-b63f-b99e84e04913", "sighting--3fa64992-59b0-4559-a25a-dbbd51de5c20", "sighting--726c4bc1-9c60-485b-8e8b-385ddf6a5ce7", "sighting--d3425096-a556-4899-a000-90ee9a987ec1", "sighting--eef27c20-6f38-43db-bf5c-edd4c54f8342", "sighting--a80f1863-a463-445f-8786-5785ad574fa6", "sighting--3084d801-a4e3-4413-b45a-7dea86f91719", "sighting--26101724-ee07-4f24-b3a6-da874d40f66b", "sighting--ab3b21a5-b62f-4ac8-93f0-2f81cdb0fe5a", "sighting--d03cdc4c-0d53-4b09-beee-9e7ad4203058", "sighting--ba410273-c01b-4851-9440-013dddcb6bd4", "sighting--b23835e9-dac7-455a-8663-0824ed99f598", "sighting--086f5bc6-a43d-4b81-b139-ca24396c8896", "sighting--26fc40ad-f359-4a3e-ac8b-e1aaa97089ce", "sighting--3b15584b-d3e5-434e-b836-c01b1ce5dd2a", "sighting--07769e6f-ec03-457a-a831-0e970a5e23d7", "sighting--82460d76-aa5b-4676-b182-95acee171642", "sighting--79632185-7be0-46f7-9a2b-2cd1c26e7b3b", "sighting--81b467d3-0f62-43d8-90d1-1fb44b138ff2", "sighting--9f414cb2-86e1-46bb-8670-c6effaff1c35", "sighting--53d1bb01-4c74-44b1-9398-093f1ea5a0c6", "sighting--9579be1e-39c4-44ac-bd58-846caff92bea", "sighting--84df5673-76de-4e38-8427-acbb3c4a8d58", "sighting--c12f0658-9437-4328-b453-7512dbf328c8", "sighting--171f4274-6c14-4cbf-b1fa-bf37f672349f", "sighting--6ca419d8-28e2-4f7a-9f67-f57864375f68", "sighting--d480dc75-2d4d-4cbc-b5c8-b2a5041aa9d2", "sighting--b4c9e44a-9977-4828-9542-0a4d6b7d79d6", "sighting--88dfe941-7cb6-49fd-be26-d863ba09b55e", "sighting--0518c995-92fa-48c0-9f7e-835b8b8afb0c", "sighting--19cc6154-d595-443a-945b-0c1f8483a195", "sighting--b5f66e49-1c74-4628-8c9a-820639a49e85", "sighting--951e3748-4439-40ce-a8fe-7c7b9399ddbe", "sighting--7b4f2e7d-ad4b-4235-b3be-4758258b9f51", "sighting--09298b71-d2c5-4b64-8904-abefd3399452", "sighting--da579fdb-a484-4092-a065-9c4468137075", "sighting--d860006e-f346-4a26-abbd-cccd75c1bb81", "sighting--c6eb0f37-9c8e-4483-992f-96e7d68d3bad", "sighting--1a5d8cf9-42fb-44aa-92a1-f3121799aebb", "sighting--fbaaf83d-6946-450e-ae43-6144d182a8bd", "sighting--e84e01f2-867e-45d9-b1e5-2c98cc6c135f", "sighting--978e6a5d-ce02-4fd0-859f-fdd5780d0620", "sighting--44aa131e-1e2b-46ac-87fc-436ef5fa6008", "sighting--6364c54b-64ee-4fcb-82fe-c44b898a5993", "sighting--9533afe1-ebbf-4218-8b19-3cdf274d7788", "sighting--e556971c-9356-4167-a28e-8021154c950b", "sighting--cbfb52dc-3760-4cea-95f9-88fd28630e21", "sighting--dcb032ce-054b-4ae6-9a63-299c787fa589", "sighting--7672531e-b17a-4afd-8540-978cfefebd78", "sighting--51d16004-c146-4bde-8076-23e69488a205", "sighting--0d5f49ea-5cb1-43a0-ab5c-b45f99a2c5e3", "sighting--71803b68-40a9-4a72-afab-c933c9043b38", "sighting--6ff3552a-fe7a-475b-8cd7-9ba09bdd7479", "sighting--030a6bbf-8548-48bf-bd25-da7c97d968b2", "sighting--0a641378-8cda-4011-9938-8b5368b47f66", "sighting--b045a92a-40b6-4615-9bab-bd5f11d59db5", "sighting--08f7c8ac-b7d5-4242-b87f-2afad850474c", "sighting--57385411-4461-4f43-88a0-f635e6ff7c03", "sighting--d4e7eb7f-ceff-4291-a554-4bbcfa1aad50", "sighting--a578c917-999d-47d4-ab43-35ef757e59b1", "sighting--c1470eb3-a252-4401-b6a4-1aec90957531", "sighting--943b6d3d-d4cb-486d-a71a-365e9095511c", "sighting--cff71193-2a1e-480f-af81-0a3abb07c39f", "sighting--3fb8a452-9132-4ec8-bc6d-145d431571fd", "sighting--c41c603b-ce6c-40a7-97b6-f71c72d0af72", "sighting--9f62f6f2-fdc0-432f-acbb-5ec926d0a9cf", "sighting--f431e8a9-ecd2-43c9-8461-29c60923e0c1", "sighting--bcad5517-e8d0-45c2-992d-eb95b6dfcb70", "sighting--5fd11b71-6e59-4fc2-be05-0ed4be756bf0", "sighting--0f92eff8-5291-4dd4-a701-80552ba6d0fc", "sighting--26baab30-13aa-4888-8f06-4a683d6832a6", "sighting--8123f42d-f6d7-400c-8481-7db35c3edb41", "sighting--71eca90c-cea0-4a24-8931-2987a0b428f0", "sighting--4d6bfea5-8951-47ba-a2cf-2f8eab1137c7", "sighting--833d8e0e-9865-4d63-98cc-cb2ed6965c3f", "sighting--2514167f-a573-4fdf-a9c0-bd07a512e448", "sighting--a8bd7778-8aef-4db3-a3a4-70c4c48b7755", "sighting--dca7d79a-c2c8-4a31-a6fd-ad9ce8c9be90", "sighting--d3912dbe-3b04-4e0d-aa8c-b4d35d42d836", "sighting--23cbcd33-64f5-49e9-9b1e-112d92d6adc9", "sighting--46e7c189-55d0-4493-b769-3cdafffb6b01", "sighting--c727d472-cc35-4265-84ee-7723ebb20bfd", "sighting--6852ea6b-b895-4c20-8473-ddd8f8a37bab", "sighting--5bbde974-4b0e-4845-b83e-f61b41587198", "sighting--45ffc6b1-992e-42a4-ad3a-2413b120091e", "sighting--685343ce-6e6c-4bbb-b9f9-e82b7851529a", "sighting--3e0e7a88-3180-44de-9d35-781a60450c9a", "sighting--fa9e12c8-f8ad-4ed7-8b62-74144c283bb5", "sighting--4ec19ce7-5b3c-476e-827b-760820994c4b", "sighting--b495f5cb-4213-4279-ac37-80f5f9343f38", "sighting--8d9dac69-8e5a-47eb-afaf-428abbd37089", "sighting--9e0e359b-90f3-428a-9ad7-fcc3e2f29922", "sighting--8cda9ab7-3948-4626-8850-eba3723c648f", "sighting--f01d4305-4b16-4377-8070-60d0fae25b01", "sighting--e7be617b-9244-43ca-9b83-3339248e9c49", "sighting--50ad284b-4d2e-45b6-a720-6a7a201b1f33", "sighting--7631c0ba-7bca-4146-964e-7b9cdc9626fa", "sighting--67b22d10-0f64-4cc3-b4b1-b2945518488f", "sighting--566a43a5-cc31-487d-b1fe-acdddc115625", "sighting--2eacff5b-3542-4bcc-ac1d-343524f11711", "sighting--a590acfe-3ca8-4139-8de0-a06654a1150d", "sighting--1c64a16c-f628-4e70-b6ca-9067f6f18b3a", "sighting--11aa3d9e-7443-4193-85f6-70b300015a2c", "sighting--e1b58225-c6d5-4c2b-816f-8b5fb6f76915", "sighting--d48fa9d2-b83d-4140-82dd-0094aa7e30c1", "sighting--d6dd60d1-aeb1-47e9-9a16-49f3fcfb93ff", "sighting--0b62449e-1e2a-41a0-a57f-506441022580", "sighting--4dd9147f-511d-419c-829e-173c78b84ece", "sighting--79c2e76f-4e1d-42be-8972-1f91a740a284", "sighting--172c63c4-3296-460e-a7e0-b1e45f83ce7b", "sighting--7c3b7fa7-d554-481a-8d88-2b6af60488ff", "sighting--e835f1a3-7cea-4164-9223-f41c501a821b", "sighting--f53dd3b6-cb4d-4e99-8e6e-10ec2c9a2d56", "sighting--a76bb5e0-f644-406d-83ff-8cc2c55b0e9a", "sighting--0b0f815a-c5e4-4049-a4ba-625cc8325892", "sighting--fcd9f1aa-51ca-4db1-ac31-21ee79d09ac5", "sighting--336ecaf8-4a97-4ec6-8e97-f68df6f603d1", "sighting--f3b3f22c-d05d-4e44-a432-80c89de19565", "sighting--2035bad4-bce8-4faa-be9e-433f7397a274", "sighting--ab24c68f-063d-4756-b14a-60f589a91161", "sighting--001ff0b3-5925-4ca0-894c-f7e794ad1a08", "sighting--7c555ebc-a2d5-4ce4-bb3d-d5434f995336", "sighting--06dff9b1-cd17-421b-b81e-77a0a305f03f", "sighting--29691210-ef75-4a95-bdde-62b533e47af5", "sighting--084bb7da-c676-4f4c-93a3-efe42c6d9ac1", "sighting--aa02bcc9-28ff-4dc3-a45b-4d12eaf3d912", "sighting--c9e6f2df-0bc3-4c6d-ab74-87a23a891eac", "sighting--45661e98-6395-401e-9622-a4cf8e972682", "sighting--7b604194-5ac1-4edd-ae8c-ef6044a2f45a", "sighting--d4ccaee0-0131-4415-9cfd-07ed49252b29", "sighting--2c231950-536b-4f29-8916-e4b7c5e38819", "sighting--ceab327a-7408-40be-abc1-44ffe0346ba8", "sighting--d4913f52-35c1-490c-9b0f-e8f664bd0f6d", "sighting--4c26da85-a570-4bd0-a025-627fb2be9d07", "sighting--991a5a7e-2a4c-433f-ab6b-b9481cea1ae2", "sighting--da1f9bca-2efa-4529-bbf9-0114f8e9e9c9", "sighting--c65da289-6c80-4948-8bb7-9994a775fb2b", "sighting--f438e12b-8b32-4f95-bb0c-25e13445c38c", "sighting--05d93292-c657-4060-9b70-5b48a8dc556a", "sighting--8de126bf-4bd1-4b1c-b569-3d662564b47e", "sighting--fa7c948a-f327-4e3e-852e-56c6e033ae25", "sighting--2e234f07-4624-49ed-b667-88ea2438e5b8", "sighting--e74b1498-effb-4df2-b9f1-41f68a3aa5b0", "sighting--388884bb-1121-4212-971d-2db74f4a8421", "sighting--fe4b1f48-59b9-429f-8b8e-7368a3771b5b", "sighting--c5222a28-51ec-471f-b291-cdfaedc7747a", "sighting--a1c2bb50-4973-4367-b0a5-fa5a808cc4c2", "sighting--1958336d-75aa-45f2-bee1-623f0612bb50", "sighting--b17dad73-3e1a-448e-8b32-35cf550a6ef1", "sighting--ae50ba72-5cdf-4b76-b630-a4c09f992444", "sighting--64357db1-bb0d-4d1f-951c-1ac414d0cad0", "sighting--609fcb3b-cd88-43a5-8912-9600bf2b5201", "sighting--fc19e790-b5ae-49e2-9972-062babb693fb", "sighting--9e6f519c-d887-4323-ad92-523c38eb7513", "sighting--d62aeef5-3540-4670-b25c-cf4605ce29d8", "sighting--2a3119a5-9768-479e-b6c0-302c7347ded1", "sighting--67249685-1a97-4706-9dd7-b9224b725174", "sighting--3fd89b1c-204a-47a2-8b43-3decd0c946db", "sighting--012de5d0-aec5-4405-bd2a-664e72b45f23", "sighting--1ef65b34-adea-4ac4-ad31-ef247dcb582e", "sighting--218df90e-608e-49b0-832f-b5804add74ba", "sighting--bccecdec-0915-4579-9f81-82a5c6de07ef", "sighting--0fde6ef5-a6e8-4b4c-8e74-778521b61c5b", "sighting--83b86ae7-dd4e-40e1-9147-f4aec3d22d09", "sighting--6a44420e-feff-4ccb-9a2b-86bf4921a8c6", "sighting--673d17d8-3c7c-4962-88d5-cb999a2a5fdd", "sighting--ae9cb1a0-39ad-40af-afce-f14c598ae9a4", "sighting--44cbd862-43e5-4ec5-8be4-f6420ffa0761", "sighting--4a645bce-4be4-4536-847e-246f45a791ed", "sighting--1bd921c4-feec-44c0-859b-aa5cbf13c2f7", "sighting--483a345a-d6aa-4c43-b257-636de06606e0", "sighting--4805248d-853d-4835-bd8e-345f5c949f78", "sighting--95b25a10-ceaa-4c01-9a8c-dd22e68d8ea4", "sighting--d46630e5-b56d-4b90-b706-8b8af0dc8648", "sighting--92f1c609-e84b-4af7-9889-3649663e4daa", "sighting--b0a145c4-8e06-48e8-80f7-33d0a04c8600", "sighting--8fc9a439-5fd6-4464-b2d9-4a4d24d1a57b", "sighting--e56aab2e-ea08-4b4c-91b6-23d091073f1b", "sighting--d3245f97-08dc-400e-be61-82b32b68cab4", "sighting--ff9082b5-1ece-4137-82bd-ded9dc9a3d98", "sighting--782485e6-a250-4c31-8aee-21ac5e9c4861", "sighting--544a5d22-51a1-48c2-bc90-5b7166dffdc4", "sighting--572ef1cd-13ea-4089-b6dc-ddd9cf4e2506", "sighting--bba0b6b5-4c48-4787-a8d4-44807c04be3c", "sighting--a2af30e7-b944-4c91-8da4-82a3a9c0708f", "sighting--055002c1-0469-4bda-9617-3261af4b61d1", "sighting--2077ad64-c7cb-4db2-81fb-fb942ae5280d", "sighting--064a0636-f2da-452d-8d48-63af4e1a8b4b", "sighting--3b35c9ce-4e48-4506-a10a-b534bee3620d", "sighting--f9c8670f-041a-4f0e-9d6d-bde0ffed0c19", "sighting--57146aef-e969-4464-9f04-d23610a8b983", "sighting--dcea29c2-0e23-4383-bbfa-f946abdab653", "sighting--783168f2-e2bd-4b6e-b13c-caad680df57d", "sighting--fdda2632-f3f7-4f7f-a0e3-0e7db8360980", "sighting--9b249f69-417c-47e7-ac39-1f7ffed60479", "sighting--80f04bcb-ceae-46f7-9b3f-69b88f40f171", "sighting--37804f36-5173-49b8-810c-622f034bcaf4", "sighting--33525ffb-a562-4979-9f04-ec6910a8f92d", "sighting--b4808092-66a1-45b8-8e3a-6c21381e4220", "sighting--4b2fca69-12f6-40a2-b0e2-bcdbaf2b472b", "sighting--13419df6-cf0b-4e4f-aaaa-6fd0644d6e4a", "sighting--1e62b530-7235-4fdb-8670-72d638292f3b", "sighting--b47bf0d2-94a1-4fc9-9aa9-074869d8f4d1", "sighting--05bafd65-431d-4b47-8355-35627113f63a", "sighting--61af8eeb-b5f2-4e15-92de-b0370ced7263", "sighting--b77122d5-cbef-4a92-bae4-13ae84d0089f", "sighting--42e8a2c8-2819-4329-9862-14fe0be492b3", "sighting--2fe3482c-f9e4-457c-8dc3-9d6075b72fb5", "sighting--f7bd07c1-c565-4264-a080-ed6ccea69d5f", "sighting--775af89d-b60e-4f9b-99fc-784fb2b9f3ac", "sighting--9b00b44e-63ca-4c9f-9916-b2150145ce35", "sighting--dc1d40ec-7f48-402d-a863-5b37f1111a97", "sighting--bc6b556e-1f3b-4f78-a30a-f0f989c25084", "sighting--b54ed53f-3ba0-4724-b1c9-6af558757afd", "sighting--54b45def-8b49-4477-9465-7c067b243275", "sighting--bb3e719d-79be-4eaa-b23a-540c42f7a380", "sighting--ca290ee2-5ddf-4d5c-96d7-4b4775c74c3f", "sighting--c44d2caa-c123-463c-aa7b-0676c789afb3", "sighting--87a9e4e2-32b2-4a79-acd3-469b03413382", "sighting--20c5575d-7146-4a43-9c07-bcd1c09c04ae", "sighting--327273a9-de81-4f23-bebf-378c6d447fb5", "sighting--b69df4f8-4f35-4ea2-9b55-23aa1398a468", "sighting--57f92fee-9092-49d7-bbcb-bf897470ad28", "sighting--5c5d3895-053d-41c2-bdce-e51ec568b5ba", "sighting--c9bbe857-3858-4268-91c1-fa2bb9584a76", "sighting--b2a738d3-4ff7-4932-aadf-b2429c223f73", "sighting--3af94b87-afc8-49a3-a3ce-ef5505678042", "sighting--0c7ad746-198a-45a6-b54a-75c78e5da7b0", "sighting--ba1a2f52-7aa4-4abe-ac41-1449bccb5dff", "sighting--e0dc2c33-e30a-44d1-a644-b02359592339", "sighting--591336dd-0cb8-49d9-b0d8-fd3d9232fcdd", "sighting--ac437d64-0c38-4ebb-aafc-cf3cdf794d7e", "sighting--9862dc3d-3794-448f-ad40-921fb9b6212b", "sighting--0ad38605-4821-4da7-ad9c-5835958cdbd5", "sighting--b281b53b-7382-433e-8256-4c960a37e0bd", "sighting--274f10a7-8e61-4fbd-8d61-3eb1ecb19cff", "sighting--f453daa7-d79d-497c-8e83-29497c0e3bac", "sighting--eddfeb96-7038-4e87-bd38-15b07ea91195", "sighting--129d1e2a-9365-4e27-b2e3-dd03e74d807f", "sighting--819ba1c8-06d2-4fe3-ad70-b914aed04b5d", "sighting--a4c36445-c4b7-4657-9f2d-8f1e9f402806", "sighting--c1600397-284e-4253-b98e-564c57e68f07", "sighting--edbc4f7f-f041-471a-adbf-abdecc215a54", "sighting--e8d258c6-7c3b-4c8d-b28f-2980ce5b819b", "sighting--a99ef2e0-c4f0-4d5d-a67d-f70aebb162a6", "sighting--25e8d4f1-d5ec-42a6-aa18-2d2d4efaed31", "sighting--358f0ff9-cebd-4745-b3a2-64d9aceaac1d", "sighting--3507f5ef-c592-43b1-9695-d9fb9e976e96", "sighting--5add9e17-ce27-4020-852d-766da75e9198", "sighting--34ed387a-d5bc-435c-a1a9-a0b2c42e4968", "sighting--f3711b7f-b31b-4955-ae81-bc771006ff8b", "sighting--0d775279-6ba9-4941-9305-415f10463343", "sighting--f6494235-326d-4acb-84ff-3d9e9689400f", "sighting--dd21bb70-4032-4837-8230-6a01f2269c10", "sighting--d093a13f-648c-44ec-8013-d47b296f0ef2", "sighting--45edc627-0ff2-4b4d-92af-b8d54e66c72c", "sighting--bd3ff1bb-efb6-4114-abd6-bb2194997791", "sighting--e8d08747-8593-41c5-b732-a0821df197da", "sighting--aab17603-8564-4022-85c8-e8aad8447811", "sighting--33c9866b-61d8-4774-8803-6798b16d71b9", "sighting--eb100951-c32e-4b5b-821c-7d89237dc390", "sighting--50134fc7-4855-4058-9c83-0cd331ac1cef", "sighting--8ea123d7-56e9-4320-a281-23dbdc2be9f6", "sighting--00453560-0211-4787-82a2-21319a98ac71", "sighting--8483ac89-bc65-454d-951e-83f0c85632d4", "sighting--c8494dfa-edd6-40b7-95f2-9099ebbc55d2", "sighting--d4c82a1d-376d-41d7-931e-e40690bd65ff", "sighting--a0b54359-118a-4610-94f6-441e3ca137e8", "sighting--3e15d16b-9257-42f2-b5af-154bfde9f84d", "sighting--6d78e45e-35c0-4e87-af6f-130b624edf24", "sighting--82bb22d7-2a59-4f67-8f2c-945862399195", "sighting--97e45209-8519-42c3-9526-6a88c869293f", "sighting--3f6fb1fb-639b-4b21-b43d-18eab7bf5206", "sighting--340104ce-e8bb-4b0f-bbfc-ab43ca0b7af7", "sighting--eb4578cf-eb56-42da-a877-639a71324d0f", "sighting--40789f50-bfa9-42d5-975a-adb5ae968859", "sighting--5e751d17-4574-491d-b01a-97e9cc72d2b1", "sighting--49aae79b-1821-4a65-8765-0ddc809180d7", "sighting--efbf2db1-dd1b-4242-bb1b-877b9d4fb540", "sighting--bd5260c9-2e79-437f-b715-cc3f555fb586", "sighting--0b646833-1a53-4aec-96e8-b2485d15930a", "sighting--1822d2f6-89cc-415e-91f6-6aab6f15ac3a", "sighting--27b4559c-7dd7-41c4-aadc-454c06ef904b", "sighting--f8865810-74c6-43d9-aa99-f9fcac003571", "sighting--9364294a-c741-4772-80c3-2db894342aee", "sighting--b67776a0-4b83-431e-8c55-bfab9d3c31fe", "sighting--4b34f1e6-cc8d-4fed-8beb-a0d86b73a620", "sighting--602d87cd-32b2-4092-8d3a-c4e0ab22acc6", "sighting--98f34994-1741-4ee1-9d5a-860de5cd311b", "sighting--fb9712c5-50d8-466c-966a-f459db5c1160", "sighting--6997a651-206e-4793-9fa1-9eb79da4d346", "sighting--5da9647b-3513-4c8f-aa54-bcdee99b1a3e", "sighting--c2ff9c30-f343-41fb-8ff3-55c6a371f0a2", "sighting--96de8343-fdca-4953-93c8-a950f370f2eb", "sighting--0c307ce2-e224-49b5-a1a3-9d3e83be50df", "sighting--7b6b26c8-8a5a-4e3a-837b-9f0d05e52e69", "sighting--e72ddc6b-b6aa-49a4-ae17-2cca626607f2", "sighting--4f76a379-dddb-435e-ba70-fd38f92a523f", "sighting--3104dbd6-0cb3-4da4-962b-7b659748775b", "sighting--cb93d307-d4bd-4171-a54c-9d701da0b9e7", "sighting--99404362-2bd1-49d0-b85a-0b9fe8a3e905", "sighting--2f9d17bd-c64d-496d-b942-59e92f069822", "sighting--afc0c612-0f90-49ac-a5ad-9f10124ad6c1", "sighting--cb147c97-5d56-4b0b-a23a-f6d17072375b", "sighting--ceef1520-4542-4dc9-95cb-0205566d5e0a", "sighting--0766b327-9c00-4be0-8b4b-379df52aad8f", "sighting--a58533a6-c0a7-4d0b-8865-0ce3303e1bc6", "sighting--dd890a23-1959-478e-a87d-e61952534267", "sighting--712afe68-f0bc-4ab0-90a2-3b5b67c7e633", "sighting--778949b1-cdfb-4d4e-bf92-8091ee2b615b", "sighting--34dab663-ef9c-4dfe-a430-9599ff3878ac", "sighting--8c053abe-f2fd-481c-951f-206ee67217b1", "sighting--6632a5c6-9639-4001-a3c3-9d2693eb99a8", "sighting--7d54c2fb-2dfb-4fcd-9ab9-0a0a0ccd0ebd", "sighting--9dd1baf5-0c24-4b83-b676-0adf45f41bf5", "sighting--53a59020-91b0-464a-9f57-079d0e85e0c9", "sighting--c369b14f-3ff7-4cf7-90e4-bd1ea57e18d7", "sighting--3d9b68d1-d6d3-43a8-9084-0ccf0255b056", "sighting--94c9a74d-d7ac-465e-993b-01b56ddba4f8", "sighting--8445a280-0a05-4c9c-9a9e-840b7254541e", "sighting--64831bd4-af57-403b-9e7c-e59468f20bff", "sighting--428fa46a-7709-43ec-8be2-d284dfc0a834", "sighting--05d2b752-2ff7-4f6f-8fa4-863e41be3764", "sighting--fd3a8e99-36ff-4169-83eb-7f28ed2cbca0", "sighting--a002897d-7cca-487d-9bb6-aefe838ea3e6", "sighting--57a4c8b5-e68c-4ddf-bd87-1303932cb568", "sighting--c2cc1709-ae63-4469-9261-0f7692b12e6a", "sighting--59c0e003-ce3e-4e8d-9802-bad4afeb83db", "sighting--afc1f149-f636-4794-a58d-7faedf841ab9", "sighting--6785b5a7-7dd5-448e-afd0-d7fb304da289", "sighting--598ce12d-74c0-433f-a261-78ee39056ff4", "sighting--b00b368a-54b7-469f-b5b6-4c54cfa3d97d", "sighting--76be08bc-275a-44f2-9376-4a3d8a4b3d62", "sighting--f9fa706c-13f9-4e2f-b935-f2806bf7467d", "sighting--d704f80e-d0ef-47b8-aa98-52a0cef397ed", "sighting--4f1a6bcb-50ff-4b10-919c-ad8838ed895a", "sighting--45c1ee1e-b176-450b-a77d-491e1e6da4f5", "sighting--d765ac2e-ad13-4e57-b0b9-cd04a98ede6f", "sighting--17b01bbd-d4a1-4074-af10-97530627159e", "sighting--d0ce2364-b0ec-4c33-b187-df8a461d3239", "sighting--c5ca40b2-d785-4db0-8a87-bb88b43b6904", "sighting--031daef7-2351-4646-91ec-819bd48e406a", "sighting--7c5215ac-41a1-4000-ae92-7a831495b74e", "sighting--98f84e17-3008-4676-8469-ddc26cba53e0", "sighting--d3776a07-111f-4d39-9cc2-d324eb7f2eb3", "sighting--48e62c75-502f-49f2-9764-6ac28c013305", "sighting--00fc9c3d-239b-46a0-98ff-a5b7f3a82e09", "sighting--21454456-0b62-464f-8f06-38543aa7c3bc", "sighting--d69ebc70-782c-4931-aa7c-4db8341f915b", "sighting--7cd32d46-0012-4d4b-b2b1-7909a506b2ff", "sighting--080b25fa-3d16-421b-a8af-9b8be525b25d", "sighting--b4d653ce-1a1e-48fb-9a93-325645c1ad7b", "sighting--da15c26d-e81f-458e-9796-e02483e09a6b", "sighting--a7daddbe-61ea-4ea1-adc5-247b6674d4f0", "sighting--d8451f73-1027-49be-964e-7ceddf7b52b9", "sighting--f935347c-d97c-44dd-af42-4be8e243f59d", "sighting--5517a816-04ae-450c-b636-ca3cef491f2f", "sighting--2c220a43-5cc1-4118-b1d9-1802b21ae403", "sighting--631ce74a-aa1c-4a3f-aa8f-f920db977f7d", "sighting--4e8b140d-a2d0-4c49-bdb0-51a3825bdeb0", "sighting--7ef2ca7c-2e1c-47c9-aca4-405e759521a4", "sighting--83d20386-7e7c-49a3-ad6a-bf980531092b", "sighting--cbff0b6a-5f87-4190-8e11-4ec7c4742c6a", "sighting--c0d56a86-50a6-416b-b3fd-cc0c720bcaaa", "sighting--9d7cba99-5be0-481d-aeb1-1f50b47bd22b", "sighting--56b487ff-0445-4e5d-93de-3297943a78bc", "sighting--df85fc5b-2213-4bc8-9b22-12dc5721f1bf", "sighting--8386f249-9e40-41d9-8dab-f1b5b94ab129", "sighting--40757b2d-09d6-4c21-bc07-f4939a18aa57", "sighting--79401f6e-da59-4c0c-a56b-5a651010cca0", "sighting--0de8654f-b15a-4136-86e5-1a555e063d38", "sighting--aceac8ae-e87d-4078-b58c-25927d1295d0", "sighting--4b63cecb-619a-44ca-afb8-7e00f6f9f1af", "sighting--95e977c2-d6ba-4594-8ca8-17899fe89ae1", "sighting--160cc9fe-b187-497f-93af-2a6dd9dd9de9", "sighting--f880b921-90c1-4e46-a193-33eac302ec0a", "sighting--b5e32a3c-5e24-4f46-b0d9-7675d77326fb", "sighting--818d8719-2225-4a27-8ba0-b7d49b73fc7a", "sighting--b0ad6644-6f91-4320-841d-86918895916c", "sighting--e4e9979b-8b62-4a07-b5d4-afd8d135dd8d", "sighting--2983207c-e413-470f-9a75-17751cef7b58", "sighting--5f6fe55d-2ffc-42db-a5ef-3947dfeaa91e", "sighting--c0944678-d9b6-4f28-a90c-10cc282668b1", "sighting--0297689b-e49d-49e1-83a4-568793e8ee98", "sighting--72b1ff0a-a0e4-4371-8656-100c8b7d8a80", "sighting--301fed7d-120e-4aa5-83e4-60e4895c3320", "sighting--5f154489-423f-42ed-a85f-a591b0a7882a", "sighting--054c37a4-c5e9-43fb-8534-85eca79107aa", "sighting--83ce58f1-7a0c-471d-ae25-c10bcf40c3a2", "sighting--8e80c0dd-83bf-43e4-b83f-16225e7e9ab2", "sighting--4515ae1e-535d-480c-b492-64faf1292772", "sighting--e3b106ca-533c-4043-8f4a-3e1f76ddb851", "sighting--619743ba-8abe-4d00-8adb-df2bf1c6a777", "sighting--b2e87df6-55f4-4110-9263-d8ac9b35593b", "sighting--01536f1c-1b7a-45d9-9d2f-618679f827a2", "sighting--d0ab5b08-a813-4a5e-8a43-bdd1ba454bdd", "sighting--3e42a520-597a-4d7b-8a4b-02a8ad44bb96", "sighting--dc8fd314-2a85-4d73-ae23-fb876161dd0d", "sighting--b1222df3-a917-4ed9-b835-567a193c2231", "sighting--1aeb253d-24f1-4ffc-aae5-9f5f93d2545d", "sighting--fedc4665-84c2-43ef-ad20-ba348295de94", "sighting--3ef77aae-fd03-465d-8f36-0db76532b509", "sighting--78720393-f57c-4ade-b8db-52fc5118dd53", "sighting--fd809441-c22d-44a3-8b07-cc607ec3f189", "sighting--1eccae3e-95c5-4d3b-a449-9d80a44904fb", "sighting--5b2b9dbd-25f3-4d8d-8a6c-0a2a90c3ee4e", "sighting--96947d35-9252-4316-9675-eaa861dfd4d0", "sighting--741cc706-287d-4e65-a9c6-18c821690d86", "sighting--549e99ed-49cf-4c0a-b343-8bd62ffdaa22", "sighting--f6907049-0872-484d-907c-9c04a4142e8f", "sighting--e38bbc51-470b-4832-9603-3a9f9012b813", "sighting--4d1900f3-941c-4394-894a-057ab957f166", "sighting--257690eb-f1ad-420d-b778-c24f18b9878e", "sighting--e0ed97a0-bca2-4fec-9074-925c0067b2a9", "sighting--78f5204a-4fae-4101-b521-8fc42a7f882b", "sighting--e9a77b13-ea2f-4cbf-8dda-88416ecc2f2e", "sighting--959c94d8-b9f5-4700-bf1a-24def180c723", "sighting--b15f4d21-df44-4de0-ae1f-da3e81f4fb19", "sighting--628decf0-88dc-4e4a-b90f-7fb73b683920", "sighting--f44ca7a3-67fa-4d23-a79c-32e997622a41", "sighting--6aefe607-943a-4586-89ae-0e12ed513353", "sighting--eeb02aea-d9c0-4b1f-85a9-6598cc288b3f", "sighting--9d346b16-32c7-415b-a0a7-5c0b5c6ca6bb", "sighting--ecd95eca-baf3-4a25-8e82-18a329040fc7", "sighting--50a09293-b177-4481-8b74-422c910cb45c", "sighting--906c3bea-9c21-4825-aa93-c546b15d355d", "sighting--efb2e90d-ef4d-4f2d-8d00-96d88a532b0e", "sighting--dcc73a36-1ef1-4dd3-b306-360914ef118b", "sighting--73c8b8ec-5049-4090-b4d8-583e14214025", "sighting--39a5b3f7-984e-44b5-94f7-0f9ec7684491", "sighting--468c0c32-10c0-4489-8638-db5ec2c9b0d7", "sighting--504518ed-01de-4b86-bf6b-2fe32ad1b6c9", "sighting--a5fdc21f-9755-46da-a8b9-2731c6d5aa9e", "sighting--d475f399-19c0-411c-afec-a76a73e38b94", "sighting--c616b88d-d6c3-4e41-ade7-32c5296b6da3", "sighting--877c5cc7-46a0-4a3c-8c17-f040b694ea75", "sighting--2f402d3b-87a7-4265-a9e8-4859a7726837", "sighting--b6d4f96e-176e-4b13-af92-1c10d4e42cea", "sighting--5e356114-356e-4d2f-8825-3488be97ca44", "sighting--d05fbd95-8491-46e8-b717-0e7b202f484a", "sighting--db261222-49a7-43c4-8cf9-860b7f9f473f", "sighting--a60ae7f6-9948-4515-be72-9cc2e6dc63d0", "sighting--e2a0d5ce-136d-44dd-b45b-cda6b4500361", "sighting--326fbd9d-c6a2-4f16-9bf7-e075a2db86a2", "sighting--19f9de8c-098f-466d-a959-0219116d3937", "sighting--3a9c9f9a-095a-4f35-8618-f7d4fce5c98f", "sighting--f47d2d87-6e99-4d9a-8985-ca53f84160f2", "sighting--980c88b2-5bdc-4ca9-b3b6-0c37179acbf1", "sighting--a9775ca5-198c-4c68-8a6f-99e21d4e01d9", "sighting--438d10ab-900c-4f77-9527-c3e0f3507641", "sighting--ce1f9a3c-2af6-474d-86bf-7730a2bbb06c", "sighting--3f59a63f-73d0-48dd-8d17-e6e426d9bfad", "sighting--6dff1755-905f-46ff-a5bc-296035fd1259", "sighting--f92ee7a1-ff76-4629-b3bd-3ae4d88546bc", "sighting--c3fc3b16-9383-43d7-b6ab-8ac12426c61f", "sighting--943cc017-7b4a-498c-8945-a1a8c2b577ac", "sighting--8abc771c-cc54-428c-8ae1-851c15f9b983", "sighting--542f0bc0-71a8-4c90-bd34-7fd6482e13e0", "sighting--96c7613d-acb2-491f-b9ae-02335804e9bc", "sighting--791e5b62-0ae0-42b1-a8e7-0972571fd5f2", "sighting--4887ae38-ec01-454e-b7ee-85ec091743e7", "sighting--d0176061-215e-45fc-9b65-55eae22fbdbe", "sighting--0383e7ad-da4d-48f9-ab7e-fcb2bf9d849b", "sighting--a9df1b35-ac7d-400b-82ab-d5c0847955eb", "sighting--9e73f54b-aaa1-4ccc-8e1f-7857d8ae08cb", "sighting--21f3e592-68d5-4feb-a397-eabeca861345", "sighting--14203f4b-43b0-417d-be91-abe54f2ce6ed", "sighting--942447b2-51a7-463e-9a18-c8238869b9c5", "sighting--18871cfa-d7e6-4f51-a355-7a3ae9b13b7c", "sighting--f570511d-204e-4a4b-9b19-7603c036f41e", "sighting--b14636ec-2c3c-4714-80d2-a080a5893d5a", "sighting--b19f97b3-cfca-4a42-b17d-1dc4a25ca274", "sighting--e5a560d0-4ffe-43fa-9705-0a01027659e2", "sighting--6dab9229-2fc4-4a9e-90ff-2a221f6deeff", "sighting--438a664e-27d1-4f0d-b545-33f8a41a64ea", "sighting--f9a00c28-e3ef-4b9c-9d58-2f5167dcadb2", "sighting--ed7facae-6daa-4db1-a85a-cae8925adf36", "sighting--4bee14f5-3170-44b3-ba18-c1032f880128", "sighting--899fdfd0-bcc7-48cb-ab26-22af8df698b0", "sighting--98c0d418-d17a-41bc-b8c7-5182b723f7b8", "sighting--c449a86a-2281-4882-8656-fae1fcb34b51", "sighting--722095a9-bfd9-4df2-b9d8-933833261381", "sighting--b7497a9d-876e-4d43-9b9b-49be01a7c168", "sighting--b6064ca2-ac31-476f-87ca-9df514d10349", "sighting--76fbddb2-21a3-4681-9efa-3c0ad461ec5c", "sighting--5e9ca743-0815-47ae-a4cb-10160bf1ed50", "sighting--c61a83af-94af-4ec8-90c8-ad5613761843", "sighting--870bab02-ed2e-4502-9660-25e3202b2bd2", "sighting--57ad100e-da96-4b24-9d14-588ce3673982", "sighting--097e5809-68aa-4c25-b5f6-fdcc7f3466eb", "sighting--a1d86c0d-4d34-4dd1-8756-bb245092ada5", "sighting--9c6c92de-eac0-4970-8cc7-78a3aadd6ede", "sighting--ce3afdc3-bab2-484a-9958-6e99d2db6971", "sighting--476d58b8-11c6-4b7a-9ee0-4e0007eed8fe", "sighting--418e98e0-a662-4415-aeaf-277225838560", "sighting--fa0d8bee-6993-4011-bf52-da963069aa65", "sighting--57d2f372-fc07-4cfd-b715-8fa83e5adeb2", "sighting--a1c3388f-c9c3-4063-9263-0ed8909e21c2", "sighting--2c6ef2a4-e58a-4cd7-8c77-421c2d7a5033", "sighting--77c15664-8bba-46b9-9afc-f4323da96865", "sighting--30b06125-ddcc-427b-ae7b-d6f4c4a7dd45", "sighting--77969965-222f-47e7-acd5-c044ab39448b", "sighting--2819b10d-cb2a-4358-b841-82a9d996d348", "sighting--da16e719-0fb8-4a0d-a71a-b2f74d57a759", "sighting--9e6bff3b-3118-4493-998a-da57d1024405", "sighting--322c7a8c-6d10-4425-b997-a69335401ef4", "sighting--7e4406fe-0937-4a05-87a1-6e9cc327b4c5", "sighting--9beef5b3-e06f-4578-b80d-8e7e37b16e09", "sighting--5e837c11-cd1c-4051-8914-5fcd7e5bc752", "sighting--4d355835-920f-42f1-9264-02b346e5f3bf", "sighting--0a912631-6243-4d9c-aeb8-0a982e39f024", "sighting--de982239-ffd8-4bb4-8a74-f6ff5cfe845b", "sighting--309aa40e-9c56-4499-871b-3dfc02a39276", "sighting--1aba0787-6b8a-4f9f-b086-0cd0f186ff90", "sighting--03df1ecf-f025-4540-94a7-4624af6eb64e", "sighting--7cd5f084-452c-4a40-a4b6-c2b2e0d671be", "sighting--e3db5968-07f7-4f5a-8b60-3a5411151c85", "sighting--2bb19d23-f21a-46bb-a612-7e9aa8859bd0", "sighting--b54d9150-db57-4196-9e1c-ed33cb1601df", "sighting--2872bd73-b768-435d-831a-125a8b07b8a5", "sighting--1e6ade0f-9ac6-488b-b1ab-effdad28105f", "sighting--c957cd74-8b7d-432b-b28f-7da61a09db74", "sighting--1fa5653d-dbf4-4193-8830-c79237d931f8", "sighting--47c41051-7325-4566-a2e1-f6988ec14aef", "sighting--86e57bb7-547d-40ef-bd2a-86b7e9c72bd9", "sighting--e5a504bc-f278-4597-b86c-73997163458d", "sighting--5a550fdd-6cf3-4659-99dd-428f0bf9244c", "sighting--436759eb-3874-4760-9c39-c2438957f406", "sighting--a5cd21d1-cc60-44dc-87e7-22be0744e3a5", "sighting--2df60479-7296-4571-87cd-c55850b05917", "sighting--f0287405-06a2-4dc8-82c7-b6f3512734a7", "sighting--0360a06e-32af-4c0f-b542-3dd127e11cb9", "sighting--61d7a7e4-63e5-4cd9-87f1-2b875d92216b", "sighting--0df6e94e-a7bd-429f-8878-ef682e8b9e1c", "sighting--fa4e0d59-d002-4584-8aa3-52555d220e09", "sighting--f8ad9ade-47f5-4a29-a72e-1f78e823c38d", "sighting--de3de8bf-f460-49d7-993c-a9aec54c5b23", "sighting--497a47a4-9045-415b-aa95-4b9d18dba207", "sighting--4e4f339e-6726-4ef9-8d74-e86ed2bab4ab", "sighting--09829c61-a8b3-47e8-bb15-dae23013443b", "sighting--f4f90d68-d978-4b50-acaf-56f727b9297d", "sighting--b84179a8-5a80-4cc8-a342-2d418b4eaf39", "sighting--fac14652-7ca0-4d0d-a177-0d5fbd3f8291", "sighting--cc7eb616-be78-4527-a596-d47e65cf8fdb", "sighting--d1065716-ee17-4625-97ab-dfd2abeebe8e", "sighting--6ecb418d-ae46-4612-9d79-5e741ed4c8ee", "sighting--966a33a8-b273-4f88-b6be-1e022d8492f2", "sighting--a3e07e9c-55ec-4e3d-ade8-02df585dcbac", "sighting--3f961060-5858-45fd-bb6b-3b17829eeee8", "sighting--7498d639-4ef6-442c-88b0-21670b71c3b8", "sighting--58c8486d-db7c-4065-8013-fbc7db8f365e", "sighting--3e5621a8-82ad-4af5-b6da-7f4acdea394f", "sighting--90ae40af-2ec4-4b56-9122-7f03e21b9ad3", "sighting--0734eac0-8f9f-4b1f-86f6-05c10bb960d5", "sighting--0c5eaed8-8109-4ed6-a290-083b9c49cd1d", "sighting--9fba17f1-b3af-465a-a5ea-8dd9cf3aa5a3", "sighting--09a3e861-c6d7-404b-a5e3-da1d1b2f056b", "sighting--f056384e-7c3d-4470-8373-483332f84ec3", "sighting--34f8fdeb-7a75-4fbb-81a6-28ea53ba8267", "sighting--4f706617-593b-4830-b511-509fedbf9605", "sighting--cff2ff4d-f5a5-4484-adf0-9bfaabcda8a4", "sighting--5f9d2899-5b61-4249-939e-c2e143291a3f", "sighting--b52dfb9b-b37f-45ab-8f4d-850f20adf8e3", "sighting--cc531adb-a1fd-47fa-9c52-374dbdfc9fcf", "sighting--824d2aec-db76-42f3-9905-6717af6bf408", "sighting--fb2942d9-b64f-4313-86a2-62f06a419e7b", "sighting--4847d604-92f9-4b3d-825a-cca8e3dc63a7", "sighting--01b4b4c9-4c9c-4519-b74c-a4ce22257d37", "sighting--77efcba6-9b92-4360-ba25-4e4f5acb311d", "sighting--7b5dffa1-436b-4d1e-8ad6-70e7eb727ca8", "sighting--c1ea630e-ecfc-42f5-98fa-e9e54766d139", "sighting--8044d4eb-3220-4e69-aced-3a65d2b60820", "sighting--08fead62-ba9d-4756-a209-3228cf52ec9b", "sighting--a606637e-0174-4953-a1f9-3dcc23349ed7", "sighting--2b7ef969-802a-4f1c-baec-8b3190904c9e", "sighting--eb04f4cf-b246-48e4-8908-a9ece728529e", "sighting--4e20bc12-068b-4403-bb12-9a268a7f2091", "sighting--edf373c8-f160-4e05-8816-486b8fa2b259", "sighting--4b39bfe1-d9b2-40c0-a435-30ab2ebc7cef", "sighting--b2e1594b-2aec-418f-a84e-1903d251714d", "sighting--8e4a24df-accc-4097-8b6a-119dc86ec54b", "sighting--6aa40f4f-1317-42b4-a4d6-842af0811b2e", "sighting--1e368469-0cb8-4ff4-a532-b13c1f85b364", "sighting--8cf3addd-e54e-4d65-9b29-cc7b18c94b5d", "sighting--242d096b-0fe0-4781-a1a1-fe3de6df470d", "sighting--5f2a6270-cc2c-4620-a69d-01f2a6cb754a", "sighting--b7e9230d-5cd9-482f-be5e-81890f309da5", "sighting--4f5827bf-7dda-4259-b6a0-22325a79fe59", "sighting--8775f314-087a-4f23-9d78-9f71e0719482", "sighting--5c1b7401-f912-4547-9f76-cca25c6466ac", "sighting--be3dbcaf-08c7-4ccc-89ca-9eb8b5c7889c", "sighting--d32d7862-c6cc-4ae2-917d-940fde7f618e", "sighting--d4a9eaf8-392d-497c-b8cf-eaa1b1683d5d", "sighting--25e8a2d7-1bed-444a-8c6e-aa204c9f50aa", "sighting--83ef612c-16fc-4d62-b9f6-427b67ca0760", "sighting--bd1afc6c-a622-4115-a8ff-723618f13aba", "sighting--130c4e8b-e5b2-4aac-bf7b-e4a7b1755665", "sighting--77bc4cdb-280c-4cac-a1a2-3eae3a1b094d", "sighting--492430b6-c127-4bd3-896d-b3afccc2a55d", "sighting--007da9dc-dd78-420c-b6eb-03f191829fa9", "sighting--891653e1-f99d-4175-833e-5adeeff64c24", "sighting--f58c6684-c2e0-486e-8560-07af2b13a718", "sighting--ffb1d42b-ca88-471d-8c19-6c2d2b043aba", "sighting--8383dfd5-ea9b-4ea3-82be-55e067286f14", "sighting--3fb27331-532f-4414-a130-a4007e513eec", "sighting--6a48a668-d6ca-4ef6-91d1-bda65ff24f90", "sighting--36762ece-217b-4fc5-8b20-d56b5b4ab134", "sighting--4c100650-cc57-47eb-a5e1-7d6928d43c66", "sighting--c9bd0d13-0550-4636-8cab-e8e274f2e7a4", "sighting--fb7e736f-c126-49d0-9bd0-82c3717ab5d2", "sighting--4736f86e-2394-4f4f-a33f-6cf12a53d49b", "sighting--fb5d7791-ccea-42b1-b393-de78ecbbe02b", "sighting--91c2f360-5f5f-4fca-b4cb-2e43af98de08", "sighting--bbed6bc8-81a5-4ad5-9f10-39759664d5b0", "sighting--bcb7c834-42cf-46dc-ab93-d715664643b4", "sighting--84c39110-3420-4fa2-bd72-806ab4e6a8cd", "sighting--8614d2be-3021-4fa7-92c4-150503f60d0a", "sighting--f4c661fe-3d46-4584-9730-27a329f30c64", "sighting--04c03517-284a-44c8-ab22-cffc012d3b83", "sighting--4fe490a0-9c23-44a9-8c8b-44e527449897", "sighting--90270de0-a5ce-4ea4-b335-44a41c44087d", "sighting--0233d9c7-2329-4dcc-9a78-c88abf2e4c51", "sighting--60ca93c7-c328-428a-9266-d451911fa4ac", "sighting--2d9b804f-3f48-4aa1-834e-4bedc82d4a5f", "sighting--3e9ace38-1fc2-46c0-b894-10edcb858424", "sighting--44c53647-0225-443e-8c57-daa22bf5645e", "sighting--0053edd6-0886-4928-9a2a-a59be122027e", "sighting--2b75a19e-e374-4c9e-b4a6-2d8c3dd93e12", "sighting--d73d7a26-9851-4285-b248-286e269cc5d5", "sighting--47a1318d-fa49-4b20-98c7-87aaf5995aca", "sighting--b610505f-03c8-4244-b1c2-fafb57051cfb", "sighting--0148c70b-fa9d-46c1-a5f2-10f8faf236f2", "sighting--5900397f-363e-464c-971f-c1d915917da2", "sighting--3b17595a-c391-4c35-a016-8df7115a0462", "sighting--4643ba38-f428-4c8d-8371-af26e584ce08", "sighting--bbfb933f-2525-407f-aa26-0de4cd0c3d1e", "sighting--bdeb9bbe-19a6-4563-9df6-76beb6f207ff", "sighting--2203705a-aa7b-4542-9a40-2ec2cbdff706", "sighting--5bbee60e-7d22-42a5-b566-bce755853d0a", "sighting--94b9cf99-fefe-4aad-9f7a-541f699f11ba", "sighting--32681eca-9b84-4dda-bf07-41c4efab0b06", "sighting--a745496f-e230-472c-a79c-0fae776b8642", "sighting--38dfd611-f846-4e3d-82ea-f0bde967eba3", "sighting--b8e18335-1738-4358-8133-7d8070d69f18", "sighting--0c81e3ff-f01c-4fb1-a05f-d383d95bedcc", "sighting--d8b12303-b688-4f06-af15-997ce2eb0d3b", "sighting--18afcfe0-ccfb-4401-9857-96ea55fb3b32", "sighting--c3a786b7-121e-47f2-867c-16c3befa9a2d", "sighting--35eb49a9-c061-4154-b7f4-1221f85ae815", "sighting--173e3ae4-7865-4654-8a8c-4b5eaa169857", "sighting--b1786ff1-e22e-40f3-a097-00948be8b175", "sighting--3e42c570-6c14-4707-80d6-586e4e0398ff", "sighting--a414e30b-ad2a-4af5-9c73-502117e8b3c6", "sighting--d4c4cb28-3344-4d61-a622-751c332e8888", "sighting--8aadb785-eb62-4799-98a1-6f8ac625ed98", "sighting--0ebe29be-37db-41dd-8a2e-722b8df90d0f", "sighting--01897735-c543-4042-aaac-44122dd2194b", "sighting--7ad62813-acbb-4550-b433-799439e150ba", "sighting--11167b87-9ed1-42d8-bb8a-b94459e19be5", "sighting--336a8434-5e28-4c8c-b3a2-869b7d8dcc16", "sighting--f79b3f7f-af1c-49d5-8900-dcfd74ae462e", "sighting--187f17ff-7282-452e-bec9-0421efc83cbf", "sighting--f58d0b45-1b53-41a6-b15e-8e88c8f4cde7", "sighting--bd06186b-2e3d-4930-8be7-5aa37babf1d9", "sighting--7c7a2c10-daf0-4cda-8ff7-c09aaded204f", "sighting--87a8235e-fa95-4df9-8417-bf13ec81afdb", "sighting--2a08c1cf-99ff-4f9f-88e5-78389b0be58e", "sighting--20bf50fa-1070-4ad8-bfc1-6d99f11ae97f", "sighting--783f3aa0-d427-48aa-a68e-e6939899af16", "sighting--d7861d0b-027c-414a-9d84-b2e76d63cdc8", "sighting--07b77d17-a612-4669-a32a-20e124672056", "sighting--31a47b63-79f1-4027-8561-38691af6ebc3", "sighting--2a5bafed-ecc2-4200-98a2-63d09a786a2f", "sighting--55d5aaa0-5558-40a0-b993-311f37dfdeab", "sighting--192b26e7-c4a4-432a-bb6c-9d351166d4e4", "sighting--7d24a5e6-3f52-4915-bc55-0c4f369925f4", "sighting--1a56b6bc-24a5-4356-a1e9-dab529150e5b", "sighting--dbcb0fc5-a265-4c12-96ec-33ba63cbefb1", "sighting--1ccbd00e-5261-4b71-9ac1-b3791e32a887", "sighting--aba3afae-aea1-4082-beed-1a676a6f4d96", "sighting--fed73495-826e-4c3c-9d06-b19190574b52", "sighting--3542ec69-366e-446c-9626-4d6d353dfa6b", "sighting--7f575fb1-1d8a-43f5-9109-076b03c9a930", "sighting--21478f29-7800-4f02-9b25-c11cb77fdc68", "sighting--95b2cd47-a598-42f6-a236-c956f007582c", "sighting--d4cbccd1-7756-4758-9463-efeb4a933626", "sighting--761321a7-aa47-4675-b802-47a570683960", "sighting--9e8cc123-c3c3-4632-991f-b7ae66d2457e", "sighting--7a85efa5-622e-4205-a5e9-5e01daebb61c", "sighting--90f68821-665f-4eae-bec5-4e30f1b7487c", "sighting--988d87bc-98b8-4ed5-9c53-8da9e087e450", "sighting--3d5f377b-f980-4252-bb50-ac6a809602b0", "sighting--3cefeec1-b5c4-4efa-aacc-7b1f3f05afd0", "sighting--0c0d316a-fa07-4677-8969-2f741d1421b6", "sighting--fecfaab3-83e2-4727-9c5c-4afad871535e", "sighting--0abb4f2c-342a-4fd4-802c-522119ba6653", "sighting--4e51abe5-384b-43b7-b338-919992bbd8f8", "sighting--0adf4bbc-3918-4da6-bc96-3f7a95648c87", "sighting--38b30054-768f-4c99-add5-ca3b1073735d", "sighting--f42c3d14-6392-4384-9955-891ef9543f31", "sighting--f847f26a-8b67-45f2-8294-5b441cbc5493", "sighting--5c45c477-b110-4371-8cdc-2c8c03f77893", "sighting--bd949812-a232-46e6-86b3-2a77c03b80ab", "sighting--c823a7c9-0c66-4da2-913d-49b0197fb0b8", "sighting--560805b9-8725-4608-9717-c1b3adfcd49a", "sighting--7ec1174b-725c-42eb-9854-4b63144f0735", "sighting--5c8f3b50-6a7e-423f-a725-97336805237a", "sighting--d3d8293c-cde7-4cb7-b09d-74dcabd2890f", "sighting--8273e276-0fa2-4f74-a1aa-399d4998fbac", "sighting--d2c651b8-60d7-4da6-ac72-eb56079c12df", "sighting--d4b2ef85-b6df-4dbf-a1a7-a88d1d03aeb1", "sighting--66f3da8d-0870-47d2-a883-9eb8fec632c5", "sighting--e0ff0886-c90a-4090-a1ff-f35de6c59e52", "sighting--e15a390d-7155-465d-9476-db117c21e337", "sighting--33879bf8-cc3e-40e6-bc06-c36b7ff0a0f5", "sighting--9d46b2e7-1f21-4842-a2b4-95722d966878", "sighting--619bf6e6-30a8-487f-bba7-71423421ddd3", "sighting--7787ba82-4632-4292-8713-165c22372a47", "sighting--5a238b40-92c7-4c2a-a783-f892f99844ba", "sighting--31638775-4db8-48be-8336-ed2dd264b3aa", "sighting--d64836c2-e821-432b-a410-80279ee46cb2", "sighting--972bdad7-249b-4094-9f30-23afa3577a92", "sighting--cfeecc8e-2e7f-4d9a-9cf5-f95384badbcb", "sighting--93ad851a-f422-46a8-ac46-81c7e26e234e", "sighting--0cf949bd-15ee-449e-aff7-8ef4d4be5c0c", "sighting--8b497cc8-9427-480e-8fe2-b23792f9f3a2", "sighting--735f74d5-da8f-4239-8914-62d6be42cbba", "sighting--7c05fdf8-906e-4826-9aa3-0c67a7f86e64", "sighting--4553870d-3118-4713-8f59-fdc327d1b834", "sighting--d466b8d0-3a9d-4670-a58d-1072164f0f25", "sighting--e1e55690-9366-4716-b3a4-753107c2cbc9", "sighting--12717b2b-985b-4d7a-bc39-1eb0ea0e303e", "sighting--d0471fab-da5f-406b-8edb-f216a966d9b6", "sighting--685a8f91-3af0-4b84-a2ea-33ed5ca3e257", "sighting--4f1b69fa-53aa-4ea8-ae79-5ed9341106eb", "sighting--fc2144d4-43e5-4aa7-b092-438ec342112b", "sighting--21cef06d-62e3-499f-a0f1-6967bdc14d4d", "sighting--80f77da0-1110-434d-b609-f2a7c5767b45", "sighting--5b3b8401-b9fe-4bf6-b71a-c57983627eef", "sighting--df23cc1f-8deb-4463-b688-b37367465ecd", "sighting--5e8758d1-767a-45dd-90b3-2ab0df7f3b42", "sighting--318eaa4d-ec4f-4ee6-b034-e73742a373c1", "sighting--1db44b4f-8406-44fb-bc19-4eec1ca5d030", "sighting--d49e22d3-e831-4a22-a7d8-08964515a1cf", "sighting--6ea8b4d0-97a2-47c5-8089-27f209adaa18", "sighting--8a7ea213-7099-4ef7-9f1e-78435e6c0beb", "sighting--58289cd2-2630-4213-8a7a-ab96ddf3379e", "sighting--b519ed22-e5ad-4ee3-b9bc-89767a1df6a7", "sighting--e26f2f1c-66bd-4c7d-88ca-91aacac2a892", "sighting--3d9b6971-8fe9-4525-b9f3-583facc59a03", "sighting--8484d65e-b05c-4894-a04b-2491125f34ae", "sighting--c3c708b2-3031-4b98-be4d-2258ba29af84", "sighting--f0ef22e8-d8c0-4638-97c9-eb64d3a8e7a3", "sighting--41f18ed8-4be9-4490-84ab-149f2e395cb0", "sighting--79b00970-56f7-43e7-8749-6be8c106ca0e", "sighting--98788161-f7b9-4b55-9673-9ffe9c47b8fd", "sighting--e6c53927-d0c8-4574-ad8e-e8e6a88bee80", "sighting--6ae9cabe-bb69-436d-9795-2d903a5ef90f", "sighting--376b50c7-ed26-4253-98e7-9febc8153d44", "sighting--7a008ea3-7c39-40a3-84bb-6db0c733558e", "sighting--b7885eae-700e-400b-bd86-e13102b44771", "sighting--a53d93de-5ebb-49fc-a396-f0dc268e174c", "sighting--502362c6-c417-4df6-b17e-88157d531010", "sighting--23ccc0ff-802e-412e-b141-571660e4d9f2", "sighting--46d70fea-6067-4c31-8e9f-d94b010fec04", "sighting--6be8bd16-9f30-458d-a62e-99bf1232d346", "sighting--19522670-8c99-4740-af27-965c012f72f1", "sighting--196be890-e605-440c-9111-dc07e8972c84", "sighting--e560284e-c9c3-4a7e-9099-422f101b064b", "sighting--736e7b6f-3a2d-49b1-bbfc-28af38ba6163", "sighting--d6268d2b-a60e-497b-b2ea-8524b1288a92", "sighting--b40c8a56-104e-4d26-8179-a2d7a33924c7", "sighting--be2d2c8b-b620-4ac8-9d2a-959574e1067d", "sighting--9b601210-3a42-44c1-a782-5be3876d16dd", "sighting--a5b73a61-2feb-464e-b43c-aa06184fc1ca", "sighting--91a81fc7-7fee-4bf1-bafa-a311c9351fd2", "sighting--e67c25f2-9c90-461f-8d0c-68be0e16c325", "sighting--4d2166a9-061f-4198-98ef-70643261d0cc", "sighting--dbcd93c3-30d9-4bcd-99f1-c892db73e475", "sighting--66799e74-0b84-4e31-95b0-f3749d7f189d", "sighting--2813b748-bf4b-4bcf-b1f7-e3394d45e18a", "sighting--29c9d4b1-4029-4cd3-810e-8d365515bb2c", "sighting--3acd1f46-a964-49d6-9eb5-caf8e513e608", "sighting--dc5d3035-f569-4c2c-80f4-3385022149cd", "sighting--dc27eae0-37a8-48e0-98fa-fb7155a3b467", "sighting--ad15049f-1633-40f6-95a0-85d8629433cd", "sighting--d36e6f48-d060-4bed-b89f-86ab827aa0c4", "sighting--fb488fa1-7adc-4e71-ada5-cdfd27ec0eda", "sighting--086da2f2-4764-4cbc-9b27-b8244105c779", "sighting--40e9d95f-bcba-409a-bd61-55588427dd0c", "sighting--70838f8a-cf32-44b6-95b6-b79020e85664", "sighting--dbd9139d-d9a4-4eda-b60c-b094097f31fd", "sighting--ac969ea8-87ba-411c-b17c-f4c6aade52ec", "sighting--40965be2-4b03-4ca7-b1f8-a1985826319f", "sighting--ade0164e-be34-4dc2-b70b-e3c7845b30a5", "sighting--610fe823-6171-4a9d-8529-9f590f54a465", "sighting--1202bf17-528b-4253-86c5-30470a2ceeb6", "sighting--eaf99a65-3bf0-4802-8e18-d2f4f7abea5e", "sighting--e8bfc9c8-d69a-4b8d-bc92-7107e96029fd", "sighting--3d6cf318-2d4d-4b6a-90c8-43d41255b82a", "sighting--31f04457-c322-44e2-a201-109eaba2440e", "sighting--fc837a09-6270-41e1-9a36-7f36ddd4055e", "sighting--69e4277f-ac5c-463d-9fcd-0c97bf07441b", "sighting--a254bab9-c86d-45bd-a27e-a92e578b8544", "sighting--11a15d52-876a-4884-af14-391d25945b15", "sighting--6c568b85-b9ca-46f5-89c2-126af3b2cd76", "sighting--436481d0-aeb7-484c-82c9-e50ad07e1b69", "sighting--a8da4528-6507-4611-a8cb-0e8ba48b55a2", "sighting--3eadd3ad-0acf-459d-8c30-5bd39e952cf2", "sighting--3efa7969-3ee5-481d-903d-ab73a2b5e1f2", "sighting--221f2b4e-9ec2-4142-999e-1916fc0cb516", "sighting--584b0e40-fe5b-40a5-8230-ffe579505def", "sighting--634fce83-6d04-4ce4-80b1-154bbd3d2b87", "sighting--f31dfa1c-b013-4684-97e3-884267ccb23c", "sighting--353bda7a-375a-43f2-bfc4-779deb9b8579", "sighting--b8e4f01a-c127-436f-94df-c6885e52d3db", "sighting--5be476a0-ec4e-4584-b55f-e1c3778b729f", "sighting--6123189f-9fcb-4fa4-9e32-a8691343ed41", "sighting--7983b93c-9913-474d-b5ef-a6ab19c81ba5", "sighting--d9fad544-b4f5-4467-8347-5e2081966034", "sighting--dcdf4582-bd7e-458e-a994-0ba7a1f78ade", "sighting--517755ac-98cf-41dc-b98f-2ffb9cc6f2b9", "sighting--a44fef37-3db0-4fd4-b7d4-4637c391eb3d", "sighting--0e087c8b-f9cd-4d23-8037-feefe1f0abaa", "sighting--f632a8ca-533a-4226-ba26-5e98757c0416", "sighting--352676b7-742d-4e25-9a2c-b8d07e9b522c", "sighting--bb7f7954-af95-418b-ab2a-2bf819788436", "sighting--d0df149b-84f3-4192-9ee4-27f1ce007260", "sighting--9bdfe6a9-383e-4ad9-9302-d47ffa5a8f7f", "sighting--d34c93c9-6fa3-4496-bb09-3d2aa2d14d73", "sighting--2aae38bb-8070-4d02-bb20-a17854c16b0a", "sighting--8fbba58b-8352-4657-8aac-3c06f32c9456", "sighting--58e775f3-9aa2-4784-bc91-ff5607d9becb", "sighting--56cd21ff-5913-4806-9033-0b51c752ff01", "sighting--d837b4c1-7e03-41ca-966e-a328faec0aa2", "sighting--4ecc6fab-e0da-4977-8a83-ee9fcdff698b", "sighting--7fa436f3-8f6c-4a15-80f1-f6883b8ebeb3", "sighting--4513ab79-ed85-43fb-88ed-1a3f48ab3e63", "sighting--879cf907-4e89-47ae-989f-4dd7f0d92991", "sighting--a9464a0e-5f69-4392-829b-e148396e432c", "sighting--85ff84e0-8846-4081-965f-9e152ddad153", "sighting--552daeb5-329b-46d2-b1b7-52a006cc4a51", "sighting--f8a3ba8f-ad2b-4537-9365-f7dc6b9884bc", "sighting--deee5b83-2005-433a-ad94-6643ab14d422", "sighting--58331d52-51cf-4c68-9b11-a3ece17b90cf", "sighting--d7724ac1-442a-4a7a-8400-5003663b116d", "sighting--80f680de-3735-4bbd-91c4-ad1a1c163b9e", "sighting--5c995c21-b079-483a-a6e3-89c56728bac1", "sighting--444c21a1-e461-4303-a130-c184578f6e02", "sighting--66fa008b-bd1b-4a6d-bfbd-c4e0575a5e2a", "sighting--d960171e-067f-49dc-aced-b33954b0c6bf", "sighting--f0490171-6937-4a7c-a570-58606415542b", "sighting--87ebadc5-5827-4a4f-8fba-efb7a643bf08", "sighting--fa1c6e92-5bd0-42f2-9d49-c975c536682d", "sighting--c1ca9079-9e38-47a5-911b-9a252c9a2870", "sighting--a6172f63-7953-4a11-b92e-74c238369e0a", "sighting--81a79d5f-3389-4aba-a9c5-62463b674cb1", "sighting--6fba31a7-9883-4786-860e-454053630868", "sighting--56ebf602-5c44-4a29-b654-a3cd274307b5", "sighting--b5ba5115-f5cc-42cb-b38c-1917b1923541", "sighting--4f06ba0c-a34c-4050-a498-5773cdb986ba", "sighting--cd603563-58e6-4171-a5fb-4352e4c0ff12", "sighting--f9eff9b6-e00d-4c76-8404-c669910fed76", "sighting--e15c6210-cad8-48fd-b607-f9decd4663ae", "sighting--a1e1325b-c2bd-414e-bdbf-a4a8e8948c87", "sighting--b7ec6ad8-9e92-435a-aaa3-cc2d1879567d", "sighting--50a61a1b-7cfa-4beb-9d0e-f1bc12f6b49f", "sighting--8ef50946-ce82-492c-ad04-32366b199f89", "sighting--3b5e4be9-807d-436f-b355-412465c8cdea", "sighting--03debd57-d641-4b9f-946f-38b82f818639", "sighting--5196bfd1-2b0b-4473-950d-62baedcd8c56", "sighting--042ca11d-e4a6-4449-b0db-1228604f8e79", "sighting--cadb81c7-d3cd-4174-94f1-6c7970c0cc8f", "sighting--904b1449-412d-4120-aa07-a79bc846c5bd", "sighting--13ab64f9-41df-41aa-9645-763fc35dfc54", "sighting--078faa0b-703d-416b-af0f-3ea79d08570f", "sighting--4894236c-a79d-4166-91c9-2021c30537ac", "sighting--b7f3ecda-975e-44bd-8df5-0f08f4e39ae6", "sighting--0ffca59d-fbe9-4775-8e66-564a31e03d56", "sighting--3203b7a6-79b7-4d7d-8299-75e622783f2e", "sighting--3ce2c143-6a29-4e8a-a1a0-b724b8bd913d", "sighting--24eb4c62-3451-48b5-9be1-dc6ef623e0cd", "sighting--d767d9bc-848b-4021-8073-7ef90f41d82f", "sighting--5a3ec319-402b-4e98-919b-fe5b0c0d1dbe", "sighting--5deadca6-b8db-4e1b-8d72-48ad33c13538", "sighting--c46d1d60-5232-496f-a8c7-a8b95bb624a8", "sighting--38c05f30-d60f-425e-b193-d45174025a61", "sighting--0f12ffa9-2ec8-4659-a284-e4b6d505e83d", "sighting--c9deefdc-800a-4f09-8c72-b18a5c5c2032", "sighting--fcebba1f-9ee3-4734-87c3-6df7b8787d3b", "sighting--407f95ce-e125-4108-a14b-ac968e9ea298", "sighting--09061c70-88e4-4b7e-9531-1ba002e2a34d", "sighting--17a57cb0-2ca9-448a-a5a0-152d7aef3a53", "sighting--f430e527-ab6c-47cd-b6b6-dd9af4582219", "sighting--6b94f5e1-d678-4934-a67e-a71abe9bf304", "sighting--be1dba0d-9639-453b-8bfa-1d466ef8befa", "sighting--4a6773d0-8633-40c1-8374-c6c0806e6a2f", "sighting--030e3245-ba79-464c-a043-107cc1144dd4", "sighting--ca44f234-dbf7-4ac4-b113-bd454ab4c57f", "sighting--2cdf35a6-e22c-4ea5-a88a-1f78e5290370", "sighting--03c20213-8441-4a7a-a61b-2d39820c6670", "sighting--b43ba7e0-c379-4c66-a6fa-bd66a32edb97", "sighting--9bc1f633-42ec-4e2e-a0ce-1fc87d44aa2d", "sighting--cea0cbb0-a412-47d1-aa9f-d97af3a28dd2", "sighting--6b9d8403-8798-4f8d-8271-287360c13419", "sighting--b486e75f-c218-4607-9f8d-37362bdf6200", "sighting--96bd0d4f-58c4-4718-b0be-5aad2ec43db4", "sighting--383ed69e-e0cd-424a-93eb-7637c311e818", "sighting--8aed9740-f86a-440a-a85a-0e8325ee5a95", "sighting--a86de6b7-1f49-4990-8d9f-bec720796d08", "sighting--a730e2ba-0b16-4587-bd34-bb7b6a753537", "sighting--eec93440-5e79-42d3-be3b-dd71b342ce7f", "sighting--ac7a1192-e50a-4c68-bc17-35bd94d75ef6", "sighting--69b8fde5-3fad-43d2-9e19-6f50ae072c17", "sighting--0a811e62-e59e-4306-b5e6-808b4f116547", "sighting--832259c6-2557-474d-9f81-8b5b1ca2841e", "sighting--9d50f405-cb1c-403c-8f91-1f92e7b955db", "sighting--665ae059-cea7-473f-856b-36dcd8f7ba09", "sighting--5a2d63bf-82b7-4ffb-87a7-1e0dc5f934fa", "sighting--ec339075-c9a1-4415-bb66-49c25796c938", "sighting--a65e2d2d-cebd-4f6f-970b-6ad9de1f639d", "sighting--228b9c1b-0dba-4f8d-88e1-cbfdf6e447f8", "sighting--18b50824-440e-4a83-bb17-94dd166a51a1", "sighting--338da667-86bc-4d70-9b67-a67f4c40f009", "sighting--05681f76-6925-42e4-b1f1-3bec1dd5ac26", "sighting--80c90a38-c731-4a43-baad-490907d97a0c", "sighting--fcf6f684-1bc8-4486-b38e-ca65c32b43b2", "sighting--64f0dba0-e213-473d-b32f-766b3204fd8f", "sighting--6a41a3d2-45d3-4419-9817-96ca8dd3d9bc", "sighting--e7783a2a-65c9-431f-b143-a8aad2f817b7", "sighting--becae296-52f2-4dfa-b9d9-d55053c90302", "sighting--9cfddd22-d6ca-45aa-a0ec-7b566e324325", "sighting--10155331-1cf5-4e25-a82a-d0ee90cd1532", "sighting--62239522-ee1b-4e8e-b053-c066e9c0b9f4", "sighting--de4ea9f4-af45-486a-b911-4855b11e5ca1", "sighting--00df1890-0396-4d7a-965c-58d897fe56a1", "sighting--7484dab7-af1b-4e59-976a-f9e71a2c7d7f", "sighting--02ad8bd5-1c92-4832-a515-f85a3a5aba41", "sighting--59df6c53-429a-4890-bb37-342d4db6beea", "sighting--dce30071-6a8e-48b1-a2df-862b3cb85e05", "sighting--ea337355-b262-41f9-9583-da8fd4767fae", "sighting--949d3a9b-f76c-4ad4-bff6-77d9ee9198c1", "sighting--abef12e6-b08b-43a1-be29-a6fd4cb1b5c1", "sighting--45a6c4ec-87d0-4898-b2d3-a5e6a79d99de", "sighting--f934d8a2-59dd-4ae2-805f-4a6e5186ff2e", "sighting--94667c4e-8f9c-48ac-bba3-13501d39905c", "sighting--40ba3b4b-8ef3-4dac-8f48-647b29698d6b", "sighting--70ac16dd-1f2c-452b-9c17-56f901a7b5fa", "sighting--38ff3e2c-d91f-4920-b99e-16e70cd98195", "sighting--2b7134fa-61fa-407c-ba3c-667263cd286c", "sighting--e1fdbfc1-7621-4817-848b-e9a47b7396cf", "sighting--844c2386-d937-472b-942e-12649557a6c3", "sighting--fb298df1-71f5-4d20-9605-97ebf824e7b5", "sighting--7a738bc0-9aee-449c-8560-7427f8eaaf2e", "sighting--055fd96d-bee3-4363-b90a-9db523e6d0e2", "sighting--354062a2-8018-483b-9a66-464705564275", "sighting--8d77bfc6-ce3e-45d3-a5ca-234b2c566c77", "sighting--ab3148a4-4051-41b6-a775-655713057d8e", "sighting--14d0e006-8ba8-4cb9-a6b2-14f59875af42", "sighting--cb897f03-5537-45dd-b575-dd8a86278059", "sighting--1d7d4593-e036-4746-b20e-759005832da4", "sighting--a108111f-bd54-4335-a85b-1ebd04dde2b1", "sighting--a3931cc3-2cd9-41ae-9ead-2ac271d1271f", "sighting--e6393385-3c48-4456-a338-a9c002a16108", "sighting--1a31c5a1-91f7-42fc-bc45-45838201395c", "sighting--1b77a1d5-c290-426b-9b87-f8f1edb35345", "sighting--3090bed5-07c3-420e-97df-f80e3c702cb5", "sighting--7344f779-8563-4195-9ac4-aa15615a0e4d", "sighting--20582713-e74e-48c6-ad1d-2836476a7890", "sighting--569dd0bd-d769-48e1-877d-751afda93f6a", "sighting--bf5e94de-a76c-43a1-aaeb-7b28b0acb54d", "sighting--749a8713-eed5-44c8-801c-3e86adf98651", "sighting--df7a5fd3-ebc6-4985-ad40-a8f9cc8ce919", "sighting--98ef5698-f6f9-43f2-bcb9-11b02288bca4", "sighting--e891e79e-66ce-47af-9163-fab4d86014b9", "sighting--54dc5ef3-6b8f-42c4-84b4-a3e9f0c11c77", "sighting--e490f667-daf5-4f22-becd-428d6a4b4c14", "sighting--fd18be0c-a055-41f9-9641-c0e7c1b2e8ac", "sighting--0ab113f7-e0e2-4e4d-bc1a-30ba7b10f92a", "sighting--6b673d0b-a28a-40cc-89c7-8c3b6958d142", "sighting--e7b6b89e-1924-4183-a934-8dc503077c05", "sighting--3b14c690-ed7d-4a22-a3f8-73c2a1238ef0", "sighting--d839a3a3-c1a3-4864-bb8e-3d7c3ba4789c", "sighting--0877cf9a-b11a-4041-92d2-afb53688c321", "sighting--a11b3074-b5a1-4633-a75d-a644e00a4bc6", "sighting--b41fcd85-4f13-48a4-97a5-90cbdd24a90d", "sighting--d6119a97-79a0-418c-8c8f-088b9b080ab9", "sighting--0273d24e-cc51-433b-ad67-0a1ae52c2577", "sighting--1b760fa2-8d97-4f9b-b539-9c6ab21877e6", "sighting--2f558a26-077d-481a-b720-0ec2a6fdde28", "sighting--8268bc91-18d3-47ec-a177-1638256bc880", "sighting--7cb4d3c2-12ce-41a8-85b3-ac5a9745cfc8", "sighting--3e792554-a678-4e87-986c-ff54cb67e58e", "sighting--1af2e752-2f43-408e-9924-e3080677c430", "sighting--03c9e5e3-d014-46d1-b3f1-64cf3ea69870", "sighting--ff40ca1f-e158-47d2-8dc5-d055ea1afdd3", "sighting--4fb1b447-e81f-458d-aab2-9d876fb8d123", "sighting--fb42cee4-9c9c-41d0-8537-9da28a8bbc18", "sighting--0d23aa74-ac43-49b1-a5a8-bd0dc7b424df", "sighting--164a88a2-8986-4710-870b-970358a2d60b", "sighting--e5e01253-33c1-4191-b030-4cbb96b73c2e", "sighting--730bfffb-cf67-4bba-9b2f-5ff9e692df75", "sighting--658294e8-c5df-46dc-9f1a-02a2f6abcf9c", "sighting--9a15760b-8203-458d-bafa-f84d3e02ac3f", "sighting--a53e7d98-3f4f-427c-b31b-a2a545835e5c", "sighting--a4fa70a0-2e47-4132-a0a6-2aa48b672171", "sighting--40827173-3933-4bc7-a98e-9280e429cf4e", "sighting--a9362e36-039a-4043-9c74-1f1e232bffe5", "sighting--19835de3-2996-478b-b3b3-cf29997d7714", "sighting--d04e2004-0f58-464e-8c12-fb5bdcbe4f3c", "sighting--ad4279a8-f2ad-4e88-b66b-379be552a475", "sighting--c8c4892f-4267-4c7d-8406-31456f6477b2", "sighting--c5f27644-2c3e-4a44-b8d7-21c4fb73bed9", "sighting--64b7bbac-c518-41c9-b872-db3a28f9f732", "sighting--3d8585ff-13c9-47d3-8cc3-b18b6a8118bc", "sighting--719039c2-5137-4f95-a7d5-1be1e081bfde", "sighting--197bee05-7cf0-4565-9d41-a7bde7337b95", "sighting--bdc6a0f4-b635-4b1e-8427-00f98da122b6", "sighting--5e9fe4b6-b8c1-443c-a24f-7734e520cf6e", "sighting--19e8ff43-6caa-45a1-8ce4-1a31f58d8a68", "sighting--a8730a15-2ef8-424e-8e97-b1f402fa5f6c", "sighting--4f28214c-8b6c-46e8-b3ea-5802518226a4", "sighting--baa4a81f-a2f1-47de-b88c-1aa55c50e8be", "sighting--1b0c64bc-8803-48eb-9032-41721298f00e", "sighting--1ea3ab95-843a-4766-ba6f-ecaabb41f315", "sighting--437396a6-c1e2-4ca4-b2fc-4d444e0d072c", "sighting--8e5798e7-74bf-4fff-9675-7fb49e532b50", "sighting--80728101-d2b4-4c45-9326-b3db398d0109", "sighting--00b56352-e149-42cb-9160-94d91bded4be", "sighting--5b71421f-f7ec-46f6-8d61-07cee6592e62", "sighting--0657acb9-0c52-4b5f-9d20-eb6200b44ab1", "sighting--c2a8e2a0-9973-40ce-aab6-939dfe02ac86", "sighting--f9b78911-d9ca-4b78-883f-95a70d8e290b", "sighting--87258921-8c3a-4065-9631-779972a96669", "sighting--4a4deba8-5ae7-4eac-827a-43268c302f95", "sighting--c7a86ac7-f4a4-4a32-95c6-1d4408ecebb3", "sighting--e04303a3-c3e4-47c3-a0f8-76079ba124d7", "sighting--13ae6883-3d7b-4010-8141-4b6c920dda3e", "sighting--48c52c21-581b-4c0e-81e6-2de00384a500", "sighting--657afd3b-3e0a-4bbe-9bd6-3b4e97450a09", "sighting--37dc9cc6-25e0-4187-ba9e-3383774229b3", "sighting--9ef5aa1a-ea00-4094-9041-5eb078f3c5ff", "sighting--5c9d55de-ec57-4395-9b29-1e30d1a16d16", "sighting--6c56bcb1-350a-4e88-afc2-fbd9371042d2", "sighting--801f0c3e-6f74-4418-88b0-9b23206655dd", "sighting--75f92f25-5069-451b-afab-c71bc7ccf52e", "sighting--c7e1e74e-129a-4ba6-9693-6d665a6a50a5", "sighting--16f9c98d-3ae5-455c-89f3-8993f1f628ad", "sighting--d8cbb57f-a2d8-4a8f-9828-a230ffeffcc4", "sighting--902b08a8-7651-456e-b444-780b505acb2e", "sighting--f2dc08b5-9d60-41e7-a03f-e7d078245f63", "sighting--a756baaf-5e4b-4ba1-91d7-74919a1063c6", "sighting--5e5434e8-05ca-4248-b12e-1fe31e19a57b", "sighting--1a2c2fc9-6c0c-4989-9958-6a121134ca97", "sighting--609c5a82-8a0d-4b34-a763-28e91ad425d8", "sighting--5fd5989c-3d4b-4c51-aff4-633d3aa2844c", "sighting--32b745b5-f8f7-4d5c-8060-507c815a1fee", "sighting--3556d693-0bce-465a-b543-c82f7fa38c89", "sighting--267333ac-7ede-49be-9e32-adf021a02a56", "sighting--e15bd9f6-3f4e-4f46-af7b-382d2109e9dc", "sighting--587a84c1-7920-472b-94b5-b5983f918007", "sighting--f0291b60-2001-4c44-9f00-6ff6607c4819", "sighting--e9cea1ad-aa3e-4832-a8eb-39dc368f4d66", "sighting--c7710739-e8c1-416f-b232-c6ef43e199c0", "sighting--c830db22-1976-47bb-854e-b4664f06329e", "sighting--741cf66a-993e-4114-aad5-9ae9db089e0c", "sighting--e2175d46-99ac-4ab6-b2d9-3a3de18fa5f1", "sighting--68c2dcaf-9fd7-40cb-a0fd-91a4c8326e16", "sighting--b8646222-55f4-44bc-8df5-98a259bffc16", "sighting--6ee342dc-2a8e-4ce9-b4dd-e01490a60867", "sighting--e6d05b62-2943-406c-81a9-c8a2790816b4", "sighting--e28109e6-845e-47c1-9cc2-cab59f2b6231", "sighting--9b270ce6-54c2-4fbb-ae1e-1194d123124c", "sighting--60b2cb70-f204-40a7-87a9-73f04ff92adf", "sighting--426a2ec2-8690-49da-bf8f-1e2441d43630", "sighting--93fa451c-0fc7-4d6a-abf2-21cf299ad1b5", "sighting--cc715ca1-b452-47b1-84e9-30dab8e8562d", "sighting--532dee9d-16e5-4af6-b85f-64d5d1596d13", "sighting--7cf21015-b387-4460-99b0-679fbda9b649", "sighting--00023036-3392-429d-994c-23509a0071bd", "sighting--552a1bec-da59-4fe0-a5a9-0bcc2e69641f", "sighting--1c944a5e-d159-4276-88e9-5498bfdbda92", "sighting--47860e44-a1e2-4096-be68-38212c3c207a", "sighting--7c02fc3c-ee63-4e85-8301-e8e12266a48a", "sighting--10c419d6-6f80-45f9-9d3a-32baacbba3ce", "sighting--9b54227e-6f6c-411c-84a6-faaaaea0537b", "sighting--ba8b183f-8f16-4196-b764-8ba50059a5b1", "sighting--35515b3d-2e33-4810-921d-c640ec1dab4e", "sighting--7aca6326-579d-4b3e-ab00-c20c7dd25f6b", "sighting--de9d6c3e-1176-460e-8ebb-e0b7727d9211", "sighting--2ba7ef0e-f90e-4537-af7b-0f5e2a8fc524", "sighting--c93c5817-5cf0-46c8-907e-9050760a4a18", "sighting--da3d7308-7631-4818-8623-48c879c44560", "sighting--822f7630-7f76-4a82-9105-bd0545425d73", "sighting--136fd903-6e23-4a97-9ce5-5a3c28e720be", "sighting--bd641658-ae34-4a60-8221-3bba786cf859", "sighting--7b140bd5-c877-4dfd-ba08-a6951419d958", "sighting--e0bf3aab-5b9f-4479-b9f1-dd03918bdac2", "sighting--dc79e969-160a-4978-9384-6837a8d2641e", "sighting--9ef3d89e-a7e9-4b3c-8122-1d03bc30a1a8", "sighting--c9d140ee-2b38-4b9a-8016-a61348b0ccda", "sighting--18a64072-b705-4d03-aab3-0b961134ec2e", "sighting--ed2d51cf-7a44-4d10-886a-17c79b810ce4", "sighting--efddb3fd-4a73-45ba-be87-41696eb0a492", "sighting--281c0685-5167-4133-82fe-7f8031318e15", "sighting--692d7d5a-351a-4d63-ae50-75c40463b709", "sighting--de6e3987-2c28-46be-b7c7-18b3a47da11c", "sighting--a8d78d53-805f-4c5c-aa21-fa88e505da12", "sighting--8107b03a-a07c-4f09-a247-61bc555a9f81", "sighting--54551c4d-94a4-496b-aaed-b4f073ccc4c3", "sighting--90913792-9275-4039-a369-5031de799d91", "sighting--c43383c3-80d8-4d02-8dc9-ec8630291852", "sighting--e0b3615c-2dea-404f-95f1-b5b01cb1c154", "sighting--775c2b6e-d2e5-48d5-9555-44535d7c41b9", "sighting--b8c7a075-83e4-45c8-a5f0-fa12ae574d47", "sighting--ab51271e-6d47-4484-bcec-8663050fc688", "sighting--3cc55938-b0af-48f9-af79-c52fb0b50aff", "sighting--253d84f1-c9f8-4932-986d-0c7c7f897d85", "sighting--757b3f5e-5f43-413b-867c-556328af758e", "sighting--a2c82336-7dee-4f6a-85f2-d69c0cf7726d", "sighting--4fde3799-9776-4221-91ed-10a1a9df6f48", "sighting--d6e03f97-11dd-4475-8925-917723a3b8f2", "sighting--d8390313-e851-4d4a-9eac-0358240f20ec", "sighting--16977acc-878e-4372-abd4-f67a759229d3", "sighting--cd8c6eba-0e94-4921-a721-5b1c17137c82", "sighting--839f9c54-882d-49b0-9810-5737c9510cbb", "sighting--46907962-4671-4685-853d-a5e851328514", "sighting--41570cfb-463b-4daf-b76b-72f16124a919", "sighting--6836116e-bd77-47d3-9b15-0c038aa39598", "sighting--7c5bc357-f6ee-480c-956a-82251cd9fc88", "sighting--ba3dda75-56e3-4856-b545-f61c23ca9cbd", "sighting--77d76825-c606-4ed7-9061-1d955d70aa99", "sighting--22a06cbe-a764-4452-a02b-da3c32980ce3", "sighting--cf3e82bb-d7b2-4299-aab4-438ee401badb", "sighting--29798acb-6e33-42ac-9a51-f305e08a41f6", "sighting--bc65df5f-642a-49a5-a1a8-1cbcfcb81c62", "sighting--6cb5b676-096d-4ca9-9ca8-211afccf8ba9", "sighting--b74e8a36-20db-4823-8c29-463a0b9a0ee0", "sighting--ac1be44b-2efd-4d09-a92c-cae957319891", "sighting--1cbd34fa-4005-4579-9184-159e4b20e8ff", "sighting--066a8742-7e86-4938-b538-f671a3503f16", "sighting--65f2a091-151c-40db-b80b-825668dc73b6", "sighting--56deea4c-6790-4c12-8285-7a9e4c52ea37", "sighting--5be9c5d7-6e73-417e-acbc-d895db769995", "sighting--88c33629-d6a5-4a01-a529-78f8e3732c02", "sighting--c5087acf-8214-487f-8b6f-49fdf5e915dd", "sighting--2a8fc691-cb0c-4c6c-affb-5d647ecf33ae", "sighting--3623ac4e-14c7-4188-ab13-47e85524efb8", "sighting--2542019b-28d2-477f-a431-d2357c91ecfe", "sighting--57b71ee3-eeef-4d3a-a1f0-736bba08bce1", "sighting--80eeb43e-a1f0-4abe-8fc3-1882c9a963e1", "sighting--c6df322e-51d4-48ad-8bbd-84c875165972", "sighting--dc4151f3-b2b9-4a38-b9a0-8922d351dc29", "sighting--e6cd32bc-f699-4267-9582-6bc248391fb7", "sighting--b5ad44f5-b632-4869-aa68-f07b4241b3d3", "sighting--b4c499bb-4f52-4225-a1fd-576ffbc6edcc", "sighting--f4adb700-bf62-4789-912d-7be14ef705a6", "sighting--67736d61-4839-4f49-8466-d5bcdcd042c9", "sighting--6b28e29c-e1a1-4220-ac37-78c66db93643", "sighting--e6c16816-4498-4717-baea-861be07ad7cd", "sighting--97bee170-dd01-4d1e-a4b8-b75a5471a94c", "sighting--566e0c29-cf74-4034-9198-7da2f71d4dc0", "sighting--c9177231-8b9c-4ffa-8e95-83f9df33c982", "sighting--0d82013b-00c1-45ee-ae66-ebb73123a15c", "sighting--8e57e914-075e-498a-a416-c590bc74dced", "sighting--ee75855a-d644-4a7d-a987-de34fe9041c4", "sighting--2683ab69-5031-4400-baa9-9da23047cdb2", "sighting--21eb5032-c783-4afb-8078-b543ef53e09c", "sighting--95e02056-4a6c-490e-bd9a-23fd30aa25ac", "sighting--9d5f3be1-718a-4d04-806d-b8548599e5e7", "sighting--fd362097-d315-41ea-a67b-bb14c2672c22", "sighting--e55240d1-ecfb-41c4-81f6-54aad387465d", "sighting--bd9887db-1963-4b2a-a9c3-675142af1d04", "sighting--072252e2-a95a-493a-a1d2-a1b3ec747db8", "sighting--f5061d4b-f6ef-4612-b42a-403db0315742", "sighting--aed4944a-af4f-4aba-988f-e864001eae21", "sighting--6a26f9c5-9f61-43d6-ab0e-bf78270aba59", "sighting--408c9558-c4b4-4e3c-b03f-d9b9933bf77a", "sighting--198322d1-faeb-44a9-aa52-891a435b74e5", "sighting--ae0253b9-70aa-4b5e-8482-8fad69826fea", "sighting--3b42f538-e1d4-486d-bb44-2daf47b26067", "sighting--b82eb467-364d-40ae-a725-1e1c48c7a6e5", "sighting--2421c404-dc94-4432-b1dd-df13afa455e7", "sighting--2cc6be91-c844-4d30-a40c-a925407b6aa1", "sighting--79d0617e-bc0b-44e2-a081-953ce79cc04f", "sighting--9efc137f-96d4-4a33-a175-7195ba382aa6", "sighting--70b71e48-5cfc-4b0f-b207-3dd35222f3af", "sighting--c3fcf68c-a321-4157-a500-307d7883748a", "sighting--4d6df5de-8086-4a74-ba70-3d1a42137f2a", "sighting--37f3bbb1-ab0d-4f54-b0fe-54d4c1ae452b", "sighting--a0a4b6be-4ead-4583-8fb2-a0d118e48eb4", "sighting--5100251f-6e23-4e26-8374-8364a730ff05", "sighting--f10afd82-a3bc-4feb-9b11-6b3a0415e65f", "sighting--25cefebd-3b1b-4808-9aa7-80fbe9c1ae91", "sighting--a9cb2e6c-3e88-4dd3-8bbc-cf57477ccb3a", "sighting--1a01c149-8868-4b7b-8fa7-da3a463035d0", "sighting--2d48d9fc-13e2-42b9-ad95-51cf7d04b0fa", "sighting--caea8d7c-ad70-46b3-b59e-f11242ff1764", "sighting--81aab712-6b64-45f1-8ee8-55ab91e7702a", "sighting--4e19ba50-a02c-430a-aa47-71383bd1ed91", "sighting--38b87bc6-205e-46fb-9c0b-2e2e89c9fa7a", "sighting--88323778-881e-4ae8-9e3e-0b81065427db", "sighting--f9ea2d57-7ceb-427c-bc83-4059eb945ebc", "sighting--850cb549-38fa-4fc5-b6b9-278b3d9bf3ac", "sighting--a1ec43f6-6b1c-4904-9caa-3130723afe58", "sighting--387f14a7-5232-413f-b503-ef62a464c9bb", "sighting--631d5ef0-e10f-433b-8172-db32a1a5c578", "sighting--1667f854-a3a6-4ee5-b92e-65f25bad3f27", "sighting--8a68548b-e5dd-45dd-bdca-49c1691263eb", "sighting--444897b4-d619-4718-9d46-c2a857661114", "sighting--c83b7715-a57f-42dd-a80c-e672e2bca961", "sighting--16c5120a-16fe-46ec-a938-6baae61b27e9", "sighting--82fad8e5-86e0-40d2-b63d-9e5d7e7262c8", "sighting--a9421cda-f441-4d52-a5b4-dbd5f95b4cd9", "sighting--76637bf7-8eaa-446f-a56a-da707d9b6588", "sighting--67722219-7c0f-4da2-8506-0155b70941e7", "sighting--92bbb13e-a0e3-4050-b346-0956b0990348", "sighting--c147d950-b25b-499f-9909-e1de14b5122d", "sighting--fc30dd66-6d2c-4a0e-9449-83d7c20b3141", "sighting--dc18c262-601d-4276-bba3-c7d9bcf8e4bb", "sighting--ca3d455c-1e46-490e-b003-d21acc980909", "sighting--63d5d824-40e5-4c41-892d-0efac866b9a6", "sighting--d5680834-30c3-4a0b-9e8f-f3d7b26ab480", "sighting--9b2a5764-e9fa-4c59-af3e-0204f6c68d2e", "sighting--bc2eaeb8-9881-4912-b122-c9607c6eb497", "sighting--da93872c-911b-4d13-8cac-bfe7c3225d7b", "sighting--ba3d940e-6d79-4673-97b5-954962c81703", "sighting--511f8bcb-a977-413f-bc43-0b0552291a96", "sighting--98ec2d65-e1be-4e31-a296-166f029cebee", "sighting--1fa80307-dbbb-4c25-917a-c6094bbb71e7", "sighting--1b0e32ca-6cec-4d9b-b8d7-62887594129f", "sighting--0639f68a-12c4-4fb0-85a8-47499febf86e", "sighting--93aa5748-cf25-4312-a365-0f7c3ad852f5", "sighting--7d9d08cc-2b54-4e27-a095-c1c8b7441622", "sighting--b2645a00-1037-4e6e-b4b5-6c80aed50e9b", "sighting--41f14509-c4a6-453d-99f4-e3e9c2728e80", "sighting--6e8fbe35-7d23-409c-a4f2-f4535dd42d88", "sighting--4c2fffc0-daf3-4b24-b99c-4f5fb42d7f8b", "sighting--16a0c466-be13-4efc-841f-f34938d3f9d6", "sighting--b15353b0-3725-46aa-b6bc-e941f2608bdd", "sighting--6d0ca75e-370b-4ab7-8a83-ebf316efed3d", "sighting--8cc2f27a-2072-44af-87f3-2b777822ff84", "sighting--e8b08486-f0d4-40e6-ae9c-6b50d2105512", "sighting--4077bee5-54c3-4d7e-9f4c-eb7ddc1da90c", "sighting--382e9f27-b62e-43e1-bc9c-dfc5575524e5", "sighting--c67e2b05-9b62-49f5-ad69-bcc76b33dd66", "sighting--79467c82-e216-4d8e-a744-616e885d1465", "sighting--0f0b82a4-3c60-4988-bd97-6b12ddeef97f", "sighting--e7e95c56-b8bf-466c-bb7f-91621e9b5c9c", "sighting--8cb80d79-0554-49c3-8507-672bd36043a0", "sighting--051fc97f-119a-4148-a5ec-a1c08b3c6795", "sighting--20642b52-d138-4969-9e22-a15c5773f937", "sighting--0628a481-f24e-46ba-9def-84a53e6844f2", "sighting--0e76cf27-f7ad-4b35-9d27-8e7b65407e99", "sighting--50721479-731a-4c02-82ff-1cf5a57683e1", "sighting--68e461c4-e34b-408a-bc83-edf9d152d02e", "sighting--3999c8cb-69d5-4726-ac12-80044a1c1aac", "sighting--59df6a5a-5bd0-475d-8123-ca47f5b5f0c9", "sighting--1ae21aa4-5789-497f-b6a4-e5bf3a98146f", "sighting--017b685d-e137-47be-9208-b78fc9d3bfc4", "sighting--0c7db5a3-1863-461c-a1f3-c2ac010d5427", "sighting--56524f1d-305a-46e0-b1bd-072522a3850e", "sighting--975e2d59-db6a-4f98-b98e-4202101f97ff", "sighting--ab4c5bb1-7469-4037-9f82-73499d1a8be2", "sighting--30e417f3-304f-454d-a7f6-a47bea0aae19", "sighting--15f4d8f5-8694-46c7-8d29-da187bbf29ae", "sighting--c332c778-b6d6-4867-8cba-1ecce4340b02", "sighting--6e682159-b9ea-47c8-977d-4b59b54b5b20", "sighting--637f59ee-2936-4d95-9df8-078581545e23", "sighting--d6557e79-d0ca-4f32-ad9d-93984cbebcd3", "sighting--b11ab565-b205-4270-b0d0-98e00a34dc4e", "sighting--84428e4a-4c14-4377-a43a-0821dc5aec84", "sighting--6164a788-9c51-4d01-b94e-57d54234bca8", "sighting--f0df1c8b-e05e-4e56-b7f9-0d0e8e46143f", "sighting--04fd6e24-939e-4067-b4f1-8703a24f1b97", "sighting--228871e8-1a72-4ad4-aebc-760be8e65bf2", "sighting--d387ffe3-b157-41da-8243-ef6e0d51e301", "sighting--37036f16-3778-4116-9c50-cf8bb28a6caa", "sighting--d622ead2-c01f-469f-bc98-7e752945b5f5", "sighting--f2a2a1bf-34a2-4cb0-ad55-daf46c3bc22a", "sighting--9650b564-3e95-47fe-b296-a4342e4b6e20", "sighting--df9e84ea-553a-4481-931f-5ca9398cf67b", "sighting--f2269009-1fa8-409e-b773-725463506122", "sighting--5bbb5981-525c-4d6b-9151-6082c13a28d2", "sighting--6b8c0942-9248-411e-888b-c2cbf05738c5", "sighting--e3a1b1e5-9f36-42f5-8eb0-f8f20985271d", "sighting--ff88a3de-7f19-421a-80a2-9ebe83ffd775", "sighting--996cd98b-671b-4532-93a4-26bf2be4759b", "sighting--67ecbb1e-046f-4d29-8e57-e056be154840", "sighting--6d48288e-e38a-4652-a788-136cb01e8725", "sighting--4941dd11-c953-442a-9770-38b5e1c87871", "sighting--be29555d-e3b8-4f03-878c-1e35669bd520", "sighting--88b48036-2453-4720-800d-a9dda63befff", "sighting--45ff993d-b14f-4c87-bab9-e9042f5dc82c", "sighting--25183474-30dd-445a-8efb-3d5342500c7e", "sighting--6859b77c-99f2-4d45-b9a9-1e34a69991bc", "sighting--239b031b-98d9-49b0-9853-bc29505decb2", "sighting--6e631ee7-3c59-403b-950d-987f2c20af13", "sighting--e9fbdc59-b08e-4ad6-8435-93ef44d84d56", "sighting--4dc84fbf-bb3c-4960-ab63-42e6bdd8b2a4", "sighting--9a7b7593-a7a6-400e-90f3-5903ba3554f3", "sighting--726f7a11-8320-4e05-a17f-da37492dcfe1", "sighting--0d06c82b-c558-4843-960b-2876164b4da9", "sighting--3b32c435-eab6-4ed8-abc0-7342dccdedaa", "sighting--b9844725-29b0-42c6-bd3b-b9a9589ac015", "sighting--2e54478b-62ea-4c89-916e-66d2c1c02cb5", "sighting--5e074e63-06bc-4ad5-a900-7cdd73f1513f", "sighting--5a3b7d24-62a4-42c8-9da6-b3de65857779", "sighting--06c7dded-aa10-4dfa-b69b-cd7539617836", "sighting--dfcfb763-9c08-4a93-8f80-83efa7fffc27", "sighting--76bc9085-4077-465b-839f-5f08309fa146", "sighting--710a193a-19d8-4067-8f79-6463ceea66e2", "sighting--72ef22a7-b3e3-4d62-a81f-6bc301ccb70d", "sighting--be602d55-808c-424a-aa06-198ca67dff75", "sighting--bc6cc084-11c6-43c4-b380-ec68cf9dc06a", "sighting--7cadb72a-f29b-4542-ad83-bcd5419db615", "sighting--cef4fd51-7abf-459e-b3a2-e59e0dd74fd1", "sighting--e5a7e8c9-514d-4d4d-9f50-8b5dda8df652", "sighting--8133bc66-7913-488a-b016-8c638610c6ba", "sighting--30cb1e4d-5801-462f-b9a1-6435fe4fd7da", "sighting--4a399427-1389-485d-ba9f-e4fa7a66e963", "sighting--28ca2af3-684c-4df6-a14f-f81121a6aee1", "sighting--1d0acc7b-78c4-4fb9-a0f9-fad38c96c9f9", "sighting--fe8c38f1-1010-4a8d-938c-d7fabaad9713", "sighting--461a21b3-0763-486f-a30d-ad36c4fe9c9c", "sighting--c3bfea3f-a196-4584-be43-7cf1e89e68b9", "sighting--fd126519-ddf6-484e-8e9e-2d76a1f5b57c", "sighting--71299323-1733-44b0-8307-43ff4d760da8", "sighting--d6f39b9d-ac96-4b4b-bc13-187d1cca43c9", "sighting--40757778-d460-4b34-b938-5e7cf8d6b9c5", "sighting--e739d988-8c70-429f-a5c5-20f4b67a3801", "sighting--f4ef4a10-52c5-4025-b42e-a2a719dbd13d", "sighting--73bad387-8510-4543-bdc8-889b1fa85599", "sighting--4f9ecaca-4815-4464-ba39-1ac96b6582f5", "sighting--3a2764c4-68ab-4a5a-b8f0-c7cf62b86a06", "sighting--ece3640e-61ce-43be-9a64-f6a7c3fdce49", "sighting--e42e549f-be5c-411c-9a0d-308114532ec4", "sighting--6b2d990c-54e9-444d-8896-5a4d87840517", "sighting--40fe4a1f-e313-4276-91f9-581d5fe53b72", "sighting--4d88fa25-714d-45f1-8cda-d7c6c2901d6e", "sighting--ee1c6ed2-add8-4a15-b6dd-a9f9cb5951fe", "sighting--37b3741e-52ed-421d-8b27-f760298cdb84", "sighting--b03ad343-bfeb-4c05-95a4-ebf375a1f1b2", "sighting--be2e2b64-343d-4c20-b9f5-cf14537bae4e", "sighting--e5414ef6-870b-4dbf-92e6-1c73d169dad5", "sighting--61a9b634-7d21-4925-bbb1-01ba6d5b08ec", "sighting--0f945b81-c56a-4418-b3cf-00d737c72b4b", "sighting--337a76c3-1d21-4973-9ff7-901fc735bc65", "sighting--09f7b95f-7304-4eb6-a6e8-c71b3dfa0a3e", "sighting--dfd3d5b8-ba0b-4e65-9b71-aa1bb5b45fce", "sighting--0c7d7885-22ca-49b8-99cf-0b1a1b17f081", "sighting--f137e8f9-7d5a-4b2b-b7de-0894783f1e62", "sighting--4531c060-5a41-4bbe-936e-8847261d2580", "sighting--bf27a851-0a0f-4197-b54f-78b4a6eabb25", "sighting--9c9b7eaf-9936-4555-90cf-170f45cb973f", "sighting--07e630f5-873f-45de-8fbe-639b2ee6bf63", "sighting--df82255d-9d93-4b81-990a-0230e2beb681", "sighting--d1ae6be7-27a7-4384-88d5-c0d3f9106ef4", "sighting--23461b93-564e-47df-8d68-49b58c241ce0", "sighting--4c518d24-faa1-4d83-86d0-24d6658ddc75", "sighting--00f80720-992f-4cd5-a184-b0bb38627708", "sighting--76eb6fed-b463-4ca7-9425-686f60a9c060", "sighting--c451bc09-3429-4c4d-a9ed-4c3955a401ef", "sighting--5d4898df-1a52-4277-b2aa-5630201abd93", "sighting--a3492b04-a743-4132-9d73-b1c84d4da109", "sighting--bebeda14-92de-4f3a-9b2f-a03bf27c71d2", "sighting--bfb2270b-1476-4dd1-835f-f2df582de7e6", "sighting--10067180-902b-47c3-bb50-1831745b53ba", "sighting--158d87d9-ee39-42d3-b24f-4ebdf3f3711f", "sighting--9e0f2c89-d3ab-4daf-b20a-a78797296ebf", "sighting--6094f3f8-059a-4638-9089-34be9043299d", "sighting--825d4cf6-ce36-4dae-9f70-d781a6833464", "sighting--b8bc95c4-7599-4fec-9de5-2f1361e042e2", "sighting--c710b138-edba-4cab-a11a-73b7526f010d", "sighting--9b953360-e61d-4ca6-b340-3bb119581edc", "sighting--3e743fcc-4064-4beb-9f58-53ca5e92728c", "sighting--22f37b81-c234-46b4-8473-98436322b6a6", "sighting--4265205e-b978-4575-aeba-e1681c476a30", "sighting--ff526d34-04bd-48fc-b2bf-471afe9a2fd1", "sighting--aa360789-20a2-480e-8595-ae5c3b91e6ed", "sighting--99d32517-e8d0-46ac-9911-16a01cfc7c98", "sighting--49912fdb-642d-4d4b-b4e1-e5f651dd18be", "sighting--9f04d0cc-1162-4d19-823d-031d3dbf7a3f", "sighting--b6554a03-eb63-4a85-a839-56641eb62c93", "sighting--c37c46c7-e14e-4b07-b14d-31d906290171", "sighting--c94b1b24-06dd-4613-aa69-47707227fa4d", "sighting--c8e17900-9932-486d-947a-3e8472cbf839", "sighting--79e2bc80-d980-4cb2-ab06-868e55f446e1", "sighting--64d36ade-b852-4a15-9c06-3357597caecb", "sighting--fbc8076b-6a3a-4848-bfe5-56e77797727b", "sighting--28c3d549-6d51-4fec-8adf-c7eb6958a18f", "sighting--ffe5947a-2d16-4630-8690-bd8459308e5d", "sighting--0a391121-d02a-420f-b3c5-b2a9db5c9748", "sighting--b72ff9c3-75f4-49fc-b1df-399b26fdb2b0", "sighting--d3013bed-5c76-40f4-9154-8d4adae74956", "sighting--d6159bad-c96a-43ab-a3aa-e5d50c3d2403", "sighting--2ec72e7d-c1f3-4467-bd7a-121657a26744", "sighting--f94ed193-b565-4b5f-ab14-17ccf6a062a0", "sighting--7294488f-7282-4604-a81f-2bc6f839f917", "sighting--56081b93-9618-47e4-9d2f-3369e22e00f5", "sighting--bafa6a08-d5f9-46d6-81c5-282087a183c0", "sighting--c97fbb82-444e-4b94-be51-15e0a8f6ae9e", "sighting--407aa46f-164e-44e4-8a22-6a86a7091deb", "sighting--627039c7-f55c-4bfa-8679-6c91aa3f7500", "sighting--1d83c8cd-ff36-4100-8f37-0b5e20e43be4", "sighting--5faf6f3e-abd3-4855-ba2f-66cc5982ae1b", "sighting--e43fba39-594f-457d-b13e-4659c60f9683", "sighting--a546ab09-46b9-476b-9a1a-f3b21d606183", "sighting--8db2b2ec-3ed0-48de-994b-d10cbb4d1ced", "sighting--7690111f-3ef7-4dec-990f-fcaba512e0af", "sighting--f3d6ca12-c7cd-4cba-813b-fd2bd6d382cb", "sighting--a479b604-8d03-45f3-9484-01e579e480d6", "sighting--cc379996-3e1a-42d9-bc2a-5153e6e4a074", "sighting--f0db093c-8761-4a05-980a-04a419d570e2", "sighting--ee0c143f-9146-49e0-ad35-9cab933f2f0d", "sighting--4b076f28-c9ac-4341-bb9d-58ae53ed9f9b", "sighting--ea3dc7d8-3767-42d2-9766-d85d09bde8dc", "sighting--859b44b8-bb74-4fd3-8534-f4a93750fa88", "sighting--2c868653-1c92-4acd-a81b-cdbb2082fb75", "sighting--606a800b-5b7a-4694-a59f-973440d797a1", "sighting--3cda25e9-7323-4955-a8a6-c840e9927352", "sighting--85b4ada4-39ec-45d1-a036-a6b03820c52c", "sighting--4db489c8-e969-4df3-a543-51cf8525ae2d", "sighting--bda39e8d-fb20-4608-9262-109e090c4f82", "sighting--29223d20-9209-4b14-abc5-169363367f88", "sighting--cd5ff70f-c897-4aca-86c6-4c58bf0054e1", "sighting--74872c7d-716d-4791-8a32-5e0eb1796dc5", "sighting--0ee06fdd-9bee-4cde-b16a-0290e6424d71", "sighting--55da4ad3-8790-404b-bfd3-e2ed34bd6ec2", "sighting--91e8007c-4c16-4e87-aac3-eaa14934042a", "sighting--199881fb-e5e3-4afd-bc21-228bc9c8decb", "sighting--d11a08e5-9309-448a-89bc-57e77ca4510e", "sighting--edf636c5-522c-4aba-a82b-6b683de02f5f", "sighting--a5356c96-8dc8-4563-86fc-4419adb35fa6", "sighting--1b214497-d8a8-4166-b025-cd97af9b72ed", "sighting--825a5b4a-f24a-46e0-b26a-6dab5fca4d62", "sighting--d442b255-2ca8-477d-8e79-0de50d6e0a61", "sighting--c3de700d-b728-47d0-b6ef-0cf5dd7005f1", "sighting--0ec9cedd-44e6-4c0f-8e8d-9ae1bb6c6a88", "sighting--e247f9db-1fa3-47d0-a3e0-aed5badc339d", "sighting--552ba888-0711-4ccd-82ad-a110455d2e9c", "sighting--65bc8730-1813-4896-b642-d057cc418df9", "sighting--9609ef54-5975-44c7-ae1c-aea06e795ca5", "sighting--b7953be8-a1e8-4bf2-9f88-71fee2805a03", "sighting--dcc3ac7b-d896-4251-9bad-294405c87f55", "sighting--8fc3717e-e094-40c0-bf49-5aab6d0d1c47", "sighting--71defbdd-de7a-403e-ae70-937a993e730a", "sighting--868f0329-40ee-4fec-8ebe-a687b7cc4837", "sighting--9e2a5813-6c32-4090-b705-a85fdf7bde50", "sighting--576dd936-1d65-479d-8dd2-8f7c718e3a82", "sighting--d2b4fc5e-de00-477d-9c95-ef19f0ce5161", "sighting--a04d42f5-0ca1-4bb5-8d71-6c93db6ea8a2", "sighting--e924a186-2c14-4c55-a650-16fead474cad", "sighting--1630fa81-b7ce-4b0c-aeb6-3d32aa24557c", "sighting--374a07a4-68d1-4511-af41-dc9cbd390fba", "sighting--e5b68f85-059e-4614-b104-5af5b5da317d", "sighting--a845b415-bcc4-4f30-aa1f-873ac744e0e9", "sighting--6e45a598-a4b2-4898-aa48-33df695f2a49", "sighting--5c6bffba-8464-4ac5-ac42-5c459618942e", "sighting--36a76bad-98cb-4049-9b7e-21332793ddcf", "sighting--05bb55cd-8152-43e6-b700-e0830cea83dc", "sighting--7d9e7b9d-a862-45db-822b-e34447a6c34c", "sighting--ea398681-bebe-4053-941b-583e9b66c75b", "sighting--feb3728d-11b2-4046-aafd-5898768770a8", "sighting--397f3f3c-12cc-441e-8731-abc45ac15512", "sighting--d29c7790-ab47-413d-9474-847228a1abc4", "sighting--e6690e0b-534c-4e4f-ab0a-edfbf6b571cf", "sighting--c2272851-049b-4828-9d47-c65072bca33a", "sighting--6f817260-a73a-4c20-b21b-184c7c8c8ffb", "sighting--c7d52830-8c84-4ea6-9542-396611acd3a2", "sighting--7e3d97f3-5df2-4226-9d64-c59737c27121", "sighting--0ab6bc7a-6f7c-4288-af04-b708ebc503eb", "sighting--dd9c0a8a-a74a-4951-a94a-a02c6be73169", "sighting--4019727d-45b2-4043-9883-bd40bb81bd27", "sighting--7f9ed158-fc29-42e2-b82e-5a14d3e26131", "sighting--7b5794b9-6989-4b98-adf9-a5d425f1891a", "sighting--306c590f-56b1-4fe9-b4d2-76485394cbce", "sighting--5402374f-320c-4d3b-9217-0cdfd2b9705a", "sighting--5ed9a6a5-8335-4ba2-be0d-022ca316c859", "sighting--ff24d95d-891b-4b48-9b1b-b1daf423ad9e", "sighting--6309cdc0-2ddb-442c-adcb-82c07f146c91", "sighting--5dc2a577-99f5-4c27-ba0b-902cb02ade31", "sighting--98668547-c595-4abf-b877-dee8f36d0323", "sighting--73a02aad-32c7-4155-a2f3-f701520ea33d", "sighting--f990dfe6-06bd-4968-be32-c002ef79defa", "sighting--79d4ce07-4cce-4b42-ab85-0911d08d1aa2", "sighting--c451a671-f2f7-4a99-a927-9dd1128a49dd", "sighting--0683645b-faa0-48c6-b188-12a353393337", "sighting--1ca86caf-c2f4-43d7-b254-a5948fdb033b", "sighting--a35828ce-c503-494e-83c2-bf833d7908d3", "sighting--2cbc5d25-371e-4c9c-856d-58e7023b2bc1", "sighting--c2fa11b0-0102-4d93-812b-09798dc76390", "sighting--90d09226-cd80-4072-a69b-7d52a8e829ef", "sighting--0ad6593c-b292-4cd7-a4e8-10f690384902", "sighting--620615a0-613d-42bc-94f7-9b4534242072", "sighting--bfb34f6b-65e0-4450-b562-27a7e4ba7dd3", "sighting--24ab8b12-3ec3-47c6-a2ec-90bab613781c", "sighting--3611d4d3-6efc-424b-bf9f-c40f3c4c8658", "sighting--b0c7115e-ad42-46cb-9484-1c5455a7cbe9", "sighting--19f31f93-bab9-429f-bf31-5fbb771e17a9", "sighting--4d554dd8-b50c-44c7-9b93-3f27446f15c7", "sighting--37d60720-4fc3-4e94-98b3-2e97a01c26c4", "sighting--62ca992e-89b5-4371-8b50-7d70dea7623d", "sighting--a359db98-760c-4d24-b198-18748bccab81", "sighting--91fc542a-3bbf-4d8a-9fa9-5c786a326f98", "sighting--5d751228-ae0c-46c7-aed1-2011c5fbf322", "sighting--d9a82b36-6639-4592-b600-5d0116fc2a5f", "sighting--84dd8331-090d-4bac-aa87-aa87f985de85", "sighting--4cf42dc3-071c-44cf-b885-62381c61b00b", "sighting--9d4125da-35e9-4e52-bf29-227ed6e32737", "sighting--8d2fe466-0841-4cfa-9f05-f40e634f51fa", "sighting--0a7415d6-40c5-41cb-a981-36668e54ec3f", "sighting--4ca843b4-8d90-48d0-8aa8-28bee5b49e91", "sighting--b5462804-75d9-4b14-a817-5fa63406d93a", "sighting--39b39143-43af-4fa8-84e0-689db8e2ec61", "sighting--f9c962de-b958-4c8d-a60b-c9b82fd8f9e2", "sighting--26a37f78-d686-4be8-ae5e-8c5e00f58fa1", "sighting--f26eec06-1d88-4efc-b09b-ddb794f399d3", "sighting--f0d47051-050e-4e47-b967-01e4fc1979e9", "sighting--21723cd3-93cc-4d73-bc66-9df1f7b84107", "sighting--3b518f6c-7258-493e-86da-3165c3dcc754", "sighting--8e2df1bf-5a4b-4836-95a7-1810bfe9f012", "sighting--2bf9d823-3dc5-4855-8327-e8f636336168", "sighting--fa96b04a-84b1-4ec1-8295-3f74b1969d3e", "sighting--869bc460-edcd-4061-9c9e-33e80f00f8ba", "sighting--6b9add6d-1c9d-4c5f-af97-c000623b0a88", "sighting--422cd226-cac4-4520-9893-1b8cea55c209", "sighting--0abc7ec7-f6a6-4781-971a-d05001af24ba", "sighting--642e6162-b796-4b02-919d-5e53d2aac172", "sighting--f53d898e-dcf5-4a48-8c75-4861159e07b3", "sighting--b34f8efa-929e-45b2-b960-d49950bae8fd", "sighting--3176b313-b595-4407-8e06-0ac10cd1c833", "sighting--dc2cc7e9-bcf9-4636-8aa8-863378e17e97", "sighting--612aa051-5355-4853-bf15-f394b05a73e6", "sighting--1d38347a-fe24-419a-8d41-4ef47c13429a", "sighting--75571a1b-d9d3-48e5-b42c-553aabe1bb3a", "sighting--b700007c-2680-4ad0-9e29-d1e5b49517f4", "sighting--be80602b-86c2-45e4-8805-bfd08de1b2e4", "sighting--8c74e645-f7d3-45a3-bc30-9d9c1bdfd656", "sighting--6b9d894e-c56e-4657-a669-39a4af09a422", "sighting--15b5da87-9067-4f8e-8cb0-66acfeb8be53", "sighting--6bc7f469-e7b1-4eec-8d53-3a4ec07f27c0", "sighting--1b1dc0f4-cb16-4c7f-8b67-27339a02bae7", "sighting--b7e238be-5a54-40de-b5a2-26201836ec65", "sighting--51598a3b-1209-441c-9443-378f84a33af6", "sighting--1de92c26-ba26-4ad2-bd26-bffa0dd7d4d0", "sighting--85a81a91-6766-47a7-9799-bbff9530533e", "sighting--82b5c55f-befe-413e-9cd0-12d26cf291e2", "sighting--a7be9bda-a303-40de-be9f-02a089c0c621", "sighting--f9738741-b7d9-4938-bc1b-6cfa5179d5d7", "sighting--10d49cca-7c70-4550-b029-376aba784f1f", "sighting--9b67bba9-6e9c-47ae-ac1d-8ff59ce21d32", "sighting--46a552e4-14be-4cd1-9b29-c1bc56db56ae", "sighting--52f19457-347e-408b-b70e-a16969f66ce2", "sighting--3798ff15-9dec-45e6-93d9-b2c97ff120a1", "sighting--e83186ec-63fd-49de-9dc0-d2ea4f04d9e9", "sighting--22cecffb-1d57-453c-ab55-863c1f3f1c9f", "sighting--31b1e1e0-3037-490b-a82f-b0ba935c951e", "sighting--6085cb15-5af3-494e-a4af-4f1cb3d839c8", "sighting--7909aed8-2b93-4f86-b987-17fc559a260e", "sighting--12354cfa-582b-4a2e-a0e0-7d02159a7bc9", "sighting--7ab39cda-4995-4e2e-a683-3cd7f5ea2855", "sighting--011e72d4-e5b9-479d-8bd0-2d15d7b1e278", "sighting--fe6fc157-3dec-48ce-9dab-96a29f79a953", "sighting--53e2fb6c-d2d2-4bf8-a326-4c70b11ae50b", "sighting--6236dbfc-21d9-4411-b86d-4cd152dcf9c9", "sighting--8120332a-7906-4c71-8dd0-a0566a49ab62", "sighting--e8cc7566-cc1b-460c-aba7-8c26c203fd8b", "sighting--2b9b0280-c475-4dcd-b9df-8d717eec7de9", "sighting--77719681-581d-4b29-a27f-31d463266950", "sighting--4428c275-b66b-4cb0-9fa8-77c3e02e24e2", "sighting--6eb855cd-afaa-4871-9f04-dcfd0f7ae00a", "sighting--91923ff1-0532-4c95-8bb8-a553a3db0384", "sighting--a3c64124-ab4e-4b98-8214-8675bab70b2e", "sighting--27d3464c-ee2a-4346-944f-5d01b734c040", "sighting--e47382b7-6faf-4bab-bfb4-4bfe240241f7", "sighting--38845ae9-f419-4235-b68c-adb5e59977d4", "sighting--4da699af-7bfa-4d27-9786-5c70ed995505", "sighting--4722a0bb-0887-4e77-ae83-11277b52b28a", "sighting--0a795f1d-d5e7-435e-b70f-a8907b085fef", "sighting--11cb220d-af94-48bc-ad58-3a70cc03c2aa", "sighting--f2eccdd2-cb93-4119-a9dd-cfa2415f60be", "sighting--46e1635f-2c86-4ebb-8dfe-53fa85095355", "sighting--490c3f7a-bd89-4723-9eae-426361751fe6", "sighting--ef846097-c198-4bac-8274-2345e45f7e80", "sighting--089a0dcd-0452-41b7-902c-928521bd0b0c", "sighting--3ad0de6c-d22e-44c8-b536-9b9dee76abf8", "sighting--7f2fc9e9-ab2c-42fd-9c9a-e6dc76e57f84", "sighting--af76068d-8e60-415d-93cd-6bf836ecf301", "sighting--5ff000f5-cf43-45cd-bdcb-0ce7d94a6844", "sighting--fb4b6549-e603-4ac9-b425-ecb61b9cf2f6", "sighting--61fe56d9-254c-4f96-b1b9-6054d9e1ef33", "sighting--3eae8eea-be1c-4f51-b6ba-83b9c7612df2", "sighting--97a71d9b-7d2f-4792-b0ff-26ac37df6864", "sighting--4c63716f-4822-4ed0-8c9f-dba34def1906", "sighting--981e95f5-4a96-4d8b-b764-2c9d3543de4a", "sighting--432a9fea-2f55-4bce-9f7e-c5dfa013f9db", "sighting--e6bd4226-db16-4a73-b8ad-0474a7c38374", "sighting--d75ad128-0baa-4ae0-9acd-5349c96ab0bb", "sighting--7f3babe4-75e0-4605-801c-880dbabebc87", "sighting--070e84d6-bf47-4662-96f6-7e454a84aec8", "sighting--aaf55395-06c9-4139-a308-8c9425d76d06", "sighting--6ba1d189-0f13-4d04-9f55-5d2287a20329", "sighting--957f2657-1e67-420a-8a51-54caf939f40c", "sighting--9b4d9c1d-8c67-4b50-87ea-e31bb2047d94", "sighting--13cafdb7-dc42-4d94-9f67-389e53471c88", "sighting--f321424b-792b-4a70-af26-2813f2d7fe8b", "sighting--55c657df-3fb1-4d33-a52f-0320965b6649", "sighting--9abc0f27-f56f-4e23-935e-abd9453ffa5c", "sighting--7858927a-45a7-4397-b575-a42c2c852d22", "sighting--cbd94ced-089d-4044-92b8-0c813b81b275", "sighting--8cbabcbd-eda1-4e80-9a48-54fd5d22a0c7", "sighting--28115326-622d-49f7-9cc5-8916a6bbe3b7", "sighting--7eb14678-64dc-4eba-87dc-06d7f733f857", "sighting--10bcc428-c370-4127-b645-577dd8a8d7ab", "sighting--2586e480-1e0e-4e9d-879a-10e436a8f3a4", "sighting--ff7ec299-30cf-430a-8743-eb516e70fb70", "sighting--64293626-118e-4552-bf21-21ef7faa8d2d", "sighting--f8824e3c-1775-4083-ae25-3b28e698e2a1", "sighting--d9515cf9-7a9f-4c8a-815e-1abe6de877c1", "sighting--9832b25d-9c86-44e6-beb9-be59189fe1a2", "sighting--f0b2c6fc-dc48-44ee-a280-7ffb3188ce9c", "sighting--18860934-d718-4ab9-8af4-0657990e1885", "sighting--3e7e0c22-bd29-49f2-8939-f4e2f64bbd6e", "sighting--c3e00148-5ccd-4923-a662-ec3015001c2e", "sighting--e9a3bd96-d798-4da1-8a46-5f763b00567a", "sighting--88153437-68d7-40fb-8a2f-947de7bd0822", "sighting--039fd049-402c-4191-82b4-3e104f50c5da", "sighting--bc4607e2-484e-4e50-b315-128535d6b9ba", "sighting--1831855d-ce3a-4511-bde7-abbce11fedad", "sighting--1e4fbcf5-5828-482a-a5dc-68dc024b447f", "sighting--b3c7634d-648a-4064-8c80-271e84d89a47", "sighting--6e011521-2b83-4385-958c-aa4f21e8917c", "sighting--35438c5b-71a9-4e67-a416-5fe526bc3a77", "sighting--98cb714f-457e-49e0-8a1f-83beb6b8ee4b", "sighting--655232fd-cbaa-4a3d-9479-f0a66d620a5d", "sighting--b5ce42eb-970e-4e9a-ad0e-c3257e88cbf5", "sighting--de8b411e-e05a-4c26-8fdf-1b3ec3ad8eb2", "sighting--653dbeff-4c98-4207-9792-e459ead25674", "sighting--905181ab-26dc-42bf-8649-07bf0caa95f4", "sighting--3a20a46b-66d5-4adc-a2b7-6a7b31f09baf", "sighting--302ca432-1f19-470f-8a51-be3575d817b3", "sighting--ef38a28b-8b9b-439a-971f-af76665253ac", "sighting--330feb38-2d1c-4367-aedd-1b7c1d7db0f6", "sighting--21e50fca-42cb-4ba9-a3d9-af2c13fb549c", "sighting--1eebbfcc-5b50-4aad-be88-b6deda94eba0", "sighting--fc118ae8-ae80-48c0-a75d-ae732d30f74e", "sighting--dc06285c-6b81-468a-a1f8-9e51f0b17c31", "sighting--6f282eec-a112-4c9a-babb-0adec9c58880", "sighting--9a3c45c2-49ff-41c9-af3d-87dd34030218", "sighting--c40dbd0e-b213-4d70-a7fe-b798caba9adc", "sighting--c337cce9-27ad-43c8-b164-d110c01c1d3c", "sighting--4d59949d-d57e-4b10-9120-8f6a2a2d1e5c", "sighting--6ccdc44b-c728-47ab-91c9-f2ae78f6e061", "sighting--2eb0a3f8-40c0-4d04-a247-31ddb2cf7b4f", "sighting--684cb0ee-91a9-449c-b5d9-c4035240e2d7", "sighting--066119fd-a589-4166-b3e2-94b7e7df0a9e", "sighting--3d09d8bd-4d1e-450b-b63a-3e264f71d986", "sighting--bc5d9d3e-dfc8-4078-805a-c329cbe05191", "sighting--5c99ec81-775d-4867-a088-8c57245024b7", "sighting--0dd49bfa-f925-411b-b603-937d0c46e305", "sighting--f9b9a236-48de-447d-a1c0-a2289852f328", "sighting--a96d1954-9bfe-429b-ba7c-4c7450fcac0e", "sighting--3dcab0e6-a383-4c37-bde2-eead7abbc888", "sighting--b8cb4988-5901-4b90-b1e3-0c7e4feafc78", "sighting--561e5b11-91df-4b50-bb1e-6d4aa2a00907", "sighting--0b502585-ca63-4038-a9df-319a8e6cad4d", "sighting--e521ed9e-71e4-4683-ba2a-d6ba0d9f6993", "sighting--2019e962-ff74-4785-aa77-550b80df0260", "sighting--15827028-4222-4139-94b9-44bf27db387e", "sighting--a4b66306-13fe-4455-9562-9ac23c7815cb", "sighting--d1e0493f-a609-4d23-8663-af4b8b2208ea", "sighting--70291c17-81bb-449a-9646-a5d5211b0594", "sighting--ab949d30-c961-4e97-ba38-74e4f52ac408", "sighting--0292f219-e6a6-4053-9442-05cad77928ff", "sighting--8d8fb902-e791-4e8e-883b-d8804925c800", "sighting--926de870-caa3-494d-918b-78715862b1d8", "sighting--01c56ce9-fb5f-4bd9-a110-1102c7c861ae", "sighting--3b3ccfad-8d57-4488-bf7b-ff884a3da3d4", "sighting--db822986-5c24-44e6-9e97-244270981b74", "sighting--7ccf9180-8892-435d-a213-6969852abc75", "sighting--0bd039e7-2cc6-4df3-9566-7d661d1aa24f", "sighting--7b09dba1-36f5-4078-ab38-87b1064d4804", "sighting--a5156cbe-a692-40f6-a4c1-89730d0f5d76", "sighting--70548993-b427-4963-8f2b-d357880554f0", "sighting--e37eae0f-f442-4182-80ec-0254ab7a0f01", "sighting--537b6e6e-7057-4118-a2ab-3ec147cdd552", "sighting--9fb33e75-9042-4dff-b0d5-2daf67cf94b1", "sighting--11cc6d42-ae39-4883-a771-d22fad7102c7", "sighting--1f3ed299-27be-429a-9792-a9176197a72c", "sighting--8b3658a7-e6c0-441d-979b-89745c7b7019", "sighting--3c57df75-2809-4542-9a79-1e02eaa69680", "sighting--44891e35-9515-4545-bd42-fb88123c9006", "sighting--18058f9b-abe3-4d04-97d6-4a05ea36ac30", "sighting--d5373c1d-689b-419e-b68c-c9135c0e92be", "sighting--c67928a5-76bf-4cd3-8e16-de68b9bb2645", "sighting--5072d734-54cb-4e8b-b0e0-d0c3ea5f24e9", "sighting--5f845b8a-efaf-4fa4-a7c8-864dc7bb9c71", "sighting--3aad8b84-fd11-4906-85ac-cf821b529683", "sighting--cdd78c39-5c22-4be2-a990-f2ad182677b6", "sighting--04a618e4-8d2f-4ef6-845a-293c2ec43afb", "sighting--ef08f83b-a129-4761-85f0-84b4fc13daba", "sighting--0fd41412-41af-4782-93e7-c818c77e7032", "sighting--bab9d5a6-3f22-4563-baee-c76a30a5c4b4", "sighting--98873582-cfbd-481a-bf2b-dace9a5fb396", "sighting--797b96dd-73f5-4ffe-848b-44d60e778b3c", "sighting--de5e647b-01cb-4a68-ae1e-e94be97979c8", "sighting--f53b9c1c-5cd1-4194-ba50-8cb2e95fc315", "sighting--55864f07-2f49-4995-b9f7-08741e82d190", "sighting--97f0a52a-67f1-40cd-b8ba-3b9d79190768", "sighting--b34421f7-e322-4ca8-8513-51a58610be91", "sighting--6cf33141-4b32-44eb-829a-913594039851", "sighting--51592450-e260-416a-9aaf-52ec7c6b81ed", "sighting--6c617f76-b8f9-4184-aebf-c261d1884dc0", "sighting--de7816d0-13f8-4ebc-b605-5ba51a30ea57", "sighting--e3dc4cd5-e2ed-4b08-9b4e-f6ca6faadb93", "sighting--7664aeeb-e694-4c08-bf05-9ebe878aa2fa", "sighting--fc35e686-eef7-4cff-8b88-44c9f7b79299", "sighting--b50db4bc-8b96-46b0-aec8-7e791fcbb27c", "sighting--f6ec803b-2230-49f0-8a37-62985d23ce03", "sighting--175ee80a-0fca-4154-81c5-52278edf1e11", "sighting--8bda15b7-3bd2-49fd-addd-c2a98ee3956f", "sighting--80a11ae0-1be2-4642-b0e4-27b6a0ee586b", "sighting--21385dab-434e-460d-9494-e5ae7a344ef0", "sighting--2ad2b5d5-13ce-40b8-904a-0e152942aa04", "sighting--d94e7d27-6583-40b4-84ef-c12c8da091ef", "sighting--db8fabee-8373-4e81-953d-a247b8782c8a", "sighting--6970402e-4862-4805-b2c3-e3318bdd571d", "sighting--aab62083-9ef0-4d47-b304-5b8b3d21e08d", "sighting--a9ef979d-4d46-47ff-911f-0f0bf116a62a", "sighting--69575222-bffe-43b8-8da5-60ab5e05bce4", "sighting--c7d9a242-9979-4141-b2c6-ce1664d53ccc", "sighting--68579d5a-7f92-4a78-88e2-950e14acd6e7", "sighting--2f7325dc-a0dd-463c-8672-19213781f36e", "sighting--b706b618-2f8c-4896-8705-918104652224", "sighting--31ede8ef-d011-4064-8d4b-0bf360b2a7a3", "sighting--11eee6b8-4fb8-458e-8cc8-20fc627e469b", "sighting--ffd050d1-8fe3-4ae9-89a0-f898be77f305", "sighting--36eb55c2-0534-44ac-8215-1ee9646dfd07", "sighting--df281f01-0834-4044-9ac0-8c770b8d447f", "sighting--872bcd7e-3c77-45e0-a3a7-04b51218d464", "sighting--3de2332c-1169-43d7-b7e0-b871df1e2d84", "sighting--fd832794-5de6-48ba-97c3-be2584ccc6a1", "sighting--e86a0a75-8e2d-4691-b46f-f2ef56e5e0bd", "sighting--32b62a97-7fe4-446d-bb2b-349d9e5be116", "sighting--3e7f1ab8-959d-403c-aa71-b13d747b2999", "sighting--d2ce15e6-e451-4656-bfac-626a68317793", "sighting--6c9967f5-0b7c-44c2-8d32-e9f85d7cba21", "sighting--ba472d77-49a4-4619-875e-1ad1e5a4088f", "sighting--e6711bcc-35d6-499c-92a4-f6caddcfc93c", "sighting--eed90f8e-b591-4586-acf0-aa500c109782", "sighting--1ffad343-c225-4cae-adc4-38daf05cb6e7", "sighting--e5a28549-8cc0-483e-88a9-df439c217945", "sighting--4d910445-d02e-451d-8375-43729efa3e0e", "sighting--b385695c-bcbb-4427-aeb4-86715d1c791e", "sighting--82906c66-e8b4-417d-95ae-c24d088c40eb", "sighting--e59e7d8f-39f2-44a6-b442-00cc5d18bdb2", "sighting--a6ef1b82-c4da-4771-95e9-0b92347b37be", "sighting--9065ea6d-2a53-48c8-a567-6b71a74cf715", "sighting--cf2e71bf-d8e8-4ad2-9b20-1d1bd6f31673", "sighting--7e669a25-621e-4a1a-b4c5-820bb336f3a2", "sighting--df294f18-295e-44ef-aa6c-dccda89f1936", "sighting--d0fcd2e6-ea6f-4cc9-8f7f-b58b88f43079", "sighting--ebd9cd6a-c449-48a6-bfef-a0fb24a7bea1", "sighting--117bbc28-c0f7-4780-bae9-8ae9ad0216f5", "sighting--4af66882-2d6d-4303-9047-77ae073ae374", "sighting--2dcf836b-0d64-49f6-8553-ae95714d4e43", "sighting--a90ac43e-07d7-4ac6-9643-bd75d438fb33", "sighting--15838770-0eb5-4684-8ddf-4e66a1a4cb51", "sighting--4b97375f-043d-4f3e-944a-5e703a44635f", "sighting--69281fa2-ebac-4b7e-8337-d1f40626b88a", "sighting--c7e6208e-ca8b-49bc-aea3-1ed2264fb4e7", "sighting--4a48bff2-30ca-40ea-b3a5-4932f91522ea", "sighting--81a338ee-4333-4be9-b379-0f827d188135", "sighting--c5b1639a-ebf8-462a-b315-03fa9459704f", "sighting--fafb4b2d-b14e-4a00-ae6e-77832b9955ca", "sighting--dfc23f49-66d6-4a28-9d57-5c8215060a74", "sighting--b0de752b-ca50-42fb-b042-44e284b2b5e3", "sighting--e3f84793-a09f-49b7-b0cd-b344b67cb7b7", "sighting--a0f3555d-aa37-401f-91a1-7b3c8222c7b4", "sighting--2d8ab10e-5d64-4886-ba2a-f3c9237ce9b1", "sighting--b64c5c1a-0987-4f5e-bcdb-f7f48ec72452", "sighting--6e7ae4eb-9f9a-41ee-91d5-9c473d562675", "sighting--7240c736-767c-456f-a838-260e506714f0", "sighting--495ce20a-bb31-4d9c-b28c-1c3e227e6230", "sighting--f950d75e-75ee-4618-8b58-f8a0689588e7", "sighting--be214db7-1691-4386-8661-bb235b6e77d1", "sighting--f12056b8-e9eb-4783-9482-740441378a16", "sighting--c369a9ef-4307-4bed-80ca-e22b10ba95f8", "sighting--1f867801-0c72-424a-842b-fc6c80150146", "sighting--08c5b644-2c00-474a-b71d-1d62507cc2da", "sighting--260a12c2-bb6b-45cb-b0f5-f54476619eda", "sighting--b92e4d19-9a5d-4e81-b089-49273d12a4a3", "sighting--d550c0fd-b0f9-441d-90b4-a17ce601c2a0", "sighting--530fd58a-eb50-4115-bf6c-77199bb36d07", "sighting--26cf3c4e-3dd9-42df-a968-18e57e640ae6", "sighting--3e0c8b07-2bbd-46a4-b977-588c857bee79", "sighting--e51144f8-5d46-412c-a02a-46b596f4f4be", "sighting--32ee7ef5-e834-401b-a39d-6ec1f50dc25f", "sighting--7a0cecf9-8d4a-46de-b1e8-826cb340cf0e", "sighting--ae49bd8b-2dae-43c1-9b87-258a42562d32", "sighting--a6e16cc0-b1e0-497e-a51d-da01a79d9c79", "sighting--1e78aa08-e16c-48c4-9a3a-5e94a19d086e", "sighting--e7f51c2c-9272-4acb-b3f1-b24b11779606", "sighting--4942e6f1-7298-4a83-91c4-72c5c436a854", "sighting--3737032f-43a6-45ee-a249-d7f286101f2f", "sighting--17cdfaa5-c4ca-4923-851b-7bd0f7ba066e", "sighting--1ab2315a-da4f-4ada-a1f6-d9775b9bc2de", "sighting--b58615af-86ea-45a3-b275-0bc78f5ac96b", "sighting--0419dd47-f61c-4708-a597-7080ef0283bf", "sighting--ba5ba9df-4a11-4083-838f-01412f107d2f", "sighting--f7b0e8cf-5f36-4341-afe2-5fd7f8849623", "sighting--4cc30622-61b9-466c-81fd-b9b070eda283", "sighting--8c618c0a-e26a-4ebe-8018-680b6a7ff00d", "sighting--a61a1015-2396-492e-aa5a-c9e6dfa846d9", "sighting--2c1956c9-26f1-485f-8dad-be18ebd3ead1", "sighting--b55ffc6c-aec2-46fa-a25b-f549462c787a", "sighting--61a2ce15-ea6a-42cf-9623-2711769471a0", "sighting--454079b2-01a9-4f42-9446-e5fa6d784bd3", "sighting--cdae446b-8f0f-44e6-99e0-60b6ef4a6983", "sighting--e377bd5b-4e75-4230-bbf0-4d60ddb1efd9", "sighting--0f87e9bb-b3ad-423d-bb22-0860dfd70ccd", "sighting--6a5d4ec1-a2cc-41fe-bdb0-a5b956d5ba04", "sighting--edbc6c15-8dd9-4421-a3b9-a16a8ec5bd12", "sighting--674cdc3f-b4de-476e-883d-cc960cc1533f", "sighting--f999125b-6aaa-45e9-a21f-51168f277e08", "sighting--4e18fc0f-0e65-4280-8aca-f25f5d5413cf", "sighting--62ff1686-a272-407c-a57b-669d57c0e977", "sighting--9a066ebb-5d05-4073-99f9-994deb18eaa6", "sighting--c39924f1-0be4-4b1c-a90f-fbb2cbc3f191", "sighting--29984596-44e9-417b-a491-fcc436fbea3d", "sighting--d7f25d16-48b1-40c3-a6e5-2d8a8a1ea4e7", "sighting--c446ae47-cb39-4e25-9e16-6963f89694fc", "sighting--495b1c67-3443-4559-b074-c549cb591c7d", "sighting--a0dcf23d-d299-4973-90c3-f5dc4d84e6a8", "sighting--ed880533-f407-446a-8230-57046039a038", "sighting--1f72247f-8686-4669-8abe-2adabc9be996", "sighting--e5b4a97c-251d-43af-bf52-a91d39f00cb8", "sighting--de8438c3-1347-422e-a270-92a015651b77", "sighting--6ee6b346-7d2a-4d76-8ddf-0c001d3cf9fb", "sighting--d066fd2b-b04e-4e6e-b758-6c63c0dee44d", "sighting--13a68d5c-15af-489f-a9ae-bd9618ffe491", "sighting--b8eb3067-4807-474c-ad0d-57edfb1752ce", "sighting--a881a227-6c0f-4507-a27a-1fa85ab0b774", "sighting--da21514a-dc31-4d68-ab67-a55a3e901444", "sighting--4f9184f8-dcd3-43c1-8b4b-7b662271ffdc", "sighting--ea788ef6-eda7-4e44-810f-fd9869a86af8", "sighting--ad007e91-cbaa-4a52-89b7-a8aad254f6bc", "sighting--75bc0fff-071a-4b82-ba66-0b25fab5ffce", "sighting--3c4bf02e-8135-4df1-9aa1-6e048882cc84", "sighting--00170d7e-ac2c-4951-9a82-b2315e9b2e1f", "sighting--5b4fa239-78d8-4b53-b5e2-c6c7d2cd0f80", "sighting--662aa0d4-c270-4c1f-b56e-ea08d66101f3", "sighting--203a12af-0703-4cac-a8eb-5253fcf445a4", "sighting--e15d0a4b-4668-49a1-a959-d45c4390ed93", "sighting--a3f5e185-f5ef-414b-995c-50d3ece8e93c", "sighting--b5ee7099-cc68-4483-8b75-a7d0917ab5ab", "sighting--4137fd11-97bb-48b4-8db1-2f1f44b632a0", "sighting--edc736a1-e0f3-444f-9357-8535161f463d", "sighting--e53fbb2a-e925-4249-99e9-970c1778163f", "sighting--f8003925-57f7-4d2e-b94e-64db22a3f37a", "sighting--87c1dc30-3e04-4504-8de1-0bc1f17263bb", "sighting--e96472d5-7af6-4f8d-9bca-26c6d4d42722", "sighting--195a2dc3-36cb-4282-9f35-029558b1cfad", "sighting--f2bb1bfa-a5e8-47b3-9f78-15dd276f2ca5", "sighting--97228b4e-7ee4-4fe3-8d03-60a0883eaf89", "sighting--9f0a01ff-16ad-4abb-bfa5-b2c5aa5545d0", "sighting--86163c97-f42d-4520-9922-1018ff2c4589", "sighting--364e6349-d83d-47fc-aab4-0128ef9862cd", "sighting--5a7cda13-198d-4a64-88b3-888ec3e8e88f", "sighting--4d56e7de-531e-4d2c-8175-4ba845dd23b6", "sighting--2f60de41-913e-4c7f-b501-139f4c5dcf74", "sighting--dc4d8a2c-69a2-4242-bffb-3d8e2ab9c448", "sighting--a869b855-1ef8-45af-9434-f6588f15749b", "sighting--78d01c7c-37f1-4d7c-89a1-001949378985", "sighting--791a4dd1-9cfc-4a6a-a3c7-ac4bc2015fbe", "sighting--a79db2e1-1496-497d-83e7-c2bacc9d12a2", "sighting--3e09d6ba-ff3f-45ca-9fac-c6910c164473", "sighting--2f7f0cc8-4807-44b4-ae2f-765ab653cc39", "sighting--aad8b01a-1b74-4252-ad75-ab96edb33499", "sighting--7fecabe1-f039-4182-b6de-8ebd97fba84e", "sighting--b9227e87-b095-464c-a492-042bc14137e3", "sighting--8168ca52-6276-43ee-aee4-6e2a57c127d9", "sighting--863780f9-fa16-4e06-8b7a-c40b0ca41c45", "sighting--b9629b9c-f5ef-451a-8be7-2797314406ed", "sighting--f551b894-c267-4f9f-a50d-d61631920c9f", "sighting--be4b8ff7-467f-4f74-9adc-a8ac074be8a1", "sighting--9229e1c1-bad4-48b9-a91d-0d990c92ac33", "sighting--aa28111b-acff-4e71-b46f-abbac1ff1921", "sighting--51fcd72a-34ec-4c54-ae82-91d1b564add0", "sighting--22f92afc-6846-40e9-bb9f-77d46c960426", "sighting--5ae10a50-21a2-45d6-8357-1caa6bf0c1a1", "sighting--471c0bb9-1338-4641-bd52-1d4720753fa2", "sighting--2ab56175-4067-4798-a4eb-19b8e61e5486", "sighting--bce554c7-8954-4a76-8bf8-e487b7049a19", "sighting--ba8a0cee-c53a-4d2c-825e-79c6793045c1", "sighting--c807d3df-e8f9-4479-9993-eacd16eb8bc9", "sighting--8ba7c17f-21fb-48dc-8dcf-d9b7c51e13ff", "sighting--b38d54c2-a5ee-4cd8-943b-3e10fe479f1d", "sighting--9034f36c-1624-4443-b88d-b3a45fc24cc9", "sighting--6f893d16-6286-4ba5-8f5b-5538f88a6fae", "sighting--c37f564b-47a0-4c23-99f6-c0c7107fe996", "sighting--c4215cd8-3f4f-436a-bde9-8a3cdd9a6138", "sighting--54a49898-67ec-4d1c-8bbd-002dbd386e44", "sighting--34196d1e-b80f-46ee-867c-266d7657335d", "sighting--5ed46e27-67bc-4319-9024-77736ec91f1a", "sighting--1d0c76cf-a976-4f40-bf8f-5a2dcd1f355a", "sighting--83ec375d-c2c7-4698-a697-86a6163c847c", "sighting--ace4d701-7803-47b7-8732-8fcf731fa2b0", "sighting--4fb032d6-1645-42c3-864e-5ef659f73bdc", "sighting--75f2f4a1-45d0-41d0-98cc-f7c9a1411644", "sighting--9b71eca9-b967-448e-b9d2-bd5fae0dd28d", "sighting--81c16216-01c5-4198-b2d3-81720db51f99", "sighting--a7206f54-61ed-4e67-a92c-83defa112b86", "sighting--6d757154-0117-4e1e-ba2b-96916c865a91", "sighting--59cb97f9-076b-4aeb-9282-13f45572c048", "sighting--39eca0ec-81ce-49d8-a5ae-7e9c6ecc5533", "sighting--59b59c77-d128-4ed7-858d-923102dbcf49", "sighting--03d144c7-8d29-4ac5-b10b-3a28ab025dd7", "sighting--69e9d10a-19a4-4b3f-8a3f-29af3b6ddc12", "sighting--96cbbdcb-fed3-4719-9fb1-40715aa11bed", "sighting--a66802e1-c416-4e74-8324-38e00ef0863a", "sighting--3384867e-9d31-4478-b6a7-13c2d968d3c3", "sighting--6e44d4de-6cd0-40db-8c6e-71ff8a614f3d", "sighting--421a4218-7573-4880-88ab-2fa891483927", "sighting--fddfcd14-c651-4a33-b481-2f0a87ff1aca", "sighting--76f379e1-dd16-45ac-863d-a27e0aba471f", "sighting--8cfdf754-344f-43ae-a5ea-3ccd0754339a", "sighting--e09de411-ebb7-4670-8058-928881a7fd87", "sighting--82669738-c762-4362-a786-ed81372de1e6", "sighting--c9ded2f1-adb0-427f-a575-ffa7e9e6ea08", "sighting--89ae824e-0efb-4735-ad5d-385e51e10cbc", "sighting--0d54371e-d495-45af-b56f-fae2751a0c1c", "sighting--f8a4a60d-70ff-4d06-b7f6-003a6fbf25ae", "sighting--17067bff-e6b1-4fd7-97a0-37e04e575269", "sighting--a37c5aa1-462e-46ed-b12b-aef347ad11b5", "sighting--47945d5d-1f29-4a57-8cf6-8f7db3243bb1", "sighting--95056ffa-0fb0-4632-86cb-75ff66d327ea", "sighting--09c233cc-d23b-443b-87d5-f72732dc1125", "sighting--d1ffd793-be35-4ce9-9f34-30bd1025d036", "sighting--5e42a275-d9b4-410b-af58-4eb434d90c6c", "sighting--6b68d158-fa17-4816-884e-16a488a7a916", "sighting--5cb9b8c8-f7fb-4a51-a4a0-6ac76477ca1e", "sighting--cc033074-9f0b-4345-9d8d-974b12a3240f", "sighting--c02af591-28e8-4f0c-b590-c9a43ac5e092", "sighting--9a6f17b1-a59e-4829-9e63-69840a504e90", "sighting--db85f71f-2090-4973-b9bd-ea4e5786b5a4", "sighting--160bba89-7205-4017-8932-b8ab64cc3b95", "sighting--d134880c-a4a2-45a3-8b25-f9e5bdfbffba", "sighting--d0ba83a5-93ca-42a3-a5f3-1910513a1451", "sighting--d4a94977-a699-4808-81c6-3814924cb45c", "sighting--e08f3fbe-1efb-4ca4-a290-4c26482d1a9d", "sighting--cd151a8b-ec3b-4cec-b8d3-48b169556e99", "sighting--f763c821-8fef-421b-bb37-e89a8127ce99", "sighting--fcaae553-5078-49b0-9c28-f3240d69da02", "sighting--9ab640d1-1f27-482c-90d6-9776b627ff29", "sighting--4c904efd-ae47-4150-9d05-6713ce780b1a", "sighting--f22390ca-8e7b-44d0-9acc-fdfe48a5a0d5", "sighting--d3194887-69ec-4953-ab5e-caab5478e3cb", "sighting--6b377b35-de2d-4112-b49f-2449bd14803a", "sighting--fa8f416a-b043-42bd-bf1a-c181fc7b40ec", "sighting--bc93ad08-655f-45dc-9cf1-48ff2001cdf4", "sighting--97c2034f-8961-4fd2-854c-68be2837ac2d", "sighting--aa8359e6-5b66-4342-b709-88f447e1e8b2", "sighting--c9855905-72ba-4f41-bce3-4960219d47cc", "sighting--7eef468a-4237-463d-8f93-759114800a67", "sighting--cb9f95b2-8121-4b78-859d-d885e4afbe3b", "sighting--c0adf464-36a6-45bf-9773-6ea8689910ed", "sighting--f869139a-f3b5-44fa-bdba-1d235af46a29", "sighting--4b7e189f-0f57-4d53-ac2c-a78e8670270b", "sighting--7aa9fd22-8138-4979-aa9e-827073c0abc5", "sighting--3e883940-3f30-4570-9be5-91086e1feb87", "sighting--24d51bbf-0a4f-4018-899b-75513648d98e", "sighting--a0958b71-9060-41bf-912f-00d0c8837b55", "sighting--adbad5ea-d54e-46eb-8959-b2fa38542c47", "sighting--fd57d02a-e59f-4aa4-9c56-d387af5df9bf", "sighting--3dcc417b-a331-46e2-9be4-88fcf0b2fa16", "sighting--9cf610fa-6363-4463-bebe-a5463ee7bca9", "sighting--b29e3346-2c80-45ad-abaa-89af6f25e8db", "sighting--252bec36-d018-4283-9404-85a9b020fdca", "sighting--30123da1-41dc-42b2-8579-fae504627f0d", "sighting--d1584666-3cce-40e7-beed-cb417cca4d64", "sighting--b780a6f7-d33c-4980-9386-67be48eb8c45", "sighting--67a30fcf-e19d-4617-980a-be89f741aa95", "sighting--fbb5963a-bde5-47ef-8a62-7c01459acf64", "sighting--12bc2967-6b13-492d-9dad-564d95efb7c7", "sighting--0824f845-ff18-4780-9df2-90f1d5867ffd", "sighting--a403626d-7126-4cd8-8fd4-f4fe3ca164f0", "sighting--e045d140-5395-44cc-a81a-550fb9524a3c", "sighting--81c508ca-3768-4e61-9fb2-5f3a6d759108", "sighting--0701933f-bea5-45b1-9305-6734c14f4b50", "sighting--45f5d948-b809-4c89-b64b-1a3b44ed37d2", "sighting--286c334c-e846-4522-a07e-950d41db5eb3", "sighting--b47f5554-fa3d-4dab-bc63-01637975fabb", "sighting--ad5c9cea-9e8e-46c6-b61e-afa22863505b", "sighting--9c77fb89-689c-4086-8bd2-272e9e51733c", "sighting--509f70e3-8e16-4ac2-a1b4-c41771b6f676", "sighting--4278b053-5950-4cae-bd65-d0c0ee7d1b3c", "sighting--ae93a18e-a623-4b45-ae24-0e26449f4daa", "sighting--7de68680-c07c-4be0-ba62-52b1686f9ab6", "sighting--6cbe14ce-0790-48c8-9f85-fcea6a188299", "sighting--14367dae-96fb-486a-a58f-e4bd7442c6c5", "sighting--2e366ac8-ca43-4664-b4c4-bcf1c751d086", "sighting--71173115-8968-4186-b91d-5a00f2a5ab1a", "sighting--bd57742e-c0e8-4865-9768-868b8ac51e92", "sighting--72a6a743-0aef-4b2f-8673-05e23421b3be", "sighting--0d82624c-cfaa-40be-a436-0b45723f9fb6", "sighting--d3663453-39a3-4c8c-addc-62604bf8f89f", "sighting--a26b1afd-a025-4d8f-90df-0556448b5bef", "sighting--f4414505-0083-44e0-9603-80f8175edb37", "sighting--fbba03dd-e5a1-4b18-829a-60937db91e0b", "sighting--7b216355-7ef1-469f-a3b1-a8c7e8135738", "sighting--3fc7a631-66c2-4a95-9b31-5a64c198eeca", "sighting--d4c11f7c-5f3b-4837-9271-945222cdd291", "sighting--a07dd67c-c487-4e99-b826-a78e3a6d5152", "sighting--013c1e02-f4b2-4949-aae3-8f1ffcd5cdd3", "sighting--f74fc0c9-c147-47e2-ae35-b68c1d4eb4ff", "sighting--ce6d50d7-608d-4d73-bda7-8d93057a9968", "sighting--2e20f84e-46bc-4f77-8887-3a19664ab60b", "sighting--21d2ca5f-235c-4366-891b-563db63233fd", "sighting--3c0238d5-a32f-47a3-b206-d9c32723d7d0", "sighting--650e9b72-fdcd-4c81-8076-9c6d9cd8f051", "sighting--a0089105-7b7c-449c-b1df-7f1dc32783d1", "sighting--8d171a8f-bced-4b5a-8e50-8b5212296801", "sighting--cf32b556-c210-4aa2-93f9-abf5dd558ecc", "sighting--ac339d79-bbf6-49b0-bda8-ac3dd2bce5b2", "sighting--5a83b095-1493-4880-82be-9e66e54acb53", "sighting--c6290518-7cc8-42d6-ac10-be288c2b3660", "sighting--a0274901-2a25-4ee0-b2d6-62406e4b2213", "sighting--28087a44-9b01-4db6-8d05-de0f13d3bf83", "sighting--29178d47-0dc5-45fb-bded-3f072b1557e1", "sighting--9228d054-d0df-46a2-a340-e2e2b179be21", "sighting--0df5eee0-bec5-4af3-8879-f6cdf0aec1e6", "sighting--4e1fba36-5fb2-4c9a-bbbf-95fc9d7d407e", "sighting--bd9e3cd9-d5bd-4d39-a452-4773a676e1b2", "sighting--889abbba-6d49-4704-8a94-37e29c653a8b", "sighting--55d4c943-33ea-424e-b730-d344296e329a", "sighting--bc14cf0b-1dc1-4aff-93b1-477344edac68", "sighting--906cf6d7-a2a7-4652-8abf-6957e0533b1f", "sighting--6ba4b2e7-dd74-411c-af6c-446adfedc515", "sighting--e45b4af6-1bb0-44cb-9852-d3e03b968492", "sighting--0ddc578c-3941-40e2-ad9b-fc21ea7df6f2", "sighting--389131c2-4e16-470c-8d6c-183829ac338e", "sighting--a25faa01-40c6-42eb-bd47-7ac71d961dac", "sighting--636c8020-6a04-46db-aaa2-3129114d4be2", "sighting--05e7aebd-de05-4f31-b868-806f174e1b77", "sighting--68f878c0-9655-4198-9441-c576f54283df", "sighting--55e1f8af-452b-421f-8a0f-7bea2f410a37", "sighting--1e03f8fc-d469-405a-a859-612ac61bc08b", "sighting--0ac54015-647c-4cec-89ae-1f7c956045d5", "sighting--66eb5625-e307-4882-846f-779575f7dd8c", "sighting--a70f5139-dd2c-47d9-96e8-ca3290fe87d9", "sighting--0ca25317-0f34-4307-9fd6-6c4521426e7e", "sighting--fbdfa765-a0e7-4e3c-b257-a75710d2401e", "sighting--338a3050-9779-4a08-a669-866e6c20579c", "sighting--30a9da3c-a571-425a-b08d-ad7f63300986", "sighting--0f8ecbae-dea1-42cc-a3ea-62b236f9ac26", "sighting--68125328-49b6-4d03-a206-366b39cc8fac", "sighting--4e2d19d0-0677-496e-8263-ae762d019518", "sighting--5b2c3c67-7c1e-44ac-a628-6382bf8c6ddf", "sighting--4d219e83-bdc4-4c2c-91cd-4ce86eb9217e", "sighting--d35e2245-3c46-4aaf-8408-b8f5ae90ef6b", "sighting--fc2923b2-c3ef-47dd-97b5-6e83e6d6bf69", "sighting--0535553a-4609-4f09-b686-647283e70663", "sighting--7a5186e7-380a-4e07-85ca-a3af8c4843d7", "sighting--a25bb9d0-59e7-424c-9916-8b65f30e438a", "sighting--73f31717-6d95-4939-80ac-353b163a5494", "sighting--5ddf2238-b424-4214-ab04-b551ec2dc0cd", "sighting--3e3d276c-43eb-4e29-a7e4-084c999a8aa1", "sighting--41412969-89a6-4467-ae82-a9cb5b1e01d5", "sighting--9c443721-063b-4a18-adf2-33fd30869676", "sighting--f0fb59da-7019-43f5-9d98-7c8199628846", "sighting--7aa07374-7f1b-4a93-ad03-956eb08ddca4", "sighting--a5cb901f-ad12-4707-9c38-fb91e57b726f", "sighting--2f2f0733-98c5-40dc-b9df-deb178e6b3d6", "sighting--567cb509-33b4-43e9-8ff4-61620e8e73ae", "sighting--96964c59-3036-49d2-b579-2593068cffa1", "sighting--a63ce0d6-32cf-45be-be1f-626a0f9d0ad9", "sighting--d87b6aef-5ffd-4ceb-bba7-7aa11cec7998", "sighting--1a659c01-f820-4259-a57a-a35958a7cbc9", "sighting--dbcf063c-28a4-4a7e-8367-b5ac65e53219", "sighting--c7fb6b36-95f8-4a7a-974c-8e08d8539491", "sighting--59a550b8-8dd6-40dd-988b-3ff676281003", "sighting--1a15844b-653c-4e0d-966a-e71e62700884", "sighting--f75c375e-90fe-495f-b181-907b4b0b2338", "sighting--4fcc71af-95ae-4aa3-8c90-f6f293faf4d8", "sighting--ec1fd3ba-cf15-4087-8c51-4f87e7b5be1b", "sighting--e9eaaa87-82e4-4831-b1ff-314211af7b46", "sighting--6827c311-5bfb-4e36-859e-70750b2011a2", "sighting--2b892b21-1ecc-4aa6-9f67-02565fcb2d3d", "sighting--96ae0c4e-fc11-48bf-8f4c-f4e219a27774", "sighting--64d3b19b-2060-4b1e-9266-877cae497d01", "sighting--6adf2003-93e9-4117-893b-15b916071651", "sighting--c552b880-ede3-4cd0-b69c-d329b1aecda1", "sighting--4862cbd7-7e58-458c-a9fb-7c40acf896ab", "sighting--cf3070db-1a1a-45dc-a4be-1f8d29614210", "sighting--007e98f3-c7ba-4a19-a413-92b38f2cf6ab", "sighting--75e6ae22-7568-474f-b1d8-59af7cb12bc1", "sighting--a621f73d-f4df-4669-a5a4-18d56947502b", "sighting--3ca8bcda-9e03-4e19-8dc4-3b684f6b13ed", "sighting--5dd2d2bf-8133-4310-86e4-63c06db4c716", "sighting--485aa48b-e63a-49d0-87b0-569c9c39184c", "sighting--47e24c34-dfef-4623-a17e-830b729bfa5c", "sighting--7fe04f3a-4a18-41d8-a06b-fb58bb28e1a8", "sighting--cc5c9678-3b59-4c9d-94f8-e70e188836e6", "sighting--9da1f40e-9828-40bc-a0ce-84de1697cbe3", "sighting--e90b93d3-9459-47af-936a-164739895e28", "sighting--da11f339-1b29-4231-80a4-b56fdfdcf32b", "sighting--e276fa3f-90d1-4389-933c-e9833b6893a6", "sighting--9aa6f43a-90e6-412e-b661-cb5bcb679dfd", "sighting--794f43ba-f87a-4605-87e9-f9283064100b", "sighting--febead56-a8b6-4d24-bae0-dd9ea62ff349", "sighting--bf1c2fac-7c3f-4218-9e0f-c9102a2f76e4", "sighting--3d72dfcb-7981-4d81-8320-842b14b24d30", "sighting--8b180ab4-c0da-4471-828b-9892ae1339db", "sighting--b3cfa48c-b4e3-47e8-9bb7-652bf1a46cad", "sighting--2f334719-5c90-4356-9a04-5b185c4414f5", "sighting--b43b5348-b3d1-4c76-b3d7-0b8b9dcf83cf", "sighting--970262b6-eab1-4d83-b3cf-6bcbfddde54d", "sighting--ee265860-cdae-4fba-b690-7de7e6daef2a", "sighting--4c2aba5c-d7ba-409c-8746-62299abc58c1", "sighting--cf4347a7-1208-435f-b2d8-e9921cea52e9", "sighting--0f302381-1752-4efa-b301-9fac36fe76fc", "sighting--9e0c19f1-fb59-4098-9c71-f4a30fbe2227", "sighting--3b881752-e7e2-4f89-be68-f89ee8315c8b", "sighting--efa810f2-08f6-4ca8-bda3-14d4910b6247", "sighting--29a21c8d-bc70-4eff-955f-9bdd52fb1ea4", "sighting--da404cc5-d529-4ed6-8b7d-967137148a37", "sighting--12cb60be-e4df-4272-a8ea-c179f6384eb4", "sighting--640fe06e-c1dc-4208-b687-f523b5769374", "sighting--2d87d1df-3bf6-4f76-85ce-ffc13236a956", "sighting--37636d1f-e338-4c40-b53c-83fe04f37448", "sighting--8d09e564-0afa-46c1-a95f-5c0e64aa9537", "sighting--9ba3ca85-d8f6-413b-9f70-07f01bcffc75", "sighting--6e992c2b-ee31-4b9d-8798-cc88741dfa06", "sighting--8e9154a3-2cd3-49a8-8b73-86aea4a77255", "sighting--091f1fae-8f6a-487d-940d-2e785cd470b1", "sighting--a6c31e19-782f-4438-ba43-887aad43d504", "sighting--3ac433fe-28e8-42dd-933b-caccef20ce61", "sighting--4c17c683-0958-4f5b-936d-b700229caf6f", "sighting--60891eb3-c52a-41f4-96d2-9977e5e6b4eb", "sighting--6f024af9-9c2b-4e24-b3a8-318a1f847868", "sighting--e44f4642-f4ef-40c1-8d0d-b5ec2b7d6075", "sighting--a4a9e4d9-e421-4d05-998e-a9c96698bd48", "sighting--0d67b174-1ae8-449d-9d64-57c7011f95e0", "sighting--557513b3-b07a-445c-8586-bebb4e5587fb", "sighting--88cbe286-fbd5-48bc-a4d9-81464da090aa", "sighting--f2d38b11-4663-49b5-85d0-7653dc5f0ac4", "sighting--72cab0e6-0efa-4b53-9982-c372c8b92333", "sighting--390728ba-4bc2-4686-91d9-59763676d26a", "sighting--6fff3be0-5bee-4159-80b3-dc2c74b1ab95", "sighting--1f424e90-a0d4-40b7-9533-48d0e291aa0b", "sighting--b59cb076-f707-488e-a0bb-e414a713468e", "sighting--63cff6b1-3945-4785-8347-7325e5f44613", "sighting--e7fde4de-f72b-4035-a2ae-30189a67cf11", "sighting--ebeffdc4-0a45-40ba-9d76-7ac4950ceed8", "sighting--04b5447b-0daa-499f-add3-5ad05e10ad34", "sighting--0c5d2031-486c-4e9a-9079-845bb428f82b", "sighting--13539daa-6d51-4756-83af-01b3b910a461", "sighting--45744485-1b89-467d-bbac-23746b46c21b", "sighting--ea20db5b-86cf-4b0c-bf3d-3ac8ee7e274d", "sighting--a31cab39-d44d-4860-9b77-9e00bcb817cc", "sighting--7dca8827-9297-4f15-a820-9b2543d5c527", "sighting--bd0231c2-f3dc-4526-8de8-01141fbb2112", "sighting--64151881-f6f2-46f4-ac72-1cfceabb1f95", "sighting--08351bd3-2a58-4392-b352-c83db0666b88", "sighting--9cfd92e6-5b0b-421c-99cc-541603d1c05b", "sighting--dfe7edd2-8576-4b1e-a31d-05e4b827d7cc", "sighting--140f8c6f-2593-43d5-8177-436cafcedfb3", "sighting--21226d31-d414-4063-aa3c-60a6ce084a1f", "sighting--f7b9212a-495d-45ca-9606-3c9c38c2375b", "sighting--d0df5860-38cf-415c-acfc-7c2acbea899d", "sighting--318405db-5454-43f7-879b-277119268da6", "sighting--5471c2a2-c548-4238-baed-755f2ff31e4d", "sighting--c1925c67-e3dc-4196-9f3a-f70c59b47bc3", "sighting--a5a885a8-9848-4a45-9a26-ac99dc2a773f", "sighting--337901cf-bd04-4013-bc9d-0640b330dc41", "sighting--9086fe18-ff63-4ac9-bcac-3b8c938558ad", "sighting--8b79aa22-b1cb-4631-a2c3-7ae264c4aa0d", "sighting--6d7a88ba-11ee-4023-a6bf-0e3b21d4ff78", "sighting--9711f2c9-1a10-4928-a6e3-5948469b2a21", "sighting--f9a0f712-b3bd-47fa-816d-9e75ffa0e509", "sighting--4f9ecd7e-9912-4301-819a-6ad07146392d", "sighting--1029f5f6-9b18-4c15-8b7a-31fec513302d", "sighting--8b89fbdb-48ca-4a27-914a-45664885289c", "sighting--218e769a-91f4-4bb9-80ab-572ff8d643e4", "sighting--7c727fbd-8f8e-4f12-96ec-c8a67ccdada2", "sighting--408e5f0b-3b6b-46f4-9b75-ba09971a39c7", "sighting--3e04ff25-5a9e-4043-90fb-9fe2b21554f6", "sighting--46b8ef58-ea41-47c1-b16b-ff1b5cf52891", "sighting--f612dc71-b831-44a8-8bf4-bd3cf9ff19e9", "sighting--18e0e79c-0fc0-4d53-9153-2a2f755abf3a", "sighting--61dbadec-ebf7-4ee8-a1ec-f08e616fc22c", "sighting--fbf8878e-7191-4233-b5bb-53d22cf24c12", "sighting--0691b033-66b8-4a62-9cb1-99ef0c6766c4", "sighting--ddafce84-6c25-4506-967f-aebf6402de80", "sighting--187083c0-3fdd-4450-935b-71022561465d", "sighting--b1f27cb4-c67a-462c-b1f8-2c959a11e3b1", "sighting--763764ad-4e80-4f9e-8696-ceb96fb1dec7", "sighting--a9dc4f2f-2337-4d3f-af7a-dadcef4bbe64", "sighting--0b6ef91d-8ff4-47fd-8b79-5f2a71f2142b", "sighting--8f3f10a3-2ad2-4210-8e62-ccdcb4c8ca59", "sighting--c4eb1e55-8ebf-40c8-a153-b7969509fed3", "sighting--147b2697-18b6-4a51-8ba9-2ef2be4a2e93", "sighting--40fe74cc-c9f0-4c27-8339-118187cbf365", "sighting--5b1cf945-9d44-4913-9329-f246122085af", "sighting--b7e47889-918e-48ff-9e5b-ac5fc52fe8b4", "sighting--29a461b3-3e38-4626-a316-7b06b570bf61", "sighting--05a7d7a6-6bf1-4ab3-aa3f-1bdd1f4cf251", "sighting--7d939862-4524-4bd3-8220-0678f35ca6c7", "sighting--00fb2127-9aec-4f69-8f0f-1e87d4004c68", "sighting--c755750c-c6f6-472f-8e4b-5453c7d7e476", "sighting--a629e3f2-5bf3-4945-967b-540e67e192ff", "sighting--c05c8a7f-4849-41d3-a5a7-e5a5aa02eb3c", "sighting--993e6dc1-5397-4060-8d2d-7850e525ae6d", "sighting--b47e7c32-3ecc-4a82-9ab8-dea3f247e17f", "sighting--b762f4df-8262-4157-889a-7cabd843a3fb", "sighting--8a670f21-631f-4428-a23b-3966c2778857", "sighting--d032540b-6a2f-4b3a-93e6-589ea2a9bed9", "sighting--1d1466b5-1a37-489a-9fa4-14d6b0da5d70", "sighting--591c4929-eba3-494d-b743-e8121c3c553d", "sighting--9cff7199-e27a-46be-95ec-6a65b54697a1", "sighting--c610f91f-79a7-4b97-962e-853b17ffa463", "sighting--0ef7d462-ed4b-49e3-abdd-ff36933d8b9a", "sighting--ab19635b-2293-4683-a1ba-093873ba33e7", "sighting--15d861bc-1168-49c5-83cf-17ed3a1b94f2", "sighting--9e1f5289-f800-472b-9ef9-c8b3385fb584", "sighting--1f50b783-a7ba-4a64-ace2-4e4745127ea7", "sighting--21e8fa60-3342-44d4-a802-317460c09fcc", "sighting--7ab7253b-99d0-4388-849c-3ca2aefb7aa5", "sighting--9055d946-70be-4ff1-bd3f-f873ccaf03f3", "sighting--067b8441-8f9d-46ff-b27c-d220559e6029", "sighting--05fec695-20f9-4e01-8ec4-139b1b241cd0", "sighting--305e837d-1262-427b-a7cb-a287a7599589", "sighting--f7f44ad0-f3cb-4010-b588-1657845eaf76", "sighting--eed372c1-26dc-4dcd-84c8-3c0f505cb02f", "sighting--aa80526e-8c8a-4565-a9cc-cff5c1e342f5", "sighting--4f3e7eba-42fe-4761-86dc-0103c19b477c", "sighting--d54f7a58-c609-43c4-b40a-1bdd15c068d4", "sighting--39ff3cd4-b6f7-463b-982d-7f5d9b18a7a7", "sighting--97579dba-6ebd-42b9-964b-401a751e4631", "sighting--fa68f76e-8176-47d4-a4a8-25669ed0964a", "sighting--ffb0e895-88f4-40ea-8e6d-dbc990e6e3de", "sighting--1854283e-b95d-472d-a54a-e4e0fe16742f", "sighting--dcbd4037-4af7-4b15-96cd-8f6c8156bead", "sighting--398cede9-73c5-4fd0-9377-0adc7e8dcfcc", "sighting--eafc192f-09b7-4b6c-b337-669745f79079", "sighting--f0b9a3fb-91ae-4691-b01a-7462f5c891eb", "sighting--1e0e80be-5ae9-4305-a5ae-48fbab96af45", "sighting--c5800306-224c-43f8-b4ce-c92f7e57bfe5", "sighting--066d8399-97bb-4be1-918d-98abb8347ef9", "sighting--a1220190-0198-4c2b-8c6c-287986e00cde", "sighting--0ec6c768-a3de-4e21-a078-59f0eabcf4fe", "sighting--5583438d-a41c-46cf-b771-cdf8ae21e95c", "sighting--fb3ec611-8b20-4bb0-acbb-95db186fb351", "sighting--5d64c81e-8f84-4796-9060-8f870814dada", "sighting--e08b713b-f287-4afc-87df-b99f00dfa544", "sighting--5f91b6d6-4964-462c-8b64-46b558f0f522", "sighting--6fb5dc5b-2326-48db-b1c3-0f3d72eb3ec9", "sighting--cb73f692-4fc5-4eec-9f27-9b5ad6571caa", "sighting--4fd673ea-5cc6-4e35-9a61-7eacf66a08d6", "sighting--4c31091d-c73e-4892-a880-214c5098e07e", "sighting--d2634f86-9969-4dce-9cad-f920cf5c9d53", "sighting--644373ff-b1ee-44cd-a0ad-dd4d0b042af8", "sighting--4ac89307-c8d6-43f1-8317-32b393518a30", "sighting--5c51c715-355c-4646-a2b6-a0066cea730e", "sighting--190989c0-53c1-4ded-9b8c-92481b903586", "sighting--f12cbac5-9c42-46f0-95e0-b63cc82478ef", "sighting--cc03911c-cdd1-473c-aeab-d5fe0ed781d6", "sighting--25150e70-f886-4d62-aa42-255b56389683", "sighting--5b63be0f-78c3-451b-950c-dddd946acea3", "sighting--269df8a8-49b4-4048-95fe-e093ea5bc73d", "sighting--7876b69a-7451-40e3-b687-980a7d0417fd", "sighting--b77dff05-2ece-465e-8da8-289a88c5dbab", "sighting--2b40d6b5-d0ef-4a01-9cf7-620fa5794cad", "sighting--272cefd4-9496-4449-bcd5-29b9fe397ced", "sighting--d31150c4-09bf-4f31-90f4-11d384f4445a", "sighting--a0cb5afc-54b4-4051-a4c3-41b3938666b7", "sighting--b2cb5d33-9a82-4270-9240-b6771d085276", "sighting--18e5e1be-8cf2-4b3b-a875-3ed8980c8559", "sighting--8e4dff54-8e11-42de-8a12-3bf59712d751", "sighting--365ddfa1-e8df-4aca-9804-a3c1e45bb8bf", "sighting--71d1e4fb-c3a7-4231-bd0e-87d84cb4cf4d", "sighting--67c969f7-6cbe-4dfe-892d-db4877bcdeb6", "sighting--04700ec2-1734-40a6-a62c-ce9a8e6526a8", "sighting--2f903144-6a27-4ce0-8193-89506702d6ac", "sighting--e2023323-ee0f-41c2-b5d9-6c45c3ba6835", "sighting--e871e435-2f37-4e2f-ad89-7854daa47c45", "sighting--651c23b9-ddf6-48b2-8378-8095c26006d6", "sighting--2da3d647-960f-4c12-9e69-e543efe533d6", "sighting--61104fc9-eace-451a-a652-a52e53d0c6de", "sighting--dd0904c2-5995-4968-b4cd-34fd38356b34", "sighting--18b8492f-ddc4-4eda-bb7b-9d240ba019bc", "sighting--9fe05975-b6f8-4165-9a8c-51a6153bfce1", "sighting--b579cbbc-7e31-44e7-bc4e-91a2492b9b1f", "sighting--46d96c62-b105-4ce4-94ba-4e135ea55240", "sighting--99820e93-6217-440f-85a7-ba003a176ba0", "sighting--20e2068d-e673-40eb-a970-aa8c5562b925", "sighting--020904a6-d00a-438a-8fe0-0265b7b2c5de", "sighting--46dee419-824e-47d2-b5fd-7ac3ff25d58d", "sighting--963a04c0-8a6d-4a4b-b98e-a728f89a8e73", "sighting--cbe0b3bf-04a5-4f13-a8db-c61ceda77644", "sighting--579c279d-0586-4c12-b5ca-6f87034c84fd", "sighting--9fe53168-57e4-40c3-8b3e-ac27e878bcc0", "sighting--f78790e4-6171-4e4a-b512-ce37b6a3190f", "sighting--d0ff4125-254d-496e-86ce-2d588289cd42", "sighting--9f19c1a4-0d0c-4857-9d17-7b9231840009", "sighting--346e4646-f544-4f42-9aa1-f3e631e92258", "sighting--3a790cf9-2f16-42f4-bcf8-93a246ce4ce2", "sighting--7613f2a7-ac53-4213-a58c-427556891f39", "sighting--f9b09357-6689-4c10-b2fa-3e1de31eea5d", "sighting--b0d91597-5974-41fd-997b-bd65152b330b", "sighting--870d64cd-cfb6-45cc-9655-24ae402da548", "sighting--0032a1e3-d750-4b99-b14b-33acc572657f", "sighting--a8de8e5d-93b2-475a-a848-981d416950b6", "sighting--39598f3d-39b6-427e-b152-f906ee80df8d", "sighting--55bbe5b6-ee5c-4590-90d0-adbef87fd29f", "sighting--91a5b401-1a4a-43f4-bb3e-6203a72a59a8", "sighting--a29cef98-2294-4157-8a95-b65e3db31e16", "sighting--f907bdd1-60c3-45e0-8101-5c84e1eb1f26", "sighting--863c8174-c77d-4879-8148-896ca709302f", "sighting--3ac76e4d-eb9b-46f3-8725-136c87e47399", "sighting--0f00863f-cd18-46c9-8ab8-f0d86e5a7138", "sighting--5ff8b5a9-8ad4-4350-9153-6501da7ace0c", "sighting--f96fc046-b6bc-40f3-8815-d54f0c9fe6e0", "sighting--d800b946-b5ef-4d80-ade5-30b7819b4a1a", "sighting--d24d5697-7506-415b-be0b-88b344428d73", "sighting--f4796f53-70ca-4fe5-9db8-05db055838d2", "sighting--9966215a-3c0a-47e2-bc69-c5ae4a78b1b4", "sighting--b7434df4-62ef-42e0-a00c-cc2a65f23506", "sighting--13cd978f-99ad-4215-abf0-90ba4cf975ab", "sighting--1e06e663-75f7-4081-9b32-d44341aa114b", "sighting--b1cf199f-c4e0-4ec0-be5c-f98bda844fbe", "sighting--fe709170-cb31-4503-99f8-dc64bccc64cf", "sighting--341f9422-60b7-44e5-bf1d-8dd463fdbcfb", "sighting--26e2edef-c200-49a7-b8c8-9da1c4d61c64", "sighting--fc2720d3-c28f-4d59-b868-e3cd4e661e6d", "sighting--577260a1-0b5f-4dfb-b47f-159abd060555", "sighting--a5a87326-b804-4a7e-abca-59ab1e2a9337", "sighting--70f1f705-eb45-476e-8252-7d05a2bf5aca", "sighting--5c34ab29-0d80-4676-9910-d49ac1276b95", "sighting--846f1186-c81a-42c7-834e-dc767196a3a3", "sighting--0a868c7a-86a6-45d6-aa7e-5ab1561968cc", "sighting--cee009e5-571a-44be-b0f8-a323b88a4284", "sighting--dc1c3770-1a46-4b59-a356-0b12c63e9b95", "sighting--2c8c3df5-d8b2-47cd-8b04-3a9cd6689404", "sighting--6a112376-b1a5-4604-b6e2-5023d69c0143", "sighting--6669835e-f516-495d-8744-0954e61a3b9b", "sighting--20d04b83-0504-4348-bcbc-ee5737a9656b", "sighting--849b6833-a7c4-4b23-951a-08b2e34596b2", "sighting--901a5d2f-5b9d-4dbb-8586-6cc3499a5c3d", "sighting--5677410e-3203-476d-afe9-572b9d41c95b", "sighting--f3fe50cd-3875-40a5-8228-fdee92694d11", "sighting--704dcba3-2897-4338-8616-7979a3b35139", "sighting--1681fdbf-2bd2-45a2-bd85-7ec5ea15835e", "sighting--459606e4-20f6-414a-acb9-9f56308d2e61", "sighting--d482b14a-21b8-40c4-ab50-7174364ad7e6", "sighting--231c43ac-d896-479d-a1e8-ffb982a1c62c", "sighting--48d876c5-1be8-4b15-bcab-0eb6d01baa1b", "sighting--f5fd11aa-0c61-4956-bfa4-167aeb2c1f51", "sighting--1df5253c-27b7-4d8f-bed1-ee06ae2cf51d", "sighting--9fb9909e-7571-4b8d-b058-75b76e15f664", "sighting--d571b278-6d21-4169-b5c1-fb9e9d825964", "sighting--5e01a25a-bc53-4b10-a438-d45c6cafd82e", "sighting--2ff7af02-6457-48ea-b1ff-2b05a1c98fc9", "sighting--4985f61f-dca9-4b24-a131-1e151173e855", "sighting--30d3ea36-4216-46b2-a043-d7492e0383cf", "sighting--aa2ee19e-aab1-4e7d-8fb9-6325226a175c", "sighting--1143306b-5710-49a4-9e8c-cb58f054b4e1", "sighting--469051ff-1069-4253-b863-517af9285864", "sighting--9b75e101-1e9c-43e9-abd9-01d1cf221e2f", "sighting--f5eb2bfb-bbac-4acc-8495-63863aea1f83", "sighting--c62a5210-037d-4c54-ab44-31d80e6e677f", "sighting--4505e693-1ace-463e-adea-ff57a2a09147", "sighting--381a1f3f-38c6-4ef6-be0c-4b0e09a4860c", "sighting--abe0c512-a01e-4ca8-bb1a-f3332e5729e4", "sighting--c427d340-4344-4db1-8e16-28a57cf0c290", "sighting--6c348a81-7bb3-4118-9fc5-686affa16512", "sighting--4db122cc-55e3-4b74-9b73-b225d6db3d6d", "sighting--740f6826-6fcb-4115-bec7-2e705803f797", "sighting--ab921a9e-a9d7-419d-8b7d-b6cf6870eeee", "sighting--b260682e-b067-4f37-99e2-d8a3a90e6b56", "sighting--55f4b5fe-64a0-4f44-89c2-fb4f490b465e", "sighting--fb6b496c-3b3c-4ada-bcac-698dd83f70d0", "sighting--2a547e01-27e0-46ed-9d97-fca7fcbe42d6", "sighting--fc90a4bf-806b-4ac1-bd5f-9793ae7505e8", "sighting--c9ce0d7b-ff77-43bb-9894-3f0f62f34507", "sighting--d1460900-4ed9-4155-b2a4-11c6af603dbf", "sighting--d86bf4fe-ba64-4276-8749-74fe248c3e82", "sighting--cd44a41d-a80d-41ab-bdc3-59ec41b5de0f", "sighting--845a46dd-15ca-40cd-8f0f-3e3030c9a12f", "sighting--12d3a8d5-1e77-4cd5-89ac-d1f5937a10ba", "sighting--83fddba4-8ecf-4d74-9e35-8258f42d0ca4", "sighting--ccd45863-5bcb-4f8a-95a9-9ab7cf66ff29", "sighting--1636ea9e-c9a1-4ea4-b46c-a0faa3d90edc", "sighting--cc71e1d4-30e7-479c-858d-690880dc0d3b", "sighting--b483d74b-2a07-4d43-b13a-14a8f92eb8c3", "sighting--b0251706-f985-4b2b-818f-67b7fc39724c", "sighting--f76d32f2-ff41-42a6-b95e-98ef4a87a147", "sighting--10e67f04-8064-4629-9913-7704b4b64cac", "sighting--c6bf4461-d580-4fb5-931d-8a293ef42155", "sighting--31719e08-f426-4db9-911b-0cc9f1f78f45", "sighting--801d9dfe-c4cc-4210-8156-850afcb0b8be", "sighting--c4c6b81d-f584-430f-add5-c529ad734790", "sighting--1d66f8c2-0c5a-47ee-aa2a-4ae3cd3d11d8", "sighting--45e75107-d3e1-4ddd-b661-9321c3fdddc4", "sighting--69942743-c01a-4989-a1c7-0641aa1000be", "sighting--393026ea-665e-48e3-a71a-1353c9eb1345", "sighting--d609ed17-28ed-4c04-bbc2-63085b652574", "sighting--d14a5eae-85de-4df4-8cb1-f537b232afdc", "sighting--cb98e19b-1d00-4ae4-afec-9f9797e6aee6", "sighting--8d982f89-9c57-4a52-9eea-ff917044d5e3", "sighting--d33a5506-65b1-4f95-ab4c-b60e110b2814", "sighting--b93224f9-d812-490b-9a34-43fe1bb2e32c", "sighting--791ae85f-6cfe-40cd-858e-1f5ec00c34b5", "sighting--3a2c938c-1be5-4c61-a5e9-085b138a149f", "sighting--ab31b9b4-aa35-4c56-a4a8-49d0d5cf4fb3", "sighting--e2b10952-cfa6-4259-8fc9-b0d9f75983ec", "sighting--ce56b4d0-4de7-4ef3-ab64-8f377fd72a4e", "sighting--9aca5d60-07aa-40cd-af6d-1f0704a8d4e7", "sighting--e7b8d204-473f-488f-ba8a-efcb216960de", "sighting--3c21503f-6838-4930-8623-17e0576cd8fc", "sighting--71b47cac-f703-4044-b6cb-d33cebac2dea", "sighting--cbfbbafb-8560-4f43-a74e-f239fbfc5748", "sighting--4dd3e04f-0d63-4911-b78c-6e91fe09b91e", "sighting--1ecfbc6d-167e-42df-83f9-df0f72d88eaf", "sighting--e8ef536c-9433-4c16-b9ab-5a6686cc4c7c", "sighting--deeb8cea-afed-4285-bed2-41f5d4d27a5e", "sighting--72f6ba64-09f2-4a54-9bea-ddf12324f2ea", "sighting--f3f09695-0d8b-4d3b-b0c9-97fa4eeaf161", "sighting--6dd53409-03d4-4a9d-b246-0a221004fce4", "sighting--66b8f87b-a534-4f02-82fd-035117a2f6d1", "sighting--cf9101c0-1de0-494f-9a54-eb9f0e1947af", "sighting--8646ff7e-827a-42e5-bc6e-42b64047fa85", "sighting--13db6e49-9056-4f48-aa54-190f26691f44", "sighting--d025985f-3027-4ee8-b782-867733316435", "sighting--3a8b6ed5-f16e-431c-a1f5-6722b5661734", "sighting--e94a9ace-ae70-4d66-bbfd-46bbbcbf64f0", "sighting--a83ac670-d101-4728-b960-99bcafef9d05", "sighting--90882c33-a997-46af-96c7-de49520723b4", "sighting--675552da-ee16-489a-9ce5-a687a4510f8d", "sighting--fb155f84-6f66-4902-bc9c-64a38f8d7e38", "sighting--b506ead1-eb19-4897-8781-bd1f65b896ef", "sighting--bfdd1c5e-be81-4ab4-a928-3e0f0edc2908", "sighting--14f1b454-cf7b-4a4e-8175-4f2183335ea0", "sighting--5d0fee12-aade-4769-90c1-e6a80d91f3e5", "sighting--476960f3-8a49-41a3-b1f4-e2baa3338978", "sighting--71bd3b5e-408d-414b-bcf6-06999c542bb9", "sighting--fe08ea16-009c-4b67-a210-d7b8d20728fe", "sighting--ef65b6bc-9083-4b25-bb14-e849cead31ed", "sighting--03f90372-6da3-4c4e-8348-c8d7b1a3ce53", "sighting--04215a71-5892-41a0-bf64-5b27568f275d", "sighting--806e55e0-3b61-4962-bd8a-4415bddbb495", "sighting--2f1a9962-6f2c-42f4-8fe8-42f7338caae8", "sighting--29234cd8-ffb4-456e-bc51-4946a2545754", "sighting--3b83b569-8c8e-4572-8415-bacb525323b4", "sighting--38ad2fda-4bd9-4401-8cf3-04e730ff4438", "sighting--200b06e8-d936-4cca-824b-bbe5a000a2ba", "sighting--944eccc3-fc81-46a1-81cd-d4e5e10361c9", "sighting--782f813a-cc33-4158-b8a6-a5902309ae66", "sighting--1d6a9478-88dc-4b61-ad62-8b453f284abb", "sighting--fe86f645-737e-4da4-a81c-a20dabee892e", "sighting--ddca337f-d425-4440-8714-4a84f34bba2e", "sighting--dbe63504-7652-4e7c-aa15-fd06e034ab6e", "sighting--e8e2d60e-1a27-432c-9250-2ae17dfb451f", "sighting--710b1215-df61-4bea-af3f-13ae30b6f859", "sighting--1691ba94-11ce-44f0-8b81-16e5a8a29e69", "sighting--9c9b1287-a54e-48df-88f7-cdfaba22a906", "sighting--0bda8d4a-6ee8-479f-ac22-802dcc1bf110", "sighting--b4b9fa0b-2e92-4bc5-a655-f2eb9bcb3b9f", "sighting--0ea81f92-b704-409f-abed-4541ad2f43df", "sighting--8f5a133c-0809-4f1b-818c-1f44cb0e1021", "sighting--036c0f0d-da08-4234-ac0a-569d85bcaa7e", "sighting--0ce00d47-da71-4d0c-92ee-7f72e9885cc9", "sighting--e6e80d44-ee32-44a0-90da-adea3aa85b46", "sighting--2ea0a789-556a-44cd-a440-e39d5f7a4471", "sighting--4320a450-9b12-4a2f-9a72-71ff0b67c9c6", "sighting--298c4d49-c037-4b6c-855f-eba1fe2754c5", "sighting--f393dbc2-25e2-4e45-a70f-fffc6db20ae8", "sighting--0cc3cbcc-387a-482a-94b1-286bdbc60541", "sighting--265cde82-c40e-4df6-8eac-9cbc99f370c3", "sighting--e29d66cd-a62c-47d8-bd71-ceda892268e2", "sighting--b46a4827-c4ea-4ad5-92e9-17b281ad432f", "sighting--265e1c69-bb94-4366-a467-1f9558c2ad65", "sighting--fc8fda5c-08dc-4151-8c4f-d7f1f2530db4", "sighting--911bc003-2765-456d-9c51-9cbed5cd2385", "sighting--8fa5be62-1fb4-42f6-b711-20b7fd6e0ed3", "sighting--11d94d0e-3211-43e2-9eaf-f62a2cc1e151", "sighting--a05cec19-8e59-4979-8a94-7d399fb9cfa4", "sighting--0fc27188-f30b-4aac-b891-41878e9a5ceb", "sighting--de06fede-b47e-49b8-b228-889edcbe47cc", "sighting--d495c0a9-c64f-4276-a310-c5d4bf98b1a9", "sighting--b3401f20-113b-4948-8e53-a35c19309b44", "sighting--e18150a0-8263-45f1-a3c9-9781a7c89752", "sighting--ec992e74-155d-4926-935f-4a19a04c119d", "sighting--afdf3936-bda0-4ca5-910b-b5c9a4de4a85", "sighting--a2471f25-d17b-4625-9d20-3b84a24cfcd8", "sighting--cf0adf31-a58f-4018-a86b-d2d94d50d320", "sighting--bf4edf51-35c0-4b65-a546-9ac3536eba85", "sighting--5e138ec3-a1b6-4102-801b-001c2f2aec99", "sighting--c3ca8ae1-d5ca-48a5-9fac-ad584feb4c49", "sighting--aae3705a-77a7-4165-bba2-9caa03102dcd", "sighting--1334c670-f63f-4217-9dd3-ed6f5ac943fc", "sighting--61f6bfab-6c84-47cb-bb64-c0d86f3571b4", "sighting--1aff7daa-5e5d-475e-b09d-c30bfd9c495a", "sighting--5e0878fb-333e-44a3-bd43-462e4a68a58a", "sighting--d2a9edb8-9e43-4c07-84d3-87c98c6a8b16", "sighting--d2f4356f-8696-4159-b466-a61f6f107afb", "sighting--18494fb0-ea9c-48e9-8a69-8ff4b71908b7", "sighting--a3d3111e-fc86-44f7-beb6-6397b484a191", "sighting--88813448-99ec-47a3-9ad1-d29a3076a42c", "sighting--926a7b10-6ac6-4551-a413-78dea1c041d6", "sighting--a6a49ecd-e7db-4015-a298-1342c527ab9a", "sighting--255895e6-4362-464b-b4c3-bf0727a83eb8", "sighting--0b5c81e9-eb1c-42ff-a159-66150d5f0818", "sighting--cbdfa407-52e2-4229-9da9-83a42d655fde", "sighting--42d1c836-91b2-4f3b-9b20-88205b3a763b", "sighting--7a13fa75-7b66-498c-a3e3-2c776c2a7a20", "sighting--ff82d4a6-a802-42a1-b68b-5abca9f51365", "sighting--a78ccf9e-bf08-4ca3-91bf-d6aad0922620", "sighting--2b43b973-e2e3-400d-b883-9e7a58f73a9c", "sighting--b32db0eb-9e50-4c85-9d5c-d7443b819e67", "sighting--df1eb121-b202-42bc-acd5-177da770ff4d", "sighting--41d39783-9e8a-400e-8c86-bf01853e901a", "sighting--faa32775-6400-4887-904a-688bf9a17d19", "sighting--6719ddf9-de32-4fd3-97cf-fa5f35e20fb5", "sighting--5cebe052-830f-4f53-8145-a731a6573a1d", "sighting--46bb6f2d-fe8e-48f7-8da3-923daa182a08", "sighting--ca571751-228e-4825-8c85-d824220fca00", "sighting--dbe68ec6-af98-4f4a-9588-3b0d3943f9f3", "sighting--c96ae30a-99f3-425c-a6da-0d8655f14fcf", "sighting--c341c45c-7420-4f97-8fbd-bbe43b9d91c9", "sighting--48db1ba4-bd20-4157-bb31-e320843f5aed", "sighting--21093771-97fb-43c9-bb5f-ca0bf7292db8", "sighting--a6008bca-d315-48fd-91d7-056d62156414", "sighting--0603c0d9-d5f5-46a1-85d1-1c338b39df52", "sighting--9bedb9be-f937-4e8e-986f-a9e868c17541", "sighting--52aa97ce-6c1a-459b-bfaa-ac4339783766", "sighting--3f14916b-775b-4394-ae7b-94e4433ecf24", "sighting--f0f39889-e924-4a02-8719-1f43498b9e80", "sighting--2b3ae946-298a-4c27-ad94-5c947d5f06f4", "sighting--d7b60d63-c984-495a-b259-455a8f308d01", "sighting--019cdbcc-778d-4c23-82f1-215805f7a7c0", "sighting--f420f850-31a8-4ace-828d-4971587e7eed", "sighting--fb0d4b94-f682-4f62-9185-a5c867174a92", "sighting--5c3b8c9c-5775-4aa5-bc02-bae9b1770663", "sighting--ecf4226b-68ce-452e-8c8b-bade071fdc00", "sighting--c4261dc2-f793-4a78-82cc-5075e1049a0a", "sighting--579a819f-838b-41ad-95ab-84dc2f495a3f", "sighting--f7884e65-bc09-49b4-a572-177772baf902", "sighting--376fdea3-167a-476f-b4e2-3a6cdef5d172", "sighting--356e47e5-7ae0-4edf-b4d8-a5df5584f741", "sighting--ebf50032-a487-4979-8e5d-6a3e6cc51179", "sighting--be86c2d1-3aba-4fdd-8755-1232f022373f", "sighting--6085f048-f4e9-4a6b-9542-a2b50e43e851", "sighting--0062f30c-4776-4e14-8b61-7770e647160d", "sighting--c8732c02-35ec-4c7b-a5dc-0105e887b9a6", "sighting--4ad8e93f-c82c-48a1-bad1-023c8b574e2f", "sighting--2fcd7e20-34b5-4c30-8c63-ddbe7b0d8eb5", "sighting--39080b17-59f7-4046-8535-02cf2e59e9b1", "sighting--9d0cb35a-7f5d-40f4-a688-69075318422d", "sighting--9b06a38b-4040-4a5a-90e6-16140e79030d", "sighting--a371ee9b-dbd3-4823-9ca2-b99256679acb", "sighting--0c8f94bf-911d-44fe-ab95-c518df008247", "sighting--82cb016c-c070-4ec4-8db6-4eb94cea10da", "sighting--10dd9659-c6a2-4a6f-93c0-c9baf6d5fe2b", "sighting--f82099f2-e7b2-4ba6-8743-bf2f932bae3c", "sighting--17400321-cfe8-4990-a02d-7bf23a5ba70b", "sighting--3a7721ef-541f-47e3-9a89-90a628018388", "sighting--fc64c392-3cd7-414c-9c27-f773e3ec84f4", "sighting--34a56c04-159b-442d-b575-fd6631ead68f", "sighting--9ccbacb2-1fef-4891-9365-ca8495dd9128", "sighting--cc844883-6b41-4316-9c3b-7c9ab20b05ff", "sighting--da0e2d3b-b4ab-4f60-a7b0-bed9bea84708", "sighting--8047c343-57ae-461a-9a27-664cf6353c55", "sighting--866f9431-7926-48da-99b3-0f97392ee737", "sighting--68c0ef69-5595-4439-b801-46001a149529", "sighting--0f9a61e9-cfea-480b-96f8-f02f3b94bd53", "sighting--9a8a1466-8e0d-4df3-bba0-13eab3a249cb", "sighting--fa8b9c34-31ba-4f33-ab80-2902083d802e", "sighting--f4f94806-cbfb-4a7c-b88c-d3eadde64118", "sighting--bbec1271-2834-4482-a405-21dbd65ea4e2", "sighting--8162a001-fc36-4b07-bad4-b74d036207b8", "sighting--e9a5a44b-2752-473a-9b9e-dfd4c3198b84", "sighting--ab99c52d-2160-49dd-ba07-4aaef184cea4", "sighting--443e655c-7424-4eb6-8953-bebd61c90123", "sighting--fd372ffd-355c-4cb6-af3b-25d6307939f8", "sighting--d7d23437-af65-4b57-8956-9ed1ac6b0edf", "sighting--7968a676-0458-4e33-8710-0d9d898d8b42", "sighting--1feedb7e-6760-4540-91cc-46bcf7af48f6", "sighting--b81daca4-426e-4199-8d64-99e4a8685bb8", "sighting--f31a0049-3b7f-461b-ab6d-5cd67a41b126", "sighting--1a3479bf-3a0f-4219-be5e-53b0b2b4c9c4", "sighting--4dd30c04-f633-4bfd-8c31-0b56ac213a29", "sighting--c77cd6d6-dd54-4852-b0fb-048bbc4b31db", "sighting--1bc4393e-852a-4606-8031-cf7c350181eb", "sighting--6eacb0db-b784-4845-a3e8-6d9d28a6c2f2", "sighting--5f7fc9be-b5cf-4408-a76e-f4cba61b4dc3", "sighting--4b18ea93-2d0c-4f34-bf99-dbb2cf1e0b58", "sighting--a4c14d24-9d76-4ea2-8f82-c89769dd8c1c", "sighting--ed3b637e-c10b-4137-87e5-dc7f57e1ae8a", "sighting--b96623e9-4a02-43d4-83fa-f0587bdfa50a", "sighting--6fba7ffe-176e-4a78-97b7-bb271c17dc78", "sighting--3f590bdd-fc5f-41e5-a7aa-86dec425046e", "sighting--f803de00-463c-4bde-ac8e-ec069b1a6a1f", "sighting--89bfcbd0-dc14-4b7d-b4b7-1671b1a48545", "sighting--cf61a91d-1069-45a6-a21a-1a523c240b8f", "sighting--4503a3d3-ebd6-45a0-9a8b-1b07c44703d3", "sighting--3860f08d-6330-4d92-a095-38e246087b44", "sighting--7c632305-988a-4f19-8a63-3ef010fa3f04", "sighting--b7c45150-af61-4ebc-b42b-e9c42a591428", "sighting--2ac8c842-1ee5-4dba-80d0-e308ea5658e9", "sighting--b6c38848-9816-4560-8c68-0e06a8bfa780", "sighting--569b15c6-c2a1-4bf8-8737-78b7d9e7f62f", "sighting--4f7f9149-3691-41db-82d9-5e2f8b70a139", "sighting--c2cd7ad9-4caf-457c-98c5-5d5b8bf4d67e", "sighting--2bdc340a-25fa-4634-8261-a12470a041e7", "sighting--fa88ff2f-1a05-45d9-bafe-47f90d7fa097", "sighting--be1237ce-a98b-48fa-bd0b-523fe7f02844", "sighting--c01cdcaf-0e30-466b-b12a-ef26c6742c42", "sighting--8efa6c12-2bd6-482b-9c50-e5ebaf5bb7be", "sighting--7992181b-9822-47ac-85ea-dec8bacd2baf", "sighting--87356afd-5ccc-43eb-b028-70507d34558e", "sighting--51ec7496-ff60-4bb4-949d-0e6890168f75", "sighting--4847287b-ae4a-42ff-b733-9001fd264905", "sighting--a0de6df6-08a1-4d69-b607-01cccec345aa", "sighting--c648f0c8-9839-4ee4-bfab-373eddecdef0", "sighting--99e48b99-b24e-4b89-a3ef-e6f01570ade3", "sighting--11e5352b-4b77-4096-b53c-5aae70a54e43", "sighting--b77f3200-70ed-46f2-bfb1-ceb0e01bed56", "sighting--bd6213ab-017b-48af-997b-633e17e4d945", "sighting--89e8dbec-fe43-42ed-9e70-f96c03b941e3", "sighting--99974842-db7a-43b1-9a02-4ca70b3a93aa", "sighting--df3365a3-f12e-4127-a592-c92f661c2ef7", "sighting--f4b7737c-d9c8-4833-87ea-da3f99d3719c", "sighting--df5dabcd-78ca-48ea-b1a2-de7eb0ec95bd", "sighting--87e4a57e-8ec6-42ef-9300-0773831449f7", "sighting--122521b8-0b35-43db-b87d-d2f0592bfb77", "sighting--bf7f2e47-05a5-4d74-8dea-2d43abfb4ca9", "sighting--3d9755fe-0d4e-489c-8b4e-e7882373d794", "sighting--391def05-99a9-44e1-b211-922ea44fb792", "sighting--0b399e66-9ea3-4676-90ea-2eafb19e788d", "sighting--3bbbd11b-c4c8-4be0-8bd9-fea0431a5c32", "sighting--ea9ca31e-afca-4a48-98ac-4d5681bb1ce6", "sighting--31573e32-cd85-4f49-bab9-f1c9e7c2215c", "sighting--6bfa4c8a-ff93-40ea-8094-ca63b6f523e0", "sighting--408b5cda-61ff-409f-804f-0da5787db401", "sighting--7ccf5192-fe16-411a-9904-d6e6ac462b6a", "sighting--aced6256-6aa4-41bd-9ef1-6b9b60322171", "sighting--30714d11-fe4d-4ebc-b2ac-36e07dd76a78", "sighting--c0f42334-8000-4a03-bd93-187390b1b2cb", "sighting--a072fc67-37a2-415d-bfaa-0d480eadadec", "sighting--0166442e-6ca4-407b-8458-21b56aee86da", "sighting--432bff4d-e6a3-4ada-aa3d-3641c0e6fc01", "sighting--565a7f12-ebcd-4783-a918-e903addef9ae", "sighting--752cfbcc-dc3b-4cf0-b215-517e51a020e3", "sighting--ac448451-a951-4a5e-8b87-54178217fd51", "sighting--bc5e8418-c92c-4c8f-9257-79215addf136", "sighting--640e0a69-361a-40e9-8bfc-9e42fd16cb26", "sighting--4509248e-103a-4b3c-a01f-09274524814d", "sighting--29fc4f0e-66ba-49ed-a8b3-ea08141d2d00", "sighting--59e8884c-75e0-4ecc-b445-78014aa4ff06", "sighting--e759b8ea-d52c-436d-ba5b-516676b87528", "sighting--5d08ce3c-cf00-46b2-86b6-7485daf304fc", "sighting--b94a271a-1c35-4a50-b692-fa5edde8d1b9", "sighting--00bdfc42-ff97-45a4-9462-f6e7ecaf514a", "sighting--f47f9825-a5be-499e-9a41-6be5a70ea3ce", "sighting--b7d30ae3-93b6-46b2-b430-7c14745156de", "sighting--54d368d6-2d1f-4cee-a04c-a1c84bca29d0", "sighting--88152e88-d88d-4c94-9190-35afcfd0e0a6", "sighting--e9ee585b-96f6-424d-aee0-06ddfb19eea7", "sighting--75be2335-3b3c-49f5-90d1-16fef8cae727", "sighting--a1861fc1-7eff-47a8-a975-2f6b78fa3d2e", "sighting--8925411b-1b4c-4fc2-9c8f-938f4ec83d42", "sighting--01dd934d-46d0-45fc-af5f-7f36787e63af", "sighting--87cc3478-e1e9-4971-86ca-8e15b6c2375d", "sighting--4e26f655-c373-43e0-98a3-7f3a7ae20c60", "sighting--fced5346-955a-4a28-a55c-9079083e0aff", "sighting--9fd258cd-aba4-474f-819e-11439d76f06e", "sighting--f8c2cc32-7527-41bf-854d-bac244af3611", "sighting--52eae2f6-65ff-472c-9628-bdfe2ab2d8a3", "sighting--aeb6778c-a7ea-41a3-823a-5eb1a067cb4f", "sighting--54ca843b-f4a2-49ae-a2d3-963c8ee44441", "sighting--dcc440cb-38fd-4a3e-ba97-832b168c040d", "sighting--95e82f45-121e-4e2e-86ab-b9eba0aa4b78", "sighting--e64372eb-dba6-48a6-8928-556fb7bc3061", "sighting--81510beb-7b4b-4645-9b74-23db37e81722", "sighting--942d10f3-40a0-4f1b-8f37-2cef737c1d29", "sighting--5cb8d518-969a-45c5-ad01-ffac3462ee25", "sighting--043b788c-a75b-4365-93b9-4e936fa0dd35", "sighting--dc696775-f31d-44a5-9c96-d7cbbf00c7c4", "sighting--6fafaffb-8b8f-4308-b3a9-1dd7ba26e9bc", "sighting--fa560e6a-9684-48bc-90dc-10e7b7b9d181", "sighting--e0dd0f33-d35c-4fae-944a-974f2f50dec7", "sighting--dec7dbcc-2f05-45b9-bf15-0b8faa82f805", "sighting--35992522-7a63-46cc-b624-db979947e349", "sighting--1669413d-8f53-4723-b133-eef140908566", "sighting--a3e575ab-9bcd-4583-87e3-a2caf116cfeb", "sighting--6805a214-2a10-4846-aecf-d5c659c4f1b9", "sighting--757d4178-4975-4650-9cd2-0bb9657781d7", "sighting--f0e1151b-cdce-408a-aeed-fb7f20a69a81", "sighting--520dabde-c0c2-472e-ac29-ae35419c432d", "sighting--bd42a7df-0b45-4e29-a7e8-6d84104dc30e", "sighting--991206ba-3d46-4e7f-88c3-eb06d87c63e4", "sighting--55d27c79-78de-4204-bf99-6f249fcc74c4", "sighting--c93c59db-76b3-4266-8f5b-fbf98b9b807e", "sighting--e54a24fa-f4f5-450d-be1b-fa83244fab19", "sighting--092a5020-66c8-429f-b99d-7e5947f59fab", "sighting--3a339e88-e639-477d-baef-fe4812d19f73", "sighting--e8e95cff-b47f-48d5-867c-1c3c521f8e8b", "sighting--036d56a4-7e2e-4e68-8251-fb4ae9bf59ac", "sighting--c76a98f8-743a-4920-b9d4-5a33663bccdb", "sighting--7004848c-9ccf-423d-90ae-b75d6da61f6d", "sighting--b2784c40-cf08-48cd-9ffd-b600f51bec32", "sighting--0996a19e-62f8-492a-b3ec-d02035143e92", "sighting--ede5b6c5-f628-4801-8f12-e3acf01d5ef0", "sighting--b8fc382d-6beb-4d75-a64b-568486db2376", "sighting--8a6c3a95-3f57-459b-b192-b5a8f9886eea", "sighting--b3038d21-e143-438f-90c5-70884cd97a21", "sighting--2c815f9e-e3bd-45e2-ae64-7109d603f669", "sighting--08d0bbb8-74db-4b93-935b-826f8d980ffe", "sighting--e2f0d20d-686d-4c91-9004-d48ddd5aa911", "sighting--1163c78d-0723-4b05-a3f0-a8a3dcf1294c", "sighting--dd0a939e-94fb-4b82-a7ce-3bae0d523a58", "sighting--50b0ffec-a3ce-4cda-8a20-e323ad91fdcd", "sighting--91d719d5-7ee5-4eba-b177-d170be137768", "sighting--ecbc9fa0-ad42-48c8-9c96-de1bc3fd78fb", "sighting--5049a037-54ea-42f2-aa9e-25719689dc86", "sighting--2d759ace-128a-40b3-afa4-b99904c46f0f", "sighting--f11d7f7c-2222-4c07-87fa-68b6352a51c5", "sighting--e4fa855d-b852-449a-8a67-102931511587", "sighting--e3619e0b-230d-4284-a984-b94b6f717815", "sighting--ecba7ead-dfbd-46be-9275-a0aa8a004b27", "sighting--4fdaaca2-7ea8-4129-920f-55a92177b831", "sighting--827eaba6-1a5a-461a-ab78-9d5c699386dd", "sighting--81d30403-148d-4612-b28f-3d438493fe87", "sighting--6344906b-a6ca-4471-b3ff-e7eed823765c", "sighting--ce69f1e6-98aa-491d-8b88-645dced7fc2d", "sighting--b4f5910e-6cab-4b8b-af87-a9287d855a3d", "sighting--29fc0789-9e97-4fbf-ae37-33241f6d1d14", "sighting--3d76f098-8d99-4ce7-a26d-d35985160b40", "sighting--0335f5e2-b4d0-4c57-ab50-3f6b4f4c74bd", "sighting--284d5529-ac49-452c-bdb4-4419066c7b69", "sighting--de97a2f1-7ad3-4c09-bea7-bd7f14c417d8", "sighting--b7ce3800-c67e-490a-9ee4-2cadc7de7340", "sighting--844bd160-751a-4b7e-923f-322a818745a2", "sighting--d9cfbebe-5350-469c-b23a-8a2be18eb8bf", "sighting--fa295048-c775-43b4-8d1a-c1e8d6da3c79", "sighting--c2be577d-7a8b-45e7-893c-262eecc5c3a1", "sighting--34ab908a-9a31-44dc-a9d4-c5410545fe07", "sighting--5b49a7f6-1d10-4e68-bdf3-b45f284214ec", "sighting--1c777315-c5ad-436b-9f11-352f352fca76", "sighting--30eec022-7d6c-4073-8b10-11d5536ac28e", "sighting--aa2b813a-e5b2-4e07-8ced-87283b491782", "sighting--a805bbf2-9377-4c78-8b08-32c9bbb24bd7", "sighting--73533084-16ea-4bae-a568-a1c454d45b6b", "sighting--273869ac-6c09-4361-9e3e-b6d919a92e28", "sighting--d908a7e0-604f-4498-88b0-47f351ebd3b3", "sighting--9b0ef883-6aaf-4f03-a443-bab64c30f84c", "sighting--f8f466b6-8a25-4f48-be74-e6276724df29", "sighting--75e729dd-537e-40bb-a01f-b90fe66d8e20", "sighting--896020ec-ac6e-42f9-b92d-a2d096ba05e4", "sighting--cde1eaca-9dfa-4da4-b26d-14457d039a38", "sighting--eade037c-69bd-4a37-a538-d1f97ace5380", "sighting--395c510f-a0b8-46f2-b0ae-64121bdf0eeb", "sighting--8243b796-df9b-4922-93b8-ffd9ff7c9bc9", "sighting--30301e72-6334-4dea-89dd-f59e7adcfd5b", "sighting--5b66376f-128f-41e2-9b30-3957d185cf1e", "sighting--900356bf-6a34-4ff7-a2de-9ff64a9ca491", "sighting--2d03eead-0b99-4839-992c-ecf21c49ce42", "sighting--cfccd919-6eaa-451e-906a-17793c17610b", "sighting--eee89f0e-def3-4bb4-bc19-6fd438c8aab2", "sighting--f05d7c87-8d98-480f-8681-4a1f8ffcdeff", "sighting--94a28b90-484e-4812-ae0a-82f657e9b060", "sighting--0ced4cdc-2537-4612-a9f7-93b76ee4cac9", "sighting--4d50be5a-58f2-418d-954b-2a1bba775d28", "sighting--0de89c18-dd97-47bb-97f3-10e6ab63456b", "sighting--9d533874-e503-40b5-b7f7-cda44e02a785", "sighting--108169f8-ae54-41a5-a1cb-a6255fbedde6", "sighting--265b72d7-34dc-44c0-8aba-4ae8a0fea950", "sighting--f002a677-0557-4263-9646-ce1b09bc445f", "sighting--24de29ac-0fc2-4b02-840f-7cddc117a5a2", "sighting--cb9bb89b-73a2-4462-b36a-37fcb2278e44", "sighting--b8c3df27-509d-454f-a576-e1c78a7031ff", "sighting--46124eae-d7b7-41bb-9939-0a2d1a02b076", "sighting--8d19e303-58ab-4dbb-9bb7-109636fe8554", "sighting--944b6017-3433-4e48-aaba-3a81d5c12194", "sighting--72d29082-ea58-41bd-8ac2-caa3e66166fe", "sighting--0e7afc71-8d89-4195-942c-b48f653b0b88", "sighting--1aaa1cc3-083b-4894-a878-9fe6bf4c65fc", "sighting--3d00a249-7bfa-4f81-9270-824d4a145edb", "sighting--3491e7a3-cf9c-40e7-aa98-9e1ba69bd352", "sighting--34b1acbf-6c83-4379-96ec-00790709bf57", "sighting--f6c4dc75-30fc-42d6-8e63-0a3545f69b17", "sighting--2fcf6037-4f94-448d-93b8-8a04e50fa87b", "sighting--f8a0bb11-bcc5-4f8e-a226-4696714e51fd", "sighting--6374ad33-0030-423b-b2b9-fcc93ab038f6", "sighting--5c633faa-7a40-4cc8-bd6f-a3c3f2e8be4f", "sighting--964fcf21-4c37-410f-9870-3d5c803aa4bb", "sighting--da6b7c2e-d91c-493c-b2d3-2a499a17196a", "sighting--ba38c59f-0e74-4b09-8f08-c5507d1d0dd9", "sighting--4da7d897-2313-4e56-9ba4-c17c55c5c277", "sighting--f469b44e-ac63-4945-bf63-f0d0adb42052", "sighting--7ebf4546-9ffd-465b-a493-ea6f19dfeede", "sighting--34cc7790-6fba-42ce-9a08-109320b63684", "sighting--16570923-89a5-4826-8cf8-fbc2b30ae623", "sighting--6220efcb-1dfa-42d5-ad75-bbf8f86ac045", "sighting--e7392bc2-2332-4723-897c-f47fe492692f", "sighting--2366eb99-dea6-4852-9254-dca7fae7b414", "sighting--d5188901-ebc3-4991-941e-68c80d8adf20", "sighting--d743bd89-712e-4c38-9c88-89af78b7bc94", "sighting--5f4aa256-b687-40a0-8c8d-aa315184feec", "sighting--afa4cd38-ac65-4a59-8c5e-61c2901eedc3", "sighting--4788b1d1-8d1a-4cd2-b3a1-c31abf4e7abc", "sighting--a63aede7-4597-4ab7-a10f-412706a49cd3", "sighting--d24302dc-efd2-4419-bd19-a2cb527bf203", "sighting--df0e1f02-1e58-4e48-805d-2ce3e8f8b98d", "sighting--9c66e9b4-bc1d-4c88-ac45-7d12198372b6", "sighting--16369e9e-88bc-499d-9f3e-03072ac6635e", "sighting--f644bc28-e3a2-415b-9d69-0c27330cc149", "sighting--c6d623a2-9452-413f-9751-aa6ddc000c77", "sighting--5454c9b6-6bc7-4c4b-bd00-cef6b49df3d2", "sighting--b10767d8-d768-4114-9c54-6ecf0baf863a", "sighting--d063c05e-62ec-46a3-8a6c-24f725ba4606", "sighting--62b8da91-3294-4d5a-bd2b-e7ddacdac035", "sighting--bb94be32-f198-4a99-97bd-56ee0f768451", "sighting--38dd79d0-7db6-4535-9496-a0703b75236e", "sighting--af040426-85a7-46c2-b2aa-2bf389b4be9b", "sighting--b5947a2f-79c3-44f1-8df7-9351c30d9dcb", "sighting--cbb0939e-205f-4317-b786-a62c422ebd6d", "sighting--48120d5b-d134-4ad9-8588-a32e056a5f52", "sighting--47c09672-fe38-4714-8def-3f58a9944e22", "sighting--72ab5bda-fb4c-42ef-942c-aa83a74f5118", "sighting--8a8a22c3-f6c1-4d73-9a52-64f84b263083", "sighting--e33ae175-b8a1-4483-9057-b1bd4902aa32", "sighting--33e69278-02c0-4bc2-9223-c88bd1a6a668", "sighting--5a94ac74-d2b5-4418-ae34-e8fa075a7d93", "sighting--3bd18629-0695-433a-96d5-367a532f0b57", "sighting--101758b8-6425-4898-824e-88048e520b14", "sighting--353b3832-6a15-46f6-b814-85bffe2d3fb1", "sighting--4f636067-8ff6-4059-ba07-7e6005e23b15", "sighting--693bf9df-09e0-4806-97ed-4b084c997ad3", "sighting--17528d79-8d6c-419c-8cac-03e021fd13a1", "sighting--557ac417-f1ef-43f4-85e9-038d38908e87", "sighting--3645fe6b-b9a7-47fe-a3bf-bf0b17b22be9", "sighting--1f69f182-3b9f-49ee-94f4-ff0bb6a74b30", "sighting--8690f21c-aa7b-4527-be07-5f1e77a6a7dd", "sighting--89507b9b-8514-4e1d-a3ce-9c66ca8cdee6", "sighting--b4eb3740-529c-4ba7-b823-6ac05fed68d3", "sighting--dd4b9950-5581-4831-b96b-c9e6e64f03cc", "sighting--615adc07-fc27-4110-8a04-8508457320d1", "sighting--d3c51e49-79bb-4cbf-90d0-2cec641187b3", "sighting--c03e50ed-615d-46e0-8ad7-c0dfc696a763", "sighting--dbca1546-762c-47ad-bddc-b8a1f9479b47", "sighting--6777e218-e985-4e3a-8b3f-f38ef9946e16", "sighting--00ecc2de-912e-4277-ade9-d6d3c5d13984", "sighting--6d429412-14f9-40c2-a492-da115e7768bf", "sighting--f03a555b-1b97-49b2-8b7a-5b110d02136d", "sighting--6346f2b4-3520-48ce-ae01-189f355eb2c9", "sighting--55ad5fc8-dd30-4893-b9d0-6deaab8168ae", "sighting--48a7c109-cf2c-4a91-998a-68e95ac5bfc6", "sighting--ddf7e297-70c5-479e-b9cb-7134c7ef5890", "sighting--7d02fa9a-45aa-4855-8420-14b02119f6ee", "sighting--4e6b1347-bcf1-4af0-b146-c0e13fd21a39", "sighting--cf2b17cd-39b5-4335-9831-3f43fc5c09c4", "sighting--62378383-7385-4139-8699-b7def4a5a83b", "sighting--02e44b19-0d70-40a4-a505-ca315aadd842", "sighting--51e147a6-1d66-4fa9-99ac-9e9ba9794850", "sighting--a8f98fc7-026c-42bc-86e0-27728942d0b4", "sighting--0dc8efd4-f9a3-4ea9-9e9b-1f1537c1af66", "sighting--f1fa09d6-be19-4514-93f7-4afd4b63a802", "sighting--3dbc8779-91d1-4436-aa4f-8e1f3f86d005", "sighting--b852972a-3ea9-4f91-a80f-91f9e52126cf", "sighting--ca0ba813-b772-427e-8095-d785f68b5e09", "sighting--bad48391-4787-4205-9e2c-0736bda1c4ad", "sighting--21be75ad-c749-4ecf-9c06-7287879d8ff9", "sighting--ce195a97-822c-43eb-a0d6-2723240526ae", "sighting--668cd537-8731-454d-8c39-8f466a4e2db7", "sighting--634ecb44-cec9-444a-8105-8cf14ba4fa09", "sighting--eabcd22e-1320-4ae0-b518-27ce12156441", "sighting--468823bf-1d35-4df9-8e32-22dbb594fe3f", "sighting--86e6c10d-0367-4dbd-bc22-87aa343c3dba", "sighting--6b1b09ce-80fb-4467-9df4-edd356d0b62c", "sighting--b16ac023-c6aa-4c06-9aed-4b03da7b88da", "sighting--004f86ce-3559-4fe1-8b1f-10b761250b9a", "sighting--6643a229-5b02-4d0c-b589-7839376261ce", "sighting--1820cd31-77c3-47c5-bade-1174db2e37c1", "sighting--a3e8719a-6c7b-40fb-a951-683bca341736", "sighting--20e600eb-05dc-4e72-85b3-a21660ad2b64", "sighting--0cd5e720-6ac9-46e3-9edd-7fb87daba5eb", "sighting--99937abe-4187-4df2-a47b-b004c9ffd640", "sighting--d68a5768-ae9a-42b3-b7cd-c2b9706984dc", "sighting--b40f87c4-c298-450e-a908-a210f0c9e2e1", "sighting--d187d681-d742-4761-a9e1-a5a65f5ae945", "sighting--e242496f-925e-4ef2-a149-48881c51a100", "sighting--bc2b1a6e-2d80-4a76-8823-d3c545653b70", "sighting--a17a0636-2600-4679-93cf-3a37b6b7d15a", "sighting--ef3cc637-d33f-449d-8604-5863b94f16e7", "sighting--39ad80cc-7e97-4dba-ae1a-7433011159c7", "sighting--930e91ff-2547-44cc-b0e5-efb92e07cd83", "sighting--18aeeb94-1abf-4d99-ba09-13ff14c3e007", "sighting--2691ca6d-15d4-4e0e-babd-9467b741950c", "sighting--ff995cda-d261-459b-a232-fc6c8b6160ff", "sighting--95c8230f-8f90-447e-acc5-fbe97342526a", "sighting--cc0d93fa-1e7e-4081-9eeb-07482a8b33db", "sighting--e10aea8b-44e6-4c62-b435-c257bb44aa16", "sighting--c571bc10-ba7a-4868-be73-e9832058cadc", "sighting--de51278a-8f02-4906-a395-db1d122d59bc", "sighting--cf9720c9-6ac7-4d34-9d84-3dfd15ee44a6", "sighting--0bc0ef79-0016-4489-a2d3-80975dd8f8ec", "sighting--3f14d3dd-4322-411f-8886-ab87f257608b", "sighting--caf08b75-07f0-41b0-8825-e74a0df21603", "sighting--41c08e5e-d531-44da-84f5-f5f829246fd0", "sighting--6774d15c-7d67-4c44-adcc-a6628c72256f", "sighting--15fd7001-dbdd-44e2-b8b4-75a2e15e7b7f", "sighting--565914a8-6483-47aa-962d-2a1b6e78e4ff", "sighting--68ee8852-c533-4a99-992d-ee10f38be540", "sighting--35b9f7e8-e915-41be-895d-ea8d34724135", "sighting--b8a2368a-2619-42bb-af0e-2a0ad4ca8774", "sighting--a082e67a-7773-4ba6-986c-86d84c23ac9f", "sighting--bf59167d-d353-4670-873e-1dc0ac5cc9de", "sighting--2607906b-59aa-4666-b1c9-39bfbc1b0b4f", "sighting--60a707af-a9cf-4c46-a14a-5e130319871e", "sighting--e7c9f06c-99cf-4140-ac9c-6bf5c8150c63", "sighting--65de131d-2578-472c-97c8-37fd02dd5038", "sighting--a5e39a0a-1d06-4d40-a73e-a297994b0d59", "sighting--31970eee-14fb-46cf-9526-9fcb159d653a", "sighting--5d03c703-4d43-4a55-bb9a-39f4e847c3dc", "sighting--e4a670c8-0c98-455a-931c-5d0122507db9", "sighting--a81c8194-dd43-4c79-8ca5-7f2a1af9629b", "sighting--fabe011c-3c5e-4608-b729-d677f5e8b377", "sighting--4e9fe264-58f9-49e5-afc0-60ae8deae130", "sighting--cf1c31a8-bddd-4439-bb1c-ce4df2469156", "sighting--7441fd57-4583-4bd6-91af-5834dc97d714", "sighting--16c182cc-2d34-4d70-b58f-ce4cfcf07548", "sighting--e705ec2b-803f-43bd-834e-6e273c0c97ac", "sighting--31700050-2f33-4364-b189-780563be0fc1", "sighting--3bd97060-deec-42d2-95f3-eb58b44c9255", "sighting--fcf6d53d-1d89-442d-ba6c-1e980b6143e8", "sighting--ee9ca277-4de2-406c-9a20-41d9ab0460aa", "sighting--2d7be009-ae5f-4b81-93e4-c731ace9accd", "sighting--a071c563-9e5e-4c6b-9795-f243db173382", "sighting--f008299a-2dd7-4dc8-b7a3-800a7b52e584", "sighting--06526a9f-d2e6-4d78-81dc-3d3cc9fb4273", "sighting--6cd57d0d-0dea-44b4-aa82-4a419e3196a0", "sighting--d4e0cf79-fcac-484c-8c7b-ae3a6abbd1fd", "sighting--5157de4e-cd90-415b-9eaf-1ec97a6773b1", "sighting--5752d22c-7e8e-4f49-8bcb-169dcc50d904", "sighting--853271d8-f319-4881-9e02-9a913b577fe9", "sighting--9dffaf3e-c503-489d-b6e5-af426a622cc6", "sighting--96567b93-8a3d-456d-9a5b-df9d51ad0740", "sighting--22f75fdb-dad6-44f4-8da8-a96c69ff4626", "sighting--e029ded1-90ea-408e-b872-3e1b5583b8be", "sighting--c22327c5-557e-4ac8-b7fd-6a9186d3a3ca", "sighting--37bb8573-f868-412b-a108-130ff6864d0f", "sighting--200035f6-c51d-4817-9841-213a32a4120f", "sighting--0cdab508-e2ef-430c-beba-29712c46aa27", "sighting--b378c4b1-ac2a-49dc-9601-c4a85f033d5e", "sighting--2be77629-b53e-4f5b-a5b5-9d2e76c8aba9", "sighting--60e94add-22a4-42bc-b6ce-c4cd5d0c8370", "sighting--d59d1bad-30c0-4f92-a781-5e1158d55279", "sighting--c83dee8c-f9bb-46da-945b-a3fd1e8186de", "sighting--8131f49e-7f1f-4949-83d5-439a59f1f310", "sighting--867be497-90f9-4a8b-af35-a127b2ed53f6", "sighting--6ea4214a-e5b9-4bed-b9be-54fcda2cbc0b", "sighting--2ba2e449-7135-4935-8557-763ffa8bb4dc", "sighting--f2a86ffd-3454-4bab-be58-8a25fda86fda", "sighting--3ea592f4-9b49-46ee-b814-d50b6e3c8b9d", "sighting--f524b98c-0579-4ca7-b729-8ce187947cc6", "sighting--4cdda427-9334-44c7-957e-f13d957144a8", "sighting--068d6ba7-7a8c-4221-836b-278a33f52b19", "sighting--31750e88-3a22-4189-8dca-e27122d648dd", "sighting--f374cc9b-5e59-468c-b216-a40ef1b9245d", "sighting--b838c672-f8e8-4e0a-9d2d-39a683ab0e5f", "sighting--d120597d-cba5-4e25-80e1-2fbe0f87bbbf", "sighting--c67a35dc-c943-4f8a-b0d2-8b27f141597d", "sighting--2d26fd38-d17e-4fdb-b610-146488081d90", "sighting--74e95bf1-faa7-4947-acbb-df1f63d2a86b", "sighting--82bee2c4-81cf-4597-8f15-33b5eab0fd9c", "sighting--ddb84960-fcee-47c1-a342-56724561934b", "sighting--037a602f-35c2-4427-aea1-bbdff988d890", "sighting--b423789d-de94-4997-9418-af838ff1d2db", "sighting--c98a8255-38ed-4b5f-8b71-3aa487e3644b", "sighting--a4cfe388-512a-44ed-88ef-bda12144aba6", "sighting--e992c283-3d52-409c-b873-b4550f0de20f", "sighting--6b4d0ebe-d848-4c17-b5f0-e636b3c984c5", "sighting--baf3bd29-795c-47a6-ad76-b622caca346f", "sighting--0a1e70c4-5140-4c72-8ff0-6784736cfe1d", "sighting--3e956281-dfbe-422b-96c1-c928bd03bca7", "sighting--73a53a49-7842-4b84-aed0-cc24f45b4689", "sighting--9f615660-7996-4403-bd5f-d6191c3ce821", "sighting--4e6387c4-0da7-48ea-b105-044c08a744f9", "sighting--70304263-9837-45a1-8944-fc7babd3d334", "sighting--58604ac0-835e-4b65-b2f7-0e67743cc67c", "sighting--72cd2f04-3990-432d-95c3-b527834185a2", "sighting--26b41d0d-c7c7-4d32-8df1-00c3df654a4c", "sighting--63e51bf9-c087-4916-a96c-647a583ce3d8", "sighting--dec1f26d-8fe4-44cc-b4d1-9332b4cc5270", "sighting--cad2c9c9-ce62-4b21-bddd-22f3df05731d", "sighting--69183627-a16f-4f6d-9ea0-1d7a113d5a7a", "sighting--6a3196d6-348e-46be-aab7-f1eae54016fb", "sighting--f205788e-32b3-4ca4-ba29-3a1df4ea94e7", "sighting--9ae3cc07-4c96-472f-8049-34d5827f8f02", "sighting--fddc1b19-2568-440a-b562-b71e0398a8ed", "sighting--8c59dc23-984c-46a9-b8da-dd8cbc54d99d", "sighting--3b0a2231-eff3-4819-8b9d-7f21892d2a50", "sighting--e6c36caf-bbe2-4320-bcdf-4b16a2791f0a", "sighting--b08ff406-c6fa-4512-9a46-11bcc82e54d5", "sighting--0efc1c1a-ec3c-4c27-986d-a9dbed4d0628", "sighting--e73bade8-6a5b-49fa-8bf5-e8b7bf9833a6", "sighting--2481b655-8976-46b7-b7a6-b1893be19d71", "sighting--187f71d6-9a00-489b-8b9a-f9ae53c955bd", "sighting--d30c09c9-5391-4705-b361-b2cced86dd9f", "sighting--f28a73d7-4418-4122-9f83-71f18f90391e", "sighting--e6b67655-d5f5-4cbb-89fd-5ebe3605a732", "sighting--c2d82517-6c3c-4778-bf45-6452da851641", "sighting--d5ed1f9b-6642-4135-8d98-0152d7bc0f4c", "sighting--1d381aaa-ad4c-4c13-ac2e-910b077c1564", "sighting--dead7c1d-981d-4b9e-81fe-6e6205f34bfe", "sighting--d8bbb296-85d8-4315-8038-6c66be3fd754", "sighting--21354ee3-8325-4d24-8780-868e89aa44c3", "sighting--faf5242a-886e-429e-a18e-a1e0a1ff4073", "sighting--2bc328af-eb8f-4d6a-ab2e-853c5c757874", "sighting--786cad42-9557-4465-8000-31d91dc96827", "sighting--ee45489f-2ca7-4a36-9941-25d2e5e251d4", "sighting--8dc5025d-523b-4629-aec1-a235e9a74ac3", "sighting--e61576b0-8a55-4427-9ed7-3be2c9bc5f88", "sighting--37a06492-0046-4074-b003-deb361058c89", "sighting--b123477f-d020-4437-bb5a-1f5086a61936", "sighting--6a8a3025-b477-45ef-89ad-a7d694dd9938", "sighting--24981de9-4fee-4982-b33f-8a203f18238a", "sighting--4389ee5a-6f5b-43f1-8ceb-39f3cb1b9645", "sighting--aa8b36cd-7f6d-4919-9867-8c6318d5a64c", "sighting--8fc7dbdc-85fd-4ebd-8849-e702e83f9c66", "sighting--f89c8368-da2b-4867-b3e7-1f1dd6125bdc", "sighting--ae96cecf-8d2d-49f7-8f6d-bfe06e7d64be", "sighting--1f84b93f-3bbb-4527-b9de-627b22362648", "sighting--807076fc-7b69-450f-8ee3-5363a88a7d4e", "sighting--56b9b6d0-e3cb-45c4-99d0-953c2c9e3eea", "sighting--b0f70f36-82b0-41b4-94dd-0430d04b5ad2", "sighting--246a64a5-b008-49ce-a03c-855b9f56de2b", "sighting--de8e46d8-1a28-4390-9ff9-e50812ea5f0b", "sighting--c6354297-c63e-4503-a783-524f33ce044f", "sighting--f561f6c6-947a-40d3-8ef4-52dd585578a1", "sighting--d7f132a8-3ed1-4bce-ac2a-6c084c7423c5", "sighting--c4213a98-021d-45e6-9c6d-b4d74e7dfab0", "sighting--46d57df6-b4b7-4996-b477-fae44c15d246", "sighting--59d552c2-7b31-4192-9ab3-a9a5ef771ff0", "sighting--72b5cc6c-4cd4-4013-a332-90e706cad209", "sighting--6567249b-9c52-43f8-8b47-87cd8e36dd82", "sighting--82db98e3-ff98-4d3d-9e68-3beda76520cc", "sighting--7dde8510-5103-4182-939f-3d3b546c6baa", "sighting--2e5c9e19-79b3-4b9a-b80a-c3b7442e539b", "sighting--5ad25c8d-b2a6-413b-8683-536c07710573", "sighting--1337674c-18ce-40d5-b4eb-54358660c38a", "sighting--f9ce1988-aca3-4358-a491-b5deba1b6a5c", "sighting--8d6cc85c-a7b5-464c-bac3-4cce242982f8", "sighting--4169d414-a9d6-42a5-81ca-9ee923807294", "sighting--3a25cf6e-db35-4544-8185-216aa551fded", "sighting--8a9142bc-0ec5-4f3d-a719-ee7bd13749da", "sighting--95ed25bf-852b-4717-b390-bd588f18c2a6", "sighting--54719a71-9dab-4819-9ea3-961bc111c01f", "sighting--dc9c2912-26ec-4162-abe7-48b37eab6413", "sighting--b8db29c7-1f8d-41f1-9ef0-2ed9e6a53f30", "sighting--4c4cd0dd-87e2-462d-b011-d1b93aa5d592", "sighting--1ba44694-4c6a-45b4-bac3-2a25cf8c76d8", "sighting--73857e01-665a-4d94-bb77-aa9a684eeaa3", "sighting--c74b97d3-adda-481f-a8ce-6abeee053dae", "sighting--1629ff50-a4a5-4673-a84e-aa3bcfdacbd2", "sighting--921a6db9-4cc7-4b5b-bf0f-2e5090e49c49", "sighting--65b617d3-01da-473c-8153-58359ca32088", "sighting--7776b828-f3f8-4dde-95e3-1f664230ba70", "sighting--7e9cde6a-78e5-453e-abc0-1e52016b02e5", "sighting--ffbd3fc2-2a07-43a8-b310-1d1b723be512", "sighting--438dabe7-5040-477c-90f8-ecc920db1927", "sighting--decdcc1a-df37-464f-a356-f35d30243573", "sighting--2149cf3b-2e4d-46b0-9420-9bcd8e7b865c", "sighting--4db9f43a-10da-46c4-8a34-055505003a8b", "sighting--ffb70b60-2c5b-4191-9e68-e8843b1cf6b0", "sighting--b31482d5-b226-46f2-9c02-fcaae0a722ef", "sighting--d50b2822-4934-4beb-b0ff-d4826e26bf41", "sighting--3dee71f7-880f-4f37-a5ae-220356554dda", "sighting--cdda98da-0708-42bc-8cb1-7587a5952a61", "sighting--b5365edd-7500-4d43-b08c-e0aedb08421c", "sighting--b7d5ee6a-880a-4308-aad3-5c91eba0cbbc", "sighting--da4675b2-a2cf-4b47-8a72-67a5254483da", "sighting--aeef2d4a-e16b-461e-a521-78f896456d7b", "sighting--a4ce6cc6-bdb2-4aba-af1a-f650a06d5b66", "sighting--29522f85-d2e3-44ca-9e27-8ac0c8f53d1d", "sighting--574ea26a-28af-4f8f-a46b-ab4c09cd0174", "sighting--ab69fdec-90d7-4ca0-88dd-57ac20721830", "sighting--9b109dfc-04f2-40b5-9486-4fb03e18f8e4", "sighting--48d4aad8-889d-4e6b-955c-15460f9c00f6", "sighting--e7109847-59b2-405f-8aa3-8e92ee7669b3", "sighting--1b2df1cf-cc28-42ca-b08e-4a14c20d1e45", "sighting--15ab73c3-135b-4fa6-b15f-b0d48a6bc15b", "sighting--6d222a37-d1c9-4aba-a356-7d44a0177305", "sighting--3346e5a6-ca1d-4987-8483-40b4d854cc26", "sighting--88e1b490-ae3c-4067-a947-9b08a1aeb542", "sighting--b96e81ec-28d7-473e-82d8-8296a31aa2b7", "sighting--7e1a97b8-0ee3-4f7b-a4a4-ce49f9b54fce", "sighting--73bb6199-ed19-43af-a019-a5fa48e17a9b", "sighting--686a20a8-59df-407c-a85f-66449460baea", "sighting--cc0dd6cc-1282-4dd5-a54a-afc362fba624", "sighting--f1d64c0e-9169-4de6-82e0-cd5e03627cd8", "sighting--470c8c6e-dd8c-4ce8-893c-9e95657999d5", "sighting--c00026a1-fca6-49ba-9877-c109194ad89d", "sighting--a2248a88-380c-4a66-9e8c-c05e2e7ebb31", "sighting--8417cfb1-ad3f-4254-9749-119bf87353c3", "sighting--6ee0df58-3606-4779-815b-4910f2b3a2bf", "sighting--e098a302-2b28-4a6f-a359-92b5df9ca921", "sighting--0bf32255-c649-464f-bf24-d684408a76d8", "sighting--0fe787b8-d9d1-4e8f-b956-b327fbdcdcca", "sighting--781dc2c2-f2b2-4b95-84f9-7e2dc8968bdf", "sighting--7c639a67-e5e1-421d-a347-afd71747588a", "sighting--b05e5aa8-9fc8-4d16-a385-120306717597", "sighting--d8c379d4-f033-4f9c-b398-38941da80520", "sighting--bc603edf-2bdc-4155-af01-e1c1bd222b98", "sighting--47faf29d-83f5-4898-886b-eea4372c04f7", "sighting--8bdcf514-39e3-411a-a9a6-cb989648d0a5", "sighting--2a97ab1c-0d77-4896-a8a6-99f0210695fc", "sighting--0086c990-c482-4749-a3b8-de8fcf235a28", "sighting--0c7892dd-5dbc-4301-bc9a-4e13634066c9", "sighting--13706482-cad7-47c0-bb09-2c94fd6f4df5", "sighting--635f7fef-6369-4b15-baf6-c57735b2c701", "sighting--49055f24-3a40-4538-94cf-68fd1857e4ac", "sighting--bab6a490-f18f-4810-84c6-ed6f3b928a78", "sighting--07decba3-6034-422c-82b8-025cca32e517", "sighting--57963a0e-801c-4598-9e68-0f48432d31a0", "sighting--4d2880ee-ec80-46de-bad7-d52aaccdb60e", "sighting--38e03e8a-8849-4df7-a931-fef08bf9d65d", "sighting--b884a1c1-938d-411d-9050-37a72e84db7f", "sighting--d33df6f5-ca5b-4644-a9e3-1f7a12218a84", "sighting--100b3691-8873-4e3f-9481-a97e14a27918", "sighting--ddbe67cc-880e-4b60-9e3b-9052fbe90bf1", "sighting--1d4211e1-f53a-4821-b2ba-2433763feb79", "sighting--c4056c06-d4b2-430e-a4a0-7df6b5392feb", "sighting--d3cfc82b-7fa1-4acd-a90e-463f0889e22f", "sighting--b92637d3-a1ef-4e19-a173-6b60d21581d2", "sighting--ed58f6bc-c8d4-410d-971b-818cd29361a4", "sighting--b747ea71-ad2b-42c2-bd23-89f05f013b18", "sighting--cdd4df50-cdab-4218-85b8-b2706c00c017", "sighting--747d873c-553a-48ec-b9bf-3403abcbb19a", "sighting--52f57f8f-f6a4-476b-a68d-d83379b9e56c", "sighting--ff939d92-ca39-4966-ae5a-3dfa4acd681a", "sighting--2e4811e7-0b99-4c9f-8802-0df1b3e30a43", "sighting--8d1563c2-e23a-4e42-ad01-e0e04d6c85a8", "sighting--0ae173ee-1b4d-4f79-ba0d-b68be73d73a2", "sighting--4a8c21a2-ebd4-4a50-ae9c-b8da8b0e5dbf", "sighting--a07b0ac7-bb61-4b80-8175-04d05cbea608", "sighting--d8e193dc-978a-4b4a-9db2-29c2c1a0bab0", "sighting--dd00b067-6eb3-4848-8525-4646b56f8f28", "sighting--dbcb8a08-0845-474b-a858-f2036f3a66a8", "sighting--783942d2-e7e3-4ce9-ac35-8462535d5e74", "sighting--291c5ba0-4c61-4590-98f4-8bf9a94074b3", "sighting--1b81bc84-65ed-47bd-a541-ddd150791b73", "sighting--70b09c14-e5f8-4f09-afbb-3686363e555b", "sighting--ca1d9779-9be3-4ccc-83a6-f1ee2627e196", "sighting--ac1fda6f-aadb-4d03-9792-f15fa03ea2f6", "sighting--a3bcdbeb-475b-44b3-b228-5acf7c387af6", "sighting--fa4931bb-0de7-4331-b79c-fee8428ef997", "sighting--cc2615a6-877b-412d-b7bc-4b827ecf49e8", "sighting--376e553b-bcf1-4171-aad1-2f4467025ca3", "sighting--5c8e4397-8dbf-4c02-9467-967084571a3b", "sighting--7622fc40-1fcd-4b2e-b7a7-a0af5dc46d19", "sighting--197ebcca-f2ea-487a-a258-30fe7cc1d825", "sighting--0f59fa5b-017e-4f1f-bd1e-57bab4c4ad9a", "sighting--74e2410d-d05d-4e0d-be77-d3123de55abf", "sighting--6633e052-66b7-4ca5-8bf2-326bbbc63109", "sighting--85fbfdca-6aa3-4d6a-b5c2-db4a566c1bfd", "sighting--4b2d1f0f-aeee-48bb-aad9-671834592ce9", "sighting--f2b5724c-932a-44fa-8a25-d31d22b95eb9", "sighting--1b99f945-aba5-4360-9603-7e2dfb35595b", "sighting--691c57ac-976a-4412-a70c-fe5ebcb9bfb7", "sighting--913ef3d2-3ea3-43e0-bbcb-8e0938b26d03", "sighting--5ac74cce-a887-49d1-a39f-f40e42a8d05a", "sighting--d3744bec-d4b8-4020-abc3-3e704d5aa837", "sighting--d6c2c969-e87a-4a76-90fc-0d058766d9dc", "sighting--a15205c9-4ae3-4baa-a029-a6ba01f82641", "sighting--e8d5e418-dcd2-492a-abc2-9239688b7f5b", "sighting--dc92e2e9-0fa7-4299-b57f-2da7adc4d0d4", "sighting--1eda7943-5f7d-45e2-aa92-e4b122e5c26c", "sighting--8a6e8fae-4f33-4952-98ec-0f9ed803e9a0", "sighting--05e052f6-3aa4-42ed-a870-1aa259fc9c5e", "sighting--fdf02edc-66e7-4b7c-9698-2980eb0b8136", "sighting--fda72baa-f864-4471-aef0-675f70dd6c17", "sighting--cdb67b63-8dc8-4472-b78f-156d81a42b37", "sighting--71ee780a-1f4f-425c-8380-01d4109d108a", "sighting--e2155558-352e-4938-b9b0-10668eefc472", "sighting--bfe9de77-a2a0-4ff1-b7f6-6aab60ea9b78", "sighting--09148380-32eb-4d71-9151-25786d26bcf3", "sighting--2829643f-0b4b-4443-a3a2-17b35cf568ee", "sighting--1b3bc29d-29f1-4bb4-81f6-22c8db62f805", "sighting--8b45ec89-a95d-46a2-b0ae-cc7f1b9d225f", "sighting--2e035cb6-6f17-4db9-8fee-f693bb72dcc7", "sighting--92d8cad3-f096-455d-82ba-ecc39bf3f861", "sighting--efced808-1c33-42d1-b6e6-26f35cafee69", "sighting--3bf592a0-358a-4357-83d0-1df41ec24ed2", "sighting--5fa0d535-597e-4e1f-a45d-5fcf19228b77", "sighting--4fce5bda-5eb6-4870-8b6b-000f678acb40", "sighting--c0dd14fe-4193-420f-a4cc-eb2720d1d88d", "sighting--0d14a12b-b66e-4ed7-af3a-ff7d496cbecb", "sighting--df677e2d-2104-46a0-89ce-ba37a25efce5", "sighting--e60df232-f09b-4b69-b4a5-de04772c81ff", "sighting--59270ddf-6283-4225-8a0c-ebec99cdc1c7", "sighting--1256d08f-4eac-4b3f-9d1e-28bc9ee37c05", "sighting--10981b25-51d9-4557-9e22-7c0413227d5d", "sighting--7658585d-fc19-43f6-987d-a84ac8d3ab72", "sighting--5d460ef9-1fd0-4eec-9631-e1b98051dfee", "sighting--300d258a-21e7-4547-959a-1182717cd0dc", "sighting--afe6ccb6-6fb4-464c-85ad-b2043aea8326", "sighting--68efbe26-da87-4785-aa89-ccdcf414b769", "sighting--8f5b7619-2901-4fb6-aec1-fd2a17474f00", "sighting--f35e8857-2a51-425b-9a0c-63ef18b823e5", "sighting--0c8f50b9-e6b7-4001-8537-2d8d61c7ae44", "sighting--623f39b5-8752-4667-827b-5b58c839d5df", "sighting--96ebd36a-1b5c-4726-9550-40088794f454", "sighting--2b5c6fde-81ea-4303-a31b-ccf5e6f9392b", "sighting--1dc96117-09ed-4fde-bc24-2c208fbd9768", "sighting--f932dfd6-19f2-4e25-b2ef-ca6422f34e67", "sighting--c6eb0bb8-bd37-43a8-ac04-96a7ce6448b3", "sighting--9ce528a6-0210-4170-af07-2158dd2ccd43", "sighting--3f05afa2-1319-4d3e-953c-a9e085e8440c", "sighting--2c9ea274-8ea4-4f6b-acbd-d6a0ec830277", "sighting--57453586-f737-4c7d-8349-e41e4bd8d8f0", "sighting--693d8e78-1e32-49e3-99ec-a570a1495060", "sighting--e7ee9b57-2794-4899-b38f-9ded43837b74", "sighting--b59f12a0-8a91-4eac-971f-b249e9820d61", "sighting--325ba7f5-42b1-4de4-8feb-4f62e70593ca", "sighting--950bf73a-c7e8-42ae-ada4-9c6a44dc73de", "sighting--c5352c61-c54e-462a-9765-6e908d7d7650", "sighting--c62c1d9f-2bf4-4dcb-bb40-11559cdf585e", "sighting--d92d1038-e71d-4c0a-ac52-95d73a7ab066", "sighting--9cca8c62-20c0-450d-9000-51bc1c4a1ea7", "sighting--fa408783-fa55-4433-a06e-49eb3657eac5", "sighting--6a5d48c0-e4cf-4025-87a4-8b921585c416", "sighting--e44a6e90-70b4-4f4e-9ad0-03ea1c407908", "sighting--783855c3-6147-45e0-b81c-d949b5312baa", "sighting--a2436654-c50c-49d6-9120-e8b07bd5e92a", "sighting--d3b38efc-fc76-4985-ae7d-b6739f54c1b6", "sighting--c37803c0-8698-43e9-9e8d-9c9842b885b5", "sighting--29a8c478-3936-405f-9849-49dedf14d3dc", "sighting--ae7c9c69-9359-4298-90ff-c4f33878aa8e", "sighting--ce52a80e-a68f-4837-bafa-8fda4b7e1e2a", "sighting--48319560-03b3-4111-b386-005714847aa8", "sighting--255a8938-f917-462f-835d-0a979ec1efcc", "sighting--075c1067-4311-4cd2-acc8-2e55df8bedbb", "sighting--46794e7b-878b-4fd2-9cf3-d1128fce5a05", "sighting--bc0f7db0-4fc0-4eb9-857f-4143bd991a26", "sighting--94c63ed4-7eec-4040-a462-0519274e9226", "sighting--59246139-6313-4194-b8c8-5fea777d7af7", "sighting--5b55d7c5-0c3d-41f6-8a4d-86cab8ea6b59", "sighting--e442f63e-7d50-47b1-b905-888493fe8a7e", "sighting--8f97e5cb-e6e6-494c-8aa5-f4183ddf15ce", "sighting--8eb35d94-98b1-422b-b896-8dd190b6e9d7", "sighting--60744028-332f-4e50-9638-6b1a7ca740ac", "sighting--7249f762-d677-4f02-805b-0673aaa320b2", "sighting--fa3173d0-78bb-49a0-a574-df346f7d69ae", "sighting--70891fae-7aaa-43ad-bf24-253b5ecb88d4", "sighting--680a034f-a2f5-4e48-ab3b-bee58a303d06", "sighting--d05fb17b-4c70-45b0-bab9-9a6e2388f561", "sighting--b38e890f-fa13-4f98-a932-efd4e51c536b", "sighting--ccdce337-e3ef-401d-8409-0a68efdc5023", "sighting--e6a26e80-3903-4053-b22f-abff302e99bd", "sighting--7cf831ec-4401-449b-8b55-a4d761a1a039", "sighting--660ef931-4710-4fa5-af69-946bde0ede50", "sighting--44a0126d-63e6-47f2-942c-14ceeeb88947", "sighting--28c98566-edc2-4daf-8b59-f9768360fb4f", "sighting--f75f3937-35e9-4f6b-a707-ee72a79aaf10", "sighting--624c2015-cae1-4855-a7c4-a99faa9d793c", "sighting--25c8e293-d5f7-4df0-91af-6b7f36ecd6e5", "sighting--c27ab65d-9835-4a30-a11f-3c29455c6206", "sighting--ee0420a5-aad5-4dd2-8e47-9399d8f3762b", "sighting--891ee36d-0e78-458e-82d7-1f8702833864", "sighting--ac9f5d39-b28a-4822-a1d6-10162e4b5a0f", "sighting--fd50553b-aaf6-4a7f-9cbf-2a6aab684b85", "sighting--17e52c16-7646-4736-a1eb-41a4590a30ed", "sighting--437f3bf3-9c69-42e8-bfca-1adaf8860dba", "sighting--f5c32d01-7575-448b-a50d-89e57442ee4a", "sighting--cbaa4164-b272-47dd-b2b7-d7cfb7af37f7", "sighting--d643fa6c-42b3-4c22-a439-61aa7feea637", "sighting--45ec2c8d-a318-4e1c-910d-7c408dcff880", "sighting--4b63aff5-30f0-4d4f-a098-7283ef6c85b0", "sighting--9c530105-a567-497a-94e6-2b6480b63c9a", "sighting--6d6dd55d-0e8a-4964-a674-700701e23f2c", "sighting--b119f4a9-789b-4ec1-94ff-3db2243fbd43", "sighting--150a61a5-742e-4e08-9ae6-6d99c376f689", "sighting--37046da9-8928-4b70-bae1-587649f0b89c", "sighting--3749a407-1a81-41f4-9d36-793e92fd3de1", "sighting--26b02bba-9095-49c3-a5fe-8a5eb1fa72dd", "sighting--567d151e-6e25-468e-8e69-6362122ac40a", "sighting--9124c7ac-4c34-4fce-9eaa-0e4c8714648d", "sighting--335eef3a-7329-41cc-bfb2-06058f9ed447", "sighting--a56b9d21-8002-4946-b064-d04108b7d72b", "sighting--18679f08-a02e-4814-9acd-8297fb16e0f0", "sighting--d1e90def-0d26-4fdd-a837-a23be0ef7c4f", "sighting--893cc79f-3504-488e-97e2-f7b5d0fcf3e5", "sighting--b0311c67-7e4a-42ba-a104-83bb900f9312", "sighting--b5f09d02-d3f5-4d72-b576-272f49843411", "sighting--b8585398-3a31-4107-9400-99e6a25e13d8", "sighting--a6111222-7ff4-4264-9450-8a680f3ae0ab", "sighting--8027f6d4-802c-4b94-8bf6-547c95d3ea36", "sighting--71e8b4c1-0755-4c4b-abc7-2e9433effb67", "sighting--db7a7663-4522-4a83-b41a-7ad0c754fe18", "sighting--ab568d5d-6b1f-4a18-9077-dcb3b008bdd0", "sighting--82e6161c-4f7e-4f6f-b65f-bb07f6d6e671", "sighting--769a88be-f21b-439b-bf69-d2934efd3e8a", "sighting--0569b780-9491-4ef9-b1cb-0904db89e242", "sighting--a584c72f-905d-41b2-a0fa-ca7570d9e238", "sighting--b2f9cbfa-0b5f-4bb2-b63d-938e555647cd", "sighting--1f832d7a-eb0c-4613-94e9-f40a45d955df", "sighting--b78e70b7-e437-4b71-9873-4e34d449c14b", "sighting--3d4fa2db-063e-454b-911f-0cbad55fc26f", "sighting--96915d3b-0b90-4d03-9883-878821fdef7a", "sighting--aba26d9f-c507-4a68-9236-4ed73918821b", "sighting--c185ec99-7b6e-46a0-9d15-7f580e253357", "sighting--403abf2a-06fd-4bf2-8cd6-29acbba7b010", "sighting--8d6fbdbc-9fd4-4849-9465-b952424a1b2c", "sighting--0a14b433-77b6-4caf-a105-a9cf95c639a6", "sighting--d8376397-64e1-4dc3-ad59-681c873b2974", "sighting--20a801cf-8e48-4f85-b173-ce2afca5d5a1", "sighting--f6518d3b-c26d-4f43-ae47-03659b6f6f01", "sighting--76774bf0-4f02-460b-967e-f896f90b5f15", "sighting--76d98c27-972a-4929-a1c9-a27f0580bfba", "sighting--498fc8d5-b18e-4529-9a97-15cb1a92890c", "sighting--5d6eec62-bb7e-4911-9b9b-e39edd5a85fe", "sighting--e9f3ea52-bf0c-4e9b-9093-c68738a8e695", "sighting--d875a768-19a6-4cf7-b86e-af868675ade8", "sighting--b37bdd71-d461-42c9-b2f4-761e8069ba01", "sighting--020002ad-fa57-4f23-be81-8ba985fc942b", "sighting--898ca950-b42a-41e3-94d3-97b9eaa195fc", "sighting--a3341499-6f34-4ef7-844f-8033f944029e", "sighting--db11f084-5f21-4be0-b625-3a20c3026eef", "sighting--741b9459-4aea-468e-a8cb-4d3cc7bfade6", "sighting--9b25e02b-081f-4454-a19d-f2281cd3bfc2", "sighting--4d644438-ca3d-4553-9445-5358f6b8214b", "sighting--95bb930d-b6bc-4f5f-8177-101dafd16d9a", "sighting--372df2f2-aa90-4f54-a0c9-926f69e3ab62", "sighting--08058971-d238-443b-9ef7-e738d5a5a264", "sighting--29a61cca-a5ae-4055-9951-782e8c9953f1", "sighting--e5f2a755-cc63-409b-8459-674484c929cc", "sighting--f21a2497-b0f3-4bc3-9e74-05256ba86a77", "sighting--3b7c744b-c452-4671-abb5-a59ce9cba3e0", "sighting--64840226-6c75-40ae-abd3-d9ab982fa34d", "sighting--8b602b44-b798-4f87-b6df-b833be8b60ae", "sighting--55dae65f-5172-41e2-bbe5-2f0f1459fe45", "sighting--9c94c5f7-284e-48c6-a9ce-299548486a5f", "sighting--3ec5aee5-2050-4f3f-af23-1a52dcf9f3cb", "sighting--2009a219-0bf2-460b-b368-09cd762a219d", "sighting--4ab41634-5f44-4aea-8911-4ad2e68583a0", "sighting--bf597738-b6c3-4d4e-8180-8c1260a57af6", "sighting--2b1d7936-5bb0-4c7b-90f6-28e8320642b9", "sighting--96f2d2d4-fcdf-484a-9cf5-7f18393122ef", "sighting--c27f839d-c907-4ef7-94ac-77d1b399654a", "sighting--41044667-6161-486b-8d29-ff031cd1faae", "sighting--513b2a1c-18b8-4bac-baa4-758811dd7f37", "sighting--ec4dbd54-5713-481f-ac59-50e0c74d0c7d", "sighting--b8736e41-a76f-458f-a097-3255f96fe57d", "sighting--877e8d6d-5cb6-4819-8072-373a8ae11a09", "sighting--cce2a684-6c30-43fe-a673-a9871bee5576", "sighting--09ed1988-9563-43fc-8919-e6c5af4645ad", "sighting--99b942d9-ad2f-47c1-bc70-89ca1b247815", "sighting--37ef4ab8-2e34-42d4-9a99-831b16b3c418", "sighting--01121b04-b4bb-4178-8d8e-41a9de1ad2f8", "sighting--ea91ded3-4088-4b32-b076-f71f23edc59c", "sighting--ba9a3777-8b14-4214-a94e-d2956a9874ee", "sighting--6c99d033-75ea-4f55-9c11-197a7c853e86", "sighting--66b08fbb-ce02-469d-8b9f-737ca4679b31", "sighting--d76fdba7-79a1-446e-9ed1-93ec62817e20", "sighting--b13e5ea6-2da1-47d1-8c3f-f9268b76b98e", "sighting--501b35ba-5e50-42f8-b449-5e54a054bb63", "sighting--30ec4ab8-6d2a-4708-87d7-ac281445375d", "sighting--335525a2-0204-4904-82a0-bc76726e468e", "sighting--ed117a24-f10e-447d-bff2-e8374940a06b", "sighting--09a817bb-5d6a-44a6-9760-d3ee66a5f3e5", "sighting--f4a31a09-92cb-4cfe-b9a9-390df3211f58", "sighting--7e89d580-435a-4e36-a1c1-95cf28550e6c", "sighting--d4f3dcf1-7751-49da-86ad-5648e2043e96", "sighting--9c4fa529-68e1-486c-bda8-551528b947fb", "sighting--fd0db307-a9b4-490c-9942-61808c14238c", "sighting--467ec3d9-6547-451e-8547-e2b4d9ea5d66", "sighting--483224a2-556d-4ad5-a4d6-cf2675f6a139", "sighting--be594455-9c15-4622-87cd-b99fdf9fa07e", "sighting--fbb57ad4-11b4-42f7-a048-40a47008b464", "sighting--e4ce72cf-150e-4fd6-885c-0ab069039b07", "sighting--adcfc1ba-a61c-4c6b-8e92-3808dc6d9cea", "sighting--95e59703-1df5-487e-bf7c-8cededa85d4c", "sighting--2334b1f3-94dd-48dd-b08d-4d565ded2561", "sighting--20e88ab2-522c-409f-b243-06691544f465", "sighting--48bdb5d6-e001-47fd-adf1-702d7a8abfc5", "sighting--935d5339-58a3-4400-8f62-c4cdf9ec995c", "sighting--3ab468d1-19eb-48d3-9a5c-8398bd3d710e", "sighting--dc0fefc5-a3f3-4946-9713-2d3e96eee7b4", "sighting--4a88decf-e777-4587-a37a-2ccd598d5f5f", "sighting--19956d24-865c-47b6-ac52-5c10330d3b2d", "sighting--cdb1b6d7-f996-4207-b218-8ca42de57e9f", "sighting--2f6e28aa-fd56-4b40-95ef-53713d23923c", "sighting--310c6372-5de8-4b47-94ce-b04713140ca2", "sighting--e2ca8be1-4cb1-46a8-8a2e-768fd6f54b82", "sighting--2847ad6a-31ca-484e-ad72-7632da3fadcc", "sighting--23a10546-a38d-4dea-9ce4-6328d7771d48", "sighting--e19fea0c-e92d-4ec0-bde7-b15c7ce0d715", "sighting--5c7b33f4-f4ab-4265-9774-f344ed3cff8a", "sighting--58760e06-40e0-4d6c-bc9e-38f4a3955f69", "sighting--d6388353-0140-4575-a5c3-2fb457377de3", "sighting--a9464927-c326-4238-887a-11bb498eee4b", "sighting--9f77c17c-1967-49f0-a093-2413eda0371f", "sighting--16ca4114-72fb-4947-a510-417256f23c66", "sighting--ca51e642-2fcf-4390-b748-f69bbf5278c3", "sighting--90c50648-4f50-4080-a6fe-ceabbaad25b8", "sighting--79c2a9a0-2046-4594-8a67-4107fd9c7f7b", "sighting--518aa931-079b-4ffa-bedc-009368578ddd", "sighting--eee5355a-652f-4e3e-835e-20680c7e2fe1", "sighting--c9e72bac-38da-4b75-9577-434483a8e1ff", "sighting--5bf135f6-13ea-4a6c-b4b6-8d8f2eaf40b1", "sighting--ce36c054-c3ed-47c4-a860-46feb858ebd7", "sighting--d0a562d1-92f0-4f87-b641-dce9ec1f0256", "sighting--d1ecbfe4-17b4-46a1-90a6-e282cd867a19", "sighting--4a392881-6f19-4964-bcd8-c50d7e12bfd6", "sighting--52200826-406c-4036-b6a6-4078459b39ed", "sighting--754d7fd8-749b-4984-aea3-e6ec6cb00cc5", "sighting--144c0ed0-3a4b-42c2-9e3e-2cddc5f04388", "sighting--094bce6a-1973-4a4d-a242-8acd9a374cdc", "sighting--17df4d5c-c3b8-449b-89e0-aa8ace7ab9b3", "sighting--a2879124-7a37-4c25-8556-0579d34f5851", "sighting--75279bd1-2aa7-4d24-afa6-51f54950ece0", "sighting--41a2c252-4bbc-4521-9e24-68d1813ae891", "sighting--1671049c-8b23-42a7-b05e-95141eef355e", "sighting--1f4a1ed7-4133-42aa-bfff-05fd32188965", "sighting--fe5bca70-978a-47c7-a118-4eaf36c58dc9", "sighting--37e46465-5890-4dfe-9189-e56b1055e2b9", "sighting--4e5c6e23-6591-43c5-840f-5d5f393c3aa1", "sighting--b6c22137-6354-41bd-a123-f3c2aa51184f", "sighting--833ac284-1914-4f55-ab42-df18bbc74623", "sighting--bd09d4a7-d8fe-456d-9ffe-f19276c87166", "sighting--da9a2385-1508-4a84-a86f-69106663d4d1", "sighting--1d6b3d32-d083-4d0c-99df-13d0d5326734", "sighting--0789e3dc-63d7-45b1-9705-8f91dffdbdf6", "sighting--6e995a55-b2ae-4681-b3c7-8d8b9d121c8b", "sighting--20ad45fd-1309-491a-995f-bd832d00bc40", "sighting--ddfcb810-cd0e-4085-831c-4e0b5761f5b7", "sighting--5f0f02c4-3259-4240-ad19-1b80c01f8836", "sighting--e8828279-23ca-47c9-aa9b-bc6e181c9361", "sighting--7d3a8688-6354-41bd-aba8-e7ccef31ec93", "sighting--35b89e69-a996-4403-aae4-d2cffb3b0d21", "sighting--05f0c43a-3425-4301-bcd7-d87914abd58f", "sighting--dc09abbb-2684-4653-b4d6-ff5d2a79778f", "sighting--eb1c690c-b4c9-4aed-b202-d50f573fc19c", "sighting--c6af7866-7fad-4653-9241-62ad5ac54c57", "sighting--3d3f6ce4-248c-41be-ac34-db9d12164876", "sighting--1f7e99da-44ff-4158-913c-ad3ab99a3e20", "sighting--49d60333-a64d-4eef-891b-6b16e470d3a5", "sighting--13631ad8-3176-4bfe-ac42-e6867b3b02a8", "sighting--75012119-1330-4ce3-9333-a20d9622beb6", "sighting--3ae008da-9bfc-4b18-8008-90014db64ceb", "sighting--36cca522-2731-49bc-934e-2a6458a413c2", "sighting--52512718-f118-4726-a6d1-7e631681c125", "sighting--05ca0909-c463-463c-9af6-adb881d9ed08", "sighting--38663e75-0179-4f2d-825a-964f755ea3e7", "sighting--9a354dd2-a763-4c6b-b46e-ae8e6f809985", "sighting--b669e882-573f-469e-b168-d7464d76905c", "sighting--82839ae1-3805-4372-aeca-4e3f93fdc3c4", "sighting--5c436768-8367-466b-b332-18681ee5084e", "sighting--516b3e32-2afb-47b9-b29a-550031b95d0a", "sighting--e2875284-cabc-4504-9bc9-e571cb391909", "sighting--6e5f6326-24b1-4aae-9a9b-3c55aa4f7695", "sighting--06e4041d-dbcd-4805-a6b6-73286c20df08", "sighting--cd2d6d82-c5e5-418a-a3a1-b06c9f127d18", "sighting--e3ada4d5-2042-4c20-bbdb-31598b40bc1f", "sighting--2d0221c8-06b6-4e0a-9c8e-2bdf63b05013", "sighting--b71d824e-84ee-4aed-acc5-a35bb805a161", "sighting--611fa231-338c-42ce-ab57-ac97ded90d05", "sighting--3afcfd72-4b85-4890-9e58-ff3af5b896ca", "sighting--3fd2b7a4-508c-4bbb-bf5f-5dc1fd1f242a", "sighting--b7b879de-aea4-49a7-b14b-9763e144c159", "sighting--3b0d94ad-55c1-417a-b6ed-1a10fdd66ffd", "sighting--7134eaa1-90b3-47f7-831e-acbaa613fe25", "sighting--faef4fbf-5408-4b91-9c87-54c4e96d990a", "sighting--9590d79e-e12c-4e6b-ae7a-d8c0e4cad247", "sighting--3c029db8-1b28-48e1-8bc6-46b1607e0811", "sighting--618edb58-10c1-497f-a907-69f847343b76", "sighting--2c5cc779-08c5-4b2c-bf82-7293c16093a9", "sighting--b01fd03a-c1d5-4c86-9f15-74cc45025c20", "sighting--fed90be4-421a-4f7f-9077-703b51aec2df", "sighting--b6beb85d-fb44-4fc5-98b4-e563ef0deaf2", "sighting--00063052-cef4-4870-839c-0302c7b2d0eb", "sighting--41d6a33d-d904-4442-b55b-17d76da71639", "sighting--b9d09ca2-c7d7-4b6e-b503-6c96e16958cf", "sighting--837fd796-34f5-4a1b-b6a4-50f32e5ab47a", "sighting--dde98bdc-cc0b-42f3-80ca-1e5581b818e6", "sighting--808a0713-efc6-495a-8cb5-f9c46641ad7b", "sighting--2a935fce-b6d8-4f68-9e75-3b9605ef1540", "sighting--2bc63b92-db2c-4154-8e19-aa40816e5cdb", "sighting--c92d39af-8ded-45a4-8c41-1f4b8a51fbab", "sighting--42639147-9a1d-48d0-a5b0-94df83d6c9d8", "sighting--7822d5cf-30c3-4712-8538-f3ae45ba4023", "sighting--98d2adfc-9fee-40b0-ae31-3726bc3936ee", "sighting--85af91b6-56fd-4366-98ef-e8aa7762e7e1", "sighting--0c5824a4-6ae9-4574-82e1-ea288c9bf331", "sighting--8ca3455f-a05d-4839-a9f7-caa6e9a5f704", "sighting--d1a52c9e-1bf4-4756-96b8-03ae94f6ade3", "sighting--9e3e74ca-6f27-4688-a717-afba2f0425a5", "sighting--40fa6989-5e47-4dd7-b167-99b3a1eac2c8", "sighting--db401942-68cb-4b5b-a76f-3c127e2a5a44", "sighting--3ed4cf54-a261-4405-b92e-30ae0f1ce022", "sighting--60c696fb-84c8-47d7-8f2f-77426ca5ee31", "sighting--0863b24c-82d2-4f6b-8188-86ce0eafbe69", "sighting--6c8a83b3-0384-4552-9ce8-3d8c69eca53c", "sighting--291d7232-b4a8-4188-a8e7-d4ffa85aecd6", "sighting--111cdeba-d72d-4d02-9f02-3bcad449644b", "sighting--a4044748-b891-409b-b445-179d4af37ca1", "sighting--edb457e3-8626-46cf-8e4c-64e711b8169c", "sighting--09d557d3-cd7c-4515-bf7e-a7e4af48d675", "sighting--733e78a0-5f10-4142-a3c4-498d8ae6bd5b", "sighting--f4f92377-55d0-4f5b-80e0-b9b7b659a72c", "sighting--669f2111-4d4c-4592-857a-9e88ceb50d98", "sighting--da3af734-fec9-466e-bc27-532367a85d70", "sighting--405183fc-b8ed-440f-b9cc-eaf304871b00", "sighting--8f4268ba-0156-48f9-a83d-27d72d9f7b5e", "sighting--68f84ec5-314d-435f-891c-fb65a89f1444", "sighting--2a26a4dd-13a9-450c-b41f-04f09723e9c4", "sighting--9746b1d4-3b63-4abb-b9ed-7dca1a06c418", "sighting--ba277165-de7f-4d6f-933c-5b4625a54055", "sighting--a3d1be6d-dead-4e77-a247-1ed763dabc83", "sighting--2d4374dd-d16a-4a2e-8a0e-2866ad51b727", "sighting--e2397c1e-9a91-49c0-b0d1-1c5d0e140458", "sighting--f7907bf2-b2d3-418d-bd09-3f289d449928", "sighting--89ac78ae-8e90-4703-9403-432632b6486a", "sighting--47121256-2a94-42cc-9408-02769e7ae9e3", "sighting--af4f0354-7394-46cb-813f-133ed00dc1b5", "sighting--5890f0ba-162e-46b1-aed2-ab09be5d8982", "sighting--006f652f-7b65-4b18-a0a2-0445bf1e1269", "sighting--857f7382-dc4f-4042-aa33-1078fe9f960c", "sighting--2e884c43-34b3-49c4-96e0-1743178d0791", "sighting--7bfce9a9-42c5-4c7d-8338-9afdd28647ea", "sighting--bb9aca22-3483-4ae6-9917-f72025a1328c", "sighting--10111855-cba6-4128-8c17-69913b932cdc", "sighting--b9ccdd8f-f6a6-4a37-b3ef-0c1b7fc5d931", "sighting--70022933-ea2a-4dcb-90e2-b60a55d5023c", "sighting--38b51f8c-2c41-4d6e-83e8-6d25b4506403", "sighting--6a976309-5827-4eb4-87c9-e59573fef41f", "sighting--58fd3b57-2ddf-40e7-985d-56e43d4ad0bc", "sighting--adf93643-a7e3-4df2-ad7b-2fb18b196504", "sighting--e445f61b-7866-4e40-98ce-be6cc9521971", "sighting--3c86dab5-504a-43de-8f57-44ff6c275bc7", "sighting--fd470475-4cd0-46f4-ab59-563a2074be71", "sighting--7c2c5506-3398-4f84-b20d-88dfa4cf4026", "sighting--182354ef-6a93-4868-aacd-776f8d4d76a0", "sighting--0d7e33dc-a093-4e34-8eae-30cbeb664934", "sighting--302b251b-f0c7-4ee7-ba98-b34ad31ccddb", "sighting--89bf06d0-da6d-4b74-9d64-b6b8ca3b32ee", "sighting--72f529b5-7693-4480-b9f0-1156427ac20e", "sighting--6dc89f29-b9fe-43c2-9611-16c9b10b6240", "sighting--4892c70e-d5e2-4240-806c-36427bb908ae", "sighting--feaa57ae-518d-44d7-86b6-fa61079268a8", "sighting--db307afd-86cf-4f79-b241-fc2ec38c6bb1", "sighting--2f730fff-10b5-4d64-accf-1c6ea7b878db", "sighting--c5b78cec-9aa7-4291-84ae-ef9ab0ba5ef0", "sighting--9214fae3-a9a9-4aa3-8f8b-34a80e812a97", "sighting--cb6c9bc6-c961-4b18-ae06-9c6e77b0441d", "sighting--1c890276-9ca3-4cbf-9aad-0b2461e71cf3", "sighting--28a8b00d-e321-4dde-900d-b4f77de240ae", "sighting--a9e55a99-9845-447a-b490-f4293960f913", "sighting--4287bb67-cb2e-40c6-98af-688f925b97b4", "sighting--dca41454-6e79-47fa-9ac6-afc4d67f286e", "sighting--eb804e6f-bea7-4829-b7c1-a37553a6510f", "sighting--c256a7cb-1a7a-49b0-b94d-8d739e37796b", "sighting--02100bbb-8b21-428e-93af-d262c10ba93d", "sighting--1354647d-dcdd-4365-a1f4-2fcf0f2f3c49", "sighting--e1d19d5c-4524-4a36-a421-9fa10f179cb4", "sighting--7b2beb1b-8158-4c53-8b24-6c6f3c512ec2", "sighting--36e9357f-371f-47e9-888a-2bb3ab5bbf4a", "sighting--bda13d45-86f5-4ed9-9a15-f81b7d4373a3", "sighting--3993bd4a-ecc1-4df9-81cd-e3b5306515a4", "sighting--ad1d6222-7f48-44c3-a72a-654e529674a0", "sighting--a1767421-3bc8-414e-8d55-d6e007265e33", "sighting--557c5d3c-4dc6-4fea-af56-25f126bbdd79", "sighting--f8576185-8748-4538-ad86-10b1ade85b05", "sighting--c73c96f9-8a42-403e-b868-5306958ed254", "sighting--d4d00335-72ae-4e74-9af1-465585ad4280", "sighting--255bd821-a19d-4030-87c5-fc8e2c26a210", "sighting--20d836c6-15de-443a-9fcd-0737622176d2", "sighting--f2490db8-57ba-4696-8634-4d6ce033ef62", "sighting--4fb9692c-02d4-45f8-adee-9e753f6d7ea7", "sighting--b4fd6f13-9878-46c5-9216-0d0b115dd01c", "sighting--8a7c0695-4681-479e-899c-f8b80f6ee807", "sighting--0e3e6293-3e24-4460-8c82-ac630e5935bb", "sighting--8128866a-6f22-47d6-9b9c-5af9af592941", "sighting--4951808f-82bc-4604-bb13-5b4be9adbdf3", "sighting--0594775d-5938-416f-9f22-1b044059dc1b", "sighting--aacbfacf-ec39-436e-9125-501e7538333c", "sighting--3d3e621d-97c8-4934-9efa-bf73c55f98b9", "sighting--f4e3f1a6-3af4-486a-b4ec-5dd62d8fbe76", "sighting--50338cd7-dce8-42ea-8bba-ebf4bf597962", "sighting--c555fb1d-1606-4d32-a3ad-cd4530816f25", "sighting--dd2a1942-ea7b-4cf6-834a-af4c5a8048a1", "sighting--e30ac146-e2a0-4628-8086-830c6f446565", "sighting--08532361-d4d6-4fb9-bbf2-0ec0cff2a3de", "sighting--1f526662-5a29-4df3-806e-e2b7a97e821d", "sighting--96cdf466-a16d-465d-8ce1-e0c608b3fc4d", "sighting--fcd316b0-93cf-4d83-866e-b5ffa2078a77", "sighting--d1a006a8-02c5-4889-9c10-8448e737cd3c", "sighting--703adf50-b4b8-4c63-9cd5-4aefa851bcbf", "sighting--f3362f4b-1f40-43c2-ba96-d5a5302e2e40", "sighting--7dbb99c1-bc70-4d63-9c24-e5c73dc49f44", "sighting--0f82486b-c1d2-4f1b-ad36-ffbe527c250e", "sighting--64ebf170-7743-4e9b-b8b4-d34ba78fc200", "sighting--7d6f75a6-c8d8-472f-9e0e-e32ee49f0f13", "sighting--222a00f4-da28-4231-9c86-842ae19fda98", "sighting--986836b8-79c0-443f-b3f7-1ed1c947d60a", "sighting--19f1457d-5998-4089-b7b0-9a44e4cd2f94", "sighting--97b6ea7b-7191-4883-915a-bb7249548507", "sighting--8f75391b-152c-4994-9035-66fa1bf09e49", "sighting--d479a863-249e-4ffe-976e-d28db6c21ca7", "sighting--65ae5f46-ada7-4b85-ba17-f38db72d05e2", "sighting--01b3dbf2-33e7-44f4-a511-cc8e4f5e43eb", "sighting--f2e12b51-caaa-4fd3-98dc-a4409f580d9c", "sighting--392d0e91-6342-4b8d-b2fd-a1c79afd16c5", "sighting--bb0f0811-dbd6-4930-a933-410e30a2fdae", "sighting--0f798136-b824-4d71-90c4-5c444277e758", "sighting--29d43d1d-9241-4c57-8c8c-249a6904e485", "sighting--32509ed4-cc87-46a4-855a-718a2b18d7bc", "sighting--9e29ea5c-b844-4d20-851a-53ea5bc0bd69", "sighting--0dcf45d5-e549-416c-8045-d45b18b4c3c1", "sighting--3b178d34-2030-425b-ac75-c693f7179ab5", "sighting--891d9726-4ce1-4a44-a05d-452cd5f1082a", "sighting--43358a72-af63-4249-9fcf-d920891ae99b", "sighting--efd327f9-247f-4829-ae48-036fa61e9ca0", "sighting--8c4153bb-e3c9-4d5b-a724-05d86b262cf7", "sighting--a18df503-d88d-4e92-9601-23f99fc053cf", "sighting--0c13ae50-8577-4758-9004-3060d2ea262a", "sighting--4d901f14-59a6-422d-a426-182ef1c5ab94", "sighting--a3118a01-5c09-44b5-9433-94c3610e6f17", "sighting--35719f16-e8af-4daa-b583-c6207221ceda", "sighting--89bfcfe4-c439-4a1b-81a0-50b64336b252", "sighting--a9a00fc0-b3b3-4095-bd86-4929d443f546", "sighting--4f044c8b-aa84-4bed-b7dc-b5a941b6605e", "sighting--2d6b75a3-c03e-473b-9781-0a90facde15c", "sighting--56240f96-5595-43bb-a10d-bfc800436929", "sighting--ba989a26-ba09-4ab4-8200-0f5c4363ff31", "sighting--eb5dd4c4-26d9-4ff0-98fb-251e22b33e2f", "sighting--80d15541-b57a-45d1-8aa8-53142f42baa3", "sighting--132c489e-fabd-4929-8395-6b10766f4867", "sighting--b7844b9e-48b7-414c-87a5-77f83966ee48", "sighting--a065ed0f-e033-48b7-8974-0683562c2ec0", "sighting--a5822a41-5adf-4a9e-9817-af8b9fc4aec1", "sighting--a0b39cce-2217-4ace-bc37-0530cb8a19dc", "sighting--1f1d8723-1813-457f-85d4-f5f8564c0498", "sighting--625e9de0-45e9-40cc-92f7-50f1fce0236f", "sighting--9d31eecc-72cd-46df-8092-f7ed3a13da63", "sighting--5bb4f0d1-0d6d-45ff-8a1a-ec8383a472ef", "sighting--06ef7394-adb0-4b37-a246-430816718dae", "sighting--d5b5c7f6-7588-4cde-9fca-af4353607e6e", "sighting--53acb289-c599-4e87-9dd0-04385c4146c0", "sighting--8ea05694-714f-4455-86a0-bdf1af16f86a", "sighting--f36eb297-ded2-4580-9293-c2669c4f324b", "sighting--4959799e-4791-47ec-938d-aab0fb87748b", "sighting--dbd1695d-13c2-445f-8375-2d6762634490", "sighting--d9f304c3-0354-4f84-ba2c-874377a95da5", "sighting--130e7558-1e8d-49ec-9832-20211d585e7d", "sighting--70b581ea-6f00-49f6-b88c-46dc764db1a5", "sighting--34b417e4-9e3e-4c4b-a4da-dba6d553dcdb", "sighting--84ffa68c-2830-45e2-b174-0c1e6330cf49", "sighting--c4d190e2-5408-4461-a309-b9c2cc1b5c31", "sighting--0ba88517-7e42-4ade-94e9-084e88d4b15c", "sighting--706b406e-8d49-46d0-8c11-9b1997f5a5ef", "sighting--feafdc7a-eb91-40f6-9c49-14f57bc7e964", "sighting--e4a854d8-afd4-41eb-8db5-b4fee6b1ad9e", "sighting--ceeee25a-5d01-4584-8c97-c3b216eb5376", "sighting--869d6027-ee03-44f7-9d1c-fb5902c76a4e", "sighting--000289b6-63d7-4e5a-a165-2f19253e2cfd", "sighting--7b5f1a07-f8b5-40b3-8bcd-b2f36a0195be", "sighting--0481cc38-f95f-4672-944a-bd768505acf3", "sighting--065f4b63-c457-44e0-b06d-bf042832550d", "sighting--77d26ab9-a1f1-4247-81ae-b3ae5dccba36", "sighting--70a35cd4-8831-4eaa-bd9b-4f29e8ea0a62", "sighting--737eadec-2a0d-4420-94f9-51800f79fb91", "sighting--cd991b7c-9ce0-4164-9515-cbe922ff5144", "sighting--f262e0a4-70d5-42c1-b998-c49f05a20f44", "sighting--92d03f5e-6e77-4762-8f43-e6456ae2cb2c", "sighting--cad6c001-bca1-4aaa-bb74-d02302b4c3ac", "sighting--ee331bd1-6655-4ff2-a41a-901cb89b369f", "sighting--8142010c-ab6f-4a15-bb55-0ae01064d65e", "sighting--01411743-4155-4c05-b4d1-bd9aa14430ef", "sighting--ab6a62a8-789a-48f1-8e50-0d152fa46f23", "sighting--9e1b5aa5-c634-458d-a59a-99eeb038bffe", "sighting--3b84d293-3285-444c-9df4-55c90293d7d6", "sighting--18567798-fe10-4f7a-9811-b71a95745b38", "sighting--8e1cf238-6c62-4954-8ab5-05fe2535f09c", "sighting--f40af786-2868-412f-8dc8-19099d43c0db", "sighting--86635674-bc2c-4cb0-9601-60f2c8657237", "sighting--c819e1da-6083-4179-97f0-d4d59f530962", "sighting--abeaf194-7ce7-4fe3-b825-f7c4bcc69897", "sighting--4b52a133-58d6-4fa3-9a4c-3515f7f7014b", "sighting--0b7132e6-75fc-4ac9-913c-9cbb2c054e1d", "sighting--d24510b5-30f2-4bf8-b27c-55ea6fad6d1e", "sighting--97c80fab-7ae7-4063-962c-c5893e9e175c", "sighting--c6bec4aa-71a1-4ab7-928c-92560a6b9201", "sighting--e727fa67-ad69-4755-9811-d4a8513be841", "sighting--be56401f-96dd-4994-b4ac-f43f7732b04d", "sighting--ef6f9575-3050-40e0-8782-d37642a79217", "sighting--0dc9e0e8-d595-4d52-ba5c-2b27614bcabd", "sighting--3c742b8c-51f3-442f-94c0-e0981bdd9636", "sighting--309c5efa-5923-487c-adda-6a3b5b779085", "sighting--13835b0a-6325-492a-8a5e-d4b1bd9b8f45", "sighting--49dd025b-a3ac-405a-8c60-a407d808b48d", "sighting--b6a840cb-6ae7-4d1f-94ff-ac8f187483bd", "sighting--3051a768-ccc9-4266-9d99-a25be285fc40", "sighting--a3ddc972-49eb-4599-b385-64b7786354d2", "sighting--ce2ac1d3-77b9-4570-92a1-531758b0f1e4", "sighting--1b59fe7a-66df-4ec9-b9c2-59912ea568a3", "sighting--a3dec250-03e9-4dc3-91b0-ba5d2ecbb0d2", "sighting--0cf54848-78ff-4ea0-9240-cbcaefc773b5", "sighting--57b41c6d-10a2-45df-a6e7-0eabe65a093a", "sighting--1d1bd250-7b16-46c2-b850-ce67f0a66968", "sighting--ba74477a-6ae5-4e3c-a167-51442c8d725f", "sighting--5a883304-c8b2-43d8-8d14-d7dba9ef20f5", "sighting--149c478e-7cec-4847-b1a4-20318b49e270", "sighting--73b66546-b193-4ca2-8174-e89e13b24747", "sighting--89e7d0b8-4caf-4d68-93b4-cfb1dd755f33", "sighting--653af510-1108-4ae9-ae1f-ea26e1b91d88", "sighting--3f2af1f8-7986-4bfa-99cd-9ce3a519bc3b", "sighting--bbb9f4c8-098f-4d5e-9e15-1a8fc52c579c", "sighting--f262e55f-f81f-4042-8644-cf7ac746e811", "sighting--1b9cbcb1-86f0-4c6b-aa49-5fbd0192d78c", "sighting--4c9c2255-4f3a-4173-8cd8-f664109efaac", "sighting--253c351f-c554-498d-b20a-2f15d9ca7d8c", "sighting--4f04eb11-0d18-4f05-ac5d-05ac8333bc5e", "sighting--172bffd5-59c5-4d66-9bcf-db0fed57662f", "sighting--1bca23bc-b683-4e8e-a9b3-8f15ff32807d", "sighting--2847e1b9-262f-40ad-83bb-007ecf41e6a1", "sighting--cefbeb79-28ac-438f-9c39-e263f2c2ef79", "sighting--543ab2dc-6df7-460e-92b7-ae20bece2abe", "sighting--44c9eb5c-bf0f-467a-b4f9-35601db5d625", "sighting--f0a4f2d2-76f7-4665-864a-020e013e5468", "sighting--288c0027-98b7-43f7-bf4b-b6010576af37", "sighting--b08e7716-3c59-470d-b551-16b358d364a2", "sighting--77bb58a3-8954-4986-a0ef-32a7f3d6222c", "sighting--34b21143-3ac4-4998-b9fa-894374bb947f", "sighting--9d5d902b-f937-44bb-a656-8b80f6f05533", "sighting--5e8ea015-f17a-4487-b7cb-733142494acb", "sighting--ab2259e5-03d9-432c-8cef-548d222ffd40", "sighting--500221d9-d3b6-4b16-88a4-430252025f62", "sighting--36d88fe8-faa5-4e3f-864f-5aea7920aa6b", "sighting--88808a57-8fb3-48fa-a501-db238a908379", "sighting--7fbd0616-1515-4875-bacc-fed49db49fa2", "sighting--8882f7e1-f106-46a1-8c7c-a45ea44029a2", "sighting--acbcdd94-0532-4558-a019-48e8f75aac4a", "sighting--e4f9b6cd-217e-46a7-b2a3-0b9e65c8ec85", "sighting--30cf5bd8-8591-4481-b46d-6d7ee078295a", "sighting--78399852-0667-4b1d-aa7f-6fb584f2bdaa", "sighting--81af7456-5fd3-4894-868f-2e119da9b1f7", "sighting--f7ef123d-c7f8-44a0-b245-065286f2e855", "sighting--63996b36-594a-4603-8a53-ab7f03db8bcd", "sighting--c4505446-5b9b-4a53-a33a-9696c836ca7c", "sighting--7b221f88-a641-448c-a66d-1629f4f1410a", "sighting--02bb376a-79be-472e-aae7-ca95d57eb875", "sighting--8f3a1373-6176-4df6-99bc-7027a2db6616", "sighting--a672ca6e-daf8-4f65-ae32-d1a3f2fa704f", "sighting--622516c2-e3ec-4c95-a758-6b825ed5e650", "sighting--17eab1a6-0b99-44f7-9d93-7a0f4cb07cba", "sighting--716ddc79-9a12-4a01-8817-df3464e09f38", "sighting--f86e723a-e2ec-4ed1-b022-4dbd339a139b", "sighting--50e9032f-033e-41b0-80ae-a5a68f9a9bf3", "sighting--2fa551bd-8ebc-4633-a88f-f64c8d1166ab", "sighting--9cb91a91-4d7a-44f9-bd55-6a0d3027cda5", "sighting--e21ce8d2-d948-4f01-be5d-db2d44889876", "sighting--223ad3e6-ea1f-492a-8bdb-11bdf490c109", "sighting--59456f9c-97a8-488e-9eff-18c31344fef5", "sighting--58635224-468b-4f19-9b40-bfb6ab020a9a", "sighting--be4d88b4-63aa-43b3-b58d-3a2a5660289f", "sighting--1a217c73-84fc-4eb7-b6c1-f103a9d31e4d", "sighting--3954bcf8-9cf2-4294-931b-b38c425e28d9", "sighting--9afa80fa-0783-483d-a8a7-0ae909cba1ce", "sighting--a43099ee-7251-4473-894c-f4266bd87e94", "sighting--bd829f68-617c-43a3-8e5a-0d7cf4591343", "sighting--c037840d-979c-4e6b-9551-7d1a85c4ad2e", "sighting--a4814f0f-56c3-4ea6-960b-b35cf77dc5b9", "sighting--00e07b4d-128e-4dee-998d-827491527d8c", "sighting--6eeb199d-fed5-4dc3-b5a3-a964356613a5", "sighting--03746497-c781-4a0d-973e-0239932d814b", "sighting--cd64ca51-564d-44d9-9be0-32cb8e4666fb", "sighting--beb4f2de-6c16-48d0-90d3-151231e63564", "sighting--470f80f1-b029-42e0-92fa-3658cfdc046d", "sighting--11add0c6-383d-47fe-871a-010473943257", "sighting--227f20d0-e5f9-4995-9bcb-84ef1097d691", "sighting--1e63081a-0929-4209-8b5a-b88bdc65dea6", "sighting--70ee9676-b52e-4974-84f3-a4887ac59896", "sighting--b095d9e2-311a-4e36-a303-0782f04ac506", "sighting--72afa01c-990b-422d-8eda-d52e0e527321", "sighting--5b2e5368-5651-44be-b4f8-86e88e028d94", "sighting--6526c026-1a4f-4d2f-b16d-ad7e825d8f63", "sighting--575bc785-0981-4d38-b60d-62d0161361f0", "sighting--9343ed96-ddf7-465a-a1ef-75b7399bced1", "sighting--82b700a5-ec56-466a-8241-dd89fa2bdaad", "sighting--b3474b61-0f6d-46d7-8284-6b14b99df80d", "sighting--8c3d6af3-a257-477d-990d-e9f0b535376a", "sighting--3a7aebbe-cdce-4a02-b7b6-186960f1baa7", "sighting--45641c3f-7dc6-4ab1-a019-9d9cfb04cb16", "sighting--52607284-a862-4b32-98f0-50b72e9462f1", "sighting--668fad67-359b-48f8-b656-0e362d349e61", "sighting--5549bbc3-dca5-4ea4-b2ac-4d917cb7ce40", "sighting--648ea121-e775-4a28-a0ab-5e24520955b2", "sighting--ed0696d8-748f-4724-97e9-be5f7b2ded70", "sighting--a67750e1-df6d-4136-bba1-d1fa9743c24c", "sighting--a04e0ec5-d5eb-4d95-8e03-6140f6581438", "sighting--f5142ca4-0382-4adf-89ea-aea30ce39bcd", "sighting--ab536b6b-73dc-45d9-8a6a-35fbb6f483f5", "sighting--bef26db4-5b3d-4d45-8142-0df9e68667e0", "sighting--0f82c495-a0ea-4bdd-b699-e1be1bf378f4", "sighting--bf9fae4f-ffba-40ce-9001-db37667a57fb", "sighting--c5aedce2-2a0d-4051-bf82-4229785f1e3f", "sighting--e014aef0-32da-45a4-a8a7-37f44a362ffb", "sighting--d033db1d-0368-4bcd-a5d5-22d0bd9b5ff6", "sighting--ecbbf2d7-ce08-46c4-a6cd-410399685638", "sighting--c3081ef1-d804-4571-be0d-1c91b7ce1607", "sighting--1352ed2c-ef53-4cdf-bde5-f8d7915e3d25", "sighting--fe770a5d-5829-4f07-944d-505c1b5a0d52", "sighting--73dc009d-4e98-48a6-87bb-66e40287bd40", "sighting--97b64252-f6e6-4945-9635-5ce839138c72", "sighting--a50b2ecc-2de8-41f8-be24-9e76ae156ab0", "sighting--e9f9766f-9bc3-4f6d-b9b6-502e76283fa7", "sighting--df5a492c-7979-4848-b9b2-34117050bbc5", "sighting--58a9a361-b1e7-4233-b2ba-08c5958ce720", "sighting--e559ce5b-d2be-4e5d-9644-a949a23924d0", "sighting--13fa428f-d8ba-4d88-86a1-614ea7a21d12", "sighting--7213142f-15b3-44b5-b5a8-20a598fab065", "sighting--475092ba-b614-4fb4-bbac-c88806387131", "sighting--170c657d-77ac-4fe8-b3d9-5103e29578cd", "sighting--13f2a3e2-117b-4c2f-ba42-307c6d66fbf4", "sighting--0626f823-a9f8-4041-a772-f3bb27b7bc54", "sighting--0cc71a0c-875d-452f-b8a6-61bc9df7fc2a", "sighting--25dad35b-9d2d-4934-a439-b8241b12bb5b", "sighting--25e36b17-2934-497e-820c-879a6aca6d82", "sighting--82885737-e60b-4f7e-9551-561d4a4fe47f", "sighting--493c0401-9e32-416c-b36a-d2444eafb721", "sighting--71ec62b4-543b-44cd-856e-380935d74533", "sighting--9d365a5f-4afc-4075-bb42-31fc377b1c84", "sighting--bc68c913-08dd-414a-ae9f-58bad9b17c39", "sighting--44e5c2ba-7604-4ce0-a02b-dec540e8a0a4", "sighting--2acba0ea-9d08-49f5-bc0f-cc1b644f21d6", "sighting--4ff9b113-cea8-4633-921a-f619805881a4", "sighting--a56c86ab-a31e-4114-9a7f-93a836f7b96a", "sighting--168c3280-26ff-469c-9a62-42207b9bac35", "sighting--7f50bd1d-9bcf-4812-a622-4dcfc218aea3", "sighting--98be7897-b6e6-4fd7-8469-d39580dff5bd", "sighting--dc4d4763-eead-4eb8-a489-0dd9c5fc61b5", "sighting--c0a12c32-fc79-423c-8734-8d4be59b31bf", "sighting--50523de9-12dc-419e-b161-0e08eb8fcdf0", "sighting--ad77fb6f-1a7c-4a18-bef7-8217f9e8976c", "sighting--c4f7c4e7-c7c8-437b-ba1d-ec05b424b2ee", "sighting--ff64b529-425b-45ef-a181-0c3cf8ab79e5", "sighting--78920429-87f6-4c0e-b5b2-3039b5ba4e49", "sighting--4c9fb028-a05e-46c8-bc0b-da089b85e5dc", "sighting--41e1d6a9-0c8d-452b-9c48-74432018b612", "sighting--bde63394-12d3-46d4-9b6f-5a77db06dc37", "sighting--635908c4-e36d-4e62-8a7a-c6785b6a1a9d", "sighting--7faa86c7-9e1e-406c-96b5-e8c69b588e31", "sighting--b9efbc2b-9c18-40c0-ba41-031dae72b193", "sighting--91377358-d0aa-47de-a069-f4750e107325", "sighting--1a53129c-1bc0-4081-b6a9-81097ddcb9e3", "sighting--3074381c-870e-4158-a8c3-7269b79d222f", "sighting--d63ecdf7-02de-41b6-83cf-079b3b85bc8f", "sighting--330019ac-1f80-42d2-92db-ca0c4e52f9ab", "sighting--134ed42f-3c97-452e-9e4f-bcdd19946a8d", "sighting--7f91c96d-b486-48d4-804f-13b5b501e4e4", "sighting--485d7b87-3b0d-4076-99ea-93eaa484c66f", "sighting--7f39b92b-5122-4ad1-aaf2-1c908fa67bcf", "sighting--e5a7b41a-8a0c-4a38-bfe9-7c0d2e8fa978", "sighting--4a862ac2-f0eb-44f9-af7c-a8f6b7e22518", "sighting--004b8e38-2a74-48ef-9f1d-1591096a4bd8", "sighting--61366dc0-3894-4fef-b0e0-d324d98fe4db", "sighting--2642c760-ab13-4bb7-800e-8b3b0f1e7540", "sighting--7540ee7f-2506-4497-ab91-e39ec9fbf3f2", "sighting--89eaa05d-3586-44c5-8f8f-f20f11e164e4", "sighting--1c439db2-ac4b-4661-b1ac-d21995e8d8be", "sighting--2b41f6cf-a129-4b9f-a796-079f4c8b0c93", "sighting--e175222f-8284-4b26-b1f4-fc5b5bc79027", "sighting--e77fb3db-b354-4f61-a2de-16b464106b27", "sighting--91d68c2f-53c0-4f4b-8653-b085becb6dcb", "sighting--6b819166-780b-4ff7-9cf6-896326781f30", "sighting--01395024-b5ec-4a06-aed5-8340964d30f6", "sighting--05554b45-2e13-4490-bac5-34409d517cd6", "sighting--bfeea6bb-aa0f-4459-91d4-214770346fed", "sighting--332bb000-7009-4c22-9e3f-9d717044bb21", "sighting--2f6cb2f9-2abf-4b38-95c8-c5cdad85345a", "sighting--e4d4bc75-7e3e-455c-b410-003917cd9aac", "sighting--6fc1e616-1fa5-4dc8-8ad5-94357384d95f", "sighting--79f34d0a-c78f-4043-84c0-3ca5b1046b89", "sighting--314377b0-c868-4f2f-8d80-dcb7ee1fcc0c", "sighting--5890cb41-df7a-4ab6-b873-dba4b11e13ef", "sighting--0d44cf2c-1701-4a95-a5ec-8e7f1922a71e", "sighting--de7898b4-da45-469b-ac3e-a53cfa04d531", "sighting--db06c279-6d47-495b-8872-d6cd7a6fc169", "sighting--ec0fb220-f385-4a3d-bb8c-5cbfb4c1fac5", "sighting--a8bb6a52-1574-497b-afa6-7bf3617156ef", "sighting--a9be50aa-7f61-4238-af4f-58db8d2fe09f", "sighting--a90fd435-2fcd-4afd-bce5-33a99b1af60c", "sighting--d26037c7-d9cd-4f3d-b429-4c0112b328cf", "sighting--0621b2da-1b62-4e5d-af65-046f2d04f02c", "sighting--73bfc46f-4f72-41e1-b694-9852157cc905", "sighting--fd7d8c74-ab7f-458f-998f-649955fbac2d", "sighting--79c0addb-05bb-4b02-9022-83f121e3bd8b", "sighting--c42d22c7-0784-4e58-bc7a-178e6694dbc4", "sighting--fed754ca-dfee-4d90-b3fe-31545f36f4f0", "sighting--aad1cc94-7c07-4456-bc5d-57dbf8922a3b", "sighting--1c76e333-bfa1-4ae7-9830-a2777292753c", "sighting--936cb997-c9d5-4107-bd47-23bf309a3d30", "sighting--e91194d3-ef5f-4179-92d6-139c0862e539", "sighting--507e6733-0255-4a40-9b7d-b5a25bba89ee", "sighting--e540bfe1-4e0c-468c-b741-5fc219497ba4", "sighting--d5b5f925-32ca-4aac-bc68-4281ce74fa59", "sighting--2829c65c-8002-4f69-83c8-54861afe7470", "sighting--73cbbde0-9a06-4c11-aa5f-3c661f359cef", "sighting--bcf5ee2d-23df-47c3-911e-f6a582b1049c", "sighting--745440d5-d2f6-48e5-a8b8-3902b2f9b3ca", "sighting--967539b5-d831-49e5-a2db-b1741be3f72a", "sighting--753961cf-655d-48e2-9add-fb588771e8a7", "sighting--f07d542d-94d2-4004-8993-5e0d8133717a", "sighting--5fd7dc55-43f7-4b91-865e-8ff88bb830b0", "sighting--945df8e7-03df-4c9a-a85d-5ad50b861f2a", "sighting--6eda1401-20eb-4d79-be70-678698851daa", "sighting--6ab68758-d969-4753-aeaa-4c44270cbc83", "sighting--0a122752-4f78-4e28-8d03-47114e541235", "sighting--2ac2b46f-0ce8-45f2-be82-27bc74e2b73b", "sighting--625c0c6d-fca3-4748-a61d-01888449bff8", "sighting--6ef1614d-ba1f-41b2-bbc1-efd4b79ec43b", "sighting--153a3d5b-989d-4d5d-8779-a94651645995", "sighting--f57fc687-b611-42e9-a524-613c6539edc7", "sighting--825b8f51-efff-484c-8e63-bd4788a35028", "sighting--4f696fb1-5b30-4fc0-a2db-ef9d396bcdfb", "sighting--c4104dd9-510b-497b-b963-de7702311ae3", "sighting--3e111983-90ff-491e-9262-db6e4257a59c", "sighting--3820f589-0f9b-471a-ac32-e44050acfebb", "sighting--10934442-f3ea-4e03-8d21-8be8ef95ab5f", "sighting--54a67b0e-8ad0-4605-9cb5-06271c0f1c04", "sighting--64fe2daf-bae3-4a87-91f4-e648fa7c32e6", "sighting--83be2b8c-0a52-476a-afc7-03981f3f9bab", "sighting--3435ce40-5237-4d68-bbc0-abb14dd1261d", "sighting--0678e9e7-aa59-468f-a7eb-f03af11e8132", "sighting--247c018d-3a9e-4a93-b37c-2e7da0c5b44c", "sighting--4d71eabc-e8c2-466a-83e3-67801988e747", "sighting--121506e8-0060-4f1a-ba4c-df42f6025d61", "sighting--ac376a5b-075d-4425-9bd3-b8b72618cc98", "sighting--27a4dae0-2798-4d05-8dd8-d8e6119b5a61", "sighting--d85a06f1-6c0e-4457-af97-38446cfc8552", "sighting--9e8d645e-c1b8-4963-8d28-203e7f42b83c", "sighting--62d8b7d7-f95e-49e1-9fbb-84454ed6d374", "sighting--cbd7110f-cfe3-4b0a-92f8-587c5fbbb8db", "sighting--22fae97e-3a83-4b6c-98f5-0bae94275a25", "sighting--3423e83e-e743-4d99-8a0e-5353e32bd24b", "sighting--41f9a0e2-0cdc-4bef-a8f0-4b54c07afb26", "sighting--df44ac63-c4fc-4584-829b-5d653ff3bffd", "sighting--5081c641-ea44-4e2a-8214-0acb1ae546bb", "sighting--3f11439e-f303-403b-b3f0-206a60d0637c", "sighting--398eb112-483c-491d-a01f-dbe6b32685f3", "sighting--d9d8a924-4c70-4e83-95ce-b71a9d3ff07c", "sighting--40d964d7-2aa8-4aec-9ed2-9b157d0e1339", "sighting--83cd3bc2-9325-449b-97a6-061399ab0194", "sighting--9071ad31-f4fe-4cac-a2ed-ad28feeb5358", "sighting--b882df2a-c2a4-4b3a-8806-db6bdf13283e", "sighting--83a5b009-2225-414f-9715-641e793d4adc", "sighting--72865f44-9586-4fe0-bca6-3f9153baa4cb", "sighting--0dece1e9-45da-4212-b7a7-1ec036d6194d", "sighting--2a567e30-a2ed-4857-8032-97a1d1f3c183", "sighting--7d32286b-a0dd-455e-a83c-4b9fb38f35fc", "sighting--1207ce0f-8003-4527-b5a1-ba974f277819", "sighting--93e33434-04d0-4820-938a-608a8e913a5c", "sighting--e56ba8d1-6295-42f6-987d-9fe8b9db5fd5", "sighting--48f972c7-301b-46a3-8596-0dc7ec8d3dc1", "sighting--de663d86-6a3a-4aa3-ab32-53ac63a27576", "sighting--5596b219-dcae-4454-a7c1-ee902b76ffdd", "sighting--aae44b30-03d4-48dc-936b-b809ea731ea6", "sighting--a9f3b480-0b7a-4469-944d-db8566066377", "sighting--252af04e-2244-40f3-bde5-dbf022daee65", "sighting--018e36b3-74df-4412-b1c0-b7cd6b0240c7", "sighting--c98a6f30-0a61-4587-8e89-433f82c985f3", "sighting--da8ee73f-8fb2-453a-96c0-301d8effbd45", "sighting--13830695-3f0a-45fa-9cd0-c90f4fb0a0ec", "sighting--5ec2db4c-d930-4b17-97fc-58ffdc734a16", "sighting--c0301e1b-2359-402b-a8c8-ddfd19994646", "sighting--3720ed5a-a532-4505-a391-1e6009bb4a80", "sighting--a670ec1e-aa52-4d57-bfb7-dc80500abd3e", "sighting--3d1ad518-27b5-40b6-8421-2cb333fd8b9e", "sighting--4cd97f7d-dce0-4f20-8744-50871316a55e", "sighting--fa22c822-4f1a-4af5-830b-7e71638501c5", "sighting--32aed509-76f1-49d2-955f-c40fd6993ff2", "sighting--21be6902-e899-41bf-9984-7954a6ef65fc", "sighting--47eb3afa-95ad-49fc-8c4d-0517a3899b78", "sighting--9f25e8b3-ccc8-49cf-9979-c0e04b75d3bb", "sighting--3fed2a83-1818-4107-bb30-76ec855409f8", "sighting--685b9d6d-ec0f-4bf9-aed6-41de2f929a09", "sighting--401e73b1-9b7d-44a4-a05f-cdde38c49ad0", "sighting--27b40d46-9d6e-43ba-8133-02422e9ede82", "sighting--f315275f-3b0c-4962-a247-4e71bd0c7ec0", "sighting--36a44794-e790-4c81-9911-e084a8f0c2b0", "sighting--63a74bc5-2629-4239-836f-647c0968a13e", "sighting--099d94e7-b070-4e6f-bec6-e04fc48a4bd9", "sighting--8368f17d-6a1e-4223-b81a-de6695313136", "sighting--6f625f94-b9af-4bc6-9fec-2d88d7c418a9", "sighting--eb4bb5b9-554f-45de-9b5b-9d4011c522f2", "sighting--b1a5187c-9169-4b95-a5f0-2a312e6f9351", "sighting--94ba3ef1-fa32-4d8c-b1b9-c755a2b779bb", "sighting--ade8723f-d397-4c99-aef6-0ee37e7fe3f2", "sighting--c9e63c33-74f9-4d69-9fce-91104cca4687", "sighting--869af868-c661-4583-9d3d-89a0c1f0f520", "sighting--000bd3f6-a479-4d2d-b116-b5eec4fdf53a", "sighting--b83161e5-18d3-45ff-b9d2-a236ab233a46", "sighting--e9ca2c7c-5d05-43c7-9064-4d295161c486", "sighting--85ac934e-f3f9-49ee-9632-80a1b4156415", "sighting--107f9505-1237-4a8d-8d0a-9657ab4ff184", "sighting--8bf793d8-578d-45bb-b7e7-e8e9e9cd6cc1", "sighting--4d4e2fd1-e54d-43c8-93c9-9c9c3b215c00", "sighting--4e4dd447-f382-4744-a386-2e284a684dae", "sighting--0e79d3a9-409f-4332-bfc7-6301b556c8b0", "sighting--8b92f64a-45b6-4954-b01a-5c8fac4a5757", "sighting--19b796d6-c331-4315-9b9b-81015b0434cc", "sighting--3a9421be-712c-43a4-9b2f-63842be92687", "sighting--3a23cb42-1d3a-4ce4-b6fe-887342677675", "sighting--71d3b631-9c98-4266-b6a2-52f08e2f91d2", "sighting--2245fbde-7e1c-4331-9a06-0738ba1976bd", "sighting--8ae1d7bc-3294-45ba-8a53-b0ba26918a5a", "sighting--6b429731-6591-4a6a-afd4-ed302d0e5c1d", "sighting--2e97501c-5fbf-413c-ad65-83e85919e8c1", "sighting--b9a157d4-473d-4f6a-b9a4-1f4b0c9fd057", "sighting--d0d604ec-a7af-48a9-be12-3c1bd0b64444", "sighting--c067979d-0117-4034-bdff-694682ac4a51", "sighting--0dbb763d-d64b-43fd-9812-6702c4a1488e", "sighting--fef43e51-9ad2-4280-9d87-3facb80fec9f", "sighting--26fcc140-143f-49ea-b27d-e7be93870a21", "sighting--9116e951-7b0c-446e-9af4-89589d0ed89d", "sighting--027a035c-06da-4d8d-b371-c965b0bc1237", "sighting--e02d4192-71c7-4a08-bbd7-b1de5ea4d15d", "sighting--acc762c0-8228-4cae-a99e-cd088f276a26", "sighting--5d7138cb-7c1c-4cd9-a02c-b2c5cb2af14a", "sighting--f306ed55-0f5c-41fb-aa0d-a6e610a6325c", "sighting--cee0560d-0ec9-49a4-a5ed-2d637a0a00b5", "sighting--c1dcbfbd-2c27-4ebc-a6f3-c2cb7ee8c7c3", "sighting--bb6204a4-48b5-4092-905a-4ab1dc223061", "sighting--f743e634-0bb3-4b32-a84e-b03e0fce62c7", "sighting--5bca6285-1c8b-46b4-907f-6ad3fdb65e20", "sighting--75c1966c-5299-47b2-9734-a7fbe03ea91a", "sighting--923f0bcb-bac1-4773-83ef-3a7edfcdbd6a", "sighting--94dee9ca-6ce8-4a99-bcdb-480686fab76b", "sighting--c3db69d5-a1ad-4a10-95dd-40b5a1f3ab69", "sighting--e8e1de14-9e23-48cf-b08d-584e9b6458e8", "sighting--3484f25c-957f-4158-b189-863c2ead6d8e", "sighting--c783e3ba-c1ee-46be-acff-1c4ee51862b8", "sighting--af1710e3-c692-4624-afa9-25857bbe6c9e", "sighting--33f22009-b333-45f6-87df-f34213e5b87d", "sighting--8c890df2-461d-430c-9682-0a0e99e7db2c", "sighting--c27745bb-72e4-4c52-b1be-0402b81c6758", "sighting--a48edf5e-8b9a-4d72-b288-43df3f6359d1", "sighting--79839541-c1a5-4f33-b2e2-81444720bb55", "sighting--b279d238-e0e9-4ce5-ac57-c809108dd3cf", "sighting--df7c0f82-b7a9-4b33-bd1a-83bcdd41a388", "sighting--07848974-ab57-4685-80a6-f99a573955e5", "sighting--c14ef6a2-bed5-44c8-8cc2-735018b96975", "sighting--3ec1206e-288f-47b6-9467-71b23eceb842", "sighting--24c1a1dc-7d1d-43ac-bde4-9c3e38100d65", "sighting--a98d2030-0c9b-4f88-893d-5869d17502c3", "sighting--2b13362a-2287-4f35-b386-7a49cb547fe3", "sighting--ec949f2a-2f57-4c00-89a9-49920c83b977", "sighting--6304b957-0526-4a00-9e2b-0d66f22b6320", "sighting--4aa31a11-7cf6-4684-81b2-f768b42acdfd", "sighting--acdc58c5-4273-4fd6-a755-f86c3b5c40a1", "sighting--7f24998e-7ea0-4861-9c03-f114b0ef238e", "sighting--0e0fa679-0976-4dd7-a855-3741fc916fb8", "sighting--bf0eef23-231e-40b2-9a3e-37d17675ae34", "sighting--f7642f1c-5535-4d44-beaf-78eba0489524", "sighting--1bb816d9-50f1-4129-a9bc-cc73fcfb6de8", "sighting--e2f1c32b-68f9-4fbd-becc-1528d4d1c55b", "sighting--41e0f463-7e6a-4382-9953-ce325764815d", "sighting--5aff96ac-64cf-4a3d-a868-97747fe2a7e9", "sighting--b2fc24dc-5403-411c-be50-5d51dda29e01", "sighting--0e17d21c-a49d-4807-82da-23eb427f216d", "sighting--472dc506-bacb-4172-a795-f3b1bcf3530a", "sighting--2e101a3b-c5b2-40fb-8f90-0696dd99691e", "sighting--59f019ce-16b4-4b73-9fd5-0a211299bc53", "sighting--2656b222-40ec-4061-a35c-89aa9d6cfbec", "sighting--e509c9d2-453c-42d1-8629-494392869f92", "sighting--cb0c27ff-0100-4669-ba2a-bdc8314a8382", "sighting--fd5bfd73-ecea-4d28-a5db-ffcc288c1a99", "sighting--d6d22550-2d82-46cb-9ff2-becffcf36762", "sighting--d16f4135-c38e-415c-84c4-e2a5b6c59658", "sighting--3fe324f0-2147-42a0-92e9-d1e6f62dc354", "sighting--fd453a92-8e86-45ef-b98b-bcc55bd0e349", "sighting--1b9f6107-9840-44d8-86b5-fcedbe85e180", "sighting--94ac077c-fa09-491d-ae24-a7745699eec8", "sighting--ec797588-7fed-41b5-886c-d1f74c835b9b", "sighting--8013821c-0cff-4567-b306-6f0b7163dab5", "sighting--7433b456-7660-4848-8d6d-b4d768728279", "sighting--381f9322-40a4-400b-b422-b67a3d78b2e5", "sighting--ec379543-032d-4c68-a654-1f9777cba171", "sighting--6d1b46f8-9c96-4957-8823-0070a13bdb71", "sighting--e4435120-12b3-4e02-a6ca-d344abfbda84", "sighting--41d96fbb-b887-4c37-8c9e-62bcae9921f7", "sighting--8ba835a0-9eea-45cc-8fd9-130b507e4c35", "sighting--7827eac2-d2d1-4855-9294-4fc26285d5f2", "sighting--3df5613b-ffbb-4da2-81ac-3b260663e123", "sighting--743b4555-02dc-4dce-840e-68ca5ca90af1", "sighting--bcbd9f18-6098-405c-bdea-9ddddbc0265d", "sighting--9c9c2d9a-cd9e-406a-bbc2-deb3a93daee5", "sighting--0641bc5b-71cc-4b0c-ae62-f3273edb229a", "sighting--319eb489-567d-47c2-9d17-7fcd896f3d37", "sighting--4e845391-52c7-4335-a662-5a5ae2ca87ae", "sighting--0213e29d-9345-477b-8222-5e9a5bfe97a9", "sighting--75c53dcc-89ac-498c-b9f2-c1fed06421b8", "sighting--13abac34-97a6-4caa-bb20-9b45b122c715", "sighting--6c038d2b-5a7d-48d6-8f67-59eeee325cb0", "sighting--242d76b3-c0c7-4578-a198-0c1c64c5ac5f", "sighting--0a3b019d-b43d-4715-9899-b64c9608096b", "sighting--8df8572d-240d-46f0-bfa6-22fa3a3a01e5", "sighting--997071da-8f77-4ac0-9e46-6514e7740a14", "sighting--100ee0a9-ad9c-4afc-8fc9-105aa0ba7b43", "sighting--d435d723-55fe-4c80-8100-84ed7262fd11", "sighting--b7582be6-8c3f-4c59-b3b7-2023b04606af", "sighting--76425778-7147-4c31-ade1-d87b4a344a14", "sighting--a85a163e-77d6-4b24-9eac-3d5d4a909f13", "sighting--1a5cfede-d49d-40a5-a68e-31d7daaafccf", "sighting--2ef4814f-a867-403e-95f4-02febaef1bb4", "sighting--59fdf201-64e0-4c17-9517-d7edf8830929", "sighting--bcfbd8aa-5c0b-4aa3-82d5-9f9a7b673edd", "sighting--21d881ae-239d-4bbb-8d50-cdd3d6c1f1f6", "sighting--989c4600-0bb2-4a39-aee6-e8ae4984a396", "sighting--76bf18f9-8824-4f08-91c2-b6e10c3df3ee", "sighting--aa11599c-e18b-47ad-afa2-12cff6723999", "sighting--e4991d17-ddba-4c13-95eb-4b6d9c3c5df5", "sighting--e05ea58b-328d-4843-8c9d-75722857c541", "sighting--8ac23912-0b18-451e-b3d2-ae15ce437410", "sighting--b24c45f1-2ce6-4420-ab99-9630d30147de", "sighting--c5d0b57a-9378-48da-872f-10f853401bd6", "sighting--14ba30ed-9c36-47bb-8248-447c23fcd118", "sighting--e1878b74-b23f-488b-9d9d-947a83b30765", "sighting--67db03b9-ce84-49f6-a3ec-759553bbf74e", "sighting--1cb0215c-b437-4f8e-a5cc-b6231734bf9c", "sighting--789db4e6-7c8a-4a85-b7a0-19ffcde73c9d", "sighting--a4b7672c-c005-4612-9416-613ab946be3e", "sighting--36be2415-a531-46df-b48f-b03d5eab6d79", "sighting--b05c0953-5ff3-4536-aff8-7c74dba38b82", "sighting--18d38f26-53d2-4850-8b23-8c5cff647b82", "sighting--bebb42a8-6a6d-40f1-9aab-df1832287423", "sighting--1030e92c-9b68-4256-8839-eaa21dd5929b", "sighting--696782fd-ceab-4cb4-8c74-4d00def66bd0", "sighting--f8bcddc2-b621-4471-b1bb-21db2b621f2d", "sighting--2885f850-346c-438b-8f89-d2f586b8ce5a", "sighting--926b05d6-986c-4167-91b5-7ce2a2d978b7", "sighting--e7b4c005-8d3a-4e79-ab59-9444ab21d4f4", "sighting--d5156a7f-eaef-4e16-9f92-3d3e28783bce", "sighting--b63951fa-c9a6-492e-8a6e-e7212e1ee254", "sighting--0b8d87be-fd8c-47d8-b775-8e91510f5a1c", "sighting--6284822e-8657-4a00-897d-8d5ecbc9ca12", "sighting--fa9015c4-f1fc-4be3-993e-c2412d5471af", "sighting--0d4f2132-592b-4b3b-82b7-9991849d5e9f", "sighting--4d9ce86b-1b47-42fd-871c-facc5f7b2721", "sighting--eb691c4e-c8ff-4d5a-a71d-55d4c1d8f49a", "sighting--c5f21203-75fa-4256-80f0-05bfc4a08eba", "sighting--49e9af4f-7133-478c-9649-395228aafaf2", "sighting--a590e4de-c5ac-4e43-b29a-2e79627e2f98", "sighting--ae6887d7-23f9-41bc-a9c1-bf5a2561b6e3", "sighting--ab7c54fb-3c59-488f-8398-02cd0902117e", "sighting--2c164b46-1dc0-4f60-9068-06e194654bff", "sighting--b3139a6f-0e67-4172-bc6c-78282a4544e5", "sighting--aabb5600-dd73-4210-8a57-339aa615ed8d", "sighting--1a407c4b-5197-4a62-a226-dd01fcd79147", "sighting--3c82569b-28d3-41d3-ab36-6bc4b370180d", "sighting--69f9821f-e895-4e0a-9c57-9fb45ceba8b8", "sighting--4dfbe290-e0d7-4b29-9e0d-8066f26a84b4", "sighting--6255f654-c62f-48bc-8f20-0e1fe5dc00b6", "sighting--6c39c91b-f1dd-44ad-8310-48fb0050fcfa", "sighting--e00eaa27-4188-48fd-8977-0aba69bae960", "sighting--2f2c30f8-31d3-4568-9737-3ef2b0b879df", "sighting--7b88145a-3a06-4c4d-ba27-5245a82bb0a2", "sighting--bc84678c-84c1-403f-8a74-34ef12a0491d", "sighting--5a925eb2-23be-4d8f-b6d3-07a2a45b3269", "sighting--f8dffde1-0a0d-4a86-814d-1a3ce3cb9e61", "sighting--ea844f83-10c2-47c8-a4f6-deb0f2c78d4f", "sighting--85a2454b-fd99-40a4-8937-7a34c2979f58", "sighting--01348f06-2081-4ded-a412-cfe094aee7ec", "sighting--14edd9db-6fd0-4025-a8eb-79b95ebe920f", "sighting--d60a1c20-4cf2-496d-8256-be7bceb03072", "sighting--5e12232f-9c35-44dd-8ba1-4962bd42913c", "sighting--4c0dee32-8b6a-4428-bccc-1751aa5aee08", "sighting--d5fae235-2979-4fb7-aa85-58d690b7b5cf", "sighting--43c621ef-734f-4b3b-89eb-d0a6354fc497", "sighting--a67345c5-9803-4238-a408-bde00172a892", "sighting--1e87450f-15e1-4ed1-a181-931f1c9fb5cd", "sighting--d473ea75-14b4-4f66-97ab-d98dcdc71ae8", "sighting--f4a7de00-658c-4add-a275-f29dc83806ca", "sighting--bbd94139-cfea-4fd9-bb42-93be4dc6672f", "sighting--5a3ca789-8c3f-403b-8ebf-7736015cf497", "sighting--83e0e0db-329b-437a-8147-e8a1d530e681", "sighting--a9efc4a0-9117-4a77-a54d-db55f48dac63", "sighting--d4611be6-941d-422e-b970-e98a14739685", "sighting--866a5676-7ba6-4bce-bd75-caa1649be514", "sighting--84692970-02f0-4787-bb3d-343bcf3a1872", "sighting--c0cef468-4a49-40f3-9020-5de7d88864fc", "sighting--f05f85e6-fed6-474a-9a7f-8eb7854147af", "sighting--9ab12fee-c8a5-4f7b-866d-3f205ba79d77", "sighting--43663c2b-651c-4f54-bbb5-4391ed8af8be", "sighting--6dd1ac58-3c10-43df-85f1-882f0473853c", "sighting--e08c206b-7b6d-44a6-b0e2-c7f5664c9e2d", "sighting--7b564d57-a955-4bce-8278-7486bc846bb4"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-07T11:00:01.701Z", "modified": "2026-06-07T11:00:01.701Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}